Warning: Permanently added '[localhost]:40747' (ECDSA) to the list of known hosts. 2025/01/08 18:25:00 fuzzer started 2025/01/08 18:25:01 dialing manager at localhost:42449 syzkaller login: [ 66.485762] cgroup: Unknown subsys name 'net' [ 66.616976] cgroup: Unknown subsys name 'cpuset' [ 66.632846] cgroup: Unknown subsys name 'rlimit' [ 72.129071] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/08 18:25:18 syscalls: 200 2025/01/08 18:25:18 code coverage: enabled 2025/01/08 18:25:18 comparison tracing: enabled 2025/01/08 18:25:18 extra coverage: enabled 2025/01/08 18:25:18 setuid sandbox: enabled 2025/01/08 18:25:18 namespace sandbox: enabled 2025/01/08 18:25:18 Android sandbox: enabled 2025/01/08 18:25:18 fault injection: enabled 2025/01/08 18:25:18 leak checking: enabled 2025/01/08 18:25:18 net packet injection: enabled 2025/01/08 18:25:18 net device setup: enabled 2025/01/08 18:25:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/08 18:25:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/08 18:25:18 USB emulation: enabled 2025/01/08 18:25:18 hci packet injection: enabled 2025/01/08 18:25:18 wifi device emulation: enabled 2025/01/08 18:25:18 802.15.4 emulation: enabled 2025/01/08 18:25:18 fetching corpus: 0, signal 0/0 (executing program) 2025/01/08 18:25:20 starting 8 fuzzer processes 18:25:20 executing program 0: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x1, 0x80, 0x5, 0x3f, 0x0, 0x2, 0x0, 0x9, 0xe4a00, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x8120, 0x400, 0x0, 0x7, 0x5e, 0x5, 0x6, 0x0, 0x7, 0x0, 0x3ff}) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x10, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7ff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x29, 0x3f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x70, 0x1, 0x9, 0xbc8}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xe3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x84}}, 0x18) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r5 = perf_event_open(&(0x7f00000007c0)={0x3, 0x80, 0x6, 0x40, 0x3, 0xab, 0x0, 0x9, 0xae0a, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000780), 0xf}, 0x1000, 0x400, 0x7, 0x4, 0x3, 0x3, 0x3, 0x0, 0x7, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r5, 0x80000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000008c0)={0x0, @multicast1, @local}, &(0x7f0000000900)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x10c, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44009}, 0x40040) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='memory.numa_stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000b00), r8) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80045300, &(0x7f0000000b80)) 18:25:20 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) r1 = accept4(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x204, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20040400) r3 = syz_open_dev$rtc(&(0x7f0000000340), 0x3, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000380)={0x25, 0x19, 0x2, 0x9, 0x6, 0x0, 0x4, 0x96}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x11ae) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x845]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048004) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000500)={0x2f, 0x9, 0x7, 0x18, 0x1, 0x4, 0x4, 0x6c}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000540)={0x3, 0x0, 0x7, 0xfffffbff, 0x2, 0x31a}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_open_dev$rtc(&(0x7f0000000580), 0x6, 0x4001) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000005c0)) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x288, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x38}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x240, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3d1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cfe320e80f4724f532f5bb391881a4ed4c09763a2eebbb40bd53021aed42669c"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ee131a72df757aef62e17db1dd7f0aa8ef0762bc1f7c989ce9a779549c56d5f"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x19}}}]}, {0x118, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4b227f5887444480e69f64a54468283b82b604fd2fa7607de1ea385fef67aa23"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "60fa1bc4743b2772cc23eaa0b331e6cb737534b8a3523cbada4fc8f3d6ead688"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x40, @mcast1, 0x7}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fe00, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x44881}, 0x4004080) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x16c, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc010}, 0x4040041) 18:25:20 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0xf5, 0x2c, 0x8001, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @mcast2, 0x1, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', r0, 0x2f, 0x0, 0x1, 0x5, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8000, 0x7, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r1, 0x29, 0x3, 0x6, 0xe984, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @loopback, 0x80, 0x700, 0x5, 0x4}}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@rc={0x1f, @fixed}, &(0x7f0000000300)=0x80, 0x80800) r4 = accept4(r3, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000003c0)=0x80, 0x80800) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c010}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x88d4}, 0x14b429a58627eb0e) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x400101, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl0\x00', r1, 0x2f, 0x2, 0x6, 0x6, 0x2b, @local, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x80, 0x8, 0x3ff, 0x401}}) r8 = accept4(r3, 0x0, &(0x7f00000007c0), 0x800) r9 = syz_open_dev$hiddev(&(0x7f0000000800), 0x7fffffff, 