Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:60101' (ECDSA) to the list of known hosts. 2023/08/21 05:07:13 fuzzer started 2023/08/21 05:07:13 dialing manager at localhost:46849 syzkaller login: [ 99.927897] cgroup: Unknown subsys name 'net' [ 100.121548] cgroup: Unknown subsys name 'rlimit' [ 111.504283] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/21 05:07:26 syscalls: 224 2023/08/21 05:07:26 code coverage: enabled 2023/08/21 05:07:26 comparison tracing: enabled 2023/08/21 05:07:26 extra coverage: enabled 2023/08/21 05:07:26 setuid sandbox: enabled 2023/08/21 05:07:26 namespace sandbox: enabled 2023/08/21 05:07:26 Android sandbox: enabled 2023/08/21 05:07:26 fault injection: enabled 2023/08/21 05:07:26 leak checking: enabled 2023/08/21 05:07:26 net packet injection: enabled 2023/08/21 05:07:26 net device setup: enabled 2023/08/21 05:07:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/21 05:07:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/21 05:07:26 USB emulation: enabled 2023/08/21 05:07:26 hci packet injection: enabled 2023/08/21 05:07:26 wifi device emulation: enabled 2023/08/21 05:07:26 802.15.4 emulation: enabled 2023/08/21 05:07:26 fetching corpus: 0, signal 0/0 (executing program) 2023/08/21 05:07:28 starting 8 fuzzer processes 05:07:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xac}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000100)=0x10000, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0x9, 0x2, 0x4, 0x1}, 0x10) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x4d, 0x1}, 0x7) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c0}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x61}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x84) socket$netlink(0x10, 0x3, 0x4) syz_io_uring_setup(0x2dcd, &(0x7f0000000400)={0x0, 0xa2e1, 0x8, 0x1, 0x1b0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000680)=0x2, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000006c0)=0x4, 0x4) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3f5, 0x200, 0x70bd2b, 0x25dfdbfe, "", ["", "", ""]}, 0x10}}, 0x1000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2001100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040091}, 0x40000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r5, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4804) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000060}, 0x8004) 05:07:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xb2, 0x3, 0x3, 0xc6, 0x0, 0x8, 0x80, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x7}, 0x2400, 0x7fffffff, 0x6d, 0x5, 0x2, 0x6, 0x8, 0x0, 0xe4, 0x0, 0x4}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "94d34eb56f66f6dde535ef5eeb84828ce5ffb4798aac26c296450e865b59c948"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x40}}, 0x800) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70, 0x74}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0xb1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008090}, 0x1) r7 = socket(0x2a, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb4, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xd5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c008}, 0xc0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x1, 0x400, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x700, 0x7800, 0x55d, 0x4}}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x48844) 05:07:28 executing program 2: r0 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, 0x0) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100), 0x0, r0) keyctl$revoke(0x3, r1) r2 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r2) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="c91e383f5bd0e679c0fc3660aafddad9a10c8359076aa5e5b893c9b02afff2f62911a0e39a712be980353994a9d043b05a833a18eb69271ba55fe3ac05a5221c82e931e8cc6071ec0e21de4ebd58e4", 0x4f, r3) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000340)={r3, 0x53, 0x26}, 0x0, &(0x7f0000000380)="5f9bc24a88603e31df43657e0e2f558af5f007d2352a0aa6832a06eabeca9400de678666d2b555430e778e479e785aa6c8e66dd6733b71451f16e15456eea3215b39f9e65e7a2ea36ce4b71be8fbbdba85363e", &(0x7f0000000400)="c778738a154cee44cde2b19697dd9accd435f94e8de72bf77a8898cb1c37cd284a42d37ea7ab") r4 = request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='-\\\x00', r0) r5 = add_key(&(0x7f0000000500)='cifs.spnego\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)="fa01029dc9201cae9b62de7485aeef59f513a1e19e17398e0b1c0378d155a769c0c8dcb123e52f33ea61a8a98995e54886cfb0460862b902f18e3962702272dc39d513a5014549bd845dbe048ce37c130c1f403dae25b0d2f49eaf680e6b1f6a76626cf7c47dbc888dc1e033", 0x6c, r0) keyctl$link(0x8, r4, r5) r6 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r2, 0x1) request_key(&(0x7f0000000680)='trusted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='ceph\x00', 0xfffffffffffffffc) keyctl$reject(0x13, r4, 0x6820, 0x101, 0xfffffffffffffffa) r7 = request_key(&(0x7f0000000740)='.request_key_auth\x00', &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)='cifs.spnego\x00', 0x0) keyctl$get_security(0x11, r7, &(0x7f0000000800)=""/133, 0x85) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000008c0)={r1, 0x46, 0x87}, &(0x7f0000000900)={'enc=', 'pkcs1', ' hash=', {'sm3\x00'}}, &(0x7f0000000980)="1da67e17df7036b8a5e80b3b2d402843197030e617b7962b5f9817b5db3acc0f057d07e1f81be381f8e840dddf1f0f432287a3ffb5c46c9d9ecdee01d7ea4596d3b534898c24", &(0x7f0000000a00)=""/135) add_key(&(0x7f0000000ac0)='id_legacy\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)="2f7968b01db7c1b62f010df7f107a2e6629085f03f5c224aa0792aebc085488bcb7510b3889f32de41a119a4fd1ebb3bec8d79ede6c14dc1082d1a78d9574331bf961e5d6d8c7d97a8172eb47741156c204c833250d655eb81dc148046c6a2e3241e58e710ae1a77618347ca18ac91b6", 0x70, r0) 05:07:28 executing program 