Warning: Permanently added '[localhost]:12931' (ECDSA) to the list of known hosts. 2025/01/26 18:51:03 fuzzer started 2025/01/26 18:51:04 dialing manager at localhost:40883 syzkaller login: [ 71.144163] cgroup: Unknown subsys name 'net' [ 71.244172] cgroup: Unknown subsys name 'cpuset' [ 71.260645] cgroup: Unknown subsys name 'rlimit' [ 77.362073] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/26 18:51:21 syscalls: 213 2025/01/26 18:51:21 code coverage: enabled 2025/01/26 18:51:21 comparison tracing: enabled 2025/01/26 18:51:21 extra coverage: enabled 2025/01/26 18:51:21 setuid sandbox: enabled 2025/01/26 18:51:21 namespace sandbox: enabled 2025/01/26 18:51:21 Android sandbox: enabled 2025/01/26 18:51:21 fault injection: enabled 2025/01/26 18:51:21 leak checking: enabled 2025/01/26 18:51:21 net packet injection: enabled 2025/01/26 18:51:21 net device setup: enabled 2025/01/26 18:51:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/26 18:51:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/26 18:51:21 USB emulation: enabled 2025/01/26 18:51:21 hci packet injection: enabled 2025/01/26 18:51:21 wifi device emulation: enabled 2025/01/26 18:51:21 802.15.4 emulation: enabled 2025/01/26 18:51:21 fetching corpus: 0, signal 0/0 (executing program) 2025/01/26 18:51:23 starting 8 fuzzer processes 18:51:23 executing program 0: r0 = fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0xffff, 0x0, 0x8}, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]) setrlimit(0x5, &(0x7f0000000440)={0xffffffffffffffe0, 0x81}) syz_open_procfs$namespace(r0, &(0x7f0000000480)='ns/mnt\x00') syz_open_procfs$namespace(r0, &(0x7f00000004c0)='ns/pid\x00') r1 = socket(0x29, 0x6, 0x5) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff618}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffb}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x94}, 0x1, 0x0, 0x0, 0x90}, 0x810) socketpair(0x2b, 0x80000, 0x1, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) keyctl$join(0x1, &(0x7f0000000700)={'syz', 0x2}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r5, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000800) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000e40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a80)={0x35c, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffff, 0x12}}}}, [@NL80211_ATTR_FRAME_MATCH={0xa6, 0x5b, "30b4d1ea619f1b09b7ed8a76aff21d28bf2fa1183e9fcb0674195fe890151196fd6837711d924f755dcf55c33b1c2ea58b2206cd5673d2d9c50feee98c1821edaa6a7a414ff40eb72ee3141e9d6bc4e9e181cb40359e3fa3deda31537294c3ada53c31265e16df046ce9d5c52b1f683f41c7f74cdab9bd411fe78ae40563fb563ec639ae75b45d5477ef1caf27d39ec770c9e206df84cdcc689d77cf0e301414ba13"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff8}, @NL80211_ATTR_FRAME_MATCH={0xce, 0x5b, "6bd9e016b533946946e317d2bc2a9e4ce64910430fedf903f386d48bbe88bea8ce1839cd305d5a498411f9b648ca3302f3fb3abf853713ba09fec900b3b22f3ef52b5707e349e14623699a80cd38751469d207abb1c4aa75df970197a7115c5c13148fa70036fab9dc357de18c08c715dee72aa8a78856801466727a64bb9da34eed72976061c58e947cbd373c7ad6d6687be96da83ac850b7334bf1d90b082557cbc4bd90c468c4fe2740f30f35f031d824b5a96170650b9ab5a7eda3dab4cca3d9a62ea4da9b756991"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x71ad}, @NL80211_ATTR_FRAME_MATCH={0xc9, 0x5b, "652dbd59b3b4ac8eb9178bc8adc61f4773ee868c40dbaca3e04e36cddf1b7e602487bde4a18d9681b9bb28fbe719d200bc98882ebac92f6ee5dcf3c0a704c2ccb51203aef1956e386eb87a3a1d82f60eba7f0e2e750c6758facae1f0a9f5aaf24134a7cf558329cf02c7deb17b8f5febe8b9a9535293c3069ef94909ceba1a8b29190257802baebb5dfdb3a2436c3ad8d5e8d13b7ada679c96c2c5bb2f98da05dbfca0496752d6b3c3c18586bdcb894698f39c99b09d7f8d17992b83ced20e39db20136c97"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x7f, 0x5b, "564f74d7331038f41fd3f062557468e47e6b8246bcff39d71c0315f7387d1a376acb2dcd3031172507bb2ba57c62cc84974ee7960c115ea097dd9ff70bd31c5ca16ed1511752a3f80d94edfbbd8617cc61bd944d41678df372fe057a954029f4a6ba67b9b5eaf9fdf0f234f38cbefeb76fb99ecf926a3b1bb9f955"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x48, 0x5b, "1d24617adb86e8aca5451a976d0f85f50953e46109abdc14282b86d99ef591498b5ca6141e7c23ef376a6580303d463053dffe2a78231cf5dd55b66c431ba682bb7c396a"}]}, 0x35c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r3) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r8, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x41) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001000)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000001100)=0xe8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000001200)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x58, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) 18:51:23 executing program 1: ptrace$pokeuser(0x6, 0x0, 0x882, 0x7fff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4200, r1, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fork() tkill(r3, 0x36) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r0, 0x7, 0x1}) sched_rr_get_interval(r1, &(0x7f0000000100)) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x5, 0x1, 0x2}, &(0x7f0000000180)=[{}, {}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000280)={r0, 0x3, r2, 0xfffffffa, 0x80000}) sched_getscheduler(r3) clock_gettime(0x0, &(0x7f00000002c0)) r4 = fork() prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x2, &(0x7f0000000300)) sched_getscheduler(r4) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x1, &(0x7f0000000340)) process_vm_readv(r4, &(0x7f0000000480)=[{&(0x7f0000000380)=""/233, 0xe9}], 0x1, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000000500)=""/90, 0x5a}], 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4050) 18:51:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='$\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffa, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x8, 0x9, 0xf, 