Warning: Permanently added '[localhost]:46954' (ECDSA) to the list of known hosts. 2025/05/31 10:53:57 fuzzer started 2025/05/31 10:53:58 dialing manager at localhost:34361 syzkaller login: [ 100.836798] cgroup: Unknown subsys name 'net' [ 100.971182] cgroup: Unknown subsys name 'cpuset' [ 101.023996] cgroup: Unknown subsys name 'rlimit' 2025/05/31 10:54:14 syscalls: 208 2025/05/31 10:54:14 code coverage: enabled 2025/05/31 10:54:14 comparison tracing: enabled 2025/05/31 10:54:14 extra coverage: enabled 2025/05/31 10:54:14 setuid sandbox: enabled 2025/05/31 10:54:14 namespace sandbox: enabled 2025/05/31 10:54:14 Android sandbox: enabled 2025/05/31 10:54:14 fault injection: enabled 2025/05/31 10:54:14 leak checking: enabled 2025/05/31 10:54:14 net packet injection: enabled 2025/05/31 10:54:14 net device setup: enabled 2025/05/31 10:54:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/31 10:54:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/31 10:54:14 USB emulation: enabled 2025/05/31 10:54:14 hci packet injection: enabled 2025/05/31 10:54:14 wifi device emulation: enabled 2025/05/31 10:54:14 802.15.4 emulation: enabled 2025/05/31 10:54:14 fetching corpus: 0, signal 0/0 (executing program) 2025/05/31 10:54:16 starting 8 fuzzer processes 10:54:16 executing program 0: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x2, 0x1, 0x1}}, 0x14) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x1, 0x600, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0x5c}}, 0x40004) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCREATE(r1, &(0x7f0000000240)={0x18, 0x73, 0x2, {{0x80, 0x4, 0x6}, 0x2}}, 0x18) r2 = syz_io_uring_setup(0x4ac3, &(0x7f0000000280)={0x0, 0x9837, 0x1, 0x3, 0x47}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000380)={0x408280, 0x10, 0x2}, &(0x7f00000003c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, 0x1, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2774}]}, @NFQA_PAYLOAD={0x50, 0xa, "538e45ba4517212d15fd501c32ad5dd5009222a86d64d162bea0dab02cd7104c3dfea3b3c0aaaa8bb2854f98dd5159c35fe129a2b4f33c35714544d900139386dbf6f8499294b98dcba87262"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_EXP={0xbc, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x80000001}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8001}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3f}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xa32}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0xcfbf0ed0794bcc4a}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}]}, @NFQA_PAYLOAD={0xff, 0xa, "12c7d0ff96ae1b56baa22b3ee3cb2c48c41dad30b27c8e55a30825d6794694f0746d73c82a370415136d0c8ba42f6d5bc28ab97b9e4bf3505602c23864a69e629af5738563f8b749599f8e9d5a26e442db2f955587afdb39a1ec8f1ea1e87df05d349a6d549d14fe0336c93be109588449e9bfbc79473479a11d36546de49bb521aca9c4a135535c57078d7a7a829023c47dcc6bae77f1f25960f03ed634e94b8d6d5d66b4eaa4065c2594e44797654e8cd5721918e872e708a3234b8db3e6aa91882d009014f6e9e2e2266a72001fd4df9eeef91f6bc89d2b06f62531d58e87b92689d01036d3631ecc5fac1ab45669de50e9751f3965f6061b2a"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffd}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40080) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'syztnl0\x00', r7, 0x2f, 0x4, 0x5, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x10, 0x7, 0x3, 0x7f}}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000900)) write$P9_RUNLINKAT(r4, &(0x7f0000000940)={0x7, 0x4d, 0x2}, 0x7) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000980)=""/79) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000a00)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) mount$9p_fd(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x6d6ecccdcce3e165, &(0x7f0000000b40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x63, 0x32, 0x65, 0x5f, 0x35, 0x62, 0x35], 0x2d, [0x66, 0x32, 0x65, 0x63], 0x2d, [0x38, 0x36, 0x37, 0x34], 0x2d, [0x39, 0x36, 0x33, 0x35], 0x2d, [0x65, 0x61, 0x65, 0x38, 0x62, 0x64, 0x32, 0x30]}}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@fsname={'fsname', 0x3d, ':['}}, {@subj_user={'subj_user', 0x3d, 'pptp\x00'}}, {@seclabel}]}}) 10:54:16 executing program 1: syz_io_uring_setup(0x709b, &(0x7f0000000000)={0x0, 0xb9c6, 0x2, 0x2, 0x38f}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x2}, 0x6) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x200040d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x8eede027da14a8e4) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000440)={0x1f, 0x6e, &(0x7f00000003c0)="9f6f930815dbf8237c39b7f60bc8373f3f5936422f844c7eb4e269333672c7c810eb7e538bacc1dcd659bb1acebdb7a551cfc0c5704f158577166348e4e93920a9577145bd81a1ad8cb2ee871726dd57b61598945d95af2f99ba804cbb7af04d5031ce748ea68d098e3226c06055"}) syz_io_uring_submit(0x0, r1, &(0x7f0000000480)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000ec0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000500)={0x964, 0x1, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x1}, 0x2, 0x3, 0x7, 0x9, 0x17, 'syz1\x00', "9c36bec743938afe6b681de8fcb8420c70bcaaca10d8e835bdd4eb5026a193cf", "b52d81f1fba38d181057a7038c0a02106c1babd9717770410b605dec55015a3b", [{0x58e, 0x3, {0x1, 0x7}}, {0x1df9, 0x3, {0x2, 0x8000}}, {0xff81, 0x2, {0x1, 0x7}}, {0x0, 0x8, {0x3, 0x20}}, {0x0, 0x7ff, {0x1, 0x6}}, {0x1, 0x5, {0x1, 0x1}}, {0x8, 0x0, {0x0, 0x1ff}}, {0x7669, 0x10c1, {0x0, 0xffff}}, {0x3ff, 0xfffa, {0x3, 0x3800}}, {0xffff, 0x3, {0x3, 0x80000}}, {0x4, 0x5, {0x2, 0x20}}, {0x1, 0x4a7, {0x0, 0x98e}}, {0x400, 0xc82, {0x2, 0x20}}, {0x8000, 0x8a3f, {0x0, 0x2}}, {0xe3c, 0x3, {0xdecc0d960a9c4cb7, 0x7}}, {0x1, 0x15d, {0x1, 0x632}}, {0x6, 0x2, {0x1, 0x5}}, {0x40, 0x5d31, {0x2, 0x7fff}}, {0x3, 0x18c3, {0x1, 0x6}}, {0x3ff, 0xc10, {0x3, 0x800}}, {0x9, 0x8, {0x2, 0x7ff}}, {0xcd6, 0x2, {0x1, 0x1ff}}, {0x4, 0x8, {0x3, 0x376}}, {0xf80, 