3: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xd3, 0x7f, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x1, 0x80000000, 0x6}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x45) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x404881d}, 0x4004811) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x880) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6_vti0\x00', r0, 0x4, 0x6, 0x6, 0x4, 0x50, @private1, @empty, 0x7, 0x7800, 0x5ea, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r0, 0x2f, 0x9, 0x80, 0x7fff, 0x55, @mcast1, @remote, 0x20, 0x7, 0x7fff, 0x9}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffc8, 0x6}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4040) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r4, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x6}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc010}, 0x48000) r5 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x7, r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8002012}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x20008000) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f00000009c0)={0x218, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0xfa, 0x5b, "21d67df83397b7addad81f5f26652e8c1495d22d8bd4ac524396bfba7e8c2bbdbf6cd78259379e8b85c942692d5d892c7fc7bda32af7d9e0a4bffa33586df60f9bec7ab8950800013408aab230c379d2ac708bc4c9de227105a45e0acdd3a4f82ded2e1c96209f66ce810c0ad8dd0f4ffd2dfac572ca92a24428d6a1ecf369f8f042ec1b6be3a4d909a833f91f363a3c627b964a0a203a517f9c7c140b49af6ef6eee1e0c3ba08539be42319e2c26df576d83de80d1d750b804c0098b8e76643b6257ecd1a2a12b9b785521c102305b951b1203bcb0eadc666f2aa2f4d885b4e32d66a4e78373963487557d0a54ca11de35f3676705d"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xdd, 0x5b, "6a1eb07405e08c5d5cc87cb56d453a9023fa3d37c2e0bee4ce414c6b46d2507539c57f65e3fa5f4b45cd9a75c2732858195aa25bc77e8d20cc600586c1be2723f87cd5e0f36ac82a7564157b3a5d1b88799d9f951722df4c916c2fef112df58e3b04b6ff289bca70f54321ddb65510c6952e3e21d1576ee50d63557d6a24614f721b8555d02da8157932b5f9bbd351e648157174df84e222fc10eef1fcff6627999b975efe403fae89ad8a4d170acf751716bfc99ad36056f0970bf468b5979f03c31754de4b9adbc4c75f19af59252a702557d523c1107b03"}]}, 0x218}, 0x1, 0x0, 0x0, 0x40814}, 0x24008080) r6 = request_key(&(0x7f0000000c80)='cifs.spnego\x00', &(0x7f0000000cc0)={'syz', 0x3}, &(0x7f0000000d00)='[#@\'\x00', r5) keyctl$negate(0xd, r6, 0x12, r5) getpeername(r3, &(0x7f0000000d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000dc0)=0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)=@newsa={0x19c, 0x10, 0x400, 0x70bd28, 0x25dfdbfe, {{@in6=@mcast2, @in6=@private0, 0x4e21, 0x8001, 0x4e23, 0x7, 0x2, 0xb0, 0x80, 0x2f, r2, 0xee01}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x2b}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {0x0, 0xd36c, 0x1ff, 0x80000001, 0xa4, 0x20, 0x3, 0x8}, {0xf3, 0x80000000, 0x4, 0x937b}, {0x34f, 0x9, 0x1}, 0x70bd25, 0x34ff, 0xa, 0x1, 0xfe, 0xb2}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @algo_crypt={0x82, 0x2, {{'cbc-camellia-aesni-avx2\x00'}, 0x1d0, "f4f4329b159797c45472e6f1c49f8e814278348dfc481d51936c4bc0081c2cf094ddf5d66598eb7cae01bd05848ede2ec85cd6c8801566f4c757"}}, @coaddr={0x14, 0xe, @in6=@local}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc0}, 0x881) [ 113.433368] audit: type=1400 audit(1692594448.663:6): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:07:28 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x62}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000054) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x20080000) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x49000080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40054}, 0x20000c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40d0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000045) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "63388ddd01afd7a6af761954e197cc73"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xff40cc438e8600dd}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x681234029b36b07c}, 0x20008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x49c}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0xecb8559775234a3b}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r8, 0x0, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x20009040) 05:07:28 executing program 5: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x2, 0x0, 0x2}, 0xff}}, 0x18) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) inotify_add_watch(r0, &(0x7f0000002480)='./file0\x00', 0x200) clock_gettime(0x0, &(0x7f0000004440)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000024c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002540)}, {&(0x7f0000002580)=""/247, 0xf7}, {&(0x7f0000002680)=""/20, 0x14}, {&(0x7f00000026c0)=""/11, 0xb}, {&(0x7f0000002700)=""/182, 0xb6}, {&(0x7f00000027c0)=""/82, 0x52}, {&(0x7f0000002840)=""/196, 0xc4}, {&(0x7f0000002940)=""/41, 0x29}, {&(0x7f0000002980)=""/132, 0x84}, {&(0x7f0000002a40)=""/90, 0x5a}], 0xa, &(0x7f0000002b80)=""/118, 0x76}, 0xb}, {{&(0x7f0000002c00)=@nfc_llcp, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002c80)=""/105, 0x69}], 0x1, &(0x7f0000002d40)=""/50, 0x32}, 0x1}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002d80)=""/92, 0x5c}, {&(0x7f0000002e00)=""/131, 0x83}], 0x2, &(0x7f0000002f00)=""/44, 0x2c}, 0x20}, {{&(0x7f0000002f40)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002fc0)=""/249, 0xf9}, {&(0x7f00000030c0)=""/63, 0x3f}, {&(0x7f0000003100)=""/197, 0xc5}, {&(0x7f0000003200)=""/184, 0xb8}, {&(0x7f00000032c0)=""/233, 0xe9}], 0x5, &(0x7f0000003440)=""/55, 0x37}, 0x7}, {{&(0x7f0000003480)=@alg, 0x80, &(0x7f0000003680)=[{&(0x7f0000003500)=""/107, 0x6b}, {&(0x7f0000003580)=""/197, 0xc5}], 0x2}, 