0x10, "ade5ca272fb0f3ea4d8d90ff0e05dce20ae012ecb6c085680e713c70c3769bb56834f61a12ec2cc5afbd4e9e57c18483f558a7524aa9bcf49d984dfbbe0c777b", "d0b7b47b3139a20c1c27255ee3fd987a8b4470eaf0e7572872e11aad488fb6bd", [0x9, 0x7fffffff]}) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)='keyring\x00') add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x3, 0xf8, 0x40, 0x5, 0x0, 0x6, 0x22822, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_config_ext={0x4, 0x100}, 0x2040, 0x10001, 0x9, 0x3, 0x3ff, 0xffffffff, 0x7bf, 0x0, 0x4, 0x0, 0x10000}, r2, 0x2, r2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x5, 0x402) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/mm', 0x200000, 0x2e) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f00000004c0)) r6 = syz_open_dev$loop(&(0x7f0000000500), 0x0, 0x103080) ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000540)) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$LOOP_SET_FD(r4, 0x4c00, r7) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000680)={0x999, 0x80000001, 0xf1, &(0x7f0000000580)="b0cf76a2c88cc55541c25cea96b9a22f4d5ed29cf53ae738b078798324b34ef97d7a66e79fc8f8fb32e6535a84020f5f1dfa0e5ab34ad45911d46edf923f22af5c86967b5c98fe07b9e9a330141f841f618706eaf9a2a897fd921fb906b35b4362b1d652f174bcdb09257a316238b7c09b3d737c11054027fc02ae003d23fbab799fd9f9733afff2ee81710a4202db74d1e96e13148838ade3b57cc5d8814dd8ac037e9d3d9871135aa3467eb7f6d852d41bbb09515ba493a1bacffd16f3cfd794062d1cfa654e71604736bd2fa4b84e0df6262fb7520b3ae822248700669837c2312faeea16d4551cd99432dd583a6264"}) r8 = syz_open_dev$loop(&(0x7f00000006c0), 0x2, 0x1010c0) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) 18:51:23 executing program 4: socketpair(0x10, 0x2, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffe358, 0x6c}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xb546}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd02}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x26, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @cf={0x4, 0x6, {0x29, 0x80, 0x5, 0xffff}}, @peer_mgmt={0x75, 0x4, {0x0, 0x400, @void, @void, @void}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40004}, 0x4858) r3 = socket(0x2b, 0x6, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x80}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x84) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r3) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8140}, 0x4000000) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000580), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000740)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x200, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r8) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4049044) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000900)) 18:51:23 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x2, 0x0, 0x2}, &(0x7f00000000c0)=[{}, {}]) r1 = socket(0x25, 0x800, 0x2) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x36}}, @GTPA_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040004) r2 = fork() ptrace$peeksig(0x4209, r2, &(0x7f0000000300)={0x0, 0x0, 0x9}, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) r3 = syz_open_dev$loop(&(0x7f00000007c0), 0x7fff, 0xa002) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xba}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/module/auth_rpcgss', 0x0, 0x20) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000940)) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x77d, 0x7, 0x0, 0x0, 0x0, 0x0, "fef31f4a7e9819e5c5e71ed1d52fa973381a8b562c65d486bc18e24b37c95a4e7327baef67de6e98f7bf9fdc85b290097f1935e5fbeddfc990120961365c59b7", "0c5e898de2b6e55a1066d5adcb07e22722d1ddaf2ef973cad30968f9bcc377906590a578d4b1487c3e60f8793c4449dc2fef5e373e6d22ee0c0e85e254658888", "0facab9d4ba23b940e633a7f3e4580d499e399d4160106816a6b0ce5dac4b21d", [0x9, 0x7fffffff]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000ac0), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x80001, 0x0) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80) r7 = add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r7) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000d40), 0x2, 0x0) [ 90.835379] audit: type=1400 audit(1737917483.918:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:51:23 executing program 5: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "0197d28e52ad77"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7240bd7382"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "388f63a589b8942baf28877349"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e7429ad6a7"}, @NL80211_KEY_SEQ={0x8, 0x4, "0b0fb61d"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2f08bffe539527a4670f61a530"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8bb03c46081fa0e7e97e9f4afe"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/mnt\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x34}}, 0x48004) r2 = socket(0xf, 0xa, 0x3) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2646ea27c946b1a2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xcf}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x374a5ef07d40630e}, 0x0) socketpair(0x2, 0x6, 0x1, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) rt_sigreturn() r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) ioprio_set$uid(0x0, 0x0, 0x4000) r7 = add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc3}, &(0x7f0000000800)={0x0, "16d05a1761c886b719b5c19704b839ca7ff699af788c086820221bf727dbcf6dfa9219f095ce023c5ee1ac61a388c11642dbfc450e1a20dd6d5885dbf507c1c6", 0x3d}, 0x48, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, &(0x7f0000000880)='syzkaller\x00', &(0x7f00000008c0)='batadv0\x00') keyctl$describe(0x6, r7, &(0x7f0000000900)=""/4096, 