Warning: Permanently added '[localhost]:40259' (ECDSA) to the list of known hosts. 2025/06/27 06:00:53 fuzzer started 2025/06/27 06:00:54 dialing manager at localhost:45637 syzkaller login: [ 93.858748] cgroup: Unknown subsys name 'net' [ 94.013635] cgroup: Unknown subsys name 'cpuset' [ 94.054065] cgroup: Unknown subsys name 'rlimit' 2025/06/27 06:01:07 syscalls: 201 2025/06/27 06:01:07 code coverage: enabled 2025/06/27 06:01:07 comparison tracing: enabled 2025/06/27 06:01:07 extra coverage: enabled 2025/06/27 06:01:07 setuid sandbox: enabled 2025/06/27 06:01:07 namespace sandbox: enabled 2025/06/27 06:01:07 Android sandbox: enabled 2025/06/27 06:01:07 fault injection: enabled 2025/06/27 06:01:07 leak checking: enabled 2025/06/27 06:01:07 net packet injection: enabled 2025/06/27 06:01:07 net device setup: enabled 2025/06/27 06:01:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/27 06:01:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/27 06:01:07 USB emulation: enabled 2025/06/27 06:01:07 hci packet injection: enabled 2025/06/27 06:01:07 wifi device emulation: enabled 2025/06/27 06:01:07 802.15.4 emulation: enabled 2025/06/27 06:01:07 fetching corpus: 0, signal 0/0 (executing program) 2025/06/27 06:01:08 starting 8 fuzzer processes 06:01:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @nfc={0x27, 0x1, 0x0, 0x4}, @phonet={0x23, 0x2, 0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0xd07, &(0x7f00000000c0)='bridge_slave_0\x00', 0xffffffffffff8000, 0x0, 0xf800}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r1, &(0x7f0000000180)=@phonet, &(0x7f0000000200)=0x80) r2 = accept(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x80) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x88}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3ff}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9a93}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x10) getpeername(r0, &(0x7f0000000400)=@alg, &(0x7f0000000480)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4804) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000680)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000006c0)={'hsr0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000ac0)={0x0, @nfc={0x27, 0x1, 0x2, 0x6}, @xdp={0x2c, 0x17, 0x0, 0x3b}, @hci, 0x3ff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a80)='geneve1\x00', 0x2d0, 0x7, 0x3}) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000c00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r3, 0x108, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x22040010}, 0x4) mq_timedsend(0xffffffffffffffff, &(0x7f0000000d80)="1ae37f9e7a1dcea5f64da7e75148f0f04546892bc7278450212f6914517efef96f058eeac198e01ec5c6e01997720ba08b7398bc2c749d3e4ed0711dd3c8a1ac41e48e6f50f1dca1f80f31e4d7f16fe962cb211b0e8885327215f0f110c534de674409d2b8adff45ca896402406acdde5497293dc643ceb33fba9396d7f8bcbb0f18642aa7be001f0189609a86fe200719fc655c392e0e40ab79aacc23b9d67a02844da4d898", 0xa6, 0x4, &(0x7f0000000e40)={0x77359400}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000e80), 0xc, &(0x7f00000018c0)={&(0x7f0000000ec0)={0x9d4, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x9b8, 0x8, 0x0, 0x1, [{0x574, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9b2d, @local, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}}, @WGPEER_A_ALLOWEDIPS={0x4e4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x8}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x9}}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1000, @empty, 0xfff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7fff, @remote, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x7, 0x0, @mcast2, 0x5}}]}, {0x104, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @local, 0xfffffff9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ed2394f7651c2472f8379c28433b9847f457fa56f866116e2f65c6573d266c34"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @loopback, 0x77861ad}}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8179257fe6b6aab350858674cc096fed12e6e1e916b41fd5386df409bac8280e"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0xdf}}]}]}]}, 0x9d4}, 0x1, 0x0, 0x0, 0x20004800}, 0x55) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 06:01:08 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/21, 0x15, 0x0, &(0x7f0000000040)=""/166, 0xa6}, &(0x7f0000000140)=0x40) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000180)={0xb, 0x77, 0x1, 0x7ff}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f00000011c0)=""/156, 0x9c}, &(0x7f00000012c0)=0x40) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001300), &(0x7f0000001340)=0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) r1 = fsmount(r0, 0x1, 0x8) r2 = getpgrp(0xffffffffffffffff) mq_notify(r1, &(0x7f00000013c0)={0x0, 0x9, 0x1, @tid=r2}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000015c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/141, 0x8d, 0x0, &(0x7f00000014c0)=""/226, 0xe2}, &(0x7f0000001600)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001740)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, &(0x7f0000001680)=""/155, 0x9b}, &(0x7f0000001780)=0x40) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000017c0)) r3 = fsmount(r0, 0x0, 0x8) process_mrelease(r3, 0x0) r4 = fsmount(r3, 0x1, 0x70) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000001800)='xfs\x00', 0x0) r6 = fsmount(r5, 0x1, 0x8) pidfd_getfd(r6, r1, 0x0) fsmount(r5, 0x1, 0x4) 06:01:08 executing program 2: sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x401}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x200000d4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001f40)={@private2, 0x0}, &(0x7f0000001f80)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000100), 0xc, &(0x7f0000002480)={&(0x7f0000001fc0)={0x4b4, 0x0, 