0x40) ioctl$HIDIOCGFLAG(r9, 0x8004480e, &(0x7f0000000840)) r10 = accept(r8, &(0x7f0000000880)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000900)=0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40400800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x48}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40) sendmsg$nl_xfrm(r4, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a80)=@report={0x398, 0x20, 0x400, 0x70bd29, 0x25dfdbfe, {0x3c, {@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x4e20, 0x4, 0x4e23, 0xa25, 0x2, 0x80, 0xa0, 0xc}}, [@replay_thresh={0x8, 0xb, 0x41}, @algo_auth_trunc={0x124, 0x14, {{'md4\x00'}, 0x6c0, 0x0, "96f1ec32ff2deb86d6ee0eb892183355d2e440a6a5f29cd37ddc4e7dd8361c48cc533ad97fe5791810d5a26157f30aaffa361083a89a4746471d07e2a5d47e527f78f64228e0560c25beb03f100d35c4827d48488f1ad1d9b129170d8f74d2914df017249c80e5f00ae05ddc9bf65b42ff963cb37a4256a9c4e52977d47eb96bb25ebbb5c8cb14447f3856d0721fd3bce36465ffb7d217ae7e56a8154259a4c140cca83cdbaff5b08d935bffaac7f6b58bd34ce1ea6698d0b5727ba55911b8cdf7e10bbcaa3c6094f6efc4d778460c5d0a2d9f670afedc4e"}}, @migrate={0x180, 0x11, [{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x1, 0x0, 0x3503, 0xa, 0x2}, {@in6=@private0, @in=@loopback, @in6=@local, @in=@rand_addr=0x64010101, 0x32, 0x0, 0x0, 0x3503, 0x2, 0xa}, {@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x0, 0x0, 0x3500, 0x2, 0xa}, {@in6=@empty, @in=@rand_addr=0x64010102, @in6=@private1, @in=@private=0xa010102, 0x2b, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x2b, 0x0, 0x0, 0x3501, 0xa, 0x2}]}, @coaddr={0x14, 0xe, @in=@multicast2}, @srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x42}}, @lastused={0xc, 0xf, 0xff95}, @algo_auth_trunc={0x57, 0x14, {{'cryptd(tgr192)\x00'}, 0x58, 0x100, "0d35e444d7e3f76547829f"}}]}, 0x398}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000f40)={'syztnl0\x00', &(0x7f0000000ec0)={'sit0\x00', 0x0, 0x4, 0x7, 0x7, 0x3, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x1, 0x1, 0x5, 0x80000000}}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000f80)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r4) 18:25:20 executing program 5: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000) r0 = socket(0x10, 0x3, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x28800046}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5f}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0x7, 0x6, 0x10, @empty, @remote, 0x40, 0x700, 0x4, 0x711b}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', r2, 0x4, 0x1f, 0x80, 0xc93, 0x48, @remote, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x28ea7f94508a97c6, 0x7a, 0x9}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x14c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3f}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x64}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x14c}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@newspdinfo={0x4c, 0x24, 0x10, 0x70bd2a, 0x25dfdbfc, 0x100, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0x7}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) recvfrom(r3, &(0x7f0000000940)=""/71, 0x47, 0x40012042, &(0x7f00000009c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', r2, 0x2f, 0x0, 0x10, 0x9, 0x20, @loopback, @remote, 0x1, 0x0, 0xda81, 0x1f}}) socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r3) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x121, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x800) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000c40)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000d00), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000dc0)={'ip6tnl0\x00', &(0x7f0000000d40)={'syztnl1\x00', r2, 0x29, 0x1f, 0x1f, 0x3, 0x14, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x7800, 0x20, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001000)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x194, r6, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb91}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x8001}, 0x80) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x60}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) [ 84.827142] audit: type=1400 audit(1736360720.385:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:25:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x2, "1eee2d299ccb1f84c1e594912f0549c7fa6fc7a06dce6a150bdf50175d003d80523ca109998485eacf0865d881c4f5cc0cd02a93e4c8046a3b63093607fc87ce"}) syz_open_dev$rtc(&(0x7f00000000c0), 0x3, 0x63a100) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) read$hidraw(r1, &(0x7f0000000140)=""/57, 0x39) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xd28a31d63f338024, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000001c0)={0x9, "48edbb3c592716225a19cbc5cd6b28fd6d82813eb1e3fe71042637d1e1d2cf971f74854c9ad12fc74f17477c5545083afd709ec0e204451296a1b29594f42d24"}) socket$unix(0x1, 0x2, 0x0) r3 = accept(r2, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f00000002c0)=0x80) accept4(r3, &(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000380)=0x80, 0x800) r4 = socket(0x1d, 0x5, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) r5 = accept$inet(r3, &(0x7f0000000400)={0x2, 0x0, @local}, &(0x7f0000000440)=0x10) recvfrom(r5, &(0x7f0000000480)=""/204, 0xcc, 0x10020, &(0x7f0000000580)=@ieee802154={0x24, @short}, 0x80) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x2a201, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000680)={0x3, 0x80, 0x20, 0x9, 0x6b, 0xc0, 0x0, 0x7, 0x84004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000640), 0x8}, 0x120e0, 0x5, 0x6, 0x4, 0x7, 0xb78, 0x1, 0x0, 0xffffffe1, 0x0, 0x5}) r7 = openat$cgroup_ro(r6, &(0x7f0000000700)='cgroup.controllers\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000740)={0x6, 0x7, 0x5, 0xf, 0x9, 0x0, 0x1, 0xe1, 