0x21fc}, {{&(0x7f00000036c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003740)}, {&(0x7f0000003780)=""/29, 0x1d}, {&(0x7f00000037c0)=""/81, 0x51}], 0x3, &(0x7f0000003880)=""/180, 0xb4}, 0x5}, {{&(0x7f0000003940)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003d40)=[{&(0x7f00000039c0)=""/9, 0x9}, {&(0x7f0000003a00)=""/46, 0x2e}, {&(0x7f0000003a40)=""/235, 0xeb}, {&(0x7f0000003b40)=""/25, 0x19}, {&(0x7f0000003b80)}, {&(0x7f0000003bc0)=""/37, 0x25}, {&(0x7f0000003c00)=""/64, 0x40}, {&(0x7f0000003c40)=""/194, 0xc2}], 0x8, &(0x7f0000003dc0)=""/227, 0xe3}, 0x6}, {{&(0x7f0000003ec0)=@tipc=@id, 0x80, &(0x7f0000004180)=[{&(0x7f0000003f40)=""/157, 0x9d}, {&(0x7f0000004000)=""/225, 0xe1}, {&(0x7f0000004100)=""/67, 0x43}], 0x3, &(0x7f00000041c0)=""/73, 0x49}}], 0x8, 0x23, &(0x7f0000004480)={r1, r2+60000000}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000044c0)={{r0}, 0x0, 0x2, @unused=[0x3f, 0x7, 0xffff, 0x1], @subvolid=0xfffffffffffffa50}) pipe2$9p(&(0x7f00000054c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RREADDIR(r4, &(0x7f0000005500)={0x2a, 0x29, 0x2, {0x80000001, [{{0x10, 0x0, 0x1}, 0x5, 0x5, 0x7, './file0'}]}}, 0x2a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005580), r0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000005680)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005640)={&(0x7f00000055c0)={0x54, r5, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ff3fbbaa97afadc709ab2dd12b5b2044"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000056c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f00000072c0)={&(0x7f00000071c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000007280)={&(0x7f0000007200)={0x48, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf9, 0x23}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "fff1eab3657eaaec22e064d54c2edcd2"}, @NL80211_ATTR_MAC={0xa}]}, 0x48}}, 0x1801) syz_io_uring_setup(0x1024, &(0x7f0000007300)={0x0, 0xfb8d, 0x36, 0x1, 0x36f, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000007380), &(0x7f00000073c0)=0x0) pipe2(&(0x7f0000007400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000007800)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r8, 0x0, &(0x7f00000077c0)={0xfffffffffffffffd, 0x0, &(0x7f0000007740)=[{&(0x7f0000007440)='Vo{.fvz', 0x7}, {&(0x7f0000007480)="e59d5a101e6a136c178dca61b4793eb169183a28792c912798836c49d17045a11a2c7469e48e08fa24d2f5bb51ec49ecc025a8b6a0f8745a24fa29a5b9883e69993d4ca78f4dab637241ce12d6c3d850d12f424c22e68b59858f843975ad20352ef944e6cc426cab2ce08909091b58c5ef7e1c2ee7077b53a2d90c74e0374cee90b15f97cd66673a8c8c6b854fbb40", 0x8f}, {&(0x7f0000007540)='x\x00}', 0x3}, {&(0x7f0000007580)="14746b64ebd277ec934b6f88023a83e82968304483304c404fb16189c71e0f10399ef2deff9d61850a8eef478578676e7957702db26a4c9745372f25271abdbe7e1ed848d9ff74ab2925645c69e2b063a4cab50fa11dad3039f60d408c6e389123edd037ed8fdbf8f84d8e0e506b072a311f09283b5b94aa8dc2c13106ee0caf61d70ab04c9d268fd0a9ff4afffd436cc0f1166b591e0ff368828bde53", 0x9d}, {&(0x7f0000007640)="47837cd95c7d11d43416f334c9cd2b4233a40b62998a7fe1b7b7ff6ca818f84e5e08dc041ecd1c3ced1e9dc36bff4dae6d1b791b554926f06bf2ce50bd1b52f69586391741e361a850ac30bef22e31b2fc64cf888244e5000355196c6fd8eb3bf69571d68f6e8d2f22088dafdf0f64e3f47cbdbd64dcbd2b5112f65baae29e5934584502ffa34f1da99512b7a07c0c", 0x8f}, {&(0x7f0000007700)="24eea806ca77c4", 0x7}], 0x6}, 0x0, 0x20000095, 0x1}, 0x81) r9 = socket(0xf, 0x800, 0x7) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r9, &(0x7f0000007ac0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007a80)={&(0x7f0000007940)={0x12c, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x111}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x336}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ba}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) keyctl$dh_compute(0x17, &(0x7f0000007c80), &(0x7f0000007cc0)=""/72, 0x48, &(0x7f0000007e40)={&(0x7f0000007d40)={'sha1-avx\x00'}, &(0x7f0000007d80)="2bd087980cdd8ea937c90e2102b8d81d8880cacb0367c9fcf8eb36e7dfc0901f03d227b60661e75f5d36a7c683fac0cd7496501588a07d865436e045ba4aa59a2880af611b01034c65dc4b1d2264bb8dc2a1c6f52aabe88ecdd12085429c30a3021f4956179b12d9bffd3e4bef70eb2170468a9eac4c30457ce7a577ea1a0df188f87356240a2a66b3c4c1a5785088cc91e6b003181572e40968d6fa7183c2596123ea7441974e44d537cfe9563b03e6b0f6b3677c5ddb22a831caab", 0xbc}) 05:07:28 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x86000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x84, 0x3b, 0x4, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x40, 0x50, 0x2e2a}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000280)=0x1c, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000002c0)=0x3, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r2, 0x29, 0x5, 0x5, 0x9, 0x5, @private2, @remote, 0x40, 0x20, 0x25, 0xfff}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r6 = pidfd_getfd(r0, r0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0xb8c4a15c9ae73d88}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x84, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x36, 0xa9, @random="cf0c29b05214c94c90dee4e73a2f26f45168558a6980f1f18edec77c240d0c07e98ae7cf9cd83183ebf2733e296ab36eb326"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040814) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xbc, r3, 0x220, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x160}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3be}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1}, @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x100, 0x5, 0x5, 0xfff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x8]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008898}, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000dc0)={"e516d36d717a872c9ce8389728314423", 0x0, 0x0, {0x10000, 0x67}, {0x29, 0x401}, 0x93, [0x10001, 0x8, 0x2, 0x0, 0x7fffffff, 0x8, 