0x8e3c9e9e3b8ab6f0, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x858d079e}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000880}, 0x54) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000002500)={'dummy0\x00', {0x2, 0x0, @broadcast}}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000002540)={0x1f, 0x2, 0x1}, 0x6) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x30, r6, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x24004000) r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000026c0)={@mcast1}, &(0x7f0000002700)=0x14) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x10600820}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000002880)) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x10000601}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c011}, 0x4c048) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a40), r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x48000020}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x50, r8, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x8090) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000002b80)={'wg0\x00'}) 06:01:08 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) r0 = socket(0x15, 0x80000, 0x7) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)="5e379ee31e5a57ead716d0f16d8baac1e8c2b0f9774838f56b5126895b84fb3aa71ee354ecd94ee00b73675885eaca1422357b263944a0a401ea801aeb6255a32f9b8d41d84561a2b8e0c96737997ec09ff8094beb43726373692c8be17c27186a0e92291bd7891b125d41b44d9b685b8efc4a50acb1805ebae4d2b6b997bf52a0efb84dc285c1bc5ecb8d2c90fac9db37c2") r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) getpeername(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000180)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000200)=0x6, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = fsmount(r3, 0x1, 0x80) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r1) r6 = pidfd_getfd(r5, r4, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r5) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r7, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8800) r9 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f00000004c0)='mptcp_pm\x00', &(0x7f0000000500)="83bef5242db57d3e1a8a8eddfe49f15cc19b09a330e0b0013a471cf01d9b76e4f858cd067cb3db8ccee8c1a8e63f853b0d40f799207fcb364b7e4b804daa442a11791f467913f5d162457bd95de751e39d3bcd73caee4e148cd46912fb5f6ace6c63c74cb9ca0d99820e6a58d1f8ebb8e501a1bbc8c884261944343b558838f1b113aa531ecab9a74acf39d2e1e52ad7d241267b67234feb865f7ecd9da93a8cc4d49c822049435a43b42c47cd7054f567d25abc0fc0358544b983f4588eae6858b7d73908ac1adee958d7e8b00bfea7cdbd1fdac7970ad773228823df21a37057d42b28f5b6502746ac3295d825fca69814affb", 0xf4) 06:01:08 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x1, 0x2) clone3(&(0x7f0000000280)={0x18240000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x40}, &(0x7f00000000c0)=""/142, 0x8e, &(0x7f0000000180)=""/179, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4, {r0}}, 0x58) pidfd_open(r1, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) syz_genetlink_get_family_id$team(&(0x7f0000000440), r0) r4 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000480)="d914387997ed67b35a1ff46afeb1196b", 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000800}, 0x40000) r7 = fsopen(&(0x7f0000000640)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000680)='\x10#\x00', 0x0, r5) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x40080) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000940)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=""/3, 0x3}, &(0x7f0000000980)=0x40) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000009c0), &(0x7f0000000a00)=0x8) [ 108.177891] audit: type=1400 audit(1751004068.614:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:01:08 executing program 5: prctl$PR_SET_PDEATHSIG(0x1, 0x2) prctl$PR_SET_PDEATHSIG(0x1, 0x32) rt_sigqueueinfo(0xffffffffffffffff, 0x3c, &(0x7f0000000000)={0x21, 0x0, 0x6}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='\x00', &(0x7f00000000c0)="faf5ae3f81ed51b5c162378832f97f0b03e8ae0dc2271d72cf631a2ba1e3f3396d66c5689f6d0d9b71636037a36514e8aaaf63de1847a3e726dfe9d8b325f1073a52b62086a5fba44c4154390e7d246b06431c03bb0d46633165d470f62c5ba7555fdebf641a4359520464c5e60f54e4ab1c73e93f49c9fa314c5794f45733b46f5c16406245d22050c4767855ed43c614268f", 0x93) mq_timedsend(0xffffffffffffffff, &(0x7f0000000180)="88e3ab22ba2f0dd30c478e8925bdf7fbf1b4a5f06d17d6e64fa181d20b9368ef658de2febeaa2441ddbdd7ce187539f8e5fce4e7f6b8a8ec6c6900b27a3f50889ac7d959c18f9b644e8ebdbe7e7231fcf377235c7f844b28f0b5a566ec5d63e5e46179ecaa38ba38d09f78c397c4ec71434f8e8c4e472da6e621ddfcec6468c249b75bbeee986026b744579daeb08dfb0f0fe65c3e4a1e912cf1a8f449208a1461066385ca919ced6a5c5a7f8137565bb2e9f73a220a53dc22fc76cf06413c2c7db8a3009c6327337fbc70a0fee8d822a3531bcfd4ab", 0xd6, 0x8, &(0x7f0000000280)={0x77359400}) getuid() write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0xd, 0x2, {{0x1, 0x3, 0x4}, 0x6}}, 0x18) prctl$PR_SET_PDEATHSIG(0x1, 0xe) r0 = mq_open(&(0x7f0000000300)='\x00', 0x1, 0x24, &(0x7f0000000340)={0x2, 0x401, 0x6, 0xd8}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000380)="1a8cb5f0027650121308fc66c568defa70d46b70e3980b7035840e9b340c1d4a4e98d43032a4384e446b64575c43026abbfce6b9e69fd1a0a0028675be360fc7593a6c59069a2647ae0bfa0d2fb3182f864413ec4545c24d27dfef3b6555d3e1ae8aa7c657d913a314d0cb37acf38348067fec0f7df130d04ad5ca73b138323dc96e26fcc4a7e94b70ea5b9d2e", 0x8d, 0x8, &(0x7f0000000480)={r1, r2+10000000}) r3 = memfd_secret(0x0) write$cgroup_pressure(r3, &(0x7f00000004c0)={'some', 0x20, 0xa7, 0x20, 0x2}, 0x2f) mq_timedreceive(r3, &(0x7f0000000500)=""/102, 0x66, 0x85, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000580)={0x7, 0x47, 0x2}, 0x7) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r3) memfd_secret(0x0) accept4(r0, 0x0, &(0x7f0000000600), 0x80800) memfd_secret(0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x1c) 