0xff80, {0x1, 0x4}}, {0xf4, 0x101, {0x3, 0x1}}, {0x9, 0x1000, {0x1, 0x58e}}, {0x7, 0x6, {0x0, 0x9}}, {0x7fff, 0x1, {0x0, 0x7c42}}, {0x2, 0x1, {0x2, 0x3f}}, {0xfffd, 0x5, {0x0, 0x8}}, {0x0, 0x1}, {0x0, 0x2a, {0x3}}, {0x1f, 0xfffd, {0x2, 0x400}}, {0x5, 0x6, {0x2, 0x2}}, {0x3f, 0x1, {0x3, 0x7fffffff}}, {0x8, 0x8d, {0x1, 0x200}}, {0x8001, 0x8, {0x3, 0x9}}, {0x14, 0x101, {0x2, 0x3}}, {0xff80, 0x6, {0x1, 0x100}}, {0x3f, 0x1f, {0xd4a9b5971752ac41}}]}}}, {{0x254, 0x1, {{0x1, 0x200}, 0x27, 0xcc, 0x1f, 0x1, 0x25, 'syz1\x00', "eeac44578f8eb27b18da8b0181370682e990e7b56bb1cfc804d4284baaf3705a", "564a374a59a2857e01eb51cf2be65c237d155a28c81a542a83135d750a17904a", [{0x1ff, 0x7, {0x2, 0xd993}}, {0x2, 0x81, {0x3, 0xbd}}, {0x4, 0x4, {0x1, 0x10000}}, {0x9, 0x5, {0x1, 0x3}}, {0x3, 0x5b, {0x0, 0x2}}, {0x9, 0xfcc8, {0x2, 0x80000000}}, {0x3, 0x7, {0x2, 0x4}}, {0x8, 0x43, {0x0, 0xe368885}}, {0x1000, 0xa5, {0x3, 0x9}}, {0xe89, 0x9, {0x0, 0x3f}}, {0x5, 0x905, {0x2, 0xbc}}, {0xba9d, 0x20, {0x1, 0xfffffc00}}, {0x8, 0x894, {0x1, 0x3}}, {0x4db0, 0x3, {0x3, 0x5}}, {0x0, 0x3f, {0x2, 0x8001}}, {0x5e6, 0x0, {0x3, 0x3}}, {0x0, 0x1000, {0x1}}, {0x4, 0x498, {0x2}}, {0xe3, 0x6, {0x0, 0x5}}, {0x3f, 0x20, {0x1, 0x8}}, {0x2, 0x6, {0x2, 0x3}}, {0x7, 0xa3, {0x3, 0x25}}, {0xfffd, 0xff, {0x0, 0x9}}, {0x0, 0x0, {0x2, 0x2}}, {0xffff, 0x7, {0x0, 0x715593ff}}, {0x80, 0x5, {0x3, 0x80000000}}, {0x4, 0xa5, {0x1, 0x6}}, {0x477, 0xb8, {0x2, 0xa8b}}, {0x1, 0xeadf, {0x1, 0x3}}, {0xe113, 0xff, {0x1, 0x8}}, {0x4, 0x4, {0x0, 0x7}}, {0xdd, 0x6, {0x3, 0x4}}, {0x800, 0x1ff, {0x3, 0x10000}}, {0x0, 0x0, {0x0, 0x7}}, {0x400, 0x100, {0x1, 0x819a}}, {0x1000, 0x5, {0x2, 0x200}}, {0x0, 0x7fff, {0x2, 0x5b3}}, {0x1000, 0x7fff, {0x3, 0x3}}, {0x9, 0x9, {0x2, 0xaf}}, {0xe45, 0x7fff, {0x1, 0xffff}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x0, 0x0, 0xffff, 0x1ff, 0x26, 'syz0\x00', "e033a2489e504ec83eb01a255bc44a1729f665abcf585150f40ff7218b99ac12", "24d0e60c9970091570ec664ffa5d8c39dc9df7cb6157531061454d87835cc62b", [{0x2, 0xee82, {0x0, 0x6}}, {0x4b74, 0xfffd, {0x2, 0x134074d2}}, {0x7, 0x4c69, {0x2, 0x280}}, {0x6, 0x6, {0x3, 0x3}}, {0x1, 0x6, {0x0, 0x3}}, {0x400, 0x7, {0x1}}, {0x80, 0x8, {0x3, 0x2}}, {0xf3f0, 0x1000, {0x0, 0x3}}, {0x1, 0x0, {0x0, 0x16865d46}}, {0xf001, 0x5, {0x3, 0x9}}, {0x200, 0x9, {0x1, 0x3}}, {0x9, 0x8000, {0x2, 0x3}}, {0x2, 0x9, {0x2, 0x6}}, {0x4, 0x2, {0x4f930fcb4575503a, 0x5}}, {0x1, 0x44a2, {0x2, 0x10000}}, {0x20, 0x400, {0x1}}, {0x101, 0x9, {0x2, 0xff}}, {0x7, 0x100, {0x2, 0x3ff}}, {0x800, 0x2, {0x1, 0x1}}, {0x1, 0x2, {0x2, 0x2}}, {0xfffc, 0x7, {0x2, 0x20}}, {0x8000, 0x1ff, {0x3, 0x9}}, {0x7, 0x5, {0x0, 0x2}}, {0xffff, 0x8, {0x0, 0x81}}, {0x1, 0x0, {0x2, 0x2}}, {0x6, 0x4, {0x2, 0x4c90}}, {0x875, 0x9, {0x0, 0x1}}, {0x8, 0xffff, {0x2, 0x10001}}, {0x4, 0xfeff, {0x2, 0x5}}, {0xee, 0x100, {0x0, 0x5ff}}, {0x20, 0xfffa, {0x2, 0x7fff}}, {0x6, 0x4, {0x2, 0x2}}, {0x7, 0x218, {0x2}}, {0xe9, 0x1, {0x1, 0x8000}}, {0xffff, 0x6, {0x2, 0x3}}, {0x101, 0x7fff, {0x0, 0x99d}}, {0x37, 0xd1, {0x3, 0x4c}}, {0x7, 0x12d, {0x3}}, {0x200, 0x1, {0x0, 0xffffff2c}}, {0xfffd, 0x8, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xfff}, 0x3, 0x0, 0x8c, 0x7f, 0xf, 'syz0\x00', "9cab2b414a896737014a3f47d12e812485f49ce7f4607277c0afcacf8c5747c8", "9b2853d81765cbe4dcd47ede241c0cd2f2185975c5e211f47bff77b6542e2959", [{0x0, 0x6, {0x0, 0xff}}, {0x22, 0x6, {0x3}}, {0x1, 0x6, {0x1}}, {0xff7f, 0x848, {0x3, 0x9}}, {0x62d4, 0x7, {0x0, 0x1}}, {0x5b27, 0x3, {0x0, 0x401}}, {0x4, 0x1000, {0x2, 0x4}}, {0x2, 0x6, {0x2, 0x5}}, {0x7b9, 0x6503, {0x0, 0x20}}, {0x5, 0x3f, {0x3, 0x800}}, {0x1000, 0xf0f4, {0x3, 0x3}}, {0x10ea, 0x7ff, {0x3, 0x3f}}, {0x5, 0x400, {0x0, 0x2}}, {0x6, 0x33, {0x3, 0x769}}, {0xc2, 0xff, {0x3, 0x1}}, {0xfff, 0x5, {0x0, 0x1}}, {0x0, 0xc815, {0x1, 0x768}}, {0x4, 0x20, {0x1, 0xe1}}, {0xe27c, 0x9a}, {0xf0ae, 0x771f, {0x2, 0xdf}}, {0x401, 0x20, {0x1, 0x1f}}, {0x7, 0x0, {0x3, 0x10001}}, {0x8, 0x9e, {0x3, 0x99}}, {0x0, 0x2a7, {0x2, 0x2}}, {0x1, 0xfffc, {0x3, 0x6}}, {0x3, 0x5, {0x1, 0x9}}, {0x8, 0xb4f4, {0x3, 0x3}}, {0xff00, 0x100, {0x1, 0x1}}, {0xfc00, 0x800, {0x1, 0x1}}, {0xec63, 0xffff, {0x1, 0x47cc}}, {0x0, 0x6, {0x2, 0x9}}, {0x5, 0x2, {0x1, 0x2}}, {0x1, 0x7fff, {0x3, 0x7}}, {0x800, 0x1, {0x0, 0x9}}, {0x80, 0xcdd1, {0x2}}, {0x4, 0x4, {0x5, 0x1}}, {0x81, 0x2, {0x3, 0x80}}, {0x3, 0x1, {0x1}}, {0x23, 0x4, {0x0, 0x7}}, {0x4, 0x9, {0x2, 0x1}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x1}, 0x4800) syz_genetlink_get_family_id$smc(&(0x7f0000000f00), r4) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xb518a70fae88d04e}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x50001) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001200)={'gre0\x00', &(0x7f0000001180)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x1, 0x2, {{0x13, 0x4, 0x0, 0x2, 0x4c, 0x68, 0x0, 0xc2, 0x2f, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x12, 0x3, [{0x2, 0xc, "79e23b858760ea50ac1c"}]}, @ssrr={0x89, 0x23, 0x39, [@private=0xa010100, @broadcast, @broadcast, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001340)={'syztnl1\x00', &(0x7f0000001240)={'syztnl0\x00', r5, 0x1, 0x700, 0x81, 0x1f, {{0x2b, 0x4, 0x3, 0x0, 0xac, 0x68, 0x0, 0x0, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x4, 0x0}, {[@timestamp={0x44, 0x24, 0x25, 0x0, 0x2, [0xff, 0xda, 0x4, 0x200, 0xfff, 0x5, 0x7ff, 0x7]}, @cipso={0x86, 0x3f, 0x0, [{0x0, 0xc, "7e006ac83495ee54faaa"}, {0x5, 0x5, "1a881b"}, {0x5, 0x12, "6595f1f6c46b8579aa09cb0c6cee1479"}, {0x1, 0x9, "123b2825a97ba8"}, {0x0, 0x4, 's '}, {0x6, 0x9, "0218acf5c1ce53"}]}, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0x5, [{@broadcast}, {@multicast2, 0xc824}]}, @timestamp_addr={0x44, 0xc, 0x82, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}]}, @rr={0x7, 0xf, 0x74, [@loopback, @private=0xa010102, @private=0xa010101]}, @ra={0x94, 0x4}]}}}}}) r6 = io_uring_setup(0x6eee, &(0x7f0000001380)={0x0, 