Warning: Permanently added '[localhost]:25473' (ECDSA) to the list of known hosts. 2025/04/28 18:05:16 fuzzer started 2025/04/28 18:05:16 dialing manager at localhost:46629 syzkaller login: [ 95.777294] cgroup: Unknown subsys name 'net' [ 95.921921] cgroup: Unknown subsys name 'cpuset' [ 95.984657] cgroup: Unknown subsys name 'rlimit' 2025/04/28 18:05:31 syscalls: 208 2025/04/28 18:05:31 code coverage: enabled 2025/04/28 18:05:31 comparison tracing: enabled 2025/04/28 18:05:31 extra coverage: enabled 2025/04/28 18:05:31 setuid sandbox: enabled 2025/04/28 18:05:31 namespace sandbox: enabled 2025/04/28 18:05:31 Android sandbox: enabled 2025/04/28 18:05:31 fault injection: enabled 2025/04/28 18:05:31 leak checking: enabled 2025/04/28 18:05:31 net packet injection: enabled 2025/04/28 18:05:31 net device setup: enabled 2025/04/28 18:05:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/28 18:05:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/28 18:05:31 USB emulation: enabled 2025/04/28 18:05:31 hci packet injection: enabled 2025/04/28 18:05:31 wifi device emulation: enabled 2025/04/28 18:05:31 802.15.4 emulation: enabled 2025/04/28 18:05:31 fetching corpus: 0, signal 0/0 (executing program) 2025/04/28 18:05:32 starting 8 fuzzer processes 18:05:32 executing program 0: modify_ldt$read(0x0, &(0x7f0000000000)=""/36, 0x24) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x4465, 0xfff9}, @window={0x3, 0x1ff, 0x1ff}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@isdn={0x22, 0x9, 0x20, 0x81, 0x2}}, 0x7f) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp-reno\x00', 0xb) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={0x2}) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000240)=0x7, 0x4) r2 = accept(r1, &(0x7f0000000280)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000300)=0x80) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x4820c0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f00000003c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) bind$bt_l2cap(r2, &(0x7f0000000480)={0x1f, 0x3, @any, 0x8a30, 0x2}, 0xe) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f00000004c0)={0x2}) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) fstat(r1, &(0x7f0000000500)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x4010, r0, 0x10000000) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)=0x1, 0x4) 18:05:32 executing program 1: epoll_create1(0x0) r0 = semget$private(0x0, 0x4, 0xc2) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000000)=""/136) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0xff, &(0x7f00000000c0), 0x0, 0x0, 0x1}, 0xfffffdfa) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000140)=""/4096) r1 = semget$private(0x0, 0x1, 0x80) semop(r1, &(0x7f0000001140)=[{0x4, 0x2, 0x1800}, {0x4, 0x9, 0x800}], 0x2) r2 = semget$private(0x0, 0x0, 0x600) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000001180)=""/65) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000001200), &(0x7f0000001240)=0xc) syslog(0x3, &(0x7f0000001280)=""/119, 0x77) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x80, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x20000810) syslog(0x0, &(0x7f0000001440)=""/205, 0xcd) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000001540), &(0x7f0000001580)=0xc) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000015c0), 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) semget(0x2, 0x3, 0x420) semop(0x0, &(0x7f0000001600)=[{0x0, 0x800, 0x1000}, {0x2, 0x0, 0x1800}, {0x0, 0x7, 0x1000}, {0x2, 0x101, 0x800}, {0x2, 0x8, 0x1000}, {0x9b502190b7dc648e, 0x2, 0x800}, {0x1, 0x1, 0x1800}, {0x1, 0x1ff, 0x1000}, {0x4, 0xff7f}], 0x9) r4 = semget(0x0, 0x2, 0x52) semctl$GETZCNT(r4, 0x4, 0xf, &(0x7f0000001640)=""/59) 18:05:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', r1, 0x8000, 0x1, 0x700, 0x4, {{0x20, 0x4, 0x0, 0x5, 0x80, 0x64, 0x0, 0x1f, 0x2f, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x34, 0xb8, 0x1, 0xc, [{@multicast1, 0xc6a}, {@private=0xa010100, 0x1}, {@local, 0x1}, {@broadcast, 0xbb}, {@empty, 0x1ff}, {@empty, 0x80}]}, @timestamp_prespec={0x44, 0xc, 0xff, 0x3, 0x5, [{@multicast2, 0x3}]}, @timestamp={0x44, 0x8, 0x5e, 0x0, 0x5, [0x8]}, @timestamp_prespec={0x44, 0x24, 0x2d, 0x3, 0x9, [{@multicast1, 0x8}, {@multicast2, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010100, 0x5}]}]}}}}}) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)="ffe5b7df5e05cd7f93903282c9882ac8b09df997551b3117be6c99e82d3700d59e64335857b58ef29c8a5f436b0ac77b97a7561e2a3a170d33b58b12c78fe53c82151dee01e19adac6070519d18e154a66457fb80b49ff1567ead6a5018f32584618e342cdd34a8da3856f6594f80bd9ae31540ea7", 0x75}, 0x1, 0x0, 0x0, 0x40}, 0x24004050) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x103800, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f0000000340)=""/67, 0x43, 0x4, &(0x7f0000000400)={r4, r5+10000000}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000440)) r6 = socket(0x15, 0xa, 0x3f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f00000004c0), 0x4) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000540)) bind$bt_l2cap(r6, &(0x7f0000000580)={0x1f, 0x6, @none, 0x800, 0x2}, 0xe) getsockopt$inet6_tcp_int(r7, 