0x1}) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000780)={0x6, {{0x2, 0x4e20, @empty}}}, 0x88) recvfrom(0xffffffffffffffff, &(0x7f0000000840)=""/149, 0x95, 0x2022, &(0x7f0000000900)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80) 18:25:20 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42028000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000180)={0x1, 0x100, 0x6, 0x7, 0x9f, 0x80}) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000240), 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x800000, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) openat$cgroup_devices(r1, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x2b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x300, 0x0) openat$cgroup_subtree(r3, &(0x7f00000005c0), 0x2, 0x0) openat$cgroup_int(r3, &(0x7f0000000600)='cpuset.cpus\x00', 0x2, 0x0) getpeername(r3, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000006c0)=0x80) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x27c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x138, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffff2e9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x457c}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2c6}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4e8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x449}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x769}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc0000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x84ee}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0xf4, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x83d}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x14e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2f1e}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3450}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf725}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xdad8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb2cf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x795}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb5ce}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mkdirat$cgroup(r0, &(0x7f0000000a40)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = socket(0x10, 0x2, 0x9) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) 18:25:20 executing program 3: getgroups(0x0, &(0x7f0000000000)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @local}, &(0x7f0000000080)=0xc) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) r1 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10, 0x80800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000180)=""/247, &(0x7f0000000280)=0xf7) r3 = syz_open_dev$hidraw(&(0x7f00000002c0), 0xcd, 0x14002) write$hidraw(r3, &(0x7f0000000300)="2c3b36808c9096acfa1de812453c0fdf14ba5ca67efc68ce910afe724ced804ef2701c7213c2c699091e435066289a", 0x2f) r4 = syz_open_dev$hidraw(&(0x7f0000000340), 0x3, 0x4100) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000380)="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") kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r2, &(0x7f0000001380)={0xffffffffffffffff, r1, 0x6}) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f00000013c0)={0x99, "4ba8ce11058ccf39a3b61b0491f1a1d5235e73e7a4f3cc9bf94fbfeb77dd28c66223433b20a51c4205e026fab166f8d6aa8d52ffa64b034d16a50494baf554d714956263b7a437201ab8e8aa6f85e2d39e2c3ca20f83936211d78ac326b8b95a0c07845605a14657eeedf70a520c6f4f925f4a65d1d11e1ba6f5643ad95ed583155bb39fb53e8fcac287edd38005b8c34a58cf8b43bf8de582"}) accept4$inet(r1, &(0x7f0000001480), &(0x7f00000014c0)=0x10, 0x800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001500)={'filter\x00', 0x4}, 0x68) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000001700)={'ip6gre0\x00', &(0x7f0000001680)={'sit0\x00', r6, 0x4, 0x7, 0x0, 0x2225, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x20, 0xc37f, 0xfff}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000001740)={0x5}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), 0xffffffffffffffff) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000017c0), &(0x7f0000001800)=0x4) 18:25:20 executing program 4: ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000000)={0x2, 0x3, 0x4, 0x80000001, 0x14, 0x80, 0x9, 0x5, 0x3ff, 0x800, 0x5, 0x6, 0xc90, 0x9}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x20) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000080)={0x1, 0x3, 0xcd10}) r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0xfff, 0x2) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000100)={0x2, 0x200, 0x1, 0x0, 0x0, 0x1}) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000140)={0x2, 0x1, 0x7}) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000180)={0x1, 0x2, 0x401}) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f00000001c0)) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000200)={0x2, 0x1, 0xfffffffa, 0x9, 0x9, 0x1f}) r1 = accept(0xffffffffffffffff, &(0x7f0000000240)=@caif=@dbg, &(0x7f00000002c0)=0x80) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x1c}}, 0x4000) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000400)={0x2, 0xffffffff, 0x9, 0x1f, 0x3}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000440)={0x1, 0x200, 0x1, 0x5, 0x17}) geteuid() ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000480)) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f00000004c0)={0x3, 0x200, 0x5, 0x80000001, 0x58, 0x2, 0x1, 0x7f, 0x7, 0x7fffffff, 0x1, 0x297, 0x6, 0x253}) getuid() ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000500)={0x3, 0x0, 0x59d9768, 0xa7, 0x8, 0x20}) [ 