0x5445, 0x8, 0x0, 0x72}) syz_io_uring_setup(0x6782, &(0x7f0000001400)={0x0, 0xd54f, 0x1, 0x2, 0x35a, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) syz_io_uring_setup(0x2c0d, &(0x7f0000001500)={0x0, 0x269c, 0x20, 0x2, 0x15b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001580), &(0x7f00000015c0)) pipe2(&(0x7f0000001600)={0xffffffffffffffff}, 0x80800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001680)={'syztnl2\x00', &(0x7f0000001640)={'syztnl1\x00', r5, 0x7800, 0x700, 0x6, 0x3c64800, {{0x6, 0x4, 0x0, 0x25, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x3, 0x5a}]}}}}}) 10:54:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xff, 0x40040) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x9, 0x8, 0x14, 0x200, 0x800, 0x7}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/77) r1 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='-{&\x00', 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='big_key\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', r1}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/17) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000280)=""/116) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) keyctl$negate(0xd, r1, 0x8, r1) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xd9cf76c5171f9375}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x1000, 0x81, 0xd7, 0x2, 0x7fff]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c090}, 0x4000000) r4 = syz_open_dev$evdev(&(0x7f00000006c0), 0x6, 0x20001) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000700)=""/154) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48884}, 0x20000010) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000900)={0x17, 0x0, &(0x7f00000008c0)}) r6 = request_key(&(0x7f0000000940)='user\x00', &(0x7f0000000980)={'syz', 0x3}, &(0x7f00000009c0)='](-\x00', r1) keyctl$instantiate(0xc, r6, &(0x7f0000000a00)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '+-:', 0x20, 0x2}, 0x2d, 0xfffffffffffffffd) 10:54:16 executing program 3: io_uring_setup(0x301f, &(0x7f0000000000)={0x0, 0x8def, 0x1, 0x1, 0x39b}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000080)=""/115) r0 = inotify_init1(0x80800) inotify_rm_watch(r0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000100)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000180)) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000001c0)={0xffff, 0x10001}) ioctl$SNAPSHOT_FREE(r1, 0x3305) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000240)=""/46) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x800) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f00000002c0)) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x73, 0x1, {{0x1, 0x1, 0x3}, 0x6}}, 0x18) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000340)=""/103) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0xa90) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x800) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000400)={0xc33, 0x0, 0x40, 0xffffffff, 0x82c4, 0x3}) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000440)=""/233) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) [ 118.956375] audit: type=1400 audit(1748688856.644:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:54:16 executing program 4: r0 = socket(0x3, 0x80000, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x15, 0x1}, 0x7) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000200)={0x1f, 0x6, 0x4, 0x4, 0x533, 0x5}) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x2, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x40001) getgid() r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x1, 0x501000) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000400)=""/237) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = getuid() mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@msize={'msize', 0x3d, 0x64a}}, {@afid={'afid', 0x3d, 0x2}}, {@access_uid={'access', 0x3d, 0xee00}}, {@access_user}, {@afid={'afid', 0x3d, 0x79a}}, {@privport}, {@msize={'msize', 0x3d, 0xbc2}}, {@msize={'msize', 0x3d, 0x7}}], [{@fowner_gt={'fowner>', r5}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x31}}, {@dont_measure}, {@fowner_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x35, 0x32, 0x36, 0x65, 0x61, 0x32, 0x62], 0x2d, [0x34, 0x30, 0x38, 0x64], 0x2d, [0x65, 0x64, 0x33, 0x64], 0x2d, [0x32, 0x39, 0x66, 0xbe309695cf46982], 0x2d, [0x66, 0x61, 0x65, 0x64, 0x61, 0x37, 0x35, 0x37]}}}]}}) r6 = getuid() sendmsg$nl_xfrm(r2, &(0x7f0000000c80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)=@report={0x350, 0x20, 0x4, 0x70bd27, 0x25dfdbfe, {0x2b, {@in=@empty, @in=@broadcast, 0x4e20, 0x33eb, 0x4e21, 0x2, 0xa, 0x80, 0x0, 0x2c, 0x0, r6}}, [@algo_comp={0x95, 0x3, {{'lzs\x00'}, 0x268, "a26988ac8e7f7131cab59189ece88bc697c481e29731b7776a0081c6786956b593b4dba79f2fd5d38b4ac79c0c2f6cc2101be2dc8dac516e125c13586918cc8b46f00d1106f793491a9e1612b1"}}, @algo_aead={0x10a, 0x12, {{'authenc(rmd256,ctr-serpent-sse2)\x00'}, 0x5f0, 0x60, "c1a825157e068038dc43b46665ee931697fbbbdc7f6327f02d100a29e1e1170124c32e39dfa5cec5b2a5577edf970ba6d566b61a967d9fb5c0ab979d2890590a53a8811d8069973bf1898a438024a8cf2e891b74d2b96769520c42cb0b95afcbeaf048c305b820d10facb74530429672a28563016cd1d3f601a9e55cacdc5135d6476c71ed0a7cf0abd8f1e9f0887182c7d1fd0c6535685c67046af049c67224c14a67014d527d78643a4318dedb7858785404cae1e013ff7ae2638ff7fa"}}, @user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}}, @migrate={0x134, 0x11, [{@in6=@mcast1, @in=@broadcast, @in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x6c, 0x1, 0x0, 0x3501, 0x2, 0x2}, {@in6=@local, @in6=@empty, @in6=@private2, @in6=@mcast2, 0x3c, 0x2, 0x0, 0x3501, 0xa, 0x2}, {@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@empty, @in6=@empty, 0xff, 0x0, 0x0, 0x3503, 0x2, 0x2}, {@in6=@loopback, @in=@rand_addr=0x64010100, @in=@loopback, @in=@local, 