Warning: Permanently added '[localhost]:48944' (ECDSA) to the list of known hosts. 2024/10/28 12:03:33 fuzzer started 2024/10/28 12:03:34 dialing manager at localhost:45639 syzkaller login: [ 64.120175] cgroup: Unknown subsys name 'net' [ 64.294065] cgroup: Unknown subsys name 'cpuset' [ 64.338438] cgroup: Unknown subsys name 'rlimit' 2024/10/28 12:03:50 syscalls: 2217 2024/10/28 12:03:50 code coverage: enabled 2024/10/28 12:03:50 comparison tracing: enabled 2024/10/28 12:03:50 extra coverage: enabled 2024/10/28 12:03:50 setuid sandbox: enabled 2024/10/28 12:03:50 namespace sandbox: enabled 2024/10/28 12:03:50 Android sandbox: enabled 2024/10/28 12:03:50 fault injection: enabled 2024/10/28 12:03:50 leak checking: enabled 2024/10/28 12:03:50 net packet injection: enabled 2024/10/28 12:03:50 net device setup: enabled 2024/10/28 12:03:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/28 12:03:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/28 12:03:50 USB emulation: enabled 2024/10/28 12:03:50 hci packet injection: enabled 2024/10/28 12:03:50 wifi device emulation: enabled 2024/10/28 12:03:50 802.15.4 emulation: enabled 2024/10/28 12:03:50 fetching corpus: 50, signal 21183/22951 (executing program) 2024/10/28 12:03:51 fetching corpus: 100, signal 34602/37894 (executing program) 2024/10/28 12:03:51 fetching corpus: 150, signal 39977/44744 (executing program) 2024/10/28 12:03:51 fetching corpus: 200, signal 45401/51560 (executing program) 2024/10/28 12:03:51 fetching corpus: 250, signal 50507/57938 (executing program) 2024/10/28 12:03:52 fetching corpus: 300, signal 56901/65382 (executing program) 2024/10/28 12:03:52 fetching corpus: 350, signal 61003/70619 (executing program) 2024/10/28 12:03:52 fetching corpus: 400, signal 65290/75931 (executing program) 2024/10/28 12:03:53 fetching corpus: 450, signal 67475/79281 (executing program) 2024/10/28 12:03:53 fetching corpus: 500, signal 70195/83042 (executing program) 2024/10/28 12:03:53 fetching corpus: 550, signal 74127/87850 (executing program) 2024/10/28 12:03:54 fetching corpus: 600, signal 75718/90498 (executing program) 2024/10/28 12:03:54 fetching corpus: 650, signal 79079/94652 (executing program) 2024/10/28 12:03:54 fetching corpus: 700, signal 82244/98567 (executing program) 2024/10/28 12:03:55 fetching corpus: 750, signal 84967/101998 (executing program) 2024/10/28 12:03:55 fetching corpus: 800, signal 87329/105134 (executing program) 2024/10/28 12:03:56 fetching corpus: 850, signal 89110/107676 (executing program) 2024/10/28 12:03:56 fetching corpus: 900, signal 91056/110343 (executing program) 2024/10/28 12:03:56 fetching corpus: 950, signal 92215/112340 (executing program) 2024/10/28 12:03:56 fetching corpus: 1000, signal 94167/114933 (executing program) 2024/10/28 12:03:57 fetching corpus: 1050, signal 95659/117152 (executing program) 2024/10/28 12:03:57 fetching corpus: 1100, signal 97336/119484 (executing program) 2024/10/28 12:03:57 fetching corpus: 1150, signal 99154/121934 (executing program) 2024/10/28 12:03:57 fetching corpus: 1200, signal 100512/123963 (executing program) 2024/10/28 12:03:58 fetching corpus: 1250, signal 101609/125769 (executing program) 2024/10/28 12:03:58 fetching corpus: 1300, signal 103258/127955 (executing program) 2024/10/28 12:03:59 fetching corpus: 1350, signal 105093/130298 (executing program) 2024/10/28 12:03:59 fetching corpus: 1400, signal 106455/132197 (executing program) 2024/10/28 12:03:59 fetching corpus: 1450, signal 107542/133816 (executing program) 2024/10/28 12:03:59 fetching corpus: 1500, signal 108752/135561 (executing program) 2024/10/28 12:04:00 fetching corpus: 1550, signal 109877/137228 (executing program) 2024/10/28 12:04:00 fetching corpus: 1600, signal 110622/138628 (executing program) 2024/10/28 12:04:00 fetching corpus: 1650, signal 111516/140127 (executing program) 2024/10/28 12:04:01 fetching corpus: 1700, signal 112566/141730 (executing program) 2024/10/28 12:04:01 fetching corpus: 1750, signal 113790/143388 (executing program) 2024/10/28 12:04:01 fetching corpus: 1800, signal 114793/144886 (executing program) 2024/10/28 12:04:01 fetching corpus: 1850, signal 115724/146322 (executing program) 2024/10/28 12:04:01 fetching corpus: 1900, signal 116409/147585 (executing program) 2024/10/28 12:04:02 fetching corpus: 1950, signal 118536/149680 (executing program) 2024/10/28 12:04:02 fetching corpus: 2000, signal 119575/151099 (executing program) 2024/10/28 12:04:02 fetching corpus: 2050, signal 120118/152223 (executing program) 2024/10/28 12:04:03 fetching corpus: 2100, signal 121232/153678 (executing program) 2024/10/28 12:04:03 fetching corpus: 2150, signal 122122/155017 (executing program) 2024/10/28 12:04:03 fetching corpus: 2200, signal 122719/156147 (executing program) 2024/10/28 12:04:03 fetching corpus: 2250, signal 123410/157289 (executing program) 2024/10/28 12:04:03 fetching corpus: 2300, signal 124194/158487 (executing program) 2024/10/28 12:04:04 fetching corpus: 2350, signal 125043/159686 (executing program) 2024/10/28 12:04:04 fetching corpus: 2400, signal 125620/160716 (executing program) 2024/10/28 12:04:04 fetching corpus: 2450, signal 126733/161978 (executing program) 2024/10/28 12:04:04 fetching corpus: 2500, signal 127524/163007 (executing program) 2024/10/28 12:04:04 fetching corpus: 2550, signal 127975/163934 (executing program) 2024/10/28 12:04:04 fetching corpus: 2600, signal 128609/164919 (executing program) 2024/10/28 12:04:05 fetching corpus: 2650, signal 129611/166068 (executing program) 2024/10/28 12:04:05 fetching corpus: 2700, signal 130286/167056 (executing program) 2024/10/28 12:04:05 fetching corpus: 2750, signal 132153/168555 (executing program) 2024/10/28 12:04:06 fetching corpus: 2800, signal 132689/169412 (executing program) 2024/10/28 12:04:06 fetching corpus: 2850, signal 133636/170449 (executing program) 2024/10/28 12:04:06 fetching corpus: 2900, signal 134502/171476 (executing program) 2024/10/28 12:04:07 fetching corpus: 2950, signal 135201/172428 (executing program) 2024/10/28 12:04:07 fetching corpus: 3000, signal 