0xffffffffffffff0c, 0x400, 0x9, 0x9, 0x6, 0x800, 0x7, 0x3ff, 0x7b1, 0x401]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000ec0)={"3afe958264956b2e909f7c0a6c21f4a5", 0x0, r9, {0x4, 0x3f}, {0x5cc7, 0x3f}, 0xffffffffffff8001, [0xdcc8, 0x7, 0x5, 0x100, 0x0, 0x10, 0x0, 0x20, 0x9, 0x8, 0x101, 0x81, 0x8000, 0x5, 0x1, 0xfd]}) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000fc0), &(0x7f0000001000)=0xc) 05:07:28 executing program 7: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x16, 0x4) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x201, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040881}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x180, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x180}, 0x1, 0x0, 0x0, 0x24000881}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x40) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x40, r0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x56}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x4) r3 = shmget(0x3, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000003080)={&(0x7f0000002fc0), 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x81) r5 = socket(0x11, 0x1, 0x81) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x40, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000003440)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003400)={&(0x7f0000003240)={0x1b0, r6, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7fff}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xff}, @NL80211_ATTR_IE={0x17c, 0x2a, [@fast_bss_trans={0x37, 0x79, {0x80, 0x1, "27cb03d2adde49569ec62243fc720532", "f8c8d8f81c797c32c18657ef24a71c812bd5606b36efe5be21756abd8a6771d6", "0af79ac18bcbcbb1d8f0f37c582c09535d0ff4f6d480dd4d45db1fe9ea647a3a", [{0x1, 0x25, "4092eee970fa9a14086733ac0d32316e2fba3ab94fa765594681c657e214c07a79b9776179"}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xc, 0x4}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @random={0x4, 0xef, "5edd812a779aeb1bff221bc80f41c0cd7ce4b2ce12fae3e8932c1396a5eff44672d2d71abe0b26847cfc743833b60f9b4100dce7dd9f13f9f81773821d1fc492c21f2652f331b7678c802ef9585a5d87af42802f4cb3e093a3b068a66d1d2d15d281ba4087209cc5b1a42d2979baa17022cc2f26e4d6e3cc7c8857c42fb5fd9c523f418a5c89d61951f6ce27a3f786ecb1426558afa11638d5d60fd5fe34af6f9e5da0bf342cbce1cc5c2c6b36b7936288d77dcf5a869a3999e70a39684d4d29a58226b29af113369ce373daed53cd199fa228559da9a38bb81db75bf3215eba59455c223c021c51e33eb2ffdd1f06"}, @challenge={0x10, 0x1, 0x43}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20040081}, 0x40) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000003480)=0x5, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000003540)={'syztnl0\x00', &(0x7f00000034c0)={'sit0\x00', 0x0, 0x4, 0x7, 0x0, 0x2, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x40, 0x6996, 0x1058b725}}) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x40, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x8082}, 0x10) [ 114.853663] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.862869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.866081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.875409] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.884808] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 114.886539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.917651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.920667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.922339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.928025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.934208] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.936323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.017567] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.019174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.021009] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.022163] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.025991] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.027088] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.038094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.042334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.043649] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.045002] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.049943] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.050240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 115.052776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.054663] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.056050] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.058408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.059986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.069164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.072383] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.074469] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.076978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.094886] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.101117] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 115.102976] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.108158] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.109936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.114752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.132012] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 115.134998] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.138831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.941366] Bluetooth: hci0: command 0x0409 tx timeout [ 117.004448] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 117.005550] Bluetooth: hci1: command 0x0409 tx timeout [ 117.132492] Bluetooth: hci2: command 0x0409 tx timeout [ 117.132983] Bluetooth: hci6: command 0x0409 tx timeout [ 