0xff, 0x4, 0x0, 0x0, 0x2, 0xa}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) write$P9_RSYMLINK(r3, &(0x7f0000000cc0)={0x14, 0x11, 0x2, {0x8, 0x1, 0x2}}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e00)=@delpolicy={0x21c, 0x14, 0x20, 0x70bd2a, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x1f, 0x4e24, 0x3, 0x2, 0x0, 0x20, 0x21, 0x0, r6}, 0x6e6bbf, 0x2}, [@replay_thresh={0x8, 0xb, 0x10000}, @extra_flags={0x8, 0x18, 0x101}, @policy={0xac, 0x7, {{@in=@local, @in6=@mcast1, 0x4e23, 0x800, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x2e, 0x0, r5}, {0x3, 0x6e1, 0xffffffffffff0000, 0xa6a, 0xe6, 0x40, 0x9, 0x9}, {0x3ff, 0x8f81, 0x8b42, 0x7f}, 0x7f, 0x6e6bb4}}, @srcaddr={0x14, 0xd, @in=@multicast2}, @proto={0x5, 0x19, 0x2b}, @algo_auth={0xd7, 0x1, {{'xxhash64\x00'}, 0x478, "75a11afd020eabf1331016ef12219f1bfb2dec78bf076fc79d5c984078ed0f5b0341bd3b88d24672d53299554114c570d46f1d9e2f7100f55b08aabcd0ad3ff36095d690fc1a09b3741124c56e62856e2bba5b1808ab9bd884c51f2a4e0ce2f58f847d84e770d44ae539becc7d8bef6272c298b14b896e3417376eb68d185d6d2d463c299beacda4b2c0a2786ba320"}}, @encap={0x1c, 0x4, {0x2, 0x4e20, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x27}}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20008050}, 0x20040000) 10:54:16 executing program 6: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RREADDIR(r0, &(0x7f0000000080)={0x68, 0x29, 0x1, {0xfffffffa, [{{0x40, 0x4, 0x3}, 0xfa54, 0x40, 0x7, './file0'}, {{0x2, 0x4, 0x8}, 0x4, 0x1, 0x7, './file0'}, {{0x10, 0x2, 0x6}, 0x9, 0xa7, 0x7, './file0'}]}}, 0x68) write$P9_RRENAMEAT(r0, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x8, 0x2, 0x1}}, 0x14) syz_io_uring_setup(0x7557, &(0x7f0000000180)={0x0, 0x1559, 0x20, 0x0, 0x2b8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r2 = syz_io_uring_setup(0x5e5c, &(0x7f0000000280)={0x0, 0x868e, 0x2, 0x1, 0x289}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = socket$netlink(0x10, 0x3, 0x4) syz_io_uring_submit(r1, r3, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r4, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000000400)=[{0xb8, 0x10b, 0x4, "da7809c17ff6147b283816e7178075d3c4fcc2e422b454946feb680a82cbf868b0e32d69be98d280cee5952f1127c39522c07c976a8aa6c0834a175cfb0d94047197d8f910eed05244532bad6fd7d42b1acb0e8766ce8c10d224c73bd87b06f1b03984312362177e77ac0376a30c9a4e259963ed7d6cfa366e4727117451d31c9148fa6767a426b2663cb6463d539874b265c117f9e7176d8fcb29cb7a2a030b22c2e2"}, {0x48, 0x10d, 0x8, "967c8daef2733dda0e1484c6f10d371a8f7503e015385c864f9e0dd7bc4598b488d0afe5b10dfeb09ccff48ceab656a28fc5fde20c"}, {0x10, 0x102, 0x4c1e}, {0x80, 0x112, 0x8, "14477dff1d66049e5f4b7ef7a60af84121eb1fbc516ef4a4e477e0e10e0ba481f88af46dda1a07ebe3ac7626dc6c6bf71eaf7aa06f4663c430dc6993d6dac23ee036875295b26ca2af78409f7e4075a086079ccc3f44714e10ddb89c273f2240e15935dab43fa8f4ad270e89e6c83832"}, {0x18, 0x116, 0xffff, "4627ef1a"}], 0x1a8}, 0x0, 0x0, 0x1}, 0x5) write$P9_RXATTRCREATE(r0, &(0x7f0000000640)={0x7, 0x21, 0x1}, 0x7) write$P9_RAUTH(r0, &(0x7f0000000680)={0x14, 0x67, 0x1, {0x8, 0x0, 0x2}}, 0x14) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000006c0)={0xf392, 0x8001, 0x5bf, 0x8, 0x3, 0x5}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000700)=""/240) r5 = io_uring_setup(0x7b77, &(0x7f0000000800)={0x0, 0xbede, 0x0, 0x1, 0x2d1, 0x0, r2}) syz_io_uring_setup(0x50ca, &(0x7f0000000880)={0x0, 0x9460, 0x4, 0x0, 0x2d2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r6 = add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @desc2}, &(0x7f0000000a00)={0x0, "b4a13d1075aca658cae5b488b95484140d854a281216849e604d5a63054fba099940c94fbdd0be59a7c34ce864c770e1ddfe6e04badd4f796c4df2c50780e77a", 0x2e}, 0x48, 0xfffffffffffffff9) r7 = request_key(&(0x7f0000000a80)='user\x00', &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000b00)='\x00', 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r6, 0x0, r7, 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)=@newspdinfo={0x1c, 0x24, 0x0, 0x70bd2d, 0x25dfdbfd, 0x3, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8004) 10:54:16 executing program 5: r0 = getpgid(0x0) getpgid(r0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x47c, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFQA_PAYLOAD={0xce, 0xa, "5b7ffa232ed4f86e442e135827264f5a6dd1074e98657214e4973ae34b4f5f1c72331fa116f26e87ceb518492905d7d4552dd6fc7f54d45e620c30bf3189e31343c58f0ee7a878c249fb307ac63bf8b1b6e9ea4b6ab919a75ea5a8002f4002e75a4c784051626fcd7c0b92ff315f589c6145b4f891f20cd78bcb7c2c809133fcfb76a1b8297127e20aa7355e592a8a697e3bf50f9a585cb3119b7ba769132e427c0f5726cd46683142666f0fb031b334e52562b0e138b06b9ca2a0d09b44403beaec439c2435a242e132"}, @NFQA_PAYLOAD={0x97, 0xa, "116c76a3481f962801f5f5e19d5f1386b1ec219770d016a2893501b9dc487114135d7a3ffc91a3f78071dc246b521c247b30ac319ad62c05a34bd1d45890b76a0a18ef782274b03dc9a7d300420ff727d20bab0a7bd14164b0bd1de7c7dcab51d17f5c191d72f33bdd0d4825be1dec3997a6c3cc545fd3df5882b2dbabfffbae3b9e40364e6343619bc2f7d30014e49e4f338e"}, @NFQA_EXP={0x1ac, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5b5d053aeaf0e9d1}}]}, @CTA_EXPECT_NAT={0x108, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xfc, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa90}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}]}]}, @NFQA_CT={0x138, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_LABELS_MASK={0xc, 0x17, [0x3, 0x4]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_MASTER={0x28, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xc4, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xe0, 0x6}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}]}}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c011) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880) write$cgroup_type(r2, &(0x7f0000000680), 0x9) r3 = socket(0x2, 0x0, 