0x1000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x20, r8, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x65}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4004004) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001a40)={'wg1\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80420880}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1000}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc0, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xb0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa9, 0x1, "d10851a0a80e426b4bb6ffdcf19f41f4374d79597fca95a3163aa85bfba28d5751e4c79a4def19914b8632d339c8859b4c14f4e70d860dbb4b1390e65fa13a015d3f6230bc019337ba96789229a6f0552ee006054047f7ec4466d63b4f50b7aa52de238cd2c93471894972fe25adce32073c7ff0b9e00ea679c69e330b69b0bc09fcd73fe00e84e417278c722d1b042cdac513552a4b3beded6b7bf130d3d3cff8aa1d103e"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 18:51:23 executing program 6: sync() sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x57297a6dee074e02) rt_sigreturn() rt_sigaction(0x40, &(0x7f00000002c0)={&(0x7f0000000200)="f341ae67f30f1288fa000000c4a2d997d4660fed0578000000c48191169fcd000000f2450fb9ffc422f598e28fc97883920b000000f0440fba3003c4e149c2b6000000000f", 0xc0000000, &(0x7f0000000280)="f3470faed12e417200c4a26d9b9946000000f34711d626f2450f11d666460f3a62d9f10fc2f3020ffcab0900000040d23ff340ab", {[0x401]}}, &(0x7f0000000380)={&(0x7f0000000300)="c4a199d34b00f0420fc78ce9cc310000c4a3fd6d0b9a460fe40a8f8978d1a9000060ffc482f1bf4308c442ed9946260f18c7f20f51f9c482f9bbcf", 0x0, &(0x7f0000000340)="40da2d08000000c4c164551e0f4ddec441d45ceaf340f6bcc126e4000044d9c43e0f0d3ec422f502e5c48141d9393d0e000000"}, 0x8, &(0x7f00000003c0)) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x2c}}}}, [@NL80211_ATTR_KEY_SEQ={0x5, 0xa, "8d"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) rt_sigreturn() r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xc0, r0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x24}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x24}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9442}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20008000}, 0x4001) keyctl$assume_authority(0x10, 0x0) rt_sigaction(0x3, &(0x7f0000000940)={&(0x7f0000000840)="3e660f1340b46666460f5d4707f0ff0e420f7ee7c44119f1f364440fbfa2ffefffff6666470fc4350000000007c4a23938b9000000003626f3410f5cb2feefffff660fe3bd00800000", 0x40000006, &(0x7f00000008c0)="f30fa7e8c4c1b167d1c402a13db79b000000c4c2a5937cc1fa66360f0d193665420f138522e7280fc4016deb480244d1b6f8250000c481fd7096bdb0000051c481f92933", {[0xfffffffffffffffe]}}, &(0x7f0000000a40)={&(0x7f0000000980)="0fb55b848fc978d3b57bfc9d202ef3f2450f8b0d000000660f38f84da2c482b5997705f2d8d9c46129c654a7ac000f1a9b00800000d8a2a7d4f58ac4a1ad61a8ea3467e3", 0x0, &(0x7f0000000a00)="36f344afc481fd7f0b40831e95c46105eee9c4c3b17d0e10c421157df247d35708410f01fb660fdcbe7f6d0000c442b1939c7bc98c0000"}, 0x8, &(0x7f0000000a80)) semget$private(0x0, 0x4, 0x2) rt_sigreturn() pselect6(0x40, &(0x7f0000000ac0)={0x88c, 0x2, 0x101, 0x5, 0x0, 0x6b2c, 0x0, 0x3f}, &(0x7f0000000b00)={0x2, 0x80, 0x6, 0x0, 0x8, 0x8, 0x81, 0x4}, &(0x7f0000000b40)={0x6, 0x5, 0x8, 0xff, 0x3, 0xfff, 0x0, 0x5}, &(0x7f0000000b80)={0x0, 0x989680}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfff]}, 0x8}) keyctl$join(0x1, &(0x7f0000000c40)={'syz', 0x1}) sync() sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x8c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'batadv_slave_0\x00'}) prctl$PR_GET_NAME(0x10, &(0x7f0000000e40)=""/49) 18:51:24 executing program 7: socketpair(0x1d, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x4dfaba6b0d335622, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cb6b3e9929"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "cc32b1c08e1fc8da50dd145b55"}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x55) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80095}, 0x81) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xf6efb9509eb5dceb}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000540)=0xe8) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000580)={0x504, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x4e0, 0x8, 0x0, 0x1, [{0x474, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffffee4a, @remote, 0x7e83}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x26}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "754b417059d9891bac60ae746328c39c044e39eadbef5805ca3232a6304692fc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x3d4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "20878271305e44e217cb13b0dcbeac073fdeb1bd9ccc7dbf539e4fea6c597406"}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x504}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x88001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x59}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) socketpair(0x27, 0x800, 0xfffffffb, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x890) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000f00)={0x9}, 0x4) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x67}}}}, [@NL80211_ATTR_IE={0x43, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @peer_mgmt={0x75, 0x4, {0x0, 0x4, @void, @void, @void}}, @peer_mgmt={0x75, 0x18, {0x0, 0x3, @val=0x1f, @val=0x35, @val="fe159e2c85485d31a5e5e6d89d1ac3f3"}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0xed, 0x93, @broadcast, 0x20b, 0x3f, 0x5}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x70}, 0x1, 0x0, 0x0, 0x4804}, 0xc044) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000010c0), r6) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, r7, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x20040811) syz_open_dev$loop(&(0x7f00000011c0), 0x7ff, 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001240)={0x1, &(0x7f0000001200)=[{0x3f, 0x3, 0xef, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x40082102, &(0x7f0000001280)) keyctl$read(0xb, 0x0, &(0x7f0000001380)=""/53, 0x35) [ 