136537/173540 (executing program) 2024/10/28 12:04:07 fetching corpus: 3050, signal 136990/174314 (executing program) 2024/10/28 12:04:08 fetching corpus: 3100, signal 137733/175198 (executing program) 2024/10/28 12:04:08 fetching corpus: 3150, signal 138180/175989 (executing program) 2024/10/28 12:04:08 fetching corpus: 3200, signal 138906/176824 (executing program) 2024/10/28 12:04:08 fetching corpus: 3250, signal 139356/177554 (executing program) 2024/10/28 12:04:08 fetching corpus: 3300, signal 140095/178392 (executing program) 2024/10/28 12:04:08 fetching corpus: 3350, signal 141304/179358 (executing program) 2024/10/28 12:04:08 fetching corpus: 3400, signal 142624/180602 (executing program) 2024/10/28 12:04:09 fetching corpus: 3450, signal 143317/181359 (executing program) 2024/10/28 12:04:09 fetching corpus: 3500, signal 143784/182037 (executing program) 2024/10/28 12:04:09 fetching corpus: 3550, signal 144218/182731 (executing program) 2024/10/28 12:04:09 fetching corpus: 3600, signal 144629/183421 (executing program) 2024/10/28 12:04:09 fetching corpus: 3650, signal 145022/184081 (executing program) 2024/10/28 12:04:09 fetching corpus: 3700, signal 145626/184760 (executing program) 2024/10/28 12:04:09 fetching corpus: 3750, signal 146088/185433 (executing program) 2024/10/28 12:04:09 fetching corpus: 3800, signal 146686/186106 (executing program) 2024/10/28 12:04:09 fetching corpus: 3850, signal 147221/186752 (executing program) 2024/10/28 12:04:10 fetching corpus: 3900, signal 147649/187346 (executing program) 2024/10/28 12:04:10 fetching corpus: 3950, signal 148074/187949 (executing program) 2024/10/28 12:04:10 fetching corpus: 4000, signal 148565/188539 (executing program) 2024/10/28 12:04:10 fetching corpus: 4050, signal 148947/189117 (executing program) 2024/10/28 12:04:10 fetching corpus: 4100, signal 149539/189731 (executing program) 2024/10/28 12:04:10 fetching corpus: 4150, signal 150161/190310 (executing program) 2024/10/28 12:04:10 fetching corpus: 4200, signal 150453/190863 (executing program) 2024/10/28 12:04:10 fetching corpus: 4250, signal 150867/191405 (executing program) 2024/10/28 12:04:11 fetching corpus: 4300, signal 151210/191921 (executing program) 2024/10/28 12:04:11 fetching corpus: 4350, signal 151784/192487 (executing program) 2024/10/28 12:04:11 fetching corpus: 4400, signal 152161/193008 (executing program) 2024/10/28 12:04:11 fetching corpus: 4450, signal 152715/193526 (executing program) 2024/10/28 12:04:12 fetching corpus: 4500, signal 153173/194029 (executing program) 2024/10/28 12:04:12 fetching corpus: 4550, signal 153724/194528 (executing program) 2024/10/28 12:04:12 fetching corpus: 4600, signal 154063/195000 (executing program) 2024/10/28 12:04:12 fetching corpus: 4650, signal 154411/195475 (executing program) 2024/10/28 12:04:12 fetching corpus: 4700, signal 154948/195902 (executing program) 2024/10/28 12:04:12 fetching corpus: 4750, signal 155773/196356 (executing program) 2024/10/28 12:04:13 fetching corpus: 4800, signal 156082/196801 (executing program) 2024/10/28 12:04:13 fetching corpus: 4850, signal 156356/197241 (executing program) 2024/10/28 12:04:13 fetching corpus: 4900, signal 156726/197683 (executing program) 2024/10/28 12:04:14 fetching corpus: 4950, signal 157060/197986 (executing program) 2024/10/28 12:04:14 fetching corpus: 5000, signal 157741/197986 (executing program) 2024/10/28 12:04:14 fetching corpus: 5050, signal 158261/197986 (executing program) 2024/10/28 12:04:14 fetching corpus: 5100, signal 158563/197986 (executing program) 2024/10/28 12:04:14 fetching corpus: 5150, signal 159005/197986 (executing program) 2024/10/28 12:04:15 fetching corpus: 5200, signal 159533/197986 (executing program) 2024/10/28 12:04:15 fetching corpus: 5250, signal 160091/197986 (executing program) 2024/10/28 12:04:15 fetching corpus: 5300, signal 160396/197986 (executing program) 2024/10/28 12:04:15 fetching corpus: 5350, signal 160834/197987 (executing program) 2024/10/28 12:04:15 fetching corpus: 5400, signal 161158/197987 (executing program) 2024/10/28 12:04:16 fetching corpus: 5450, signal 161608/197987 (executing program) 2024/10/28 12:04:16 fetching corpus: 5500, signal 162095/197987 (executing program) 2024/10/28 12:04:16 fetching corpus: 5550, signal 162362/197987 (executing program) 2024/10/28 12:04:17 fetching corpus: 5600, signal 162682/197987 (executing program) 2024/10/28 12:04:17 fetching corpus: 5650, signal 163236/197987 (executing program) 2024/10/28 12:04:17 fetching corpus: 5700, signal 163607/197987 (executing program) 2024/10/28 12:04:17 fetching corpus: 5750, signal 163922/197987 (executing program) 2024/10/28 12:04:17 fetching corpus: 5800, signal 164293/197987 (executing program) 2024/10/28 12:04:17 fetching corpus: 5850, signal 164727/197987 (executing program) 2024/10/28 12:04:18 fetching corpus: 5900, signal 164944/197987 (executing program) 2024/10/28 12:04:18 fetching corpus: 5950, signal 165243/197987 (executing program) 2024/10/28 12:04:18 fetching corpus: 6000, signal 165772/197987 (executing program) 2024/10/28 12:04:18 fetching corpus: 6050, signal 166173/197987 (executing program) 2024/10/28 12:04:19 fetching corpus: 6100, signal 166570/197987 (executing program) 2024/10/28 12:04:19 fetching corpus: 6150, signal 166831/197987 (executing program) 2024/10/28 12:04:19 fetching corpus: 6200, signal 167123/197987 (executing program) 2024/10/28 12:04:20 fetching corpus: 6250, signal 167385/197987 (executing program) 2024/10/28 12:04:20 fetching corpus: 6300, signal 167641/197987 (executing program) 2024/10/28 12:04:20 fetching corpus: 6350, signal 167917/197987 (executing program) 2024/10/28 12:04:20 fetching corpus: 6400, signal 168234/197987 (executing program) 2024/10/28 12:04:20 fetching corpus: 6450, signal 168507/197987 (executing program) 2024/10/28 12:04:20 fetching corpus: 6500, signal 168888/197987 (executing program) 2024/10/28 12:04:21 fetching corpus: 6550, signal 169185/197987 (executing program) 2024/10/28 12:04:21 fetching corpus: 6600, signal 169425/197987 (executing program) 2024/10/28 12:04:21 