86.255921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.259865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.261464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.265363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.268601] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.278760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.412255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.415064] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.416332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.419072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.421020] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.423405] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.424555] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.427172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.429938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.438255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.447293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.448311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.488197] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.489226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.490947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.492228] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.493685] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.494987] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.496597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.497837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.499786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.501273] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.503892] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.505250] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.514884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.515846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.519199] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.520560] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.523387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.525054] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.526031] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.527028] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.540892] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.543198] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.549396] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.554373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.556849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.560186] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.561053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.576811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.586855] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.591008] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.336923] Bluetooth: hci0: command tx timeout [ 88.449853] Bluetooth: hci1: command tx timeout [ 88.512783] Bluetooth: hci2: command tx timeout [ 88.576941] Bluetooth: hci5: command tx timeout [ 88.577072] Bluetooth: hci4: command tx timeout [ 88.577973] Bluetooth: hci6: command tx timeout [ 88.646851] Bluetooth: hci7: command tx timeout [ 88.646994] Bluetooth: hci3: command tx timeout [ 90.368887] Bluetooth: hci0: command tx timeout [ 90.496897] Bluetooth: hci1: command tx timeout [ 90.560710] Bluetooth: hci2: command tx timeout [ 90.624721] Bluetooth: hci6: command tx timeout [ 90.624829] Bluetooth: hci5: command tx timeout [ 90.627770] Bluetooth: hci4: command tx timeout [ 90.688704] Bluetooth: hci7: command tx timeout [ 90.690721] Bluetooth: hci3: command tx timeout [ 92.416798] Bluetooth: hci0: command tx timeout [ 92.546684] Bluetooth: hci1: command tx timeout [ 92.609800] Bluetooth: hci2: command tx timeout [ 92.672895] Bluetooth: hci4: command tx timeout [ 92.673444] Bluetooth: hci6: command tx timeout [ 92.674763] Bluetooth: hci5: command tx timeout [ 92.737138] Bluetooth: hci3: command tx timeout [ 92.738561] Bluetooth: hci7: command tx timeout [ 94.464696] Bluetooth: hci0: command tx timeout [ 94.592855] Bluetooth: hci1: command tx timeout [ 94.657060] Bluetooth: hci2: command tx timeout [ 94.721647] Bluetooth: hci6: command tx timeout [ 94.722708] Bluetooth: hci5: command tx timeout [ 94.723169] Bluetooth: hci4: command tx timeout [ 94.784765] Bluetooth: hci7: command tx timeout [ 94.785231] Bluetooth: hci3: command tx timeout [ 146.509570] syz-executor.2 (281) used greatest stack depth: 24352 bytes left [ 149.293408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.298233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.310091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.352787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.360790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.365371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.400537] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.406878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.408240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.410389] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.415461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.473888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.478918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.481423] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.482350] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.483763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.485034] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.486463] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.505085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.512870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.519019] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.577537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.582307] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.585000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.612569] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.619063] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.625006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.631457] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.632000] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.637798] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.661200] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.668857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.669632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.671312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.686428] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.691979] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.694017] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.707967] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.719007] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.724744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.737583] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.753700] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.770516] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.776005] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.778142] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.853066] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.858045] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.867919] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.424864] Bluetooth: hci0: command tx timeout [ 151.554772] Bluetooth: hci1: command tx timeout [ 151.681720] Bluetooth: hci2: command tx timeout [ 151.744707] Bluetooth: hci4: command tx timeout [ 151.809827] Bluetooth: hci3: command tx timeout [ 151.810468] Bluetooth: hci5: command tx timeout [ 151.811180] Bluetooth: hci6: command tx timeout [ 151.937736] Bluetooth: hci7: command tx timeout [ 153.476539] Bluetooth: hci0: command tx timeout [ 153.602823] Bluetooth: hci1: command tx timeout [ 153.728796] Bluetooth: hci2: command tx timeout [ 153.792719] Bluetooth: hci4: command tx timeout [ 153.857492] Bluetooth: hci6: command tx timeout [ 153.857540] Bluetooth: hci5: command tx timeout [ 153.857998] Bluetooth: hci3: command tx timeout [ 153.984695] Bluetooth: hci7: command tx timeout [ 155.520703] Bluetooth: hci0: command tx timeout [ 155.648697] Bluetooth: hci1: command tx timeout [ 155.776759] Bluetooth: hci2: command tx timeout [ 155.840688] Bluetooth: hci4: command tx timeout [ 155.904802] Bluetooth: hci3: command tx timeout [ 155.905340] Bluetooth: hci6: command tx timeout [ 155.906530] Bluetooth: hci5: command tx timeout [ 156.032866] Bluetooth: hci7: command tx timeout [ 157.568671] Bluetooth: hci0: command tx timeout [ 157.696806] Bluetooth: hci1: command tx timeout [ 157.824742] Bluetooth: hci2: command tx timeout [ 157.890650] Bluetooth: hci4: command tx timeout [ 157.952943] Bluetooth: hci5: command tx timeout [ 157.954078] Bluetooth: hci6: command tx timeout [ 157.955204] Bluetooth: hci3: command tx timeout [ 158.080820] Bluetooth: hci7: command tx timeout [ 209.544375] syz-executor.1 (3490) used greatest stack depth: 23896 bytes left [ 212.047439] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.049906] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.051027] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.053907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.061391] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.062760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.723222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.727433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.729137] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.738376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.741987] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.743272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.836179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.846370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.852508] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.859999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.861369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.862609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.871731] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.874845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.876541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.882030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.884720] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.887433] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.898828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.902495] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.907735] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.908672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.911185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.924570] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.926349] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.932455] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.934994] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.936415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.941853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.944737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.945935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.948805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.948891] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.950281] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.951546] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.956540] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.957462] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.959073] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.960244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.011678] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.040005] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.051874] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.082702] Bluetooth: hci0: command tx timeout [ 214.785667] Bluetooth: hci1: command tx timeout [ 214.976992] Bluetooth: hci4: command tx timeout [ 214.977752] Bluetooth: hci2: command tx timeout [ 214.978070] Bluetooth: hci3: command tx timeout [ 215.040755] Bluetooth: hci6: command tx timeout [ 215.106803] Bluetooth: hci5: command tx timeout [ 215.106841] Bluetooth: hci7: command tx timeout [ 216.129735] Bluetooth: hci0: command tx timeout [ 216.832744] Bluetooth: hci1: command tx timeout [ 217.024945] Bluetooth: hci4: command tx timeout [ 217.024993] Bluetooth: hci2: command tx timeout [ 217.026508] Bluetooth: hci3: command tx timeout [ 217.088772] Bluetooth: hci6: command tx timeout [ 217.152724] Bluetooth: hci5: command tx timeout [ 217.152752] Bluetooth: hci7: command tx timeout [ 218.179864] Bluetooth: hci0: command tx timeout [ 218.880848] Bluetooth: hci1: command tx timeout [ 219.105821] Bluetooth: hci2: command tx timeout [ 219.106650] Bluetooth: hci4: command tx timeout [ 219.106955] Bluetooth: hci3: command tx timeout [ 219.144619] Bluetooth: hci6: command tx timeout [ 219.200944] Bluetooth: hci7: command tx timeout [ 219.202536] Bluetooth: hci5: command tx timeout [ 220.241401] Bluetooth: hci0: command tx timeout [ 220.928766] Bluetooth: hci1: command tx timeout [ 221.120852] Bluetooth: hci4: command tx timeout [ 221.121389] Bluetooth: hci2: command tx timeout [ 221.122114] Bluetooth: hci3: command tx timeout [ 221.184836] Bluetooth: hci6: command tx timeout [ 221.248699] Bluetooth: hci5: command tx timeout [ 221.251624] Bluetooth: hci7: command tx timeout [ 274.324186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.327546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.331243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.335353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.353908] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.355101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.515157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.519799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.563038] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.568761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.570203] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.572432] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.574713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.575439] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.577214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.580281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.581510] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.583027] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.583306] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.585523] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.590248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.590466] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.591910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.629424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.640061] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.650261] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.669438] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.670241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.678234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.687836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.692600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.694855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.705845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.708304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.711866] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.714780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.716848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.728080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.730841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.731801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.740876] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.745687] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.752409] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.776467] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.780455] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.829843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.831392] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.832861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.417711] Bluetooth: hci0: command tx timeout [ 276.672742] Bluetooth: hci1: command tx timeout [ 276.673485] Bluetooth: hci2: command tx timeout [ 276.674296] Bluetooth: hci3: command tx timeout [ 276.802798] Bluetooth: hci5: command tx timeout [ 276.865870] Bluetooth: hci7: command tx timeout [ 276.867261] Bluetooth: hci6: command tx timeout [ 276.929677] Bluetooth: hci4: command tx timeout [ 278.465851] Bluetooth: hci0: command tx timeout [ 278.720897] Bluetooth: hci2: command tx timeout [ 278.721431] Bluetooth: hci1: command tx timeout [ 278.722125] Bluetooth: hci3: command tx timeout [ 278.848750] Bluetooth: hci5: command tx timeout [ 278.913812] Bluetooth: hci6: command tx timeout [ 278.915504] Bluetooth: hci7: command tx timeout [ 278.976845] Bluetooth: hci4: command tx timeout [ 280.512724] Bluetooth: hci0: command tx timeout [ 280.769923] Bluetooth: hci1: command tx timeout [ 280.770468] Bluetooth: hci3: command tx timeout [ 280.771642] Bluetooth: hci2: command tx timeout [ 280.896684] Bluetooth: hci5: command tx timeout [ 280.961664] Bluetooth: hci6: command tx timeout [ 280.962155] Bluetooth: hci7: command tx timeout [ 281.025674] Bluetooth: hci4: command tx timeout [ 282.561753] Bluetooth: hci0: command tx timeout [ 282.819630] Bluetooth: hci1: command tx timeout [ 282.820171] Bluetooth: hci2: command tx timeout [ 282.824839] Bluetooth: hci3: command tx timeout [ 282.950627] Bluetooth: hci5: command tx timeout [ 283.026923] Bluetooth: hci6: command tx timeout [ 283.027463] Bluetooth: hci7: command tx timeout [ 283.080467] Bluetooth: hci4: command tx timeout [ 336.878845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.880742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.886767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.891715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.894987] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.906483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.908030] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.910079] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.912463] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.923158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.926888] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.928947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.967770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.974356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.980087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.988011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.994841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.996113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.101977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.104136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.108093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.118866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.139897] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.145010] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.184684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.193996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.195085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.200806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.207924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.212096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.214772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.216735] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.235839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.254958] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.261238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.265461] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.272820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.276541] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.278730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.281882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.282285] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.293985] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.294317] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.319052] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.319889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.364086] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.375874] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.388007] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.944851] Bluetooth: hci0: command tx timeout [ 339.008950] Bluetooth: hci1: command tx timeout [ 339.072857] Bluetooth: hci2: command tx timeout [ 339.268027] Bluetooth: hci4: command tx timeout [ 339.269140] Bluetooth: hci3: command tx timeout [ 339.392726] Bluetooth: hci5: command tx timeout [ 339.393530] Bluetooth: hci6: command tx timeout [ 339.523743] Bluetooth: hci7: command tx timeout [ 340.993934] Bluetooth: hci0: command tx timeout [ 341.057662] Bluetooth: hci1: command tx timeout [ 341.121524] Bluetooth: hci2: command tx timeout [ 341.314644] Bluetooth: hci4: command tx timeout [ 341.315844] Bluetooth: hci3: command tx timeout [ 341.440818] Bluetooth: hci6: command tx timeout [ 341.442279] Bluetooth: hci5: command tx timeout [ 341.568803] Bluetooth: hci7: command tx timeout [ 343.040653] Bluetooth: hci0: command tx timeout [ 343.104726] Bluetooth: hci1: command tx timeout [ 343.169923] Bluetooth: hci2: command tx timeout [ 343.361347] Bluetooth: hci4: command tx timeout [ 343.361990] Bluetooth: hci3: command tx timeout [ 343.488776] Bluetooth: hci5: command tx timeout [ 343.489294] Bluetooth: hci6: command tx timeout [ 343.616778] Bluetooth: hci7: command tx timeout [ 345.088766] Bluetooth: hci0: command tx timeout [ 345.153875] Bluetooth: hci1: command tx timeout [ 345.216703] Bluetooth: hci2: command tx timeout [ 345.409710] Bluetooth: hci4: command tx timeout [ 345.410229] Bluetooth: hci3: command tx timeout [ 345.536687] Bluetooth: hci6: command tx timeout [ 345.538236] Bluetooth: hci5: command tx timeout [ 345.665635] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:30:30 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff81a4823d RCX=0000000000000001 RDX=1ffff1100d9c135a RSI=ffff88806ce09de8 RDI=ffffffff81a4823d RBP=ffffffff81a4823d RSP=ffff88806ce09a28 R8 =0000000000000001 R9 =ffff88806ce09ab8 R10=000000000003a9cc R11=000000000002419f R12=ffff88806ce09b40 R13=0000000000000000 R14=ffff88803470d340 R15=ffff88800bfea000 RIP=ffffffff81421626 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f45ced8f368 CR3=000000002d248000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8682e360 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88806cf09af0 RSP=ffff88806cf09a28 R8 =ffffffff8682e364 R9 =ffff88806cf09ad8 R10=000000000003a9cc R11=0000000000020a0e R12=ffff88806cf09af8 R13=ffff88806cf09ae0 R14=0000000000000005 R15=ffff88806cf09a98 RIP=ffffffff81349101 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007febb7671620 CR3=000000000f3ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000