117.196331] Bluetooth: hci4: command 0x0409 tx timeout [ 117.260500] Bluetooth: hci5: command 0x0409 tx timeout [ 117.260990] Bluetooth: hci7: command 0x0409 tx timeout [ 118.989316] Bluetooth: hci0: command 0x041b tx timeout [ 119.053322] Bluetooth: hci1: command 0x041b tx timeout [ 119.180401] Bluetooth: hci6: command 0x041b tx timeout [ 119.181067] Bluetooth: hci2: command 0x041b tx timeout [ 119.244670] Bluetooth: hci4: command 0x041b tx timeout [ 119.308347] Bluetooth: hci7: command 0x041b tx timeout [ 119.308938] Bluetooth: hci5: command 0x041b tx timeout [ 121.036486] Bluetooth: hci0: command 0x040f tx timeout [ 121.100306] Bluetooth: hci1: command 0x040f tx timeout [ 121.228944] Bluetooth: hci2: command 0x040f tx timeout [ 121.228978] Bluetooth: hci6: command 0x040f tx timeout [ 121.292836] Bluetooth: hci4: command 0x040f tx timeout [ 121.356713] Bluetooth: hci7: command 0x040f tx timeout [ 121.356729] Bluetooth: hci5: command 0x040f tx timeout [ 122.316592] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 123.084379] Bluetooth: hci0: command 0x0419 tx timeout [ 123.149293] Bluetooth: hci1: command 0x0419 tx timeout [ 123.276315] Bluetooth: hci2: command 0x0419 tx timeout [ 123.276490] Bluetooth: hci6: command 0x0419 tx timeout [ 123.341302] Bluetooth: hci4: command 0x0419 tx timeout [ 123.406306] Bluetooth: hci7: command 0x0419 tx timeout [ 123.406337] Bluetooth: hci5: command 0x0419 tx timeout [ 125.589632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.593787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.595819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.613285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.620565] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.623548] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.757542] Bluetooth: hci3: command 0x0409 tx timeout [ 129.804309] Bluetooth: hci3: command 0x041b tx timeout [ 131.852386] Bluetooth: hci3: command 0x040f tx timeout [ 133.900632] Bluetooth: hci3: command 0x0419 tx timeout [ 176.533013] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.535694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.541756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.556767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.559663] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 176.562654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.932703] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.936552] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.937854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.948521] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.955110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 176.957149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.065100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.071588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.073191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.081398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.099216] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.115643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.303971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.321860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.345640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.351749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.354398] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 177.355782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.636529] Bluetooth: hci0: command 0x0409 tx timeout [ 179.020430] Bluetooth: hci1: command 0x0409 tx timeout [ 179.212832] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 179.215416] Bluetooth: hci2: command 0x0409 tx timeout [ 179.341302] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 179.405478] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 179.469317] Bluetooth: hci5: command 0x0409 tx timeout [ 180.684352] Bluetooth: hci0: command 0x041b tx timeout [ 181.068349] Bluetooth: hci1: command 0x041b tx timeout [ 181.260332] Bluetooth: hci2: command 0x041b tx timeout [ 181.516319] Bluetooth: hci5: command 0x041b tx timeout [ 182.478532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.516694] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.529622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.548782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.583984] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 182.597578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.733574] Bluetooth: hci0: command 0x040f tx timeout [ 183.069168] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.080193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.084808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.117563] Bluetooth: hci1: command 0x040f tx timeout [ 183.145599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.165789] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 183.226147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.308491] Bluetooth: hci2: command 0x040f tx timeout [ 183.565339] Bluetooth: hci5: command 0x040f tx timeout [ 184.654373] Bluetooth: hci4: command 0x0409 tx timeout [ 184.781357] Bluetooth: hci0: command 0x0419 tx timeout [ 185.100807] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 185.164549] Bluetooth: hci1: command 0x0419 tx timeout [ 185.294162] Bluetooth: hci6: command 0x0409 tx timeout [ 185.357350] Bluetooth: hci2: command 0x0419 tx timeout [ 185.613443] Bluetooth: hci5: command 0x0419 tx timeout [ 186.701392] Bluetooth: hci4: command 0x041b tx timeout [ 187.340303] Bluetooth: hci6: command 0x041b tx timeout [ 188.319881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 188.325069] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 188.348999] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 