Warning: Permanently added '[localhost]:65290' (ECDSA) to the list of known hosts. 2025/06/09 13:54:08 fuzzer started 2025/06/09 13:54:09 dialing manager at localhost:40003 syzkaller login: [ 105.325760] cgroup: Unknown subsys name 'net' [ 105.468792] cgroup: Unknown subsys name 'cpuset' [ 105.511371] cgroup: Unknown subsys name 'rlimit' 2025/06/09 13:54:26 syscalls: 232 2025/06/09 13:54:26 code coverage: enabled 2025/06/09 13:54:26 comparison tracing: enabled 2025/06/09 13:54:26 extra coverage: enabled 2025/06/09 13:54:26 setuid sandbox: enabled 2025/06/09 13:54:26 namespace sandbox: enabled 2025/06/09 13:54:26 Android sandbox: enabled 2025/06/09 13:54:26 fault injection: enabled 2025/06/09 13:54:26 leak checking: enabled 2025/06/09 13:54:26 net packet injection: enabled 2025/06/09 13:54:26 net device setup: enabled 2025/06/09 13:54:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/09 13:54:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/09 13:54:26 USB emulation: enabled 2025/06/09 13:54:26 hci packet injection: enabled 2025/06/09 13:54:26 wifi device emulation: enabled 2025/06/09 13:54:26 802.15.4 emulation: enabled 2025/06/09 13:54:26 fetching corpus: 0, signal 0/0 (executing program) 2025/06/09 13:54:28 starting 8 fuzzer processes 13:54:28 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7c}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xa82c}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0x21, 0x2a, [@mic={0x8c, 0x10, {0x728, "c112c79db9d5", @short="697da3417fd5bcfe"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = accept4(r1, &(0x7f00000001c0)=@sco={0x1f, @fixed}, &(0x7f0000000240)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r3 = socket(0x28, 0x3, 0xffff8001) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)={0x2c0, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x0, 0x40, 0x1ff}, {0x0, 0x8, 0x40, 0x9}, {0x3f, 0xff, 0x0, 0x9}, {0x20, 0x0, 0x1f, 0x9}]}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000e40), 0x2800, 0x0) sendto(r5, &(0x7f0000000e80)="6d476d720dbec5e4d690b6e1721c76d901ba7ea2011cdaf041f7913febd61b40ad51c3a38ff4aa4253f35f45ec7770f4e1c38c0143e7bf16d6ad392895da3cd6a51aee1d1b5ed86c84835a16752c680a3ffe9bfc3c9d7d7a641f47ea77d36392c9a70342647767dc1c7e79d5f2b9084c961fae708fec9d35882e9b866fcac4cd972d900992cfd87c1bbb179f12ededcec1c39949efbf565c79c4259b8a825b8efc2e9a8c2d9b7ac261a7a73b047c157e0dfd0e1aabcf87dc363ae56243cd6a012060f634299967032896a944efb005", 0xcf, 0x4040800, &(0x7f0000000f80)=@in={0x2, 0x4e24, @multicast2}, 0x80) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001000)=""/181, &(0x7f00000010c0)=0xb5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001100)={'wlan0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000001140), 0x7f, 0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macsec0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001280), 0x2000, 0x0) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) socketpair(0x2, 0x1, 0x5, &(0x7f00000012c0)={0xffffffffffffffff}) statx(r6, &(0x7f0000001300)='./file0\x00', 0x400, 0x900, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001440)={0x0, r9, 0xee01}, 0xc) 13:54:28 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x8, 0x1, 0x20, 0x6}, {0x7ac, 0xa, 0xc8, 0x7}, {0x7, 0x6, 0xfc, 0x7bbc}, {0x7ff, 0x7, 0xff, 0x5}, {0x4, 0x1, 0x1}, {0x5, 0x81, 0x3, 0x7fff}, {0x1, 0x4, 0x7f, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e4, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@gcr_ga={0xbd, 0x6}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_IE={0x23, 0x2a, [@dsss={0x3, 0x1, 0x6c}, @dsss={0x3, 0x1, 0x7c}, @ssid={0x0, 0x14, @random="0f37c11c36fffbba4ed5c839271c8a99ae8ae326"}, @dsss={0x3, 0x1, 0x88}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x263, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}, @perr={0x84, 0x114, {0x1, 0x10, [@not_ext={{}, @device_a, 0x4, "", 0x42}, @ext={{}, @device_b, 0x2, @device_b, 0x21}, @not_ext={{}, @device_a, 0x1, "", 0x26}, @ext={{}, @broadcast, 0x8, @device_a, 0x2e}, @ext={{}, @device_b, 0xc1a0, @broadcast, 0xb}, @not_ext={{}, @device_a, 0x5, "", 0x17}, @ext={{}, @device_b, 0x8, @device_b, 0x8}, @ext={{}, @device_a, 0x3, @device_a, 0x2a}, @not_ext={{}, @broadcast, 0x3, "", 0x15}, @ext={{}, @device_a, 0x9, @device_a, 0x6}, @ext={{}, @broadcast, 0xa1, @broadcast, 0x24}, @ext={{}, @device_a, 0xf1, @device_b, 0x1d}, @ext={{}, @broadcast, 0x8, @device_a, 0x21}, @ext={{}, @broadcast, 0xffffffff, @broadcast, 0x8}, @not_ext={{}, @device_a, 0x4, "", 0x19}, @ext={{}, @broadcast, 0x5, @device_b, 0x1e}]}}, @ssid={0x0, 0x6, @default_ap_ssid}, @tim={0x5, 0x74, {0x8, 0xaa, 0x6, "54ba9d8e6037207d359f6714b239386f989f0fdc2f6184eeacea10b31fd172d99822c6ce5b708facffe348361c81e9474b8df93b25f5f5cad727e42e33667d4f0192e7314fdf934e55d0fce03bf1e530ca6334270a183f71f9794f464a88b92f841755795044b3f539feab935dfabfe069"}}, @perr={0x84, 0xb5, {0x5, 0xb, [@ext={{}, @device_a, 0x101, @broadcast, 0x35}, @not_ext={{}, @device_b, 0xfffffffc, "", 0x3d}, @ext={{}, @broadcast, 0x1, @device_a, 0x2c}, @ext={{}, @broadcast, 0x6, @broadcast, 0x3}, @not_ext={{}, @broadcast, 0xfffffffe, "", 0x8}, @ext={{}, @broadcast, 0x5, @broadcast, 0x2d}, @not_ext={{}, @broadcast, 0x8, "", 0x2b}, @ext={{}, @broadcast, 0x2, @broadcast, 0x3d}, @not_ext={{}, @broadcast, 0x5, "", 0x34}, @ext={{}, @broadcast, 0x5, @device_b, 