0x7fff) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1b4, 0x2, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x138, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20044004}, 0x81) waitid(0x2, r0, &(0x7f0000000940), 0x8, &(0x7f00000009c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000a80)=0xdf6c, 0x4) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000ac0), &(0x7f0000000b00)=0x10) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) r4 = gettid() syz_open_procfs$userns(r4, &(0x7f0000000bc0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c00)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2) pipe2$9p(&(0x7f0000000cc0)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x20a040, &(0x7f0000000d00)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@privport}, {@cache_fscache}, {@uname={'uname', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x88}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_loose}], [{@smackfsroot={'smackfsroot', 0x3d, '\xff\xff'}}]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r6, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) waitid(0x0, r4, 0x0, 0x4, &(0x7f0000000e80)) 10:54:16 executing program 7: keyctl$search(0xa, 0x0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffff9) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)=@keyring) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x15) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg1\x00'}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000480)={'wg1\x00'}) mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2800, &(0x7f0000000500)={0xe0, 0xf2, 0x180000}, 0x20) pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$9p(r4, &(0x7f0000000580)="797f30585e11f10f8b12ed5d882284958ba8088cf3", 0x15) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000005c0)=[0x7f, 0x6]) write$P9_RFSYNC(r4, &(0x7f0000000600)={0x7, 0x33, 0x1}, 0x7) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000640)) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000680)=""/180) [ 120.424279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.426554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.428367] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.433563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.436258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.493698] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.497197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.501654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.505266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.510849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.535811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.549860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.555913] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.560174] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.563563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.571566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.574220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.577155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.598353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.605570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.612637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.613652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.614550] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 120.616981] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.620295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.629203] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.630250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.631471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 120.632084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.635063] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 120.640509] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.655780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.656935] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.660115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.661246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.668384] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 120.670349] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 120.672027] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.696194] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.709923] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.504017] Bluetooth: hci0: command tx timeout [ 122.568055] Bluetooth: hci1: command tx timeout [ 122.631950] Bluetooth: hci3: command tx timeout [ 122.695506] Bluetooth: hci4: command tx timeout [ 122.758838] Bluetooth: hci2: command tx timeout [ 122.822580] Bluetooth: hci7: command tx timeout [ 122.822657] Bluetooth: hci6: command tx timeout [ 122.823964] Bluetooth: hci5: command tx timeout [ 124.550844] Bluetooth: hci0: command tx timeout [ 124.614466] Bluetooth: hci1: command tx timeout [ 124.678663] Bluetooth: hci3: command tx timeout [ 124.742621] Bluetooth: hci4: command tx timeout [ 124.806532] Bluetooth: hci2: command tx timeout [ 124.870755] Bluetooth: hci5: command tx timeout [ 124.871254] Bluetooth: hci7: command tx timeout [ 124.872246] Bluetooth: hci6: command tx timeout [ 126.598958] Bluetooth: hci0: command tx timeout [ 126.662843] Bluetooth: hci1: command tx timeout [ 126.726524] Bluetooth: hci3: command tx timeout [ 126.791582] Bluetooth: hci4: command tx timeout [ 126.854502] Bluetooth: hci2: command tx timeout [ 126.918546] Bluetooth: hci7: command tx timeout [ 126.919509] Bluetooth: hci6: command tx timeout [ 126.919521] Bluetooth: hci5: command tx timeout [ 128.647281] Bluetooth: hci0: command tx timeout [ 128.710565] Bluetooth: hci1: command tx timeout [ 128.775465] Bluetooth: hci3: command tx timeout [ 128.838699] Bluetooth: hci4: command tx timeout [ 128.902596] Bluetooth: hci2: command tx timeout [ 128.966541] Bluetooth: hci5: command tx timeout [ 128.967851] Bluetooth: hci6: command tx timeout [ 128.968094] Bluetooth: hci7: command tx timeout [ 180.508605] syz-executor.3 (284) used greatest stack depth: 25072 bytes left [ 183.086355] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.095243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.099170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.114278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.123260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.268669] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.271995] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.277990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.306277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.308375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.313774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.322691] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.324072] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.328045] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.331116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.334888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.345509] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.363591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.381203] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.385901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.389978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.398895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.409499] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.426112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.449795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.495458] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.501968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.519837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.525373] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.530846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.559911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.564295] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.574009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.599824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.609897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.687816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.725898] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.730114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.746660] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.754046] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 185.223471] Bluetooth: hci0: command tx timeout [ 185.414567] Bluetooth: hci3: command tx timeout [ 185.415625] Bluetooth: hci1: command tx timeout [ 185.608571] Bluetooth: hci5: command tx timeout [ 185.609596] Bluetooth: hci4: command tx timeout [ 185.670573] Bluetooth: hci2: command tx timeout [ 185.799481] Bluetooth: hci6: command tx timeout [ 185.862499] Bluetooth: hci7: command tx timeout [ 187.271008] Bluetooth: hci0: command tx timeout [ 187.462661] Bluetooth: hci1: command tx timeout [ 187.463689] Bluetooth: hci3: command tx timeout [ 187.656666] Bluetooth: hci4: command tx timeout [ 187.657585] Bluetooth: hci5: command tx timeout [ 187.719462] Bluetooth: hci2: command tx timeout [ 187.846629] Bluetooth: hci6: command tx timeout [ 187.910867] Bluetooth: hci7: command tx timeout [ 189.318588] Bluetooth: hci0: command tx timeout [ 189.510546] Bluetooth: hci1: command tx timeout [ 189.511148] Bluetooth: hci3: command tx timeout [ 189.702558] Bluetooth: hci4: command tx timeout [ 189.703083] Bluetooth: hci5: command tx timeout [ 189.766624] Bluetooth: hci2: command tx timeout [ 189.895435] Bluetooth: hci6: command tx timeout [ 189.958707] Bluetooth: hci7: command tx timeout [ 191.366703] Bluetooth: hci0: command tx timeout [ 191.558519] Bluetooth: hci1: command tx timeout [ 191.559022] Bluetooth: hci3: command tx timeout [ 191.751539] Bluetooth: hci5: command tx timeout [ 191.752039] Bluetooth: hci4: command tx timeout [ 191.814905] Bluetooth: hci2: command tx timeout [ 191.942757] Bluetooth: hci6: command tx timeout [ 192.006490] Bluetooth: hci7: command tx timeout [ 245.227047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.231032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.240948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.252896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.257840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.262084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.266002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.273867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.280721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.284064] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.285913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.309348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.327896] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.336743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.373992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.375933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.376557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.388606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.439875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.445183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.451502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.452853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.474650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.493282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.553027] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.563273] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 