188.381960] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 188.391786] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 188.394694] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 188.749013] Bluetooth: hci4: command 0x040f tx timeout [ 189.388391] Bluetooth: hci6: command 0x040f tx timeout [ 189.389166] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 190.476381] Bluetooth: hci7: command 0x0409 tx timeout [ 190.796983] Bluetooth: hci4: command 0x0419 tx timeout [ 191.438319] Bluetooth: hci6: command 0x0419 tx timeout [ 192.435749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.445122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.469077] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.500590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.524881] Bluetooth: hci7: command 0x041b tx timeout [ 192.527348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 192.530582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.572830] Bluetooth: hci7: command 0x040f tx timeout [ 194.636755] Bluetooth: hci3: command 0x0409 tx timeout [ 196.620604] Bluetooth: hci7: command 0x0419 tx timeout [ 196.684298] Bluetooth: hci3: command 0x041b tx timeout [ 198.732334] Bluetooth: hci3: command 0x040f tx timeout [ 200.781017] Bluetooth: hci3: command 0x0419 tx timeout [ 239.850575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.850752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.863530] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.863953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.870619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.878490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.888056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.891847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.893699] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 239.895543] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.896240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 239.900828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.243950] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.248427] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.264614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.277563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.281232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 240.282097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.932653] Bluetooth: hci1: command 0x0409 tx timeout [ 241.996807] Bluetooth: hci0: command 0x0409 tx timeout [ 242.190333] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 242.381592] Bluetooth: hci5: command 0x0409 tx timeout [ 243.844879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.856663] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.857952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.864776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.875001] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 243.879882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.981507] Bluetooth: hci1: command 0x041b tx timeout [ 244.045385] Bluetooth: hci0: command 0x041b tx timeout [ 244.077250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.098530] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.105921] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.112521] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.145529] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.147666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.428320] Bluetooth: hci5: command 0x041b tx timeout [ 245.078345] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.079561] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.084513] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.087679] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.089684] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 245.091035] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.964343] Bluetooth: hci2: command 0x0409 tx timeout [ 246.028329] Bluetooth: hci1: command 0x040f tx timeout [ 246.095300] Bluetooth: hci0: command 0x040f tx timeout [ 246.220404] Bluetooth: hci4: command 0x0409 tx timeout [ 246.480299] Bluetooth: hci5: command 0x040f tx timeout [ 247.180613] Bluetooth: hci6: command 0x0409 tx timeout [ 248.012546] Bluetooth: hci2: command 0x041b tx timeout [ 248.076319] Bluetooth: hci1: command 0x0419 tx timeout [ 248.142303] Bluetooth: hci0: command 0x0419 tx timeout [ 248.268316] Bluetooth: hci4: command 0x041b tx timeout [ 248.524308] Bluetooth: hci5: command 0x0419 tx timeout [ 249.228316] Bluetooth: hci6: command 0x041b tx timeout [ 249.605863] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.607768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.612852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.652554] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.657344] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 249.667584] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.064306] Bluetooth: hci2: command 0x040f tx timeout [ 250.316399] Bluetooth: hci4: command 0x040f tx timeout [ 251.276325] Bluetooth: hci6: command 0x040f tx timeout [ 251.788564] Bluetooth: hci7: command 0x0409 tx timeout [ 252.108310] Bluetooth: hci2: command 0x0419 tx timeout [ 252.364335] Bluetooth: hci4: command 0x0419 tx timeout [ 253.324363] Bluetooth: hci6: command 0x0419 tx timeout [ 253.836324] Bluetooth: hci7: command 0x041b tx timeout [ 255.884339] Bluetooth: hci7: command 0x040f tx timeout [ 256.076336] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 257.932485] Bluetooth: hci7: command 0x0419 tx timeout [ 260.876656] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 