0x23}, @not_ext={{}, @broadcast, 0x4, "", 0x23}]}}]}, @NL80211_ATTR_IE={0xe7, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x34, 0xf9}}, @dsss={0x3, 0x1, 0x6}, @cf={0x4, 0x6, {0x5, 0x6, 0x0, 0x7}}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xbd, {0x7, 0xd, [@ext={{}, @broadcast, 0x1, @device_b, 0x26}, @ext={{}, @device_a, 0x7fff, @device_a, 0x32}, @not_ext={{}, @broadcast, 0x5, "", 0x26}, @not_ext={{}, @broadcast, 0x8, "", 0x31}, @not_ext={{}, @device_a, 0x100, "", 0x12}, @ext={{}, @device_a, 0x1, @device_b, 0x16}, @not_ext={{}, @device_b, 0xffff, "", 0x23}, @not_ext={{}, @device_b, 0x5, "", 0x33}, @not_ext={{}, @broadcast, 0x0, "", 0xa}, @not_ext={{}, @device_b, 0x8, "", 0x19}, @not_ext={{}, @device_a, 0xffff8fdc, "", 0x34}, @not_ext={{}, @device_b, 0x7, "", 0x29}, @not_ext={{}, @device_a, 0x55, "", 0x16}]}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xae47553d6534d6e1}}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x20}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100b0012}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x208, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}]}, 0x1c}}, 0x10000000) r5 = socket(0xa, 0x1, 0x16) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000740)=0x4, 0x4) accept(r1, &(0x7f0000000780)=@sco, &(0x7f0000000800)=0x80) openat$cgroup_freezer_state(r1, &(0x7f0000000840), 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000880)=0x4, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000009c0), 0x1, 0x80001) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a80)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x10080) syz_genetlink_get_family_id$team(&(0x7f0000000bc0), r5) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xdc, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000051) 13:54:28 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip6tnl0\x00', 0x0}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000006c0)=0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000700)={0x680, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x114, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x0, 0x7f, 0xffffffff}, {0x0, 0x80, 0x9, 0x624c}, {0xffff, 0x9, 0x40, 0x3}, {0x2, 0x80, 0x58}, {0x3800, 0x1, 0x3f, 0x1}, {0x4, 0x81, 0x6, 0x1}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb3}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xfff9, 0x8, 0xfa, 0xffffffff}, {0x4, 0x80, 0x3f, 0xfffffcd5}, {0xc8f1, 0x5, 0x8, 0x5}, {0x4, 0x8, 0x7, 0x9}, {0xd476, 0x0, 0x6, 0xc0000000}, {0x0, 0x7, 0x20, 0x5}, {0x800, 0x40, 0x5, 0x6}, {0x4, 0x81, 0x80, 0x800}, {0x5, 0x8, 0x2, 0x3}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc2fb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}]}, 0x680}}, 0x0) r7 = accept(r0, &(0x7f0000000e00)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000e80)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000ec0)={'batadv_slave_1\x00', 0x0}) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000000f00)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000f40)=0x28) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000f80)) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000001180)={'xfrm0\x00', &(0x7f0000001080)=@ethtool_rxnfc={0x0, 0x4, 0x0, {0xe, @tcp_ip6_spec={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x4e23, 0x9}, {0x0, @multicast, 0x397, 0x1c1, [0x9, 0x4]}, @usr_ip6_spec={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5, 0xa7, 0x1f}, {0x0, @remote, 0x200, 0xff6f, [0x2, 0x7fffffff]}, 0x6622, 0x5}, 0x2, [0x4, 0x6]}}) getpeername(r0, &(0x7f00000011c0)=@ethernet={0x0, @remote}, &(0x7f0000001240)=0x80) r10 = accept4(r9, &(0x7f0000001280)=@l2, &(0x7f0000001300)=0x80, 0x800) accept(r9, &(0x7f00000013c0)=@can={0x1d, 0x0}, &(0x7f0000001440)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001680)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000001800)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xe8, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$inet6_tcp_buf(r7, 0x6, 0xe, &(0x7f0000001840)=""/195, &(0x7f0000001940)=0xc3) 13:54:28 executing program 3: getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000100)=0x80, 0x80000) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x401, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)="99", 0x1, 0x80}], 0x800, &(0x7f00000002c0)={[{'\x1a@&],@&^'}], [{@fsmagic={'fsmagic', 0x3d, 0x10000}}]}) r3 = memfd_secret(0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000300)=0x81, &(0x7f0000000340)=0x2) ioctl$sock_ifreq(r1, 0x891b, &(0x7f0000000380)={'syz_tun\x00', @ifru_mtu}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x202082, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) setsockopt(r2, 0x0, 0xfffffffe, &(0x7f0000000400)="2de3866e12090fcbc93fb167c7ade0e75dbd2bca33d59d9b9e8621820f4e794a5c9bc4139a244600be813954f9144b027214250cb84e69e02882dbae69a9c2fa00ff7cc7209be071d5ac273c9071405a1afc8e1c1b953e6287e9aafe664f2e18bb4faa4f1abc4d78d31cc26c3c61e32b6038e7a195d139e0be892757cd821ba28de2577178d0e47ac3dd10f6ae", 0x8d) socketpair(0x2b, 0x2, 0x9f11, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r6, &(0x7f0000000500), 0x6) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x80}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ae1c3698512220c0902de388f26f7718"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMKID={0x14, 