fetching corpus: 6650, signal 169715/197987 (executing program) 2024/10/28 12:04:21 fetching corpus: 6700, signal 170019/197987 (executing program) 2024/10/28 12:04:21 fetching corpus: 6750, signal 170445/197987 (executing program) 2024/10/28 12:04:21 fetching corpus: 6800, signal 170694/197987 (executing program) 2024/10/28 12:04:21 fetching corpus: 6850, signal 170976/197987 (executing program) 2024/10/28 12:04:22 fetching corpus: 6900, signal 171237/197987 (executing program) 2024/10/28 12:04:22 fetching corpus: 6950, signal 171469/197987 (executing program) 2024/10/28 12:04:22 fetching corpus: 7000, signal 171646/197987 (executing program) 2024/10/28 12:04:22 fetching corpus: 7050, signal 171840/197987 (executing program) 2024/10/28 12:04:22 fetching corpus: 7100, signal 172031/197987 (executing program) 2024/10/28 12:04:22 fetching corpus: 7150, signal 172439/197987 (executing program) 2024/10/28 12:04:22 fetching corpus: 7200, signal 172779/197987 (executing program) 2024/10/28 12:04:23 fetching corpus: 7250, signal 173007/197987 (executing program) 2024/10/28 12:04:23 fetching corpus: 7300, signal 173271/197987 (executing program) 2024/10/28 12:04:23 fetching corpus: 7350, signal 173473/197987 (executing program) 2024/10/28 12:04:24 fetching corpus: 7400, signal 173670/197987 (executing program) 2024/10/28 12:04:24 fetching corpus: 7450, signal 173887/197987 (executing program) 2024/10/28 12:04:24 fetching corpus: 7500, signal 174270/197987 (executing program) 2024/10/28 12:04:24 fetching corpus: 7550, signal 174525/197988 (executing program) 2024/10/28 12:04:25 fetching corpus: 7600, signal 174869/197988 (executing program) 2024/10/28 12:04:25 fetching corpus: 7650, signal 175104/197988 (executing program) 2024/10/28 12:04:25 fetching corpus: 7700, signal 175323/197988 (executing program) 2024/10/28 12:04:26 fetching corpus: 7750, signal 175616/197988 (executing program) 2024/10/28 12:04:26 fetching corpus: 7800, signal 175883/197988 (executing program) 2024/10/28 12:04:26 fetching corpus: 7850, signal 176223/197988 (executing program) 2024/10/28 12:04:26 fetching corpus: 7900, signal 176454/197988 (executing program) 2024/10/28 12:04:26 fetching corpus: 7950, signal 176906/197988 (executing program) 2024/10/28 12:04:27 fetching corpus: 8000, signal 177136/197988 (executing program) 2024/10/28 12:04:27 fetching corpus: 8050, signal 177460/197990 (executing program) 2024/10/28 12:04:27 fetching corpus: 8100, signal 177671/197990 (executing program) 2024/10/28 12:04:27 fetching corpus: 8150, signal 177961/197990 (executing program) 2024/10/28 12:04:27 fetching corpus: 8200, signal 178196/197990 (executing program) 2024/10/28 12:04:27 fetching corpus: 8250, signal 178411/197990 (executing program) 2024/10/28 12:04:28 fetching corpus: 8300, signal 178580/197990 (executing program) 2024/10/28 12:04:28 fetching corpus: 8350, signal 178836/197990 (executing program) 2024/10/28 12:04:28 fetching corpus: 8400, signal 179102/197990 (executing program) 2024/10/28 12:04:28 fetching corpus: 8450, signal 179263/197990 (executing program) 2024/10/28 12:04:28 fetching corpus: 8500, signal 179490/197990 (executing program) 2024/10/28 12:04:28 fetching corpus: 8550, signal 179667/197990 (executing program) 2024/10/28 12:04:28 fetching corpus: 8600, signal 180005/197990 (executing program) 2024/10/28 12:04:29 fetching corpus: 8650, signal 180188/197990 (executing program) 2024/10/28 12:04:29 fetching corpus: 8700, signal 180354/197990 (executing program) 2024/10/28 12:04:29 fetching corpus: 8750, signal 180592/197990 (executing program) 2024/10/28 12:04:29 fetching corpus: 8800, signal 180891/197990 (executing program) 2024/10/28 12:04:29 fetching corpus: 8850, signal 181071/197990 (executing program) 2024/10/28 12:04:30 fetching corpus: 8900, signal 181422/197990 (executing program) 2024/10/28 12:04:30 fetching corpus: 8950, signal 181588/197990 (executing program) 2024/10/28 12:04:30 fetching corpus: 9000, signal 181888/197990 (executing program) 2024/10/28 12:04:30 fetching corpus: 9050, signal 182051/197990 (executing program) 2024/10/28 12:04:31 fetching corpus: 9100, signal 182301/197990 (executing program) 2024/10/28 12:04:31 fetching corpus: 9150, signal 182818/197990 (executing program) 2024/10/28 12:04:32 fetching corpus: 9200, signal 183020/197990 (executing program) 2024/10/28 12:04:32 fetching corpus: 9250, signal 183251/197990 (executing program) 2024/10/28 12:04:32 fetching corpus: 9300, signal 183479/197990 (executing program) 2024/10/28 12:04:33 fetching corpus: 9350, signal 183855/197990 (executing program) 2024/10/28 12:04:33 fetching corpus: 9400, signal 184030/197990 (executing program) 2024/10/28 12:04:33 fetching corpus: 9450, signal 184353/197990 (executing program) 2024/10/28 12:04:34 fetching corpus: 9500, signal 184715/197990 (executing program) 2024/10/28 12:04:34 fetching corpus: 9550, signal 184924/197990 (executing program) 2024/10/28 12:04:34 fetching corpus: 9600, signal 185086/197992 (executing program) 2024/10/28 12:04:34 fetching corpus: 9650, signal 185225/197992 (executing program) 2024/10/28 12:04:35 fetching corpus: 9700, signal 185511/197992 (executing program) 2024/10/28 12:04:35 fetching corpus: 9750, signal 185928/197992 (executing program) 2024/10/28 12:04:36 fetching corpus: 9800, signal 186127/197992 (executing program) 2024/10/28 12:04:36 fetching corpus: 9850, signal 186318/197992 (executing program) 2024/10/28 12:04:36 fetching corpus: 9900, signal 186526/197992 (executing program) 2024/10/28 12:04:37 fetching corpus: 9950, signal 186725/197992 (executing program) 2024/10/28 12:04:37 fetching corpus: 10000, signal 186960/197992 (executing program) 2024/10/28 12:04:37 fetching corpus: 10050, signal 187198/197992 (executing program) 2024/10/28 12:04:38 fetching corpus: 10100, signal 187429/197992 (executing program) 2024/10/28 12:04:38 fetching corpus: 10150, signal 187557/197992 (executing program) 2024/10/28 12:04:38 fetching corpus: 10200, signal 187739/197992 (executing program) 2024/10/28 12:04:38 fetching corpus: 10250, signal 187884/197992 (executing program) 2024/10/28 12:04:38 fetching corpus: 10300, signal 188127/197992 (executing program) 2024/10/28 12:04:38 fetching corpus: 10350, signal 188313/197992 (executing program) 2024/10/28 12:04:38 fetching corpus: 10400, signal 188477/197992 (executing program) 2024/10/28 12:04:39 fetching corpus: 10450, signal 188775/197992 (executing program) 2024/10/28 12:04:39 fetching corpus: 10500, signal 188950/197992 (executing program) 2024/10/28 12:04:39 fetching corpus: 10550, signal 189098/197992 (executing program) 2024/10/28 12:04:39 fetching corpus: 10600, signal 189265/197992 (executing program) 2024/10/28 12:04:39 fetching corpus: 10650, signal 189392/197992 (executing program) 2024/10/28 12:04:40 fetching corpus: 10700, signal 189716/197992 (executing program) 2024/10/28 12:04:40 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/10/28 12:04:40 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/10/28 12:04:43 starting 8 fuzzer processes 12:04:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100000000, 0x402100) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0xe3, 0x1, 0x3, "a783850ba44e91396c2c08f6bbbce0fbf1d3551e7fb3250f01dd5b8996563c66b3a3e745c1ceb3657a3e322317084f4d4a7c17d3c8282ee1db39ff3e5b4ff5a7fa12d38290af343dd7ffc5a4fb9691d2ccdd7916a7850cab08b5a3056129b8cdd7e8f286bf5368fd682ac178d8dc08b62e81bdb7bc3227d6e952b5f7bdcec176b248cfdbafc89c8acacee9174ab448aef4953c1507d5793c0491e4c1746e5a8033e505c600687922b5542754413b62634030cd27395463e7ef4e68e93ff1a8a02062d11d439b72cb2e2df65c17326bb8c00745a7003241d7c638a78c3a449982ffc878"}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000200)=0x1c) r4 = accept$unix(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r3, r2, r2, r0, r1, r4], 0x6) r5 = accept4$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @none}, &(0x7f0000000380)=0xe, 0x0) ioctl$FIONCLEX(r5, 0x5450) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x120, 0x0, 0x200, 0x70bd25, 0x3ff, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5d57}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff00}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe322}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x404c804) r6 = socket$inet6(0xa, 0x3, 0x3e) read(r6, &(0x7f00000005c0)=""/20, 0x14) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000600)={0x1, 0x1}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000640)={0x1, {{0xa, 0x4e23, 0x4, @private1, 0x4}}, {{0xa, 0x4e21, 0x2c1, @mcast1, 0x2}}}, 0x108) open_tree(r1, &(0x7f0000000780)='./file0\x00', 0x81000) pivot_root(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00') listxattr(&(0x7f0000000840)='./file1\x00', &(0x7f0000000880)=""/132, 0x84) readahead(r6, 0xf4, 0x3) 12:04:43 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080d1}, 0x80) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xaf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x6c087b101b5f163f) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x80}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = dup(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000400)={0x70c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7bf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_MESH_SETUP={0x1c0, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0xe0, 0x3, "4160d29ed5333b044ced1fd95a18e090e1e3c9e251ffa12c77433b339fcc83f49eaf52cd4ab9c12f747440e847fcd02962a7906278b9a9c76440dd7da76914515c6d3d0a1db89ed2d5aa7e466ad998a06aeec2c47011d1da3c4c349577b2a7fb74c210f9cd0807ffd7e09b52a6636110794fd9e653e6c77802310f22d36480bb268edaf6df1d1c8e1ed3007b0edefa1bce3b7c4026bf1719b39579194ad88a94221f8572d31787049a87ced19d46f2f67b4f44cafe5de99bf4bd041df819f605f06fed0b41e40fb9ce2226502e4aa1bb6c6ab06d8273c1bd83927b29"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_IE={0x6e, 0x3, "4167be8d056e4cf495da3862842a24fd47e4193bdaee105a8e47f6e8c17d08ee2836286ab2c8e425920867deb1ca22112695f2ae89f554386e2820bc6d96f15a4ac6b79e7f605654eb604ec235e6efcaa009aab482eaf30a73d75a5a516f75dc168d0d6e19b007caf93a"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_IE={0x3e, 0x3, "e6f7fdb4417760758f19c8a2e965dbc5289fa3bdc56858c726cd61ef2485ee433bf0e0190bb5508a83bd9d46e87a58e130889ed72d52f8444189"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff34}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3ff}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x6}]}, @NL80211_ATTR_TX_RATES={0x4e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f1c, 0xfc01, 0x8, 0x400, 0xfff7, 0x81, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x3}, {0x4, 0x2}, {0x1, 0x6}, {0x4, 0x1d}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0xa}, {0x4, 0x7}, {0x5, 0x4}, {0x3, 0x3}, {0x0, 0xa}, {0x4, 0x5}, {0x2, 0x8}, {0x1, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x30, 0x1f, 0xc, 0x60, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x25, 0x9, 0xd2, 0x6c, 0xb, 0x30, 0x6c, 0x1a, 0x2, 0x60, 0x9, 0x6, 0x3, 0x30, 0x2, 0x60, 0xc, 0x2, 0x6c, 0x60, 0x16, 0x18, 0x24, 0x12, 0x3, 0x2, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x58db, 0x3ff, 0x4, 0x9d3f, 0x9, 0x6]}}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x16]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x2}, {0x2}, {0x3, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x8}, {0x4, 0x8}, {0x3, 0x5}, {0x4, 0x9}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x3, 0x9}, {0x3, 0x1}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x9}, {0x2, 0x9}, {0x2, 0x4}, {0x5, 0x9}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x6}, {0x3, 0x2}, {}, {0x3, 0x8}, {0x7}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0xb]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x7}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x4}, {0x2, 0xa}, {0x6, 0x6}, {0x0, 0x9}, {0x4, 0x4}, {0x6, 0x7}, {0x4, 0x5}, {0x5, 0x7}, {0x7, 0x6}, {0x4, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0x5}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x6}, {0x3, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x5, 0x4}, {0x5, 0x8}, {0x3, 0x5}, {0x4, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x5, 