92.301991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.307752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.313464] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.316306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.319282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.321479] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.327614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.330797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.333654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.339689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.339927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.341959] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.347546] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.351485] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.353784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.367591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.377740] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.394880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.397423] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.406269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.418821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.421329] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.427603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.430512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.434549] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.434724] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.438453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.455121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.455583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.459639] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.464375] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.475497] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.477949] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.487930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.493407] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.497367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.502223] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.507741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.512540] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.518968] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.524466] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.530626] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.537592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.540958] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.549848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.571462] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.575158] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.578546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.385286] Bluetooth: hci2: command tx timeout [ 94.446661] Bluetooth: hci1: command tx timeout [ 94.511303] Bluetooth: hci0: command tx timeout [ 94.574818] Bluetooth: hci3: command tx timeout [ 94.575230] Bluetooth: hci4: command tx timeout [ 94.638621] Bluetooth: hci7: command tx timeout [ 94.639341] Bluetooth: hci6: command tx timeout [ 94.639369] Bluetooth: hci5: command tx timeout [ 96.430165] Bluetooth: hci2: command tx timeout [ 96.494391] Bluetooth: hci1: command tx timeout [ 96.558172] Bluetooth: hci0: command tx timeout [ 96.622470] Bluetooth: hci3: command tx timeout [ 96.623315] Bluetooth: hci4: command tx timeout [ 96.687244] Bluetooth: hci6: command tx timeout [ 96.688328] Bluetooth: hci5: command tx timeout [ 96.689433] Bluetooth: hci7: command tx timeout [ 98.478099] Bluetooth: hci2: command tx timeout [ 98.543192] Bluetooth: hci1: command tx timeout [ 98.606152] Bluetooth: hci0: command tx timeout [ 98.672067] Bluetooth: hci3: command tx timeout [ 98.672554] Bluetooth: hci4: command tx timeout [ 98.734152] Bluetooth: hci6: command tx timeout [ 98.734640] Bluetooth: hci7: command tx timeout [ 98.735198] Bluetooth: hci5: command tx timeout [ 100.526141] Bluetooth: hci2: command tx timeout [ 100.590108] Bluetooth: hci1: command tx timeout [ 100.654794] Bluetooth: hci0: command tx timeout [ 100.718126] Bluetooth: hci4: command tx timeout [ 100.718593] Bluetooth: hci3: command tx timeout [ 100.782341] Bluetooth: hci5: command tx timeout [ 100.782876] Bluetooth: hci7: command tx timeout [ 100.782923] Bluetooth: hci6: command tx timeout [ 152.339456] syz-executor.0 (283) used greatest stack depth: 24288 bytes left [ 154.891194] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.894584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.897580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.906636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.912950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.915671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.130228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.133448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.134801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.137644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.139221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.143176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.148614] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.149900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.156746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.166646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.173437] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.174403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.208558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.216504] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.223289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.239263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.242