0x55, "3a89711d1d5421c06acb21350c8e9bdf"}, @NL80211_ATTR_PMKID={0x14, 0x55, "1528d70dbb95b524dc24a2b71aec92de"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f1b9c180c575"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x10}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000081) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000680), 0x4) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000006c0)=0x40, &(0x7f0000000700)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r7 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000780)) [ 124.099024] audit: type=1400 audit(1749477268.383:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:54:28 executing program 4: ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000000c0)) r1 = io_uring_setup(0x4c1d, &(0x7f0000000100)={0x0, 0x547c, 0x20, 0x3, 0x119, 0x0, r0}) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000180)={0x3, 0x4}) accept4(r2, 0x0, &(0x7f00000001c0), 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0xa500, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x22400, 0x0) read$snapshot(r4, &(0x7f0000000280)=""/125, 0x7d) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000300)=0x6, &(0x7f0000000340)=0x2) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000380)=0x25, &(0x7f00000003c0)=0x2) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001dc0)={'veth0_to_hsr\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002d80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002580)={0x7a4, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x733}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff69}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8b8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xdf9, 0x5d, 0x81, 0x5}, {0x2, 0xd9, 0x3f, 0x81}, {0x4, 0x9, 0x5, 0x5}, {0x0, 0x7f, 0x98, 0x9f}, {0x92ec, 0x82, 0x6, 0x40}, {0x0, 0x1, 0x3f, 0x5}, {0x1, 0x40, 0x7, 0x1}, {0xb30, 0x9, 0xfd, 0x40}, {0xf268, 0x0, 0x80, 0x7}, {0x100, 0x0, 0x2, 0x4}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}]}, 0x7a4}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) 13:54:28 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0xb4, 0x0, &(0x7f00000011c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001040)={@fda={0x66646185, 0x1}, @fda={0x66646185, 0x8, 0x0, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/4096, 0x1000, 0x0, 0x37}}, &(0x7f00000010c0)={0x0, 0x20, 0x40}}}, @acquire_done={0x40106309, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001100)={@fda={0x66646185, 0x2, 0x1, 0x2b}, @fda={0x66646185, 0x2, 0x2, 0x19}, @flat=@handle={0x73682a85, 0x0, 0x2}}, &(0x7f0000001180)={0x0, 0x20, 0x40}}}, @request_death={0x400c630e, 0x2}], 0x0, 0x0, &(0x7f0000001280)}) inotify_init1(0x800) r1 = syz_open_dev$vcsn(&(0x7f0000001300), 0x9, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000003800)={'wg0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001380)="6767449e78f79ad705ddd312a89adf423686d22a825cd8a2213e5998704faffe8c5cc525c9a45ac63232afd1e87f9e7f9d360b265b8ad9044f723f6e0ceb88fff6a0ab8e398a2b9012c7550af9f67c18075cb77ff9970f9943b8a0d098aeadcf4b09c70a9d03e0d536c432b92818da50242186d585fb555f3eac8147abe5080231932e0fb734174d0a1d6c36c5acfdda7d8330069d", 0x95}, {&(0x7f0000001440)="21ffbc626fa09e7c3a3884e780ccb7379cdfd164551517cc5edd8b546611c21dd867e8a32749c4699862db8d2d7733fe8bddc218f7d251c30a39180c7999ca6420594086efb9f5d0b02f843d6ecba00110a22777be95086c4d9f709fb5f4b898afc2dd562d77961f667f7c44025435", 0x6f}], 0x2, &(0x7f0000001680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x9a, 0x0, 0x1, [0x8000, 0x1f]}, @timestamp_addr={0x44, 0x34, 0xce, 0x1, 0x9, [{@multicast1, 0x1}, {@private=0xa010102, 0x8}, {@loopback, 0x2}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3602}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x9}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x130}}, {{&(0x7f00000017c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001800)="5055d062d3fe51822ea12518a0f70dba2face7e69a10596d7b6e93b7b8565fde579a3838afaf68ddc67c45b73ff215c390f10d64d24d55e4592d5aaf8735acf58bcd3f5ac1445b59823a40aed0039c6710b8c6eee17f55dafe41c68a0d4ae4084c20b71771363ab366abfc7ed2bfa383ee9dc71828930610b356c2621253e68814e25a3032a9e8fac59013b0bac5504a234e3654fec7aadf0b72bc80745a565742603a280f130af48e7b380f4a9c1e8a13f2c846f609a5eedd050955dce888885eb3ff0765", 0xc5}], 0x1}}, {{&(0x7f0000001940)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000001980)="5522afe17b48cf0fe381dbdd1481903e48144b2b326abfe4cbf9a2d2852a98243cd91601cfb4dbaef30dc0f480b5fcf8caf35d162d6db8e1ea1cf2c789cfeeb0c1697a00f2e923", 0x47}, {&(0x7f0000001a00)="34c9774c07f450e05c34636368e7db9d4c223a394952d6df9b5c", 0x1a}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0x7, 0x43, [@loopback]}, @lsrr={0x83, 0x7, 0x78, [@rand_addr=0x64010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}], 0x88}}, {{&(0x7f0000001b40)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001b80)="6cc4853e16ce03a2caf08adf03def9af08835d11763a2bd9d6c61d52c553487f9252241935b7b132082a0966420ec19beda8c117f765e928", 0x38}, {&(0x7f0000001bc0)="7c11c07b27303fa1df09899635b0f1f7c6b14e87c657527dc03b91b60c2d4859d162174f79e6a758acac6aaa70ebb434169f8a2ac6c03e5bbae11491c99dcdd929081cb996b68e86abb7671a1255daeaa88c0c7b2d3bd9f781107d31b3b8da9af6e7e8527e9b9e1868874638b5d8b9d0db744bb90eaa7909e16b3f1f7fa4be14c29784d85519bd38457311a83b8764caf71517f04289a4cc0345c941d51b6c9cddebee6e1bc7305da63b7aba536da66215719a8951ad064e630bb2eaca2d20f24abcad1c3b7df15175ea3e10ae6c62263ab0d350", 