0x8}, {0x4, 0x9}, {0x2, 0x1}, {0x4, 0x4}, {0x4, 0x1}, {0x3}, {0x2, 0x2}, {0x6, 0x7}, {0x7, 0x1}, {0x7, 0x7}, {0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x7}, {0x5}, {0x5, 0x2}, {0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x6, 0x3, 0x12, 0x30, 0xc, 0x24, 0x2]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0xa}, {0x2, 0x9}, {0x6, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x4, 0x1}, {0x2, 0x8}, {0x4, 0x5}, {}, {0x3, 0x2}, {0x7, 0x7}, {0x5, 0x9}, {0x7}, {0x3, 0x2}, {0x7, 0x4}, {0x3, 0xa}, {0x2}, {0x1, 0x1}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0x8}, {0x2, 0x3}, {0x0, 0x4}, {0x6, 0x5}, {0x7}, {0x1, 0x6}, {0x6, 0x2}, {0x2, 0x4}, {0x0, 0x4}, {0x2, 0x6}, {0x6}, {0x3}, {0x5, 0x6}, {0x6, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x4, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {0x2, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x8}, {0x5, 0x4}, {0x2, 0x6}, {0x2, 0x8}, {0x6, 0x1}, {0x5, 0x6}, {0x3}, {0x2, 0x1}, {0x6}, {0x6, 0x7}, {0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x7, 0xa}, {0x7, 0x8}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x6}, {}, {0x1, 0x1}, {}, {0x3}, {0x7, 0x7}, {0x6, 0xa}, {0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x4, 0x8}, {0x6, 0xa}, {0x7, 0x5}, {0x5, 0x4}, {}, {0x0, 0x3}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x3, 0x0, 0x9, 0x0, 0x5, 0x1542, 0x6]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x24, 0x2dc2775fa5081383, 0x4, 0x18, 0x4, 0x12, 0xc, 0x30, 0xc, 0x1, 0x48, 0x1b, 0x60]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4}, {0x3, 0x7}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0xc595, 0x1, 0x9, 0xffff, 0x4, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x4, 0x1, 0xdac, 0xc99b, 0x3, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x118, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x401, 0x5, 0x0, 0x1ff, 0x123d, 0x26, 0x3633]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4a, 0x30, 0x16, 0xc, 0x3, 0x6c, 0x16, 0x24, 0x36, 0x4, 0x2, 0x1, 0x18, 0x36, 0x24, 0x2, 0x3, 0x30, 0x36, 0x36, 0x48, 0x1b, 0x24, 0xb, 0x1, 0x24, 0x72]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x3, 0x0, 0x3, 0xfffa, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x5, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x2, 0x3}, {0x7, 0x9}, {0x7}, {0x6, 0x3}, {0x4, 0xa}, {0x7, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x7, 0x6}, {0x1, 0x2}, {0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x5, 0xa}, {0x2, 0x9}, {0x1, 0x2}, {0x2}, {0x0, 0x9}, {0x5, 0x2}, {0x4, 0x8}, {0x6, 0x7}, {0x4}, {0x0, 0x3}, {0x6, 0x9}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x6}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x2}, {0x0, 0x1}, {0x4, 0x7}, {0x4}, {0x6, 0x3}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0x5}, {0x3}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x6, 0x7}, {0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x7, 0x8}, {0x4, 0xa}, {0x3, 0x9}, {0x4, 0x5}, {0x5}, {0x4, 0x9}, {0x0, 0x1}, {0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x7}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x7}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x0, 0x24, 0x0, 0x1, 0x6c, 0x16, 0x6, 0x8370ed380c70af54, 0x30, 0x16, 0xc, 0x1b, 0x4, 0xb, 0x3, 0x6c, 0x60, 0x30, 0x3]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x18, 0xb, 0x48, 0x36, 0x9, 0x2a, 0x12, 0x16, 0x6c, 0x1b, 0x48, 0xb, 0x3, 0x48, 0x2]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3}, {0x6}, {0x2, 0x6}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x5}, {0x1, 0x6}, {0x0, 0x5}, {0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x4, 0x6}, {0x7}, {0x3}, {0x2, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x1}, {}, {0x3, 0x4}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x1}, {0x6}, {0x6, 0x8}, {0x3, 0x4}, {0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x1}, {0x7, 0x6}, {0x5}, {0x0, 0xa}, {0x7, 0x9}, {0x4, 0x1}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0x9}, {0x7, 0xa}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x4}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0xa}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x5}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x6, 0x3}, {0x4, 0x9}, {0x4, 0x1}, {0x4}, {0x6, 0x8}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x6}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x3, 0x7}, {0x7, 0x7}, {0x1}, {0x6, 0x9}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x18, 0x24, 0x6, 0x1, 0xc, 0x16, 0x18, 0x12, 0x48, 0x12, 0x1b, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x0, 0x48, 0x5, 0x60, 0x12, 0x6c, 0x10, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0xfff7, 0xb19, 0x2, 0x40, 0x800, 0x6, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0xc, 0x4, 0x24, 0x1, 0x13, 0x2, 0x2, 0x36, 0x2, 0x5, 0x24, 0x5, 0x1, 0x9, 0x9, 0x29d1ad20809e372b, 0x3, 0x0, 0x3, 0x6, 0xb, 0xc, 0x2, 0x24, 0xc, 0x5, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x861, 0xff, 0x9, 0x1, 0x8, 0x8000, 0x800, 0x1ff]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2}, {0x3, 0x6}, {0x4, 0x4}, {0x0, 0x8}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x8}, {0x2, 0x9}, {0x4, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x4}, {0x3, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x9}, {0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x7, 0x6}, {0x7, 0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x7}, {0x6, 0x5}, {0x7, 0x4}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x7}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x7}, {0x2, 0x8}, {0x1, 0xa}, {0x2, 0x5}, {0x2, 0x5}, {0x7, 0x3}, {0x7}, {0x1, 0x7}, {0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1a, 0x1b, 0x12]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x7}, {0x5, 0x8}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x2}, {0x7, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x1}, {0x6, 0x4}, {0x1, 0x5}, {0x1}, {0x6, 0x8}, {0x7, 