839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.244810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.306850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.318304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.348857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.362093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.383324] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.384503] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.389308] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.394628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.397330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.405278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.406955] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.411835] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.412835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.415732] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.423490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.426768] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.430720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.437178] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.439941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.441771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.443971] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.452573] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.455363] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.456758] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.974192] Bluetooth: hci0: command tx timeout [ 157.231789] Bluetooth: hci2: command tx timeout [ 157.231829] Bluetooth: hci1: command tx timeout [ 157.358275] Bluetooth: hci3: command tx timeout [ 157.486238] Bluetooth: hci6: command tx timeout [ 157.486277] Bluetooth: hci7: command tx timeout [ 157.487470] Bluetooth: hci4: command tx timeout [ 157.550240] Bluetooth: hci5: command tx timeout [ 159.023150] Bluetooth: hci0: command tx timeout [ 159.278401] Bluetooth: hci2: command tx timeout [ 159.278436] Bluetooth: hci1: command tx timeout [ 159.406445] Bluetooth: hci3: command tx timeout [ 159.534090] Bluetooth: hci4: command tx timeout [ 159.536131] Bluetooth: hci7: command tx timeout [ 159.536164] Bluetooth: hci6: command tx timeout [ 159.599239] Bluetooth: hci5: command tx timeout [ 161.070113] Bluetooth: hci0: command tx timeout [ 161.326099] Bluetooth: hci2: command tx timeout [ 161.327186] Bluetooth: hci1: command tx timeout [ 161.457053] Bluetooth: hci3: command tx timeout [ 161.582105] Bluetooth: hci6: command tx timeout [ 161.583260] Bluetooth: hci7: command tx timeout [ 161.583697] Bluetooth: hci4: command tx timeout [ 161.646178] Bluetooth: hci5: command tx timeout [ 163.119040] Bluetooth: hci0: command tx timeout [ 163.374352] Bluetooth: hci1: command tx timeout [ 163.374860] Bluetooth: hci2: command tx timeout [ 163.502174] Bluetooth: hci3: command tx timeout [ 163.630283] Bluetooth: hci7: command tx timeout [ 163.631192] Bluetooth: hci6: command tx timeout [ 163.632073] Bluetooth: hci4: command tx timeout [ 163.695231] Bluetooth: hci5: command tx timeout [ 217.081297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.083254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.084535] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.087892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.089860] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.091150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.278100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.280120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.281678] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.285653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.287436] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.288859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.335427] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.340629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.350554] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.361380] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.370523] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.382237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.409935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.415216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.421523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.446242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.449387] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.460333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.518791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.531577] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.551326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.558053] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.571939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.574242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.604463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.611816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.614745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.623195] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.623497] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.626250] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.628635] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.629714] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.631900] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.639302] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.639420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.649643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.672305] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.676571] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.685506] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.693171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.731371] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.750527] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.118129] Bluetooth: hci0: command tx timeout [ 219.374115] Bluetooth: hci1: command tx timeout [ 219.438220] Bluetooth: hci2: command tx timeout [ 219.502160] Bluetooth: hci3: command tx timeout [ 219.822243] Bluetooth: hci5: command tx timeout [ 219.823353] Bluetooth: hci6: command tx timeout [ 219.823697] Bluetooth: hci4: command tx timeout [ 219.824586] Bluetooth: hci7: command tx timeout [ 221.166133] Bluetooth: hci0: command tx timeout [ 221.422090] Bluetooth: hci1: command tx timeout [ 221.486075] Bluetooth: hci2: command tx timeout [ 221.550107] Bluetooth: hci3: command tx timeout [ 221.870263] Bluetooth: hci4: command tx timeout [ 221.870761] Bluetooth: hci7: command tx timeout [ 221.871891] Bluetooth: hci5: command tx timeout [ 221.872346] Bluetooth: hci6: command tx timeout [ 223.214345] Bluetooth: hci0: command tx timeout [ 223.470163] Bluetooth: hci1: command tx timeout [ 223.534306] Bluetooth: hci2: command tx timeout [ 223.598178] Bluetooth: hci3: command tx timeout [ 223.918256] Bluetooth: hci7: command tx timeout [ 223.919284] Bluetooth: hci4: command tx timeout [ 223.920226] Bluetooth: hci5: command tx timeout [ 223.921065] Bluetooth: hci6: command tx timeout [ 225.263106] Bluetooth: hci0: command tx timeout [ 225.520042] Bluetooth: hci1: command tx timeout [ 225.582087] Bluetooth: hci2: command tx timeout [ 225.647099] Bluetooth: hci3: command tx timeout [ 225.966100] Bluetooth: hci6: command tx timeout [ 225.966590] Bluetooth: hci7: command tx timeout [ 225.967087] Bluetooth: hci5: command tx timeout [ 225.967501] Bluetooth: hci4: command tx timeout [ 279.224683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.227409] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.238150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.246056] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.248812] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.250877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.476697] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.481653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.483732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.491391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.496608] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.499119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.547491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.553416] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.556498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.556530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.563408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.583255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.587476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.603731] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.607541] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.610156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.612681] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.615199] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.617742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.634755] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.639409] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.642403] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.652171] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.653281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.668888] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.671734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.673024] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.674813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.677572] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.680896] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.681505] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.683745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.688752] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.702631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.706481] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.707545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.768426] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.773362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.809815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.837303] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.887270] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.889697] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.327049] Bluetooth: hci0: command tx timeout [ 281.582181] Bluetooth: hci1: command tx timeout [ 281.646157] Bluetooth: hci2: command tx timeout [ 281.710197] Bluetooth: hci5: command tx timeout [ 281.710885] Bluetooth: hci3: command tx timeout [ 281.775107] Bluetooth: hci6: command tx timeout [ 281.775887] Bluetooth: hci4: command tx timeout [ 281.966163] Bluetooth: hci7: command tx timeout [ 283.376685] Bluetooth: hci0: command tx timeout [ 283.631247] Bluetooth: hci1: command tx timeout [ 283.695037] Bluetooth: hci2: command tx timeout [ 283.759113] Bluetooth: hci3: command tx timeout [ 283.759793] Bluetooth: hci5: command tx timeout [ 283.822091] Bluetooth: hci4: command tx timeout [ 283.822576] Bluetooth: hci6: command tx timeout [ 284.014083] Bluetooth: hci7: command tx timeout [ 285.422171] Bluetooth: hci0: command tx timeout [ 285.679017] Bluetooth: hci1: command tx timeout [ 285.742059] Bluetooth: hci2: command tx timeout [ 285.806424] Bluetooth: hci5: command tx timeout [ 285.807293] Bluetooth: hci3: command tx timeout [ 285.870201] Bluetooth: hci6: command tx timeout [ 285.870813] Bluetooth: hci4: command tx timeout [ 286.063027] Bluetooth: hci7: command tx timeout [ 287.470070] Bluetooth: hci0: command tx timeout [ 287.727054] Bluetooth: hci1: command tx timeout [ 287.791195] Bluetooth: hci2: command tx timeout [ 287.857134] Bluetooth: hci3: command tx timeout [ 287.857583] Bluetooth: hci5: command tx timeout [ 287.918187] Bluetooth: hci4: command tx timeout [ 287.918681] Bluetooth: hci6: command tx timeout [ 288.110064] Bluetooth: hci7: command tx timeout [ 330.997497] modprobe (13059) used greatest stack depth: 24216 bytes left [ 341.817263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.820510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.822601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.829363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.834180] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.836682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.018918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.025490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.027896] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.037742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.041643] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.046424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.182802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.187524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.189586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.199779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.203545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.210019] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.225729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.231782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.235029] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.239394] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.241505] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.256138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.347880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.372925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.393054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.399364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.407063] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.411359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.437198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.446261] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.451255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.499802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.501810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.503257] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.505855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.510567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.514090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.516058] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.517463] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.546593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.548386] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.557581] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.563922] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.594558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.625497] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.633558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.918319] Bluetooth: hci0: command tx timeout [ 344.110150] Bluetooth: hci1: command tx timeout [ 344.302157] Bluetooth: hci2: command tx timeout [ 344.366398] Bluetooth: hci3: command tx timeout [ 344.558195] Bluetooth: hci7: command tx timeout [ 344.686268] Bluetooth: hci6: command tx timeout [ 344.686311] Bluetooth: hci5: command tx timeout [ 344.686893] Bluetooth: hci4: command tx timeout [ 345.967133] Bluetooth: hci0: command tx timeout [ 346.158054] Bluetooth: hci1: command tx timeout [ 346.350038] Bluetooth: hci2: command tx timeout [ 346.414242] Bluetooth: hci3: command tx timeout [ 346.607050] Bluetooth: hci7: command tx timeout [ 346.734048] Bluetooth: hci4: command tx timeout [ 346.734516] Bluetooth: hci5: command tx timeout [ 346.735101] Bluetooth: hci6: command tx timeout [ 348.014511] Bluetooth: hci0: command tx timeout [ 348.206140] Bluetooth: hci1: command tx timeout [ 348.398035] Bluetooth: hci2: command tx timeout [ 348.462218] Bluetooth: hci3: command tx timeout [ 348.654251] Bluetooth: hci7: command tx timeout [ 348.782089] Bluetooth: hci5: command tx timeout [ 348.782692] Bluetooth: hci4: command tx timeout [ 348.783033] Bluetooth: hci6: command tx timeout [ 350.063235] Bluetooth: hci0: command tx timeout [ 350.254111] Bluetooth: hci1: command tx timeout [ 350.448000] Bluetooth: hci2: command tx timeout [ 350.510039] Bluetooth: hci3: command tx timeout [ 350.702204] Bluetooth: hci7: command tx timeout [ 350.830069] Bluetooth: hci6: command tx timeout [ 350.830523] Bluetooth: hci5: command tx timeout [ 350.831059] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 18:56:32 Registers: info registers vcpu 0 RAX=ffffffff81ab9884 RBX=0000000000000001 RCX=ffffffff8684b701 RDX=ffff888035cbf1f0 RSI=ffffffff81ab9884 RDI=ffff888035cbf1a8 RBP=ffff888035cbf200 RSP=ffff888035cbf138 R8 =ffffffff8684b736 R9 =ffff888035cbf1e8 R10=000000000003ab7c R11=00000000000241a1 R12=ffff888035cbf270 R13=ffff888035cbf1f0 R14=ffff888016561bc0 R15=ffff888035cbf1a8 RIP=ffffffff81348ec1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb1df4b21f0 CR3=000000003193c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff817228bb RDX=ffff88801572d340 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88806cf09a00 R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c70708 R15=ffff88802b14c000 RIP=ffffffff8171a340 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd257735260 CR3=0000000023244000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000