245.589727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.604506] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.612915] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.618562] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.622331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.623161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.636723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.648364] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 245.649715] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.655687] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.655965] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.660216] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.674850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.701666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.366769] Bluetooth: hci1: command tx timeout [ 247.430684] Bluetooth: hci2: command tx timeout [ 247.430958] Bluetooth: hci0: command tx timeout [ 247.494489] Bluetooth: hci3: command tx timeout [ 247.686530] Bluetooth: hci4: command tx timeout [ 247.750469] Bluetooth: hci7: command tx timeout [ 247.814514] Bluetooth: hci5: command tx timeout [ 247.815055] Bluetooth: hci6: command tx timeout [ 249.414784] Bluetooth: hci1: command tx timeout [ 249.479357] Bluetooth: hci2: command tx timeout [ 249.479685] Bluetooth: hci0: command tx timeout [ 249.543703] Bluetooth: hci3: command tx timeout [ 249.735502] Bluetooth: hci4: command tx timeout [ 249.799592] Bluetooth: hci7: command tx timeout [ 249.863486] Bluetooth: hci5: command tx timeout [ 249.863687] Bluetooth: hci6: command tx timeout [ 251.462500] Bluetooth: hci1: command tx timeout [ 251.527594] Bluetooth: hci2: command tx timeout [ 251.528085] Bluetooth: hci0: command tx timeout [ 251.592415] Bluetooth: hci3: command tx timeout [ 251.783744] Bluetooth: hci4: command tx timeout [ 251.848300] Bluetooth: hci7: command tx timeout [ 251.910545] Bluetooth: hci6: command tx timeout [ 251.911758] Bluetooth: hci5: command tx timeout [ 253.512420] Bluetooth: hci1: command tx timeout [ 253.574592] Bluetooth: hci2: command tx timeout [ 253.575744] Bluetooth: hci0: command tx timeout [ 253.638741] Bluetooth: hci3: command tx timeout [ 253.830452] Bluetooth: hci4: command tx timeout [ 253.895567] Bluetooth: hci7: command tx timeout [ 253.959723] Bluetooth: hci5: command tx timeout [ 253.960349] Bluetooth: hci6: command tx timeout [ 308.182701] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.187945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.194604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.200665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.202369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.245864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.249848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.251285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.257872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.260277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.316075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.320198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.327721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.330045] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.330342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.333730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.336627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.338338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.356308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.359520] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.442819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.445914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.448627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.454579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.458547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.483344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.501071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.532753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.548221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.554074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.590930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.596082] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.614927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.636004] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.636655] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.664372] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.674106] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.686673] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.712550] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.730206] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.215445] Bluetooth: hci0: command tx timeout [ 310.344443] Bluetooth: hci1: command tx timeout [ 310.406638] Bluetooth: hci2: command tx timeout [ 310.406802] Bluetooth: hci3: command tx timeout [ 310.535599] Bluetooth: hci4: command tx timeout [ 310.662746] Bluetooth: hci5: command tx timeout [ 310.790525] Bluetooth: hci6: command tx timeout [ 310.918949] Bluetooth: hci7: command tx timeout [ 312.262584] Bluetooth: hci0: command tx timeout [ 312.393455] Bluetooth: hci1: command tx timeout [ 312.454511] Bluetooth: hci3: command tx timeout [ 312.455009] Bluetooth: hci2: command tx timeout [ 312.582777] Bluetooth: hci4: command tx timeout [ 312.711460] Bluetooth: hci5: command tx timeout [ 312.838458] Bluetooth: hci6: command tx timeout [ 312.967728] Bluetooth: hci7: command tx timeout [ 314.311423] Bluetooth: hci0: command tx timeout [ 314.439954] Bluetooth: hci1: command tx timeout [ 314.502467] Bluetooth: hci2: command tx timeout [ 314.502503] Bluetooth: hci3: command tx timeout [ 314.630572] Bluetooth: hci4: command tx timeout [ 314.758591] Bluetooth: hci5: command tx timeout [ 314.887693] Bluetooth: hci6: command tx timeout [ 315.015507] Bluetooth: hci7: command tx timeout [ 316.359456] Bluetooth: hci0: command tx timeout [ 316.486506] Bluetooth: hci1: command tx timeout [ 316.550515] Bluetooth: hci3: command tx timeout [ 316.550575] Bluetooth: hci2: command tx timeout [ 316.679473] Bluetooth: hci4: command tx timeout [ 316.808677] Bluetooth: hci5: command tx timeout [ 316.934726] Bluetooth: hci6: command tx timeout [ 317.062498] Bluetooth: hci7: command tx timeout [ 370.271203] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.280830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.286170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.301160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.306634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.456309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.464930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.474926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.484102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.491093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.719329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.724930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.738023] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.756147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.761751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.761986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.765702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.768068] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.785777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.793759] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.815155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.821871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.855767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.868621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.874456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.881815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.893058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.904918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 370.915574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.924368] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.925025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 370.930152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.948889] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 370.972977] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.979069] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.986925] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.008735] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.017987] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.044278] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.076679] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.358715] Bluetooth: hci0: command tx timeout [ 372.550495] Bluetooth: hci1: command tx timeout [ 372.871472] Bluetooth: hci2: command tx timeout [ 372.871501] Bluetooth: hci4: command tx timeout [ 372.934808] Bluetooth: hci3: command tx timeout [ 373.062505] Bluetooth: hci5: command tx timeout [ 373.190487] Bluetooth: hci6: command tx timeout [ 373.190533] Bluetooth: hci7: command tx timeout [ 374.407132] Bluetooth: hci0: command tx timeout [ 374.598483] Bluetooth: hci1: command tx timeout [ 374.919230] Bluetooth: hci2: command tx timeout [ 374.919286] Bluetooth: hci4: command tx timeout [ 374.982722] Bluetooth: hci3: command tx timeout [ 375.110458] Bluetooth: hci5: command tx timeout [ 375.238517] Bluetooth: hci7: command tx timeout [ 375.240783] Bluetooth: hci6: command tx timeout [ 376.456494] Bluetooth: hci0: command tx timeout [ 376.647653] Bluetooth: hci1: command tx timeout [ 376.966584] Bluetooth: hci4: command tx timeout [ 376.967533] Bluetooth: hci2: command tx timeout [ 377.030505] Bluetooth: hci3: command tx timeout [ 377.158528] Bluetooth: hci5: command tx timeout [ 377.287449] Bluetooth: hci6: command tx timeout [ 377.287935] Bluetooth: hci7: command tx timeout [ 378.504432] Bluetooth: hci0: command tx timeout [ 378.695452] Bluetooth: hci1: command tx timeout [ 379.014664] Bluetooth: hci4: command tx timeout [ 379.015461] Bluetooth: hci2: command tx timeout [ 379.079781] Bluetooth: hci3: command tx timeout [ 379.207591] Bluetooth: hci5: command tx timeout [ 379.334708] Bluetooth: hci7: command tx timeout [ 379.334861] Bluetooth: hci6: command tx timeout [ 428.681102] kworker/u10:1 (44) used greatest stack depth: 23760 bytes left VM DIAGNOSIS: 10:59:26 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=0000000000000001 RCX=ffffffff8195724b RDX=0000000000009573 RSI=0000000000009572 RDI=ffffffff86c984fc RBP=ffff88802dc6f460 RSP=ffff88802dc6f398 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=000000000001f6bc R12=ffff88802dc6f468 R13=ffff88802dc6f450 R14=ffff88802dc6f449 R15=ffff88802dc6f408 RIP=ffffffff81353fbc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7c73f20368 CR3=0000000032c93000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88803488fac0 RCX=ffff88803488f61c RDX=0000000000000000 RSI=ffffffff85c1d1c0 RDI=ffff888013a13afc RBP=ffff888034888000 RSP=ffff88803488f658 R8 =0000000000000001 R9 =ffff88803488f708 R10=000000000003b6bd R11=000000000002335a R12=ffff88803488f701 R13=ffff88803488f710 R14=ffff88803488fab0 R15=ffff88803488f6c8 RIP=ffffffff81353d90 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb52f8bc540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdfba7b9e0 CR3=0000000034480000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000