0x6, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4) accept(r0, &(0x7f0000000640)=@isdn, &(0x7f00000006c0)=0x80) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000700)=@gcm_128={{}, "79d7744ce8642511", "a8ba92048884f56da931ed0e68f4b4a2", "1319c092", "0bf8e02bb3e2ee81"}, 0x28) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip_vti0\x00', &(0x7f00000007c0)={'ip_vti0\x00', r2, 0x20, 0x8, 0x2, 0xb27, {{0x36, 0x4, 0x2, 0xb, 0xd8, 0x67, 0x0, 0x81, 0x29, 0x0, @loopback, @remote, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x24, 0x0, [{0x2, 0x9, "223b7381d6496b"}, {0x2, 0x8, "e7ff1b298fee"}, {0x5, 0xd, "221510025ab09677928672"}]}, @cipso={0x86, 0x2f, 0x3, [{0x0, 0xf, "edcb8a6885d2fe07a91896a3a9"}, {0x5, 0xa, "a89f6ae2fb71c4e9"}, {0x1, 0x10, "5418f31b5f7ee587c91bf9cb3a01"}]}, @noop, @lsrr={0x83, 0xb, 0x65, [@empty, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x24, 0x2d, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x9}, {@remote, 0x1f}, {@broadcast, 0x6}]}, @noop, @rr={0x7, 0x7, 0xf, [@remote]}, @ssrr={0x89, 0x1b, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @multicast2, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x18, 0xfd, 0x0, 0x9, [0xeb, 0x143, 0xfffffffa, 0x5, 0x4d]}]}}}}}) getuid() 18:05:32 executing program 3: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x5) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x10600, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20004081) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000003c0)={0x2}) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000400)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000580)={'syztnl0\x00', r2, 0x7800, 0x1, 0x8000, 0xe00, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x64, 0x0, 0x7, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@timestamp_addr={0x44, 0x4, 0xb9, 0x1, 0x9}]}}}}}) r5 = memfd_secret(0x80000) connect$802154_dgram(r5, &(0x7f00000006c0)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14) ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f0000000700)=0x1000) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780)=0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000800)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000840)={{0x2, 0x2, 0x7, 0x1, 0xffff}, 0x5, 0x80000000, 'id0\x00', 'timer1\x00', 0x0, 0x2, 0x6, 0x60428f23, 0x8}) memfd_secret(0x0) 18:05:32 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x108, 0x0, &(0x7f0000000380)=[@dead_binder_done, @dead_binder_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/5, 0x5, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x40}, @dead_binder_done, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd, @flat=@handle={0x73682a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x100a, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/191, 0xbf, 0x1, 0x1f}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}], 0x2c, 0x0, &(0x7f00000004c0)="5768b8b3851cad1b38c0dba89e4f91660737c202d37d0ff9139be61eaeb5b6c67968da8bc85b4399b8190c41"}) r2 = accept(r1, &(0x7f0000000540)=@nfc, &(0x7f00000005c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x1, 0x8000, 0x8000, 0x7, {{0xe, 0x4, 0x2, 0x39, 0x38, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@cipso={0x86, 0x24, 0x1, [{0x6, 0x4, "0a02"}, {0x7, 0x9, "269ce29be04715"}, {0x1, 0x11, "8052fe9d61f667b8532fa05a7b3619"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x208, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000880)={0x90, "aec51f"}, 0x6) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000008c0), 0x208001, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a80)={'gretap0\x00', &(0x7f0000000900)={'syztnl1\x00', r3, 0x20, 0x1, 0xfffffff8, 0x40000000, {{0x52, 0x4, 0x0, 0x22, 0x148, 0x66, 0x0, 0x8, 0x0, 0x0, @rand_addr=0x64010101, @multicast1, {[@noop, @lsrr={0x83, 0x27, 0x7f, [@broadcast, @broadcast, @rand_addr=0x64010102, @multicast1, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local]}, @cipso={0x86, 0x18, 0x1, [{0x6, 0xd, "70431b9ba63bdc14ce5fed"}, {0x6, 0x5, "fae5f3"}]}, @cipso={0x86, 0x4c, 0x0, [{0x1, 0x3, "9a"}, {0x0, 0xe, "bd69a6afd02fdd989d9c0e0a"}, {0x6, 0x11, "8916d4461423f3be4e70cf6ab6b62c"}, {0x7, 0x4, "3dd4"}, {0x7, 0x6, 'L?#P'}, {0x7, 0xd, "922c3dca9476ec4a12103d"}, {0x7, 0xd, "24143f8fff1956c519cc70"}]}, @timestamp_prespec={0x44, 0x24, 0xf4, 0x3, 0xa, [{@rand_addr=0x64010100, 0x6}, {@loopback, 0x7}, {@multicast2}, {@multicast2, 0x7}]}, @lsrr={0x83, 0x17, 0x28, [@private=0xa010102, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0xb, 0x68, [@loopback, @remote]}, @cipso={0x86, 0x5f, 0x3, [{0x6, 0xa, "47463095c658257d"}, {0x5, 0x9, "f5c55f6b8e01a4"}, {0x6, 0x10, "2363b0aa218039dd818ed7d9ad06"}, {0x1, 0xc, "2ec7f60f1cfe2bd96a7d"}, {0x0, 0xd, "ff946aaf8498133652437d"}, {0x2, 0x11, "788044edcba351e7dc87d853d9cbfc"}, {0x2, 0xc, "2c34a8cced380fb8e893"}]}]}}}}}) r6 = memfd_secret(0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000ac0)={0x0, @generic={0x2b, "47f498c73606b55cf6124b0006d3"}, @l2={0x1f, 0x0, @any, 0xfffb, 0x1}, @generic={0x11, "413a4f71e1b395457fbba6ead785"}, 0x6, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x5, 0x100000001, 0x4}) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b40)={0x1f}, 