06:01:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x9) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8fe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc035}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x11}, 0x4040) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r5) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000640)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd8, r6, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:xconsole_device_t:s0\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48885}, 0x0) r8 = memfd_secret(0x80000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) socketpair(0x1f, 0x5a94d2e133bd30eb, 0x8, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r7) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, &(0x7f00000008c0)) 06:01:08 executing program 7: r0 = memfd_secret(0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x4) r1 = pidfd_getfd(r0, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000001}, 0x11) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000340)) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@private2, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x18, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84088}, 0x40000004) r3 = fsmount(r0, 0x1, 0x82) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000600)) memfd_secret(0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000680)='\x00', 0x0, r1) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000006c0)) geteuid() r4 = pidfd_getfd(r1, r3, 0x0) pidfd_send_signal(r4, 0x21, &(0x7f0000000700)={0x25, 0x0, 0x1d}, 0x0) r5 = socket(0x1a, 0x6, 0x2) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000780), 0x4) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000007c0), &(0x7f0000000800)=0x8) [ 109.673938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.679049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.688068] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.707623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.711457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.731009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.748070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.750464] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.760043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.768942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.776647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.778580] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.779409] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.790008] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 109.792366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.793979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.795936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.798353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.806925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.808492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.811934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.813521] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.813808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.818562] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 109.823096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.829973] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 109.832735] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.835679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.842781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 109.847718] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 109.854882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.862684] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.865323] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.867407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.874605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.877646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.879656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.883455] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.898629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.902100] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.806791] Bluetooth: hci1: command tx timeout [ 111.934506] Bluetooth: hci7: command tx timeout [ 111.998249] Bluetooth: hci3: command tx timeout [ 111.998776] Bluetooth: hci6: command tx timeout [ 111.998781] Bluetooth: hci2: command tx timeout [ 111.999319] Bluetooth: hci4: command tx timeout [ 112.062338] Bluetooth: hci0: command tx timeout [ 112.062373] Bluetooth: hci5: command tx timeout [ 113.854278] Bluetooth: hci1: command tx timeout [ 113.983293] Bluetooth: hci7: command tx timeout [ 114.046298] Bluetooth: hci6: command tx timeout [ 114.047457] Bluetooth: hci2: command tx timeout [ 114.047708] Bluetooth: hci4: command tx timeout [ 114.048069] Bluetooth: hci3: command tx timeout [ 114.110293] Bluetooth: hci0: command tx timeout [ 114.111446] Bluetooth: hci5: command tx timeout [ 115.902325] Bluetooth: hci1: command tx timeout [ 116.031198] Bluetooth: hci7: command tx timeout [ 116.096187] Bluetooth: hci4: command tx timeout [ 116.096614] Bluetooth: hci3: command tx timeout [ 116.097029] Bluetooth: hci2: command tx timeout [ 116.097495] Bluetooth: hci6: command tx timeout [ 116.159228] Bluetooth: hci5: command tx timeout [ 116.159660] Bluetooth: hci0: command tx timeout [ 117.951199] Bluetooth: hci1: command tx timeout [ 118.078211] Bluetooth: hci7: command tx timeout [ 118.143324] Bluetooth: hci6: command tx timeout [ 118.143825] Bluetooth: hci2: command tx timeout [ 118.144059] Bluetooth: hci3: command tx timeout [ 118.145112] Bluetooth: hci4: command tx timeout [ 118.207466] Bluetooth: hci5: command tx timeout [ 118.207959] Bluetooth: hci0: command tx timeout [ 170.174933] syz-executor.7 (290) used