0xd4}], 0x2, &(0x7f0000003840)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x23, [@broadcast, @loopback]}, @end, @ssrr={0x89, 0x1f, 0xf1, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback, @private=0xa010102, @private=0xa010100]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010102, @multicast2}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x60fe9ce}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000003900)="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", 0x1000}, {&(0x7f0000004900)="a7311fd80c30bb6c18b9dd4852a653108599ba4573d9fb2a9be724996106729b8475cd27602662b92152", 0x2a}], 0x2}}], 0x5, 0x4000040) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004b00), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000004b40)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000004b80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004bc0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000004d00)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c00)={0x90, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4844}, 0x80c1) r8 = syz_open_dev$vcsn(&(0x7f0000004d40), 0x3, 0x1010c0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000004d80)=0x77e, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000004dc0)='./binderfs2/custom0\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000004e40), r8) r10 = syz_open_dev$vcsn(&(0x7f0000004e80), 0x3, 0x800) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000004f80)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004ec0)={0x5c, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4880) setsockopt(r8, 0x5, 0x6, &(0x7f0000004fc0)="d70b3fdd8f2a5f13620ff3b47f0baf3a0850e0a64a6452590704461a901c3efa1d0b3e518972d8ebcf9db6f7cc1ac7476d8db92e4235e3e61037bd8c72d31a3303300aacec385e71a54853ddfba97b403df978957c48444ccbf71f5fb8ac19bcf0de762617b08114d62977f8b2b65bccbc3b98da64765866a4be82fe7e184f81063df1c71626ce0523f4a228c8", 0x8d) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000005180)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x68}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4805}, 0x4040) 13:54:28 executing program 6: sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x400e1) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x800, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x844) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x88000}, 0x48001) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xffffffff, 0x1, 0x7, 0x6}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x44045}, 0x30000080) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000680)) ioctl$sock_ifreq(r4, 0x8910, &(0x7f00000006c0)={'gretap0\x00', @ifru_mtu}) r5 = memfd_secret(0x80000) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r5) socketpair(0x10, 0x6, 0x4, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6) write$bt_hci(r7, &(0x7f00000007c0)={0x1, @le_create_conn={{0x200d, 0x19}, {0x8000, 0x4, 0x0, 0x2, @any, 0x4, 0xe3e, 0x74, 0x800, 0x15ee, 0x200, 0xfe00}}}, 0x1d) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x278, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1f, 0x2, 0xcd5]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffa}]}, @NL80211_ATTR_CQM={0x98, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x9ee, 0x7, 0x100, 0x5, 0x10001, 0x32a, 0xfffffffc, 0x4, 0x682a62d1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x9, 0x101, 0xe, 0x4, 0x1f, 0x80000001]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x400, 0x1, 0x8]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x81, 0x6, 0x5, 0x5, 0x8, 0x4, 0x8, 0x100]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x4, 0x0, 0x3, 0x4ca4, 0x200, 0x2, 0x65, 0x8, 0x7, 0xfffffff7]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x37}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9ab}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x63c}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x536e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6b7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ae}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x1, 0xfffffffd]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x100, 0x4, 0x3, 0x965, 0x7fff, 0x6, 0x8, 0x800, 0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6df}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x172}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xb}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x57b}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000d80)=""/25, &(0x7f0000000dc0)=0x19) 13:54:28 executing program 7: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)=""/125, &(0x7f00000000c0)=0x7d) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000082}, 0x4080000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x8}, 0x8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001ac0)={'ip6gretap0\x00'}) r4 = memfd_secret(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001bc0)={0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000001c40)='./file0\x00', 0x800, 0x7ff, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001d80)={r5, 0xee01, r6}, 