0x4) memfd_secret(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d00), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000d40)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000e40)=0xe8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xbc, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4040081) [ 111.463561] audit: type=1400 audit(1745863532.964:7): avc: denied { execmem } for pid=277 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:05:33 executing program 5: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = syz_io_uring_setup(0xe01, &(0x7f0000000080)={0x0, 0xda79, 0x4, 0x2, 0x226}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)={0x81, "58c6eb"}, 0x6) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000001c0)={0x2, 0x3, 0x6, 0x1, 0x7ff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netpci0\x00'}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='cubic\x00', 0x6) r2 = syz_io_uring_setup(0x746c, &(0x7f00000002c0)={0x0, 0x1195, 0x8, 0x2, 0x28b, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000440)) syz_io_uring_setup(0x528, &(0x7f0000000480)={0x0, 0x5480, 0x10, 0x1, 0x26, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x3afb, &(0x7f0000000580)={0x0, 0xb4c, 0x8, 0x0, 0x1ab, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000006c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r1, &(0x7f0000000680)={0x10000008}, r2, 0x3, 0x0, 0x1}, 0xffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000700)={0x1, 0x6, 0x1, 0x0, 0x11}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) r6 = epoll_create(0xffffff1a) fstat(r6, &(0x7f00000007c0)) openat$null(0xffffffffffffff9c, &(0x7f0000000840), 0x4000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 18:05:33 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}]}, 0xcc}}, 0x11) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4080080) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x4008881) r2 = socket(0x18, 0x2, 0x1) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000480)=""/190, &(0x7f0000000540)=0xbe) r3 = accept(r2, 0x0, &(0x7f0000000580)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x21220}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1cc, r4, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffc01}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x3f, 0x80]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xbb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x33}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffa5}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9c69}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0xfffffffc, 0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0x8000, 0xfffffffb, 0x52f4ae74, 0x0, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x64}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfb39}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x4, 0x4, 0xfff, 0x8a9, 0x5]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xd2e4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x62}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7e6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8000}, 0x4080000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x4c0000, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000081c}, 0x4000040) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r7, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sudo_exec_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000) getsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000c40)={@dev={0xfe, 0x80, '\x00', 0x44}}, 0x14) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xb8, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4014}, 0x40080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x7c, r0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:initrc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4) 18:05:33 executing program 7: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x294800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xa4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x8, 0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x33}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000300)=0x70, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x110b}) r3 = memfd_secret(0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) fstat(r0, &(0x7f00000003c0)) bind$802154_dgram(r0, &(0x7f0000000440)={0x24, @short={0x2, 0x2}}, 0x14) r4 = memfd_secret(0x80000) write$cgroup_pid(r4, &(0x7f0000000480), 0x12) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r5 = socket(0x2a, 0x4, 0x5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x94}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x58}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000600), &(0x7f0000000640)=0x10) [ 