greatest stack depth: 25040 bytes left [ 170.328197] syz-executor.5 (286) used greatest stack depth: 24912 bytes left [ 170.374048] syz-executor.6 (289) used greatest stack depth: 24800 bytes left [ 172.753725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.755979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.757511] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.767881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.770875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.817790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.828106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.830982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.833357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.834748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.837877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.838961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.840990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.848684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.856775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.979651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.981383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.983618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.994044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.997543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.032535] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.045028] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.068384] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.105300] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.109934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.144086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.145407] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.153081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.157751] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.161023] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.166799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.169652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.173715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.179699] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.186267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.193420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.197053] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.203401] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.219690] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.221181] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.847196] Bluetooth: hci0: command tx timeout [ 174.911301] Bluetooth: hci1: command tx timeout [ 174.911333] Bluetooth: hci2: command tx timeout [ 175.045902] Bluetooth: hci3: command tx timeout [ 175.166237] Bluetooth: hci4: command tx timeout [ 175.294409] Bluetooth: hci7: command tx timeout [ 175.358276] Bluetooth: hci6: command tx timeout [ 175.422257] Bluetooth: hci5: command tx timeout [ 176.894226] Bluetooth: hci0: command tx timeout [ 176.958198] Bluetooth: hci2: command tx timeout [ 176.958622] Bluetooth: hci1: command tx timeout [ 177.086323] Bluetooth: hci3: command tx timeout [ 177.215213] Bluetooth: hci4: command tx timeout [ 177.342404] Bluetooth: hci7: command tx timeout [ 177.406245] Bluetooth: hci6: command tx timeout [ 177.472499] Bluetooth: hci5: command tx timeout [ 178.942264] Bluetooth: hci0: command tx timeout [ 179.006210] Bluetooth: hci1: command tx timeout [ 179.006262] Bluetooth: hci2: command tx timeout [ 179.135746] Bluetooth: hci3: command tx timeout [ 179.263428] Bluetooth: hci4: command tx timeout [ 179.391327] Bluetooth: hci7: command tx timeout [ 179.456184] Bluetooth: hci6: command tx timeout [ 179.519489] Bluetooth: hci5: command tx timeout [ 180.990646] Bluetooth: hci0: command tx timeout [ 181.054521] Bluetooth: hci2: command tx timeout [ 181.055251] Bluetooth: hci1: command tx timeout [ 181.182240] Bluetooth: hci3: command tx timeout [ 181.310379] Bluetooth: hci4: command tx timeout [ 181.438357] Bluetooth: hci7: command tx timeout [ 181.502198] Bluetooth: hci6: command tx timeout [ 181.566290] Bluetooth: hci5: command tx timeout [ 233.216486] syz-executor.6 (2618) used greatest stack depth: 24544 bytes left [ 235.340364] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.346513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.348904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.350057] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.354365] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.358496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.362108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.369598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.375358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.389225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.596278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.614548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.617067] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.623081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.625575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.631710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.632065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.637654] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.668976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.672164] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.674693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.678013] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.681002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.690729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.697702] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.700937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.710080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.737710] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.763397] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.765511] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.796486] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.825628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.831701] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.855099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.862080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.879652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.889008] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.898401] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.910096] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.919428] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.439751] Bluetooth: hci1: command tx timeout [ 237.502443] Bluetooth: hci0: command tx timeout [ 237.694260] Bluetooth: hci4: command tx timeout [ 237.824373] Bluetooth: hci2: command tx timeout [ 237.824424] Bluetooth: hci3: command tx timeout [ 238.014603] Bluetooth: hci5: command tx timeout [ 238.014684] Bluetooth: hci6: command tx timeout [ 238.079233] Bluetooth: hci7: command tx timeout [ 239.486258] Bluetooth: hci1: command tx timeout [ 239.550264] Bluetooth: hci0: command tx timeout [ 239.742269] Bluetooth: hci4: command tx timeout [ 239.871164] Bluetooth: hci2: command tx timeout [ 239.871207] Bluetooth: hci3: command tx timeout [ 240.062322] Bluetooth: hci6: command tx timeout [ 240.062509] Bluetooth: hci5: command tx timeout [ 240.126680] Bluetooth: hci7: command tx timeout [ 241.534228] Bluetooth: hci1: command tx timeout [ 241.598388] Bluetooth: hci0: command tx timeout [ 241.790503] Bluetooth: hci4: command tx timeout [ 241.918444] Bluetooth: hci2: command tx timeout [ 241.918928] Bluetooth: hci3: command tx timeout [ 242.112406] Bluetooth: hci5: command tx timeout [ 242.113182] Bluetooth: hci6: command tx timeout [ 242.174583] Bluetooth: hci7: command tx timeout [ 243.582267] Bluetooth: hci1: command tx timeout [ 243.648207] Bluetooth: hci0: command tx timeout [ 243.838207] Bluetooth: hci4: command tx timeout [ 243.966201] Bluetooth: hci3: command tx timeout [ 243.966412] Bluetooth: hci2: command tx timeout [ 244.158242] Bluetooth: hci6: command tx timeout [ 244.160158] Bluetooth: hci5: command tx timeout [ 244.222218] Bluetooth: hci7: command tx timeout [ 297.618317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.623490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.625945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.634398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.640032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.820032] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.824694] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.828707] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.837758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.841840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.846865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.849837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.854404] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.888369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.898667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.941690] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.964736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.971669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.984321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.988565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.998064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.004043] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.016778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.019408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.033694] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.080919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.093659] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.141722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.145268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.145644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.157168] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.162544] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.168281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.191708] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.198804] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.210705] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.261993] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.276015] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.278188] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.299721] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.711239] Bluetooth: hci0: command tx timeout [ 299.902426] Bluetooth: hci1: command tx timeout [ 299.967318] Bluetooth: hci2: command tx timeout [ 300.095092] Bluetooth: hci4: command tx timeout [ 300.158554] Bluetooth: hci3: command tx timeout [ 300.287610] Bluetooth: hci5: command tx timeout [ 300.351110] Bluetooth: hci6: command tx timeout [ 300.414260] Bluetooth: hci7: command tx timeout [ 301.758250] Bluetooth: hci0: command tx timeout [ 301.950342] Bluetooth: hci1: command tx timeout [ 302.014401] Bluetooth: hci2: command tx timeout [ 302.142720] Bluetooth: hci4: command tx timeout [ 302.208160] Bluetooth: hci3: command tx timeout [ 302.334497] Bluetooth: hci5: command tx timeout [ 302.399457] Bluetooth: hci6: command tx timeout [ 302.462194] Bluetooth: hci7: command tx timeout [ 303.806355] Bluetooth: hci0: command tx timeout [ 303.998470] Bluetooth: hci1: command tx timeout [ 304.062200] Bluetooth: hci2: command tx timeout [ 304.190328] Bluetooth: hci4: command tx timeout [ 304.254347] Bluetooth: hci3: command tx timeout [ 304.384160] Bluetooth: hci5: command tx timeout [ 304.446345] Bluetooth: hci6: command tx timeout [ 304.510257] Bluetooth: hci7: command tx timeout [ 305.855326] Bluetooth: hci0: command tx timeout [ 306.046483] Bluetooth: hci1: command tx timeout [ 306.110240] Bluetooth: hci2: command tx timeout [ 306.238267] Bluetooth: hci4: command tx timeout [ 306.302219] Bluetooth: hci3: command tx timeout [ 306.430269] Bluetooth: hci5: command tx timeout [ 306.494742] Bluetooth: hci6: command tx timeout [ 306.558426] Bluetooth: hci7: command tx timeout [ 359.954074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.961742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.967175] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.977964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.982054] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.099464] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.103847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.106842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.114369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.122896] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.242959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.245335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.247751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.250014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.257628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.260584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.275011] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.277103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.282783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.302990] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.366868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.376175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.378713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.390602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.400433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.451272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.470412] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.480058] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.485511] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.491591] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.497003] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.501619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.524507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.525639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.532196] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.533702] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.537198] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.545843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.602588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.626001] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.046353] Bluetooth: hci0: command tx timeout [ 362.175279] Bluetooth: hci1: command tx timeout [ 362.302238] Bluetooth: hci3: command tx timeout [ 362.366223] Bluetooth: hci2: command tx timeout [ 362.494199] Bluetooth: hci4: command tx timeout [ 362.622250] Bluetooth: hci5: command tx timeout [ 362.622290] Bluetooth: hci6: command tx timeout [ 362.750260] Bluetooth: hci7: command tx timeout [ 364.094408] Bluetooth: hci0: command tx timeout [ 364.222370] Bluetooth: hci1: command tx timeout [ 364.352171] Bluetooth: hci3: command tx timeout [ 364.414298] Bluetooth: hci2: command tx timeout [ 364.542233] Bluetooth: hci4: command tx timeout [ 364.672168] Bluetooth: hci5: command tx timeout [ 364.672212] Bluetooth: hci6: command tx timeout [ 364.801341] Bluetooth: hci7: command tx timeout [ 366.142356] Bluetooth: hci0: command tx timeout [ 366.270183] Bluetooth: hci1: command tx timeout [ 366.399363] Bluetooth: hci3: command tx timeout [ 366.463431] Bluetooth: hci2: command tx timeout [ 366.591214] Bluetooth: hci4: command tx timeout [ 366.718312] Bluetooth: hci5: command tx timeout [ 366.721199] Bluetooth: hci6: command tx timeout [ 366.846375] Bluetooth: hci7: command tx timeout [ 368.190247] Bluetooth: hci0: command tx timeout [ 368.318301] Bluetooth: hci1: command tx timeout [ 368.446287] Bluetooth: hci3: command tx timeout [ 368.510176] Bluetooth: hci2: command tx timeout [ 368.638367] Bluetooth: hci4: command tx timeout [ 368.766536] Bluetooth: hci6: command tx timeout [ 368.766823] Bluetooth: hci5: command tx timeout [ 368.894363] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 06:06:12 Registers: info registers vcpu 0 RAX=ffffffff815c1340 RBX=0000000000000002 RCX=0000000000000002 RDX=ffff88806ce08d01 RSI=ffff88806ce08db0 RDI=ffff88806ce08aa8 RBP=ffff88806ce08aa8 RSP=ffff88806ce089e0 R8 =ffffffff8688ef7a R9 =ffff88806ce08a90 R10=000000000003b9fd R11=0000000000024a5b R12=ffff88806ce08ab0 R13=ffff88806ce08a98 R14=ffff88806ce08db8 R15=ffff88806ce08a50 RIP=ffffffff81354825 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55f6000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557140d4c080 CR3=0000000027a20000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f45db4fe47000007f45db4fdf20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff84af4746 RBX=ffffffff81604da0 RCX=ffff88806cf089cc RDX=1ffff1100d9e115a RSI=ffffffff84af4746 RDI=ffffffff84af4746 RBP=ffff88806cf08b10 RSP=ffff88806cf08a78 R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b9fd R11=0000000000023246 R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff88802dcad280 R15=ffff8880345f7b90 RIP=ffffffff812d92df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f037c714540 00000000 00000000 GS =0000 ffff8880e56f6000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f037c8ff620 CR3=000000000a245000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000