0xc) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001dc0)={0x101}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000001e00)=r5) pipe(&(0x7f0000001e80)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000001e40), r8) setsockopt$inet6_tcp_int(r8, 0x6, 0x18, &(0x7f0000001ec0)=0x7fff, 0x4) [ 125.624133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.625576] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.626455] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.628020] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.629374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.635547] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.637964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.639761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.650097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.657701] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.690729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.692092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.695183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.702004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.703012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.704103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.714536] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 125.715630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.717640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 125.718096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.721410] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.723883] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 125.724490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.727150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.732858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.738672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.745739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.745818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.746822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.753432] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.761595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.763552] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 125.766509] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.772007] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 125.779904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.802647] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 125.812855] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 125.835427] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 125.877249] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 125.903610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 127.713457] Bluetooth: hci1: command tx timeout [ 127.776349] Bluetooth: hci0: command tx timeout [ 127.840414] Bluetooth: hci3: command tx timeout [ 127.840479] Bluetooth: hci5: command tx timeout [ 127.841946] Bluetooth: hci2: command tx timeout [ 127.904482] Bluetooth: hci6: command tx timeout [ 127.904939] Bluetooth: hci4: command tx timeout [ 127.969502] Bluetooth: hci7: command tx timeout [ 129.760761] Bluetooth: hci1: command tx timeout [ 129.824358] Bluetooth: hci0: command tx timeout [ 129.888464] Bluetooth: hci5: command tx timeout [ 129.888899] Bluetooth: hci3: command tx timeout [ 129.890112] Bluetooth: hci2: command tx timeout [ 129.953377] Bluetooth: hci4: command tx timeout [ 129.953524] Bluetooth: hci6: command tx timeout [ 130.016335] Bluetooth: hci7: command tx timeout [ 131.808642] Bluetooth: hci1: command tx timeout [ 131.872315] Bluetooth: hci0: command tx timeout [ 131.936484] Bluetooth: hci2: command tx timeout [ 131.936929] Bluetooth: hci5: command tx timeout [ 131.937861] Bluetooth: hci3: command tx timeout [ 132.000351] Bluetooth: hci4: command tx timeout [ 132.001515] Bluetooth: hci6: command tx timeout [ 132.065324] Bluetooth: hci7: command tx timeout [ 133.859411] Bluetooth: hci1: command tx timeout [ 133.921362] Bluetooth: hci0: command tx timeout [ 133.984597] Bluetooth: hci3: command tx timeout [ 133.984805] Bluetooth: hci5: command tx timeout [ 133.985050] Bluetooth: hci2: command tx timeout [ 134.049261] Bluetooth: hci6: command tx timeout [ 134.049338] Bluetooth: hci4: command tx timeout [ 134.112452] Bluetooth: hci7: command tx timeout [ 187.957791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.959565] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.964763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.971788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.977030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.021177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.027604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.034435] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.036835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.037887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.040849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.041723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.043754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.047923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.053470] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.177042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.184070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.186747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.205744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.210711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.302490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.316789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.345680] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.363969] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.398810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.429209] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 