263.682509] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.688201] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.692366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.757820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.772627] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.781630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.868376] Bluetooth: hci3: command 0x0409 tx timeout [ 267.918480] Bluetooth: hci3: command 0x041b tx timeout [ 269.966073] Bluetooth: hci3: command 0x040f tx timeout [ 272.012306] Bluetooth: hci3: command 0x0419 tx timeout [ 303.180333] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 303.436362] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 303.756386] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 305.660253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.663589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.667830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.676254] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.683904] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 305.689784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.789731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.811077] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.815475] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.824220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.869747] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 305.873472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.944842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.947185] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.949712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.955555] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.958768] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 305.961853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.589890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.594461] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.608628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.626565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.635562] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 306.639142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.341383] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 307.724424] Bluetooth: hci1: command 0x0409 tx timeout [ 307.980367] Bluetooth: hci2: command 0x0409 tx timeout [ 307.981497] Bluetooth: hci4: command 0x0409 tx timeout [ 308.748420] Bluetooth: hci5: command 0x0409 tx timeout [ 309.005330] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 309.773351] Bluetooth: hci1: command 0x041b tx timeout [ 310.029743] Bluetooth: hci4: command 0x041b tx timeout [ 310.029788] Bluetooth: hci2: command 0x041b tx timeout [ 310.271106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.275758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.282681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.298100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.314464] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.317186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.797569] Bluetooth: hci5: command 0x041b tx timeout [ 311.268175] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.276618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.280843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.308528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.324531] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 311.327830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.821300] Bluetooth: hci1: command 0x040f tx timeout [ 312.008984] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.011593] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.023449] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.064523] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.076343] Bluetooth: hci4: command 0x040f tx timeout [ 312.079256] Bluetooth: hci2: command 0x040f tx timeout [ 312.090951] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 312.091950] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.398343] Bluetooth: hci0: command 0x0409 tx timeout [ 312.844467] Bluetooth: hci5: command 0x040f tx timeout [ 313.424444] Bluetooth: hci6: command 0x0409 tx timeout [ 313.868514] Bluetooth: hci1: command 0x0419 tx timeout [ 314.124477] Bluetooth: hci2: command 0x0419 tx timeout [ 314.124500] Bluetooth: hci4: command 0x0419 tx timeout [ 314.188420] Bluetooth: hci7: command 0x0409 tx timeout [ 314.444329] Bluetooth: hci0: command 0x041b tx timeout [ 314.893313] Bluetooth: hci5: command 0x0419 tx timeout [ 315.468401] Bluetooth: hci6: command 0x041b tx timeout [ 316.240314] Bluetooth: hci7: command 0x041b tx timeout [ 316.493513] Bluetooth: hci0: command 0x040f tx timeout [ 317.516430] Bluetooth: hci6: command 0x040f tx timeout [ 318.284313] Bluetooth: hci7: command 0x040f tx timeout [ 318.540480] Bluetooth: hci0: command 0x0419 tx timeout [ 319.564303] Bluetooth: hci6: command 0x0419 tx timeout [ 320.332429] Bluetooth: hci7: command 0x0419 tx timeout [ 325.373063] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.386538] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.392553] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.433667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.446801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 325.447688] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.500844] Bluetooth: hci3: command 0x0409 tx timeout [ 329.548346] Bluetooth: hci3: command 0x041b tx timeout [ 331.598335] Bluetooth: hci3: command 0x040f tx timeout [ 333.644905] Bluetooth: hci3: command 0x0419 tx timeout [ 367.525841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.529757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.533520] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.541932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.545579] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 367.546517] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.852630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.856527] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.859521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.870224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.871970] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 367.873297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.612374] Bluetooth: hci1: command 0x0409 tx timeout [ 369.934853] Bluetooth: hci2: command 0x0409 tx timeout [ 370.195349] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 370.252374] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 371.660337] Bluetooth: hci1: command 0x041b tx timeout [ 371.980484] Bluetooth: hci2: command 0x041b tx timeout [ 372.509958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.512221] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.514162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.529819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.535564] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 372.537055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.171856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.178559] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 373.186504] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 373.200757] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 373.206023] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 373.210506] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.516696] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 373.709293] Bluetooth: hci1: command 0x040f tx timeout [ 374.029296] Bluetooth: hci2: command 0x040f tx timeout [ 374.604469] Bluetooth: hci4: command 0x0409 tx timeout [ 374.988707] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 375.052556] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 375.245605] Bluetooth: hci7: command 0x0409 tx timeout [ 375.758308] Bluetooth: hci1: command 0x0419 tx timeout [ 376.076803] Bluetooth: hci2: command 0x0419 tx timeout [ 376.361562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.366142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.370824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.376417] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.385548] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 376.387314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.654368] Bluetooth: hci4: command 0x041b tx timeout [ 377.294774] Bluetooth: hci7: command 0x041b tx timeout [ 378.508433] Bluetooth: hci0: command 0x0409 tx timeout [ 378.671703] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.682050] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.693625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.703700] Bluetooth: hci4: command 0x040f tx timeout [ 378.730455] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.781853] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 378.814336] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.340579] Bluetooth: hci7: command 0x040f tx timeout [ 380.556334] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 380.557479] Bluetooth: hci0: command 0x041b tx timeout [ 380.748386] Bluetooth: hci4: command 0x0419 tx timeout [ 380.942216] Bluetooth: hci6: command 0x0409 tx timeout [ 381.388343] Bluetooth: hci7: command 0x0419 tx timeout [ 382.604354] Bluetooth: hci0: command 0x040f tx timeout [ 382.988771] Bluetooth: hci6: command 0x041b tx timeout [ 383.488420] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.494664] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.503016] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.523786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.548662] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 383.564632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 384.654500] Bluetooth: hci0: command 0x0419 tx timeout [ 385.036436] Bluetooth: hci6: command 0x040f tx timeout [ 385.676403] Bluetooth: hci5: command 0x0409 tx timeout [ 387.084350] Bluetooth: hci6: command 0x0419 tx timeout [ 387.725440] Bluetooth: hci5: command 0x041b tx timeout [ 389.388449] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 389.772600] Bluetooth: hci5: command 0x040f tx timeout [ 391.820350] Bluetooth: hci5: command 0x0419 tx timeout [ 394.188706] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 399.180411] Bluetooth: hci3: Opcode 0x c03 failed: -110 2023/08/21 05:12:14 executor 2 failed 11 times: executor 2: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 05:12:14 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff812f2743 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff88806ce397c0 RBP=ffff88800e8451f8 RSP=ffff88806ce09f98 R8 =0000000000000000 R9 =ffffed100d9c72f8 R10=ffff88806ce397c3 R11=00000000000012cc R12=ffff88800e8451f8 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88800e845200 RIP=ffffffff814260b9 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff341787540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff341c836f4 CR3=0000000026940000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007ff341c9247000007ff341c91f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff888008e57940 RCX=0000000000000100 RDX=1ffff110011caf31 RSI=ffffffff8113bd03 RDI=0000000000000001 RBP=ffffffff860d2b9e RSP=ffff888008e578c0 R8 =0000000000000001 R9 =0000000000000009 R10=0000000000000005 R11=0000000000000001 R12=0000000000000001 R13=0000000000000005 R14=ffff888008e57981 R15=ffffffff860d2ba2 RIP=ffffffff8113bd1a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa0961e0000 CR3=00000000334c2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000314e5341006c756f7472 XMM04=65675f454c4241545f474e495254535f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000