112.825124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.828587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.830225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.834126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.839978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.890128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.892731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.894054] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.898604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.904575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.905678] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.907734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.909554] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.913730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.917337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.922724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.926434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.933860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.950883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.952853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.954946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.966731] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.970997] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.985730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.990093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.998936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.014367] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.023443] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.030726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.043471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.046676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.051640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.060417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.062172] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.083562] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.096637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.103612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.114600] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.114780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.132619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.855010] Bluetooth: hci0: command tx timeout [ 114.983077] Bluetooth: hci3: command tx timeout [ 115.046375] Bluetooth: hci2: command tx timeout [ 115.046531] Bluetooth: hci5: command tx timeout [ 115.047473] Bluetooth: hci1: command tx timeout [ 115.110780] Bluetooth: hci4: command tx timeout [ 115.175557] Bluetooth: hci6: command tx timeout [ 115.175593] Bluetooth: hci7: command tx timeout [ 116.904368] Bluetooth: hci0: command tx timeout [ 117.031541] Bluetooth: hci3: command tx timeout [ 117.094779] Bluetooth: hci5: command tx timeout [ 117.094942] Bluetooth: hci2: command tx timeout [ 117.095546] Bluetooth: hci1: command tx timeout [ 117.159802] Bluetooth: hci4: command tx timeout [ 117.222402] Bluetooth: hci7: command tx timeout [ 117.224194] Bluetooth: hci6: command tx timeout [ 118.950362] Bluetooth: hci0: command tx timeout [ 119.078400] Bluetooth: hci3: command tx timeout [ 119.142537] Bluetooth: hci5: command tx timeout [ 119.142573] Bluetooth: hci1: command tx timeout [ 119.144042] Bluetooth: hci2: command tx timeout [ 119.207359] Bluetooth: hci4: command tx timeout [ 119.270400] Bluetooth: hci6: command tx timeout [ 119.270439] Bluetooth: hci7: command tx timeout [ 120.999594] Bluetooth: hci0: command tx timeout [ 121.127543] Bluetooth: hci3: command tx timeout [ 121.191327] Bluetooth: hci2: command tx timeout [ 121.191713] Bluetooth: hci5: command tx timeout [ 121.193050] Bluetooth: hci1: command tx timeout [ 121.254611] Bluetooth: hci4: command tx timeout [ 121.318987] Bluetooth: hci6: command tx timeout [ 121.319513] Bluetooth: hci7: command tx timeout [ 172.799332] syz-executor.1 (285) used greatest stack depth: 24968 bytes left [ 172.991718] syz-executor.2 (286) used greatest stack depth: 24952 bytes left [ 175.611357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.614513] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.616654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.622480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.625728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.679018] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.682701] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.685074] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.686161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.689206] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.691677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.696140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.706181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.714958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.732601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.766742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.769176] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.778838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.781139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.786621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.803285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.814459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.817349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.829574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.836629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.843969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.845462] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.857416] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.862016] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.866621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.870782] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.883953] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.892997] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.901215] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.905022] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.930040] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.931697] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.937835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.942898] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.948818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.702549] Bluetooth: hci0: command tx timeout [ 177.767065] Bluetooth: hci2: command tx timeout [ 177.832397] Bluetooth: hci1: command tx timeout [ 177.958426] Bluetooth: hci6: command tx timeout [ 177.959574] Bluetooth: hci3: command tx timeout [ 177.960191] Bluetooth: hci4: command tx timeout [ 178.022435] Bluetooth: hci7: command tx timeout [ 178.023430] Bluetooth: hci5: command tx timeout [ 179.750411] Bluetooth: hci0: command tx timeout [ 179.814343] Bluetooth: hci2: command tx timeout [ 179.879358] Bluetooth: hci1: command tx timeout [ 180.006765] Bluetooth: hci4: command tx timeout [ 180.007340] Bluetooth: hci3: command tx timeout [ 180.007792] Bluetooth: hci6: command tx timeout [ 180.072382] Bluetooth: hci5: command tx timeout [ 180.072937] Bluetooth: hci7: command tx timeout [ 181.798373] Bluetooth: hci0: command tx timeout [ 181.862469] Bluetooth: hci2: command tx timeout [ 181.926402] Bluetooth: hci1: command tx timeout [ 182.054660] Bluetooth: hci4: command tx timeout [ 182.054791] Bluetooth: hci3: command tx timeout [ 182.055410] Bluetooth: hci6: command tx timeout [ 182.118343] Bluetooth: hci5: command tx timeout [ 182.119402] Bluetooth: hci7: command tx timeout [ 183.846420] Bluetooth: hci0: command tx timeout [ 183.910357] Bluetooth: hci2: command tx timeout [ 183.974438] Bluetooth: hci1: command tx timeout [ 184.102826] Bluetooth: hci4: command tx timeout [ 184.103609] Bluetooth: hci6: command tx timeout [ 184.104066] Bluetooth: hci3: command tx timeout [ 184.167854] Bluetooth: hci7: command tx timeout [ 184.168556] Bluetooth: hci5: command tx timeout [ 235.907497] syz-executor.1 (2528) used greatest stack depth: 24704 bytes left [ 238.152537] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.157053] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.159532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.164706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.167797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.338091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.342401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.346832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.352942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.356661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.425152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.429477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.438438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.451794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.458844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.526781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.552620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.555748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.559134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.560834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.563149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.581710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.587887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.590766] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.591788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.611167] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.613102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.620002] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.633523] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.635096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.643017] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.644176] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.645013] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.667605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.668622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.670791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.682712] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.720995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.735025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.753868] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.230687] Bluetooth: hci0: command tx timeout [ 240.422371] Bluetooth: hci1: command tx timeout [ 240.550943] Bluetooth: hci2: command tx timeout [ 240.678398] Bluetooth: hci4: command tx timeout [ 240.743380] Bluetooth: hci5: command tx timeout [ 240.743438] Bluetooth: hci3: command tx timeout [ 240.870413] Bluetooth: hci6: command tx timeout [ 240.934365] Bluetooth: hci7: command tx timeout [ 242.278383] Bluetooth: hci0: command tx timeout [ 242.471329] Bluetooth: hci1: command tx timeout [ 242.598455] Bluetooth: hci2: command tx timeout [ 242.726476] Bluetooth: hci4: command tx timeout [ 242.790444] Bluetooth: hci5: command tx timeout [ 242.790921] Bluetooth: hci3: command tx timeout [ 242.918363] Bluetooth: hci6: command tx timeout [ 242.982345] Bluetooth: hci7: command tx timeout [ 244.326366] Bluetooth: hci0: command tx timeout [ 244.519368] Bluetooth: hci1: command tx timeout [ 244.647396] Bluetooth: hci2: command tx timeout [ 244.775516] Bluetooth: hci4: command tx timeout [ 244.838633] Bluetooth: hci3: command tx timeout [ 244.838848] Bluetooth: hci5: command tx timeout [ 244.966334] Bluetooth: hci6: command tx timeout [ 245.030771] Bluetooth: hci7: command tx timeout [ 246.375889] Bluetooth: hci0: command tx timeout [ 246.566405] Bluetooth: hci1: command tx timeout [ 246.695236] Bluetooth: hci2: command tx timeout [ 246.822398] Bluetooth: hci4: command tx timeout [ 246.887801] Bluetooth: hci3: command tx timeout [ 246.887834] Bluetooth: hci5: command tx timeout [ 247.014352] Bluetooth: hci6: command tx timeout [ 247.078636] Bluetooth: hci7: command tx timeout [ 300.732431] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.739590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.746949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.752467] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.756053] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.934745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.938075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.942607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.947140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.951285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.049415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.052281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.053774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.068843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.072895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.129897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.133140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.136829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.141031] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.146163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.170602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.173787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.175592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.182478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.184774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.297856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.307389] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.310914] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.313519] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.325127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.332598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.338078] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.340865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.376412] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.384184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.387696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.388937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.398813] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.437631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.472126] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.822679] Bluetooth: hci0: command tx timeout [ 303.014369] Bluetooth: hci1: command tx timeout [ 303.143233] Bluetooth: hci2: command tx timeout [ 303.207281] Bluetooth: hci3: command tx timeout [ 303.207934] Bluetooth: hci4: command tx timeout [ 303.462481] Bluetooth: hci6: command tx timeout [ 303.463201] Bluetooth: hci5: command tx timeout [ 303.592735] Bluetooth: hci7: command tx timeout [ 304.871500] Bluetooth: hci0: command tx timeout [ 305.062694] Bluetooth: hci1: command tx timeout [ 305.191543] Bluetooth: hci2: command tx timeout [ 305.255787] Bluetooth: hci3: command tx timeout [ 305.257408] Bluetooth: hci4: command tx timeout [ 305.510568] Bluetooth: hci5: command tx timeout [ 305.511090] Bluetooth: hci6: command tx timeout [ 305.638514] Bluetooth: hci7: command tx timeout [ 306.919376] Bluetooth: hci0: command tx timeout [ 307.112358] Bluetooth: hci1: command tx timeout [ 307.238572] Bluetooth: hci2: command tx timeout [ 307.302548] Bluetooth: hci3: command tx timeout [ 307.303031] Bluetooth: hci4: command tx timeout [ 307.560051] Bluetooth: hci6: command tx timeout [ 307.562120] Bluetooth: hci5: command tx timeout [ 307.687329] Bluetooth: hci7: command tx timeout [ 308.967685] Bluetooth: hci0: command tx timeout [ 309.158893] Bluetooth: hci1: command tx timeout [ 309.288311] Bluetooth: hci2: command tx timeout [ 309.350671] Bluetooth: hci4: command tx timeout [ 309.351166] Bluetooth: hci3: command tx timeout [ 309.609430] Bluetooth: hci5: command tx timeout [ 309.609946] Bluetooth: hci6: command tx timeout [ 309.736286] Bluetooth: hci7: command tx timeout [ 363.640468] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.642628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.644685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.649641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.652510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.700816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.706708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.711491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.724348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.726291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.776818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.786541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.787793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.798093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.802545] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.871814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.876480] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.882422] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.895566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.906166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.918626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.924386] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.926799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.928562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.943921] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.949497] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.951276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.952679] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.954834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.961726] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.970999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.996937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.005377] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.007203] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.009979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.012810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.016530] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.020442] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.026808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.051203] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.734552] Bluetooth: hci0: command tx timeout [ 365.798372] Bluetooth: hci1: command tx timeout [ 365.864334] Bluetooth: hci2: command tx timeout [ 365.990713] Bluetooth: hci3: command tx timeout [ 366.054357] Bluetooth: hci7: command tx timeout [ 366.055110] Bluetooth: hci4: command tx timeout [ 366.055127] Bluetooth: hci5: command tx timeout [ 366.119742] Bluetooth: hci6: command tx timeout [ 367.783404] Bluetooth: hci0: command tx timeout [ 367.846704] Bluetooth: hci1: command tx timeout [ 367.910711] Bluetooth: hci2: command tx timeout [ 368.039973] Bluetooth: hci3: command tx timeout [ 368.102447] Bluetooth: hci5: command tx timeout [ 368.102549] Bluetooth: hci4: command tx timeout [ 368.102908] Bluetooth: hci7: command tx timeout [ 368.166339] Bluetooth: hci6: command tx timeout [ 369.830346] Bluetooth: hci0: command tx timeout [ 369.894388] Bluetooth: hci1: command tx timeout [ 369.959342] Bluetooth: hci2: command tx timeout [ 370.087589] Bluetooth: hci3: command tx timeout [ 370.150904] Bluetooth: hci4: command tx timeout [ 370.151447] Bluetooth: hci5: command tx timeout [ 370.151907] Bluetooth: hci7: command tx timeout [ 370.215292] Bluetooth: hci6: command tx timeout [ 371.878329] Bluetooth: hci0: command tx timeout [ 371.942377] Bluetooth: hci1: command tx timeout [ 372.006502] Bluetooth: hci2: command tx timeout [ 372.134320] Bluetooth: hci3: command tx timeout [ 372.198502] Bluetooth: hci7: command tx timeout [ 372.198781] Bluetooth: hci5: command tx timeout [ 372.199099] Bluetooth: hci4: command tx timeout [ 372.262520] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 18:10:35 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff816002b0 RCX=ffff88800960f7a4 RDX=0000000000000000 RSI=ffffffff85c1bac0 RDI=ffff88800960f850 RBP=ffff88800960f8e8 RSP=ffff88800960f848 R8 =0000000000000001 R9 =ffff88800960f890 R10=000000000003b0c2 R11=0000000000011948 R12=ffff88800960f918 R13=0000000000000000 R14=ffff8880095f9bc0 R15=ffff888033f6ffc0 RIP=ffffffff81350580 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8e7bba3270 CR3=00000000259e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88800aef8000 RCX=0000000000000040 RDX=1ffff110015df259 RSI=ffffffff81666ef6 RDI=ffff88800aef92c8 RBP=ffff88800aef9380 RSP=ffff88802e427d60 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff8640ec17 R11=0000000000000000 R12=ffff88800aef92c8 R13=ffff88800aef92f0 R14=ffff888015b7af40 R15=ffff88800aef8000 RIP=ffffffff81666f12 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f521a098540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f521a5946f4 CR3=00000000169d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f521a5a347000007f521a5a2f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000