188.439425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 188.442907] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 188.448627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.450541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.454383] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 188.456727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.468952] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 188.493786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 188.499274] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 188.532500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.540073] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 188.542793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 188.547199] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.558754] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.048578] Bluetooth: hci0: command tx timeout [ 190.113440] Bluetooth: hci2: command tx timeout [ 190.114027] Bluetooth: hci1: command tx timeout [ 190.306311] Bluetooth: hci3: command tx timeout [ 190.561528] Bluetooth: hci4: command tx timeout [ 190.624391] Bluetooth: hci6: command tx timeout [ 190.624968] Bluetooth: hci7: command tx timeout [ 190.625527] Bluetooth: hci5: command tx timeout [ 192.096468] Bluetooth: hci0: command tx timeout [ 192.160324] Bluetooth: hci2: command tx timeout [ 192.160774] Bluetooth: hci1: command tx timeout [ 192.352320] Bluetooth: hci3: command tx timeout [ 192.608407] Bluetooth: hci4: command tx timeout [ 192.672634] Bluetooth: hci5: command tx timeout [ 192.672750] Bluetooth: hci6: command tx timeout [ 192.673721] Bluetooth: hci7: command tx timeout [ 194.144700] Bluetooth: hci0: command tx timeout [ 194.208509] Bluetooth: hci2: command tx timeout [ 194.209628] Bluetooth: hci1: command tx timeout [ 194.400538] Bluetooth: hci3: command tx timeout [ 194.658273] Bluetooth: hci4: command tx timeout [ 194.720477] Bluetooth: hci7: command tx timeout [ 194.720676] Bluetooth: hci6: command tx timeout [ 194.720918] Bluetooth: hci5: command tx timeout [ 196.192377] Bluetooth: hci0: command tx timeout [ 196.256387] Bluetooth: hci1: command tx timeout [ 196.256833] Bluetooth: hci2: command tx timeout [ 196.449636] Bluetooth: hci3: command tx timeout [ 196.705301] Bluetooth: hci4: command tx timeout [ 196.768379] Bluetooth: hci6: command tx timeout [ 196.768638] Bluetooth: hci7: command tx timeout [ 196.770194] Bluetooth: hci5: command tx timeout [ 248.003873] syz-executor.2 (2846) used greatest stack depth: 24336 bytes left [ 250.098528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.104542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.108605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.115123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.119758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.168665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.172704] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.176825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.179476] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.185187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.191272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.193779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.205724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.221863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.243599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.388005] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.392635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.394081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.427401] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.432551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.433180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.434032] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.437298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.437338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.438496] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.568562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.582548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.597318] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.613538] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.623608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.624522] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.626788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.628000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.637497] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.648785] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.655672] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 250.667972] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.675078] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.682563] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.686105] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 252.193386] Bluetooth: hci0: command tx timeout [ 252.320354] Bluetooth: hci2: command tx timeout [ 252.321032] Bluetooth: hci1: command tx timeout [ 252.512566] Bluetooth: hci3: command tx timeout [ 252.513727] Bluetooth: hci4: command tx timeout [ 252.768767] Bluetooth: hci6: command tx timeout [ 252.769641] Bluetooth: hci5: command tx timeout [ 252.833037] Bluetooth: hci7: command tx timeout [ 254.240511] Bluetooth: hci0: command tx timeout [ 254.368330] Bluetooth: hci2: command tx timeout [ 254.368818] Bluetooth: hci1: command tx timeout [ 254.560321] Bluetooth: hci4: command tx timeout [ 254.560814] Bluetooth: hci3: command tx timeout [ 254.817282] Bluetooth: hci6: command tx timeout [ 254.817780] Bluetooth: hci5: command tx timeout [ 254.880292] Bluetooth: hci7: command tx timeout [ 256.288317] Bluetooth: hci0: command tx timeout [ 256.416474] Bluetooth: hci2: command tx timeout [ 256.416968] Bluetooth: hci1: command tx timeout [ 256.608336] Bluetooth: hci4: command tx timeout [ 256.608836] Bluetooth: hci3: command tx timeout [ 256.864388] Bluetooth: hci6: command tx timeout [ 256.864896] Bluetooth: hci5: command tx timeout [ 256.928573] Bluetooth: hci7: command tx timeout [ 258.336287] Bluetooth: hci0: command tx timeout [ 258.466273] Bluetooth: hci1: command tx timeout [ 258.466762] Bluetooth: hci2: command tx timeout [ 258.658381] Bluetooth: hci3: command tx timeout [ 258.658413] Bluetooth: hci4: command tx timeout [ 258.912354] Bluetooth: hci6: command tx timeout [ 258.912455] Bluetooth: hci5: command tx timeout [ 258.976300] Bluetooth: hci7: command tx timeout [ 312.636010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.651369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.659088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.666153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.672862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.714842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.718575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.721205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.727019] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.731875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.820149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.825661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.832745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.839161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.848618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.907812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.923062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.925968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.959655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.963783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.046571] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.068116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.091685] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 313.096529] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 313.098873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 313.111101] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 313.117490] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.153832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.163313] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.168688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.207171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.213395] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.220627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.224097] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.254547] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.277853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.281804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.298721] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.338910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.384632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.722466] Bluetooth: hci0: command tx timeout [ 314.786303] Bluetooth: hci1: command tx timeout [ 314.912415] Bluetooth: hci2: command tx timeout [ 315.104837] Bluetooth: hci3: command tx timeout [ 315.360386] Bluetooth: hci7: command tx timeout [ 315.488553] Bluetooth: hci4: command tx timeout [ 315.488702] Bluetooth: hci6: command tx timeout [ 315.808316] Bluetooth: hci5: command tx timeout [ 316.769425] Bluetooth: hci0: command tx timeout [ 316.833406] Bluetooth: hci1: command tx timeout [ 316.960425] Bluetooth: hci2: command tx timeout [ 317.152571] Bluetooth: hci3: command tx timeout [ 317.408881] Bluetooth: hci7: command tx timeout [ 317.536359] Bluetooth: hci4: command tx timeout [ 317.536596] Bluetooth: hci6: command tx timeout [ 317.856367] Bluetooth: hci5: command tx timeout [ 318.816314] Bluetooth: hci0: command tx timeout [ 318.880400] Bluetooth: hci1: command tx timeout [ 319.008346] Bluetooth: hci2: command tx timeout [ 319.200545] Bluetooth: hci3: command tx timeout [ 319.456521] Bluetooth: hci7: command tx timeout [ 319.584334] Bluetooth: hci4: command tx timeout [ 319.586373] Bluetooth: hci6: command tx timeout [ 319.907300] Bluetooth: hci5: command tx timeout [ 320.864359] Bluetooth: hci0: command tx timeout [ 320.929300] Bluetooth: hci1: command tx timeout [ 321.057558] Bluetooth: hci2: command tx timeout [ 321.249514] Bluetooth: hci3: command tx timeout [ 321.505342] Bluetooth: hci7: command tx timeout [ 321.633314] Bluetooth: hci6: command tx timeout [ 321.633342] Bluetooth: hci4: command tx timeout [ 321.952312] Bluetooth: hci5: command tx timeout [ 374.916038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.930061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.934803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.944884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.957500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.095899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.100110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.103093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.109181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.112994] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.159548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.165927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.170625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.178736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.186705] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.245951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.262877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.308862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.310482] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.364628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.365971] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.372101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.387023] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.426672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.436569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.442038] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.446371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.446489] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.454135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.487554] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.494749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.505346] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.506798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.509909] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.538516] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.540280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.543856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.577027] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.589776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 375.595327] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.993710] Bluetooth: hci0: command tx timeout [ 377.186283] Bluetooth: hci1: command tx timeout [ 377.249625] Bluetooth: hci2: command tx timeout [ 377.568405] Bluetooth: hci3: command tx timeout [ 377.568449] Bluetooth: hci4: command tx timeout [ 377.696401] Bluetooth: hci5: command tx timeout [ 377.696493] Bluetooth: hci7: command tx timeout [ 377.761381] Bluetooth: hci6: command tx timeout [ 379.040804] Bluetooth: hci0: command tx timeout [ 379.233028] Bluetooth: hci1: command tx timeout [ 379.296995] Bluetooth: hci2: command tx timeout [ 379.616368] Bluetooth: hci3: command tx timeout [ 379.617317] Bluetooth: hci4: command tx timeout [ 379.744880] Bluetooth: hci7: command tx timeout [ 379.746036] Bluetooth: hci5: command tx timeout [ 379.808819] Bluetooth: hci6: command tx timeout [ 381.089278] Bluetooth: hci0: command tx timeout [ 381.281430] Bluetooth: hci1: command tx timeout [ 381.344503] Bluetooth: hci2: command tx timeout [ 381.664277] Bluetooth: hci3: command tx timeout [ 381.665430] Bluetooth: hci4: command tx timeout [ 381.792508] Bluetooth: hci7: command tx timeout [ 381.792562] Bluetooth: hci5: command tx timeout [ 381.857364] Bluetooth: hci6: command tx timeout [ 383.136427] Bluetooth: hci0: command tx timeout [ 383.328990] Bluetooth: hci1: command tx timeout [ 383.394331] Bluetooth: hci2: command tx timeout [ 383.712458] Bluetooth: hci4: command tx timeout [ 383.712634] Bluetooth: hci3: command tx timeout [ 383.841306] Bluetooth: hci7: command tx timeout [ 383.841328] Bluetooth: hci5: command tx timeout [ 383.905440] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:59:37 Registers: info registers vcpu 0 RAX=0000011ae213a8bc RBX=0000000000000000 RCX=00000000000006e0 RDX=000000000000011a RSI=ffff88806ce238c0 RDI=000000000004c7bc RBP=ffff88806ce238c0 RSP=ffff88806ce08ed8 R8 =0000000000000001 R9 =0000000000000000 R10=00000000000daef5 R11=0000000000000001 R12=000000000004c7bc R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce28080 RIP=ffffffff813276b5 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce7a654028 CR3=0000000023f36000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf08a80 RBX=ffff88806cf08b10 RCX=ffff88806cf09000 RDX=0000000000000002 RSI=ffff88806cf08a88 RDI=ffff88806cf08a28 RBP=ffff888009a5b700 RSP=ffff88806cf08a28 R8 =0000000000000000 R9 =0000000000000000 R10=ffff88806cf08a78 R11=0000000000000001 R12=ffff88806cf08a98 R13=ffff88806cf08aa0 R14=ffff88806cf08ac0 R15=ffff88806cf08a78 RIP=ffffffff81356782 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f080a6934a1 CR3=000000000c933000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000