0x6}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x6}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0xa}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x3}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x9}, {0x6, 0x5}, {0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x7}, {0x5}, {0x0, 0x7}, {0x2, 0x8}, {0x6, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x6c, 0xb, 0x30, 0x60, 0x36, 0x16, 0x1b, 0x24, 0x16, 0x48, 0x1b, 0x18, 0x60, 0x15, 0x12, 0x35]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3f, 0x40, 0x8000, 0x7ff, 0x6, 0x1000, 0xff]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x12, 0x9, 0x6, 0x9, 0x18]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0xb, 0x60, 0xb, 0x18, 0x24, 0x1, 0x2, 0x48, 0x12, 0x30, 0x60, 0xb, 0x1, 0x30, 0x30, 0x1, 0x60, 0x48, 0x16, 0x36, 0x5, 0x4, 0x1, 0x4, 0x5, 0xc, 0x3, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}]}, 0x70c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x40, 0x8, 0x27, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x7, 0x8}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xb0, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000f80), 0x408400, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3f}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r6 = creat(&(0x7f00000010c0)='./file0\x00', 0x100) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x70, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x80010}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x5) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f00000015c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)={0x118, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x79, 0x2a, [@cf={0x4, 0x6, {0x63, 0x7, 0x6, 0x2}}, @mesh_chsw={0x76, 0x6, {0x4, 0x81, 0x33, 0x3517}}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0x81, 0x40, 0x7, @device_a, 0x1, "", 0x9, 0x1, 0x6, [{{0x1}, @broadcast, 0x40}, {{0x1, 0x0, 0x1}, @device_a, 0x3}, {{}, @device_a, 0x2b0a}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @device_a, 0x8b4}, {{0x1, 0x0, 0x1}, @device_a, 0x6}]}}, @supported_rates={0x1, 0x5, [{0x18}, {0x6c, 0x1}, {0x3}, {0x1, 0x1}, {0x24}]}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@peer_mgmt={0x75, 0x18, {0x1, 0xf72, @val=0x9, @val=0x2e, @val="af2639e8e8b31a714caff72724131b70"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x35, 0x2a, [@dsss={0x3, 0x1, 0xb1}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @mic={0x8c, 0x18, {0x92c, "ecb61488a4b7", @long="1c931b4bf33534a65814cab841b461ce"}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) 12:04:43 executing program 2: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'system.', '/\x00'}, &(0x7f0000000080)=""/235, 0xeb) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x3, @empty, 'team0\x00'}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="df28f526ed14f36992b102f2b6be85bad29a96f87f58888b9b65de708dfbe7f372676ee464c2f9f577e8b18d325ba6b640b8d7e0d7c329", 0x37}], 0x1, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}, 0x10) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x93) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) fchownat(r0, &(0x7f0000000340)='./file0\x00', r1, 0xffffffffffffffff, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000008, 0x10, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000500)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x4) r4 = openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r0, r5, &(0x7f0000000580)=0xa14, 0x8) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x2010, r6, 0x10000000) r8 = fsmount(r7, 0x0, 0xc8) fsetxattr(r4, &(0x7f0000000600)=@random={'osx.', '/-D\'(\x00'}, &(0x7f0000000640)='nl80211\x00', 0x8, 0x2) io_uring_setup(0xa90, &(0x7f0000000680)={0x0, 0xd9cc, 0x0, 0x2, 0x395, 0x0, r4}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) splice(r8, &(0x7f0000000700)=0x1ff, r9, &(0x7f0000000780)=0x93a1, 0x200, 0x1) 12:04:43 executing program 3: sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() [ 133.293200] audit: type=1400 audit(1730117083.438:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:04:43 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r2, 0x2, r1, 0x5, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000180)=0x4c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa6c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1608}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x98}}, 0x4c010) fcntl$setsig(r1, 0xa, 0x4) r5 = fsmount(r4, 0x1, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', r0, &(0x7f00000004c0)='./file0\x00') ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000500)={{}, 0x8, 0x2, 0xffffffff}) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20088840}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8) mount$9p_xen(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x400, &(0x7f0000000840)={'trans=xen,', {[{@cache_mmap}, {@version_u}, {@cache_none}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'syz0\x00'}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsroot={'smackfsroot', 0x3d, 'syz0\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r6}}, {@smackfshat}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000940)={r2, 0x2, r7, 0x8, 0x80000}) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000980)) 12:04:43 executing program 7: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, r0) pkey_free(r0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x3000)=nil) r1 = pkey_alloc(0x0, 0x1) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, r1) r2 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, r2) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, r2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb, r0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf, r1) pkey_free(r0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, r3) pkey_free(0xffffffffffffffff) 12:04:43 executing program 5: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b0, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x1e, 0x5b, "92356fa12cd726d7386a14b7a2482d5f019e5ab52a36c74be25c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfbff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x4f, 0x5b, "a7a67f17c3a6717d1f86c28044a5b25115116d12da46d75c3651667254fe1a9ffa5b95610f32a83efbec1ea32c0d1458a4b9bc713f1c0ff4c5f716d7eacd7095ea63fcfd5bc50afee4aac8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0xfb, 0x5b, "2ee127ca83372496d3ab70511c9f7a19746e35736994121a21e57e774468750e001513847b604aea0dd8e25148eee69a490f23846a8b804a183c6088cc3a92a95ad732ef2af005bb5741b7e58f9fdb508b49dfa3bbc92bcaa7ec14ae925695021c9e515f0f920b73af2f39d926bbd3305df5c316a289e3f5344b46db868c11ee75b1cfccaa40c850b3eafca379b10f4b00dea2d91f7d057e1997ed91c676497bf54b6501f50e29ada1f03e6d90b3c71aad34c3e59dce3a6e5b61f965f974467256730a20ebbc489d222d194f9da937818608fdb01ab221308dfbf04b24106324ec3d7260f002bcc74c5dfe23452e22031f81cf8fb3c02c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x805}, 0x40000) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x0, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008c080) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1e0, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x78, 0x5, "4d17129352ba6acb91dbf7f764f4b2c062e668d4f7816136710cc144857bd559d7f1273616a58c63e442057c6e6f247a29ecd87b8b9b691573497d4b428a0074eae54f8d1aedf85e62b84e53e00db11dbcc8519bf5e8ec265fd20a209620a49698737f215b0bfc188c8734784d3aff68d3bca8d4"}, @ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71a6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*{,*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@+\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0xc800, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1e0, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x404, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/diskstats\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000b80)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002140)={'gretap0\x00', &(0x7f0000002080)={'syztnl0\x00', 0x0, 0x1f, 0x7, 0xb831, 0x3ff, {{0x19, 0x4, 0x1, 0x3, 0x64, 0x68, 0x0, 0x7b, 0x4, 0x0, @multicast2, @remote, {[@generic={0x86, 0xc, "ea88079fb3b61fa79c36"}, @generic={0x94, 0x5, "a63a82"}, @generic={0x0, 0xa, "e83da55cd57ec555"}, @timestamp_prespec={0x44, 0x34, 0x38, 0x3, 0x9, [{@local, 0x5}, {@private=0xa010101}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x883a}, {@dev={0xac, 0x14, 0x14, 0x81}, 0x8}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000002200)={'ip6tnl0\x00', &(0x7f0000002180)={'syztnl1\x00', 0x0, 0x29, 0x92, 0x81, 0x0, 0x10, @private2, @loopback, 0x700, 0x8000, 0x10001, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000022c0)={'ip6gre0\x00', &(0x7f0000002240)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x20, 0x400, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x700, 0x20, 0x3f, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002340)={'batadv0\x00', 0x0}) r10 = accept4$packet(r2, &(0x7f0000002380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000023c0)=0x14, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000002640)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f8, r1, 0x6190939e23c2cd87, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r12 = creat(&(0x7f0000002680)='./file0\x00', 0x24) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x38, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x20000, 0xe}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000004) 12:04:43 executing program 6: lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.size\x00', &(0x7f0000000080)=""/62, 0x3e) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x391000, 0x0) getsockname$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x40, 0x102) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x40200) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup3(r3, r1, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0xffffffff80000000, 0x40, 0x3}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {r6}}, './file0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000340), &(0x7f0000000380)=0x10) r7 = signalfd4(r1, &(0x7f00000003c0)={[0x7]}, 0x8, 0x80000) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x40000, 0x4, 0x1}, 0x18) sendfile(r7, r8, &(0x7f0000000480), 0x101) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x80000018}) [ 134.756729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.773029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.777195] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.779463] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.783046] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 134.784085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.832948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.857689] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.859836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.891944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.893999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.897003] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.898888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.899698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.900696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.902105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.902915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.903153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.908911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.909552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.911625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.912055] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.915941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.917614] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 134.918143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 134.920602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.925311] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 134.928205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.929441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.930963] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 134.931306] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.933068] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.934229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 134.934486] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.942740] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 134.944313] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 134.945242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.946769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.947485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.948843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 134.954835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.957612] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 134.969657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.971598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.978886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.986081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.994699] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 134.998178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.943092] Bluetooth: hci0: command tx timeout [ 137.006468] Bluetooth: hci3: command tx timeout [ 137.007080] Bluetooth: hci1: command tx timeout [ 137.008206] Bluetooth: hci7: command tx timeout [ 137.008804] Bluetooth: hci5: command tx timeout [ 137.009399] Bluetooth: hci4: command tx timeout [ 137.009410] Bluetooth: hci2: command tx timeout [ 137.070441] Bluetooth: hci6: command tx timeout [ 138.990456] Bluetooth: hci0: command tx timeout [ 139.054430] Bluetooth: hci7: command tx timeout [ 139.054964] Bluetooth: hci3: command tx timeout [ 139.056399] Bluetooth: hci4: command tx timeout [ 139.056421] Bluetooth: hci5: command tx timeout [ 139.056838] Bluetooth: hci1: command tx timeout [ 139.057248] Bluetooth: hci2: command tx timeout [ 139.118542] Bluetooth: hci6: command tx timeout [ 141.039445] Bluetooth: hci0: command tx timeout [ 141.102520] Bluetooth: hci1: command tx timeout [ 141.103129] Bluetooth: hci2: command tx timeout [ 141.104386] Bluetooth: hci3: command tx timeout [ 141.104400] Bluetooth: hci5: command tx timeout [ 141.104437] Bluetooth: hci4: command tx timeout [ 141.104836] Bluetooth: hci7: command tx timeout [ 141.166456] Bluetooth: hci6: command tx timeout [ 143.086489] Bluetooth: hci0: command tx timeout [ 143.150422] Bluetooth: hci7: command tx timeout [ 143.151973] Bluetooth: hci1: command tx timeout [ 143.152102] Bluetooth: hci4: command tx timeout [ 143.153471] Bluetooth: hci3: command tx timeout [ 143.154460] Bluetooth: hci5: command tx timeout [ 143.154500] Bluetooth: hci2: command tx timeout [ 143.215501] Bluetooth: hci6: command tx timeout [ 197.379918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.381768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.383960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.391245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.396116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 197.397433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.503169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.506107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.507285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.515613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.517616] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.519137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.520558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.523947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.533575] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.536651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.544768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 197.548799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.564091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.575602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.591596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.595717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.604586] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 197.607662] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.627853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.642509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.651902] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.674527] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.682535] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.683891] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.710920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.714035] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.717520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.721257] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 197.727222] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 197.729441] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 197.735313] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.736900] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 197.737928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.750580] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 197.752710] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 197.755782] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 197.778210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.795737] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.798780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.858528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.880577] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 197.890779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.470440] Bluetooth: hci0: command tx timeout [ 199.598716] Bluetooth: hci1: command tx timeout [ 199.600056] Bluetooth: hci2: command tx timeout [ 199.662689] Bluetooth: hci3: command tx timeout [ 199.727459] Bluetooth: hci4: command tx timeout [ 199.792415] Bluetooth: hci6: command tx timeout [ 199.854427] Bluetooth: hci7: command tx timeout [ 199.982496] Bluetooth: hci5: command tx timeout [ 201.518467] Bluetooth: hci0: command tx timeout [ 201.648417] Bluetooth: hci1: command tx timeout [ 201.649128] