Warning: Permanently added '[localhost]:1735' (ECDSA) to the list of known hosts. 2025/05/01 02:12:23 fuzzer started 2025/05/01 02:12:23 dialing manager at localhost:43767 syzkaller login: [ 94.032314] cgroup: Unknown subsys name 'net' [ 94.179313] cgroup: Unknown subsys name 'cpuset' [ 94.224839] cgroup: Unknown subsys name 'rlimit' 2025/05/01 02:12:41 syscalls: 214 2025/05/01 02:12:41 code coverage: enabled 2025/05/01 02:12:41 comparison tracing: enabled 2025/05/01 02:12:41 extra coverage: enabled 2025/05/01 02:12:41 setuid sandbox: enabled 2025/05/01 02:12:41 namespace sandbox: enabled 2025/05/01 02:12:41 Android sandbox: enabled 2025/05/01 02:12:41 fault injection: enabled 2025/05/01 02:12:41 leak checking: enabled 2025/05/01 02:12:41 net packet injection: enabled 2025/05/01 02:12:41 net device setup: enabled 2025/05/01 02:12:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/01 02:12:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/01 02:12:41 USB emulation: enabled 2025/05/01 02:12:41 hci packet injection: enabled 2025/05/01 02:12:41 wifi device emulation: enabled 2025/05/01 02:12:41 802.15.4 emulation: enabled 2025/05/01 02:12:41 fetching corpus: 0, signal 0/0 (executing program) 2025/05/01 02:12:43 starting 8 fuzzer processes 02:12:43 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x15c, r0, 0x408, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x147, 0x2a, [@supported_rates={0x1, 0x8, [{0x4}, {0x16, 0x1}, {0x36, 0x1}, {0x12}, {0x4}, {0x18}, {0x60}, {0x30}]}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}, @supported_rates={0x1, 0x8, [{0x60}, {0x1e}, {0x30, 0x1}, {0x1b, 0x1}, {0x48, 0x1}, {0x3}, {0x1b, 0x1}, {0x18, 0x1}]}, @preq={0x82, 0x25, @not_ext={{0x0, 0x0, 0x1}, 0x1, 0x3, 0x2, @device_a, 0x1, "", 0x9, 0x2, 0x1, [{{}, @device_a, 0xabf}]}}, @sec_chan_ofs={0x3e, 0x1}, @random={0x8, 0xcc, "c0186c2aa328b210aa7aad75f17ebfc7fd934130bea53f62fa0002fc9524999dca8604452d6cd31b6f580d8103d7c58a427dd4e565eccfc5b52147232dfd982c1475017582a65079e2bb864d2fb354991bc8e88fd28e72b59b86ed004032c566aba1d31f09b5a9463504dad46de553b12b59731bf9ce47f611b74a89ad8b596625a1ace547bbaff5be5dc779bc9f3f65a858358f5079d3881e49f27712819d539c63fd4ff1837c0b72fb6db35d20893539bfafb53d5191836f6c81614b09ad2c37f3fb9c84e6dc6c3734563b"}, @erp={0x2a, 0x1}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0xf, @val="c380b7c77cc21169162903acde9f73fd"}}, @cf={0x4, 0x6, {0x81, 0xfe, 0x6, 0x401}}]}]}, 0x15c}}, 0x8008002) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x700, 0x10, 0x1, 0x6, {{0xc, 0x4, 0x2, 0x7, 0x30, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x1c, 0xed, 0x0, 0x8, [0x7fffffff, 0x7, 0x7, 0x2, 0x5, 0x4]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x801) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}]}, 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r3 = syz_open_dev$mouse(&(0x7f00000005c0), 0x7ff, 0x204040) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r4, 0x920, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20020001) r5 = syz_open_dev$mouse(&(0x7f0000000780), 0x0, 0x301000) write$P9_RUNLINKAT(r5, &(0x7f00000007c0)={0x7, 0x4d, 0x1}, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xed}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffe1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xaa1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8d}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r6) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x84, r8, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1927) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 02:12:43 executing program 1: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x44090) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000084}, 0x20002881) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffa}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000b80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100001004}, 0xc, &(0x7f0000000b40)={&(0x7f0000000600)={0x524, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x4f6, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xff}, @device_a, @device_b, @initial, {0xa, 0x4}}, 0x8001, @random=0x9, 0x0, @void, @val={0x1, 0x2, [{0x6c}, {0x1, 0x1}]}, @val={0x3, 0x1, 0xb3}, @val={0x4, 0x6, {0x3, 0x5, 0x20, 0xaeba}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0x7, 0x1}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xb2, 0xfb, 0x26, 0x91}}, [{0xdd, 0xb5, "e3d2cf3b355c1fa61b732b509d494054d5b08eac81189b514fe3e218a14d5ce78cc5e2fa5d82a6dcf67280d71f45af3b8bda30f3c1d00f05eda7ea8a2d39e4bebc9d7e677a70d215418142131946f9f62979a55e45572bbfeab103bd38336ad38c5377b026f2ef185d9d9493df8cfda6bd9a05378cb60912b61e70ac6a1aefbbd43a4f0c387d3a820946827dbdb8a62b8430ea58720f619e60896e1f66667cadcb0858e83ec5cd08dfe7390a241c7e856adad5b7bd"}, {0xdd, 0x54, "75cc1787668e4da1fcc28cfd6913dd08a88ec6d2764aa431b26d20f9b776c0a8aa9f1e355c9f6dbad799d54ee3b93e28e40f97b2e76247a11b9df0e313e211747516e4e4e500ea3dc4fa31c940202b28006926b9"}, {0xdd, 0xd3, "a54e5f43cdb67627b5490ba9043fe7b1a965a44c0054d07334212a6bdb0d4c20b419c953c84e9098162a766a3f4722f92b0ecddb1ab88eda21f547712358f6c5dbba9ff5c350a6ebc4f9dc7a68c6b032d66ce80d00fb009eb857267ed9349d0b7ecf28e413a176fd49d06265839340d5142f57bde786d3e0ae39cc95505165623ef4bc61dceb4305e80218546498b93fccfb44a50c2421141fdd80c1b682c2c4c3ab597b93c3e893d8eb2aab5869defa5c0d2a39d9cb8b3dfcf6a78b784b74a21e5f71b1b994549b66765121e6e3ac1abc0404"}, {0xdd, 0x83, "4fd65a112e524e58264111eab15a9dcfe3c435c473425a05bd5e25072ca18b48a8eec770ea81b322436f8b675944bd8e769bd464cd27aa884926edc07f50366eabc7f30106fdaee54f37a81aa0ce067a4a9fd819db6be94fffc8e059f55fc480d834ff21c8d40774823405316b24f13883cb6fba39cf8228097ca8ae89da2b206f4c07"}, {0xdd, 0x88, "18b206050786fb948e199651ee9b3a3e202791859844b22241954852f3bc503a84c9437c60ef5f4b7eb796d9cd552456c38936231fdb7324db4dbd594769452b6dab91b06945a1a3ea6450e1ffd1e03dfae9ec955017220aa186b300f1757fbe8ae56684b8f61262c690d49df41b6754f5923b2f7658af7dea37ced7a4adf9cedf9e89d79fecee5c"}, {0xdd, 0xa6, "ee36e4804db9b5d4d30d19429a98639ceca41dfe7e66778343c8ffdce45f339ebe64938772e8416fe46b4ef457add06b7e43632a9f9ef42d7bd95ae07907ac2f547292203b594e52090f41f0eeb1c0b97383e8b18d534c96a1e37e4ad973a7914ca91606acba075fbff8ff6335641163abcbd9e1f27c4925afcb08f15790a247259512e1286b0063af6aacd3fce95f8ccb731806154b6d47459e61977a70d22d5e7d6a269081"}, {0xdd, 0x4e, "8b2dcb7a040c92b7ce15c647afb94e11ddbed137748138815224e4adf11edd671d5252a29eeb0208382550ba7297f56b6578fb35ac1883fcd154da0352cabb7bb410b4fae9997082d7c0b0b7a55a"}, {0xdd, 0x90, "33b98b682e3db7dabc015e6798de56d3e391fa814d873ecbb7a637d07b79987e6795d65e81f775d7cec857e74571df50f339b6b0ea709bb50c1f00bd5ce38e43dd00adec026bd1f5948411824a0fe97fdd14433657828a66a0e56e937f9063f4c09c8ebe9585ee38f72a0b9211aabca8101fd5211b9559bd9498b9cefd77ea27524420c3dbac381098008b7bc570126f"}, {0xdd, 0x29, "c53c693b269b10900dbb370bca0a7bd97734fe65e54f84ef644b36279e94c05cfa49062d80453e2d05"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf22}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]]}, 0x524}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x12d2}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r1) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x80}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000011) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, r7, 0x310, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x2400805d) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f0000001200)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x0, 0x3, {{0x24, 0x4, 0x1, 0x3b, 0x90, 0x68, 0x0, 0x13, 0x29, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0x8, 0x11, 0x0, 0x7, [0xdd]}, @lsrr={0x83, 0x3, 0xfd}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x4, [{@private=0xa010100, 0xd93}, {@remote, 0xe7}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x401}]}, @timestamp_addr={0x44, 0x44, 0x44, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x3}, {@loopback, 0x1}, {@loopback, 0x3594}, {@loopback, 0x4}, {@loopback}, {@local}, {@rand_addr=0x64010101, 0xfffffffb}, {@multicast1, 0x7}]}, @generic={0x83, 0x7, "0fed6ac4de"}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001480)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x120, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4008894}, 0xc000000) 02:12:43 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="c23194ec13b2aa479172531b93eba6a7e1d1c3a54de2c9411cdf5e96c6799cef473d59b4128c14650046f99b692eb2a3db8dbc32c18bc6939d5b30fc80c286372c70528cd2c1394fe6b5408f0b8266eff0308ccfa096bba118009c10a974a166a2203bd156fe20c004f705f9a85cc4b0f4fb713cd4d38445d69d7befa37dafbcab6b7df38bf2c3a84284acd5047d4a99b147ddf3fd3855ceb2e51ef9e34236f8b76517da76016a9fdb19f06ec2c44856dbef7e7d847b03f05185e6cd262071f3388bf1349576e61537b8195204ee4f473550c57c872b13e831af8b1cfc35eb420bcdf465017a177fd511740c013c2a3734fcf1a057a4", 0xf6) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x2b0300, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000200)) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000002c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x97e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8ec}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa75}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdf1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0xc004) accept$unix(r2, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x68, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x7, 0x4, "1a16ae"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "53f3d200f2"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r4 = socket(0x2a, 0x5, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x401, 0x7, {{0x12, 0x4, 0x1, 0x12, 0x48, 0x67, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp={0x44, 0x20, 0x2e, 0x0, 0x6, [0x376, 0x0, 0x1, 0x4, 0x4, 0x8, 0x4]}, @cipso={0x86, 0x12, 0x2, [{0x0, 0xc, "98cc211709a748d35e44"}]}, @noop]}}}}}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x80) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000009c0)={0x0, "9e682a5cb76ad8b300bd0962abda1b02c0d54bda48bf9f648aeddef3cc3d12a069c4736a9b0f75b5611e5af0cc7a3ac7255b53ee1637d718e3f72420c15a95d2"}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "40ad52c2e5"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40010) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x505bbe03}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000884}, 0x4000884) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000c80)={0x7, 0x47, 0x1}, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)=@newpolicy={0x114, 0x13, 0x2, 0x70bd2d, 0x25dfdbfe, {{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e22, 0x0, 0x4e23, 0xfffe, 0x2, 0x20, 0xa0, 0x3a, r5}, {0xff, 0x7, 0xfffffffffffffff9, 0x958b, 0x6, 0x1, 0x2, 0x7ccb}, {0x81, 0x7f, 0x2, 0x8}, 0x3d8e, 0x6e6bc0, 0x2, 0x0, 0x3}, [@user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@loopback, 0x0, 0x2}}, @address_filter={0x28, 0x1a, {@in=@local, @in=@local, 0x2db3912861d4731d, 0x7f, 0x20}}, @extra_flags={0x8, 0x18, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c0) [ 113.571038] audit: type=1400 audit(1746065563.727:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:12:43 executing program 3: syz_io_uring_setup(0x408a, &(0x7f0000000000)={0x0, 0x4c2e, 0x10, 0x3, 0x37d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r2 = syz_io_uring_setup(0x7d31, &(0x7f0000000100)={0x0, 0x47dd, 0x1, 0x0, 0x23c}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0xffffffff) r4 = syz_open_dev$mouse(&(0x7f0000000280), 0x400, 0x101840) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000002c0)={0x31d0}, 0x4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000300)) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x15, 0x2}, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000380), 0x8000, 0x8000) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f00000003c0)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x450001) r7 = syz_open_dev$mouse(&(0x7f0000000940), 0x40, 0x10200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_dev$mouse(&(0x7f0000000a40), 0x7, 0x8000) io_submit(0x0, 0x6, &(0x7f0000000ac0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0xa442, r4, &(0x7f0000000400)="4396baf8cf2b028e65b3956418131a4b0b07ab103b94384e400cd171534139ce546e011572", 0x25, 0x7fff, 0x0, 0x2, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x3f, r2, &(0x7f0000000480)="252762a20e99ce862692887f8aac054547d4b2b0b30da649a7c9c945d174d97fa794b89faff4fdae9ccc4e9c7877e1a2542e091be9a4950972e482ea629090ab7ae26c1900ce93dba379beadd7f4c5690c23d06f7fa5d3cc81d920121b5979e47e19884089f9026773e8d974e33b8e03c25b014b5c82e87dda94364c749e0501170e07f45aee0cbfd8e4cd8c5dc57556b2d9b7c101043554c3a5dace40e507879e1d84cedb88019e21e0734a221ee275586c18799e4c5f4f3cd87eec2739f7f3d33589bc64da0581cee3eef7bbcf2a980de0872f2226a016171fa2660cf827", 0xdf, 0xfd8, 0x0, 0x0, r4}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x7, r5, &(0x7f00000005c0)="9afecf7e5a326d1c2f8e0ef5a97abaed5fb0f0523fabacebb8a1ab18e98f8fc42b891b8e074f3e4a849fba5b055355318b02abd1a20f966d65cc7006c59987b84503a1471f3a6f98173b0d348e0308620627d8df9e98ba1c3dd433f3b4796ee8fdcda94bcbdf185b82cd4ec77a1248d26cce11eeac705ea7d77c487d698c93f01f910cea8fc49a83b903f59cc429db9f760c45", 0x93, 0x6, 0x0, 0x3, r4}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0xfffd, r4, &(0x7f00000006c0)="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", 0xfe, 0x6, 0x0, 0x3, r4}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x8, 0x3, r6, &(0x7f0000000840)="0f5e1b8a11c564fe9d92e2c7d750ec319dd7fd1346542288c58ac39cc5d74d6e0bff6bea9dffd322742945cd6da70d0e92232c77e98c316b6db8833659ae4d5c95af942db68aee57079791e15c1d976b8bd4f8a96a4bc3af26252e6815e3ddcd34472afd14313f78ecef02163557a10f2a717337874b41ac549e3e5b893c37bc728a41cba09cf91b0ac0bdfd90b7cd6b0d4afdeec6689f044b3431bcb86b810bd0ff12a5f5c4dd1acf698b6d4318eb9135f52b3c92affcb7e9a50cfd6c386bc3a7954c6014cff7bbca0707215497cef3ffca8071", 0xd4, 0x0, 0x0, 0x1, r7}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x9, r8, &(0x7f0000000a00)="58df10f501596ea0637e1c", 0xb, 0xad4, 0x0, 0x3, r9}]) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) socketpair(0x2, 0x2, 0x81, &(0x7f0000000b00)) syz_io_uring_submit(0x0, r1, &(0x7f0000000c80)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000c40)='./file0\x00', 0x34, 0x60280, 0x23456}, 0x1) 02:12:43 executing program 4: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x4008080) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@migrate={0x84, 0x21, 0x4, 0x70bd2b, 0x25dfdbfe, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x5, 0x4e22, 0x7fff, 0xa, 0x20, 0x0, 0x1}, 0x6e6bb5, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x8000}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @etimer_thresh={0x8, 0xc, 0x7ff}, @policy_type={0xa, 0x10, {0x1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x9ee5feed497870b2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, 0x0, 0x411, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0xc}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4050}, 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000840)='devices.allow\x00', 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'M'}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004004) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) r4 = fork() getpgid(r4) r5 = syz_open_dev$mouse(&(0x7f0000000b80), 0x25de, 0xc080) perf_event_open$cgroup(&(0x7f0000000b00)={0x0, 0x80, 0x0, 0x40, 0x1f, 0x7, 0x0, 0xffffffffffffff5b, 0x0, 0x11, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000ac0), 0xa}, 0x4014c, 0x8, 0x1000, 0x5, 0x100000001, 0x0, 0x3eb, 0x0, 0xffff, 0x0, 0xffff}, r5, 0xa, 0xffffffffffffffff, 0x3) r6 = socket(0x9, 0xa, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r6) openat$cgroup_int(r5, &(0x7f0000000c00)='cgroup.max.depth\x00', 0x2, 0x0) 02:12:43 executing program 5: geteuid() getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x40, {0x1, 0x4, 0x5}, 0x90, r0, 0x0, 0x7ff, 0x1000, 0xf05, 0x7, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x80000001, 0x4, 0x1}}, 0xa0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)=@expire={0x45c, 0x18, 0x10, 0x70bd28, 0x25dfdbfd, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x4e20, 0x9, 0x4e21, 0x1, 0xa, 0x20, 0x20, 0xdb, 0x0, r1}, {@in6=@rand_addr=' \x01\x00', 0x4d6, 0x33}, @in6=@private1, {0x20, 0x5, 0x2, 0x4, 0x5, 0xfffffffffffffc01, 0x4, 0x3f}, {0x3, 0xabf7, 0x5, 0x1}, {0x3ff, 0x3, 0x2}, 0x70bd26, 0x3501, 0xa, 0x1, 0x1, 0x14}, 0x4}, [@algo_auth_trunc={0x10f, 0x14, {{'wp512-generic\x00'}, 0x618, 0x200, "e5ecd1b90dad96f2db4c1584056641f17ffe2a626705d4c44f34722b5941ef38f7122fac66adb499da7c4ff309442a7939bb8dcc35d3993ba6713a7fd5da37cdce9e5fe06c233e296d2e9520e02978737d067b207d88f485f633a575bc08101f29d18c6e515344f5d63b032c0f800263cd7178e09b3cfdc97bab272a45addbd75161fcb92452056eb41c583af343464ce27a38d6ec56faeebaca3db89baef330385a0599a4445c35dd9bc83f105c850e247f521ed4f5db5fbef6f99b0c248c1d027f89"}}, @algo_crypt={0xcf, 0x2, {{'kw(seed)\x00'}, 0x438, "dcc3e30c62d117d9e61ce1a7543113cab2c1fe1f0fe2da90322f3f2fff87d6f63964da1966e2ad653eac3bfc4b1153a54bf4dc0d9449e95c81e5f43a7402b6f4b59d4d564a93c2314cbac90c5654f67a8c623666e293478970975eef18bd50a8b2d9f9da87843ffbedee41e7cee00c2c041dd07b7cc419ed3cc3ea5b69918eac2e583a259701e6"}}, @tmpl={0x184, 0x5, [{{@in6=@empty, 0x4d4, 0x32}, 0xa, @in6=@local, 0x3502, 0x4, 0x0, 0x7, 0xff, 0x9, 0x9}, {{@in=@loopback, 0x4d5, 0x2b}, 0xa, @in6=@mcast1, 0x3504, 0x2, 0x0, 0xaf, 0x1, 0x4, 0xff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x3507, 0x1, 0x1, 0x40, 0x4, 0x45fa, 0xee}, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d4, 0x6c}, 0x2, @in=@rand_addr=0x64010100, 0x3505, 0x2, 0x0, 0x9, 0x2, 0x6000, 0x6e5e}, {{@in6=@empty, 0x4d6, 0xc3}, 0xa, @in=@local, 0x3507, 0x0, 0x2, 0x3, 0x81, 0x3, 0x101}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x2b}, 0x9, @in6=@local, 0x3503, 0x1, 0x1, 0x1, 0x3, 0x3, 0x80}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000011}, 0x8d0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x10, 0x1, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9ef}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff8000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x4b4cfc3f, 0x2]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000081) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x400) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000b00)={0x9fe, "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"}) getsockname(0xffffffffffffffff, &(0x7f0000001540)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f00000015c0)=0x80) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001600)={0x15, 0x65, 0xffff, 0x10001, 0x8, '9P2000.u'}, 0x15) getsockname(0xffffffffffffffff, &(0x7f0000001640)=@l2tp={0x2, 0x0, @remote}, &(0x7f00000016c0)=0x80) pipe2$9p(&(0x7f0000001700), 0x4000) socketpair(0x2a, 0x2, 0x80000001, &(0x7f0000001740)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001840)={0x0, @isdn={0x22, 0x6, 0x81, 0x81, 0x7f}, @nfc={0x27, 0x0, 0x0, 0x3}, @can={0x1d, 0x0}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001800)='macvlan1\x00', 0x1, 0x100000000, 0x8c2a}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000019c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0xa0, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x51}, 0x20044010) 02:12:43 executing program 6: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="a8d0f91a1633a1c2eea47794123946e125ea63aefe0c550ead14117271ff3eb72565c4a3b4f60f2909eb4b7b212ec88f0febeb6aaee71e2171426d5a6eade93c17d5cc872189498a23c3c3d6df6af6c4062a72d40bbf5a00834c8b1cd0811510059a", 0x62, r0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = geteuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x5c, 0x7d, 0x1, {{0x0, 0x46, 0x1, 0x1, {0x4, 0x0, 0x1}, 0x40000000, 0x6, 0x6, 0x1f, 0x8, 'keyring\x00', 0x8, 'keyring\x00', 0x0, '', 0x3, 'syz'}, 0x1, '+', r2, 0xee00, r3}}, 0x5c) r4 = syz_open_dev$mouse(&(0x7f0000000380), 0x3, 0x1) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="6c93a566615edaa03eb1d33b0d623bdc1d987642305c1ba2e56c1b999527676f98e238cf00da67b605ad30d1c57242e5e1d8cebadbc891993d84583ac0ca4c908ee02b69c857817c604c18fccd6e14890b3765fdbdeefd175763b34da256335c8615a9437029caa213b5ca28a38afe3443bb42aa0203a6c196c358f74f696f2286f311ffd2e2bf79387d20808ac07a185b92d4b5be4c2dee087708e569fe545509c91df4a39859c27a0c5ac7fe415637a07f4167ab", 0xb5, 0xd9f7, 0x0, 0x2, r4}, &(0x7f0000000400)) keyctl$negate(0xd, 0x0, 0x1a1, r0) keyctl$search(0xa, r1, &(0x7f0000000440)='ceph\x00', &(0x7f0000000480)={'syz', 0x0}, r0) write$P9_RGETLOCK(r4, &(0x7f00000004c0)={0x23, 0x37, 0x2, {0x3, 0x8, 0x8, 0xffffffffffffffff, 0x5, '}@:)!'}}, 0x23) r5 = syz_open_dev$rtc(&(0x7f0000000500), 0x0, 0xc8f40) ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000540)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000580)={0x20, 0x6, 0x0, 'queue1\x00', 0x2}) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r6 = syz_open_dev$hidraw(&(0x7f0000000640), 0x4, 0x1ad00) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000680)={0xb4, "a43d915a1ef183a5029bcd94a6fdaa4625c6beb73d8246828194a189065bda7c185ccf0f42cfba7dc5a8d04df952a55a0a64abf42323186faabad8072111e1cd"}) r7 = geteuid() keyctl$get_persistent(0x16, r7, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r1) 02:12:43 executing program 7: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x7}) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x40040) mq_getsetattr(r0, &(0x7f0000000080)={0xe2, 0x8, 0xffffffffffff88eb, 0x101}, &(0x7f00000000c0)) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x7, 0xa81) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf2b}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4054) io_setup(0x401, &(0x7f0000000300)=0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x100000000, 0x4800) r6 = syz_open_dev$mouse(&(0x7f0000000480), 0x2, 0x101000) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = syz_open_dev$mouse(&(0x7f0000000600), 0x8, 0x400000) io_submit(r4, 0x4, &(0x7f00000007c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x1, r5, &(0x7f0000000380)="d68ba549d97825e78ea25b1cd7456c0d372f134ba022ca2158043cb9dcdb708b41e273159697528ef28b82f93baae10d846cf9864f0aa6ad2389ae4af65500f0ce5fb077072588d8dafd17c6110564a251388777359892db598f42b4eda807d2697e689d29eba82ed9ea792e9cb5737eee285972aacc54c8d107107b58d7d7bf6b3dd643d5a09d32e170c6c8a97ea698c76ca8cd0bf853f5c56251bc78651bc4b74a6eafbb932cb6ff484d8d6e1a8b21ea2e33c8ccef1f1c40c241ea9bc9d7e7b9", 0xc1, 0x100, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0xc, 0x6, r7, &(0x7f0000000500)="cecc620bfec42990510b9663b6b82dcdff3de28bf6822e6efea5ccae71ccd37c09f45b72e460dd78d92b2c291b02770824072d39ae89cf93a6541f42cabf740540bcd8febc418b0a5bd22c2b3779b0df6d17278d10", 0x55, 0x3be6ae93, 0x0, 0x0, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f00000005c0)="49ab22f4651a8b4f5faacfa0dc1bb28466e7f60d8cae88fed0a271d3cca20db523b5ff5637d6f099354663ec16338c58", 0x30, 0x8000, 0x0, 0x1, r8}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x800, r1, &(0x7f0000000680)="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", 0xfc, 0x1f, 0x0, 0x0, r1}]) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000800)) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = syz_open_dev$mouse(&(0x7f0000000900), 0x6, 0x400) io_cancel(r4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0xfff9, r9, &(0x7f0000000840)="3c02ab6ec2447d3bcd952c84626ecaa7c9165205d86dc9a68add123bfb6de62bed2144c8710a3229596e7f52420f78fd5cefef293435152737afa8ab3998af4aacf1009331bb3b62c13118ff98f344f4bc0338f570e24314a13be40554b513e936716683d09a50055836c208e6cac5e62325b73f77aa5eea44a4480e12aa3177812356b6109ffe95cc2bacca659fed903550b971d288e4e1fb42948dd4260ff1e34fc6a05a4013e12f9be18586f0a31c3e0ad17bab99752de13f505af8fdf9", 0xbf, 0x0, 0x0, 0x0, r10}, &(0x7f0000000980)) io_setup(0x1ff, &(0x7f00000009c0)=0x0) io_submit(r11, 0x2, &(0x7f0000000c80)=[&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x3, r10, &(0x7f0000000a00)="695409e4c85aa99b0eff2e2b76efbed622b96dfd95da50b81ae37afcf877bfeda8907b09ef27ea6a1c0b8abb25d430851147a099b07205d146dea3f3835f08de5e513cdb5e77591140797573b71fec06600c520a60e5f32f3c779e565475cf3def4e0859829362dd3bf6a4ddcf5a6bd9ab1066d25f7eba18dba55e0621fcc7b59df0bd99ceba6a3394e7908f811a85936a6d302a4bfe6bd3397e9998bedf210f9878b864404ac328de89f875f8c1f38d0a1ecf608b66852de3c6399534d9d8657822f55f4aece6f30431e61e7de9885b4b6d66c2ab60fb5ce069c6eb389d5ec0d970d72f4bb8fbf6e70f3098865c", 0xee, 0x4, 0x0, 0x0, r5}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0xeab8, r7, &(0x7f0000000b40)="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", 0xfb, 0x3, 0x0, 0x1, r1}]) [ 114.937086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.939096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.941440] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.947857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.953280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.998978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.000991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.005033] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.008768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.011199] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.071587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.077176] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.079842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.081328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.082632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.084048] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.086606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.087844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.091712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.092919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.094378] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.098394] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.099652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.101035] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.106626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.107373] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.120385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.122277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.124517] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.134670] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.136099] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.139465] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.147602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.153346] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.158744] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.180243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.181704] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.185627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.187463] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.190589] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.023544] Bluetooth: hci0: command tx timeout [ 117.086420] Bluetooth: hci1: command tx timeout [ 117.150534] Bluetooth: hci5: command tx timeout [ 117.214383] Bluetooth: hci4: command tx timeout [ 117.214441] Bluetooth: hci2: command tx timeout [ 117.215225] Bluetooth: hci6: command tx timeout [ 117.215888] Bluetooth: hci3: command tx timeout [ 117.278307] Bluetooth: hci7: command tx timeout [ 119.070317] Bluetooth: hci0: command tx timeout [ 119.134209] Bluetooth: hci1: command tx timeout [ 119.198264] Bluetooth: hci5: command tx timeout [ 119.264201] Bluetooth: hci4: command tx timeout [ 119.264351] Bluetooth: hci6: command tx timeout [ 119.264659] Bluetooth: hci2: command tx timeout [ 119.265060] Bluetooth: hci3: command tx timeout [ 119.328562] Bluetooth: hci7: command tx timeout [ 121.119793] Bluetooth: hci0: command tx timeout [ 121.182522] Bluetooth: hci1: command tx timeout [ 121.246251] Bluetooth: hci5: command tx timeout [ 121.310572] Bluetooth: hci2: command tx timeout [ 121.311006] Bluetooth: hci6: command tx timeout [ 121.312100] Bluetooth: hci4: command tx timeout [ 121.312559] Bluetooth: hci3: command tx timeout [ 121.374447] Bluetooth: hci7: command tx timeout [ 123.166402] Bluetooth: hci0: command tx timeout [ 123.231564] Bluetooth: hci1: command tx timeout [ 123.294645] Bluetooth: hci5: command tx timeout [ 123.358296] Bluetooth: hci4: command tx timeout [ 123.358738] Bluetooth: hci3: command tx timeout [ 123.359799] Bluetooth: hci6: command tx timeout [ 123.360259] Bluetooth: hci2: command tx timeout [ 123.423463] Bluetooth: hci7: command tx timeout [ 177.656589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.659021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.662467] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.673899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.687820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.706808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.711492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.713870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.719944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.723488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.747579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.751939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.760659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.769282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.774421] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.849054] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.853579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.857874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.869952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.880109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.109062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.130007] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.132689] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.177587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.187382] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.190032] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.192672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.197691] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.202335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.220336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.260488] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.280648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.281571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.307477] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.309626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.318584] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.333325] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.338618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.340577] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.345701] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.742852] Bluetooth: hci1: command tx timeout [ 179.744072] Bluetooth: hci0: command tx timeout [ 179.870234] Bluetooth: hci2: command tx timeout [ 180.126334] Bluetooth: hci3: command tx timeout [ 180.320219] Bluetooth: hci4: command tx timeout [ 180.383396] Bluetooth: hci5: command tx timeout [ 180.446863] Bluetooth: hci7: command tx timeout [ 180.447107] Bluetooth: hci6: command tx timeout [ 181.790475] Bluetooth: hci0: command tx timeout [ 181.790577] Bluetooth: hci1: command tx timeout [ 181.921177] Bluetooth: hci2: command tx timeout [ 182.174220] Bluetooth: hci3: command tx timeout [ 182.367247] Bluetooth: hci4: command tx timeout [ 182.430274] Bluetooth: hci5: command tx timeout [ 182.494235] Bluetooth: hci6: command tx timeout [ 182.496018] Bluetooth: hci7: command tx timeout [ 183.840493] Bluetooth: hci0: command tx timeout [ 183.840530] Bluetooth: hci1: command tx timeout [ 183.966257] Bluetooth: hci2: command tx timeout [ 184.223244] Bluetooth: hci3: command tx timeout [ 184.415217] Bluetooth: hci4: command tx timeout [ 184.479381] Bluetooth: hci5: command tx timeout [ 184.542328] Bluetooth: hci7: command tx timeout [ 184.542355] Bluetooth: hci6: command tx timeout [ 185.886317] Bluetooth: hci1: command tx timeout [ 185.887385] Bluetooth: hci0: command tx timeout [ 186.014351] Bluetooth: hci2: command tx timeout [ 186.270280] Bluetooth: hci3: command tx timeout [ 186.462286] Bluetooth: hci4: command tx timeout [ 186.526240] Bluetooth: hci5: command tx timeout [ 186.590262] Bluetooth: hci7: command tx timeout [ 186.591335] Bluetooth: hci6: command tx timeout [ 239.988016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.999679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.006332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.018926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.029683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.138594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.144829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.148041] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.160001] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.166756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.311790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.318880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.327804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.354686] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.362700] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.428830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.436425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.438678] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.445417] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.447608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.456908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.457044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.465289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.468831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.483090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.484732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.499429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.527905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.550015] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.552997] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.557425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.561349] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.567440] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.578487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.596563] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.616788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.621581] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.649419] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.661796] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.684643] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.079727] Bluetooth: hci0: command tx timeout [ 242.206918] Bluetooth: hci1: command tx timeout [ 242.463256] Bluetooth: hci2: command tx timeout [ 242.528103] Bluetooth: hci5: command tx timeout [ 242.609602] Bluetooth: hci3: command tx timeout [ 242.654277] Bluetooth: hci4: command tx timeout [ 242.719352] Bluetooth: hci6: command tx timeout [ 242.783822] Bluetooth: hci7: command tx timeout [ 244.126243] Bluetooth: hci0: command tx timeout [ 244.254194] Bluetooth: hci1: command tx timeout [ 244.510406] Bluetooth: hci2: command tx timeout [ 244.574384] Bluetooth: hci5: command tx timeout [ 244.638244] Bluetooth: hci3: command tx timeout [ 244.702683] Bluetooth: hci4: command tx timeout [ 244.768199] Bluetooth: hci6: command tx timeout [ 244.831070] Bluetooth: hci7: command tx timeout [ 246.174370] Bluetooth: hci0: command tx timeout [ 246.302856] Bluetooth: hci1: command tx timeout [ 246.558559] Bluetooth: hci2: command tx timeout [ 246.624178] Bluetooth: hci5: command tx timeout [ 246.686334] Bluetooth: hci3: command tx timeout [ 246.750239] Bluetooth: hci4: command tx timeout [ 246.814290] Bluetooth: hci6: command tx timeout [ 246.878330] Bluetooth: hci7: command tx timeout [ 248.222385] Bluetooth: hci0: command tx timeout [ 248.350228] Bluetooth: hci1: command tx timeout [ 248.607235] Bluetooth: hci2: command tx timeout [ 248.670595] Bluetooth: hci5: command tx timeout [ 248.734194] Bluetooth: hci3: command tx timeout [ 248.798207] Bluetooth: hci4: command tx timeout [ 248.863176] Bluetooth: hci6: command tx timeout [ 248.927360] Bluetooth: hci7: command tx timeout [ 302.642459] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.652351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.656035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.667609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.672286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.722278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.727727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.733668] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.744279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.749091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.846208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.851715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.854065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.861383] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.865092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.937978] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.942507] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.950984] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.956718] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.960105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.962644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.965741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.968346] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.970501] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.972854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.978222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.983905] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.986213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.988666] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.998466] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.003967] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.006413] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.013974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.016558] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.016965] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.020443] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.023685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.037652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.044873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.067200] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.735496] Bluetooth: hci0: command tx timeout [ 304.798440] Bluetooth: hci1: command tx timeout [ 304.991210] Bluetooth: hci2: command tx timeout [ 305.118292] Bluetooth: hci7: command tx timeout [ 305.119179] Bluetooth: hci3: command tx timeout [ 305.119746] Bluetooth: hci6: command tx timeout [ 305.120481] Bluetooth: hci5: command tx timeout [ 305.182250] Bluetooth: hci4: command tx timeout [ 306.782214] Bluetooth: hci0: command tx timeout [ 306.847205] Bluetooth: hci1: command tx timeout [ 307.039245] Bluetooth: hci2: command tx timeout [ 307.166286] Bluetooth: hci3: command tx timeout [ 307.167600] Bluetooth: hci7: command tx timeout [ 307.168029] Bluetooth: hci6: command tx timeout [ 307.169229] Bluetooth: hci5: command tx timeout [ 307.230517] Bluetooth: hci4: command tx timeout [ 308.830213] Bluetooth: hci0: command tx timeout [ 308.894506] Bluetooth: hci1: command tx timeout [ 309.087066] Bluetooth: hci2: command tx timeout [ 309.215726] Bluetooth: hci6: command tx timeout [ 309.216698] Bluetooth: hci5: command tx timeout [ 309.217275] Bluetooth: hci7: command tx timeout [ 309.217694] Bluetooth: hci3: command tx timeout [ 309.280256] Bluetooth: hci4: command tx timeout [ 310.879777] Bluetooth: hci0: command tx timeout [ 310.943211] Bluetooth: hci1: command tx timeout [ 311.134229] Bluetooth: hci2: command tx timeout [ 311.262595] Bluetooth: hci5: command tx timeout [ 311.262659] Bluetooth: hci6: command tx timeout [ 311.263094] Bluetooth: hci7: command tx timeout [ 311.263569] Bluetooth: hci3: command tx timeout [ 311.326223] Bluetooth: hci4: command tx timeout [ 364.917892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.924085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.928104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.936797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.940884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.047444] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.052659] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.064674] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.072127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.081648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.242736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.248477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.257998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.282731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.308585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.313759] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.316036] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.322005] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.331849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.335715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.375661] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.385744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.390795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.397050] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.444378] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.457863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.464771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.469909] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.475797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.478680] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.490152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.499487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.503346] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.504955] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.514377] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.530060] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.553796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.558014] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.560540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.589560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.006475] Bluetooth: hci0: command tx timeout [ 367.134204] Bluetooth: hci1: command tx timeout [ 367.390288] Bluetooth: hci4: command tx timeout [ 367.518875] Bluetooth: hci2: command tx timeout [ 367.583208] Bluetooth: hci3: command tx timeout [ 367.711331] Bluetooth: hci7: command tx timeout [ 367.838695] Bluetooth: hci6: command tx timeout [ 367.838751] Bluetooth: hci5: command tx timeout [ 369.054221] Bluetooth: hci0: command tx timeout [ 369.184175] Bluetooth: hci1: command tx timeout [ 369.438347] Bluetooth: hci4: command tx timeout [ 369.566458] Bluetooth: hci2: command tx timeout [ 369.632171] Bluetooth: hci3: command tx timeout [ 369.758201] Bluetooth: hci7: command tx timeout [ 369.886448] Bluetooth: hci6: command tx timeout [ 369.887433] Bluetooth: hci5: command tx timeout [ 371.103235] Bluetooth: hci0: command tx timeout [ 371.231203] Bluetooth: hci1: command tx timeout [ 371.486532] Bluetooth: hci4: command tx timeout [ 371.614383] Bluetooth: hci2: command tx timeout [ 371.678400] Bluetooth: hci3: command tx timeout [ 371.808155] Bluetooth: hci7: command tx timeout [ 371.934505] Bluetooth: hci5: command tx timeout [ 371.934593] Bluetooth: hci6: command tx timeout [ 373.151599] Bluetooth: hci0: command tx timeout [ 373.279192] Bluetooth: hci1: command tx timeout [ 373.534238] Bluetooth: hci4: command tx timeout [ 373.662341] Bluetooth: hci2: command tx timeout [ 373.726491] Bluetooth: hci3: command tx timeout [ 373.857177] Bluetooth: hci7: command tx timeout [ 373.982215] Bluetooth: hci6: command tx timeout [ 373.983212] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 02:17:52 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff8880096178c8 RCX=ffff888009617968 RDX=1ffff110012c2f24 RSI=ffffffff85c1bac0 RDI=ffffffff816011be RBP=ffff888009617920 RSP=ffff8880096178b0 R8 =0000000000000001 R9 =ffff888009617908 R10=000000000003b145 R11=00000000000043ac R12=ffff888009617990 R13=0000000000000000 R14=ffff888009601bc0 R15=ffff88800d530128 RIP=ffffffff813505db RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5647000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc80579bb0 CR3=00000000329b7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=7269765f31687465765f76656474656e XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888036943780 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff888036944250 RDI=ffff888036943780 RBP=0000000000000000 RSP=ffff88806cf08810 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=0000000000000000 R12=ffff888036944250 R13=0000000000000000 R14=0000000000000003 R15=ffff8880369441d8 RIP=ffffffff81516ab3 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff498a14540 00000000 00000000 GS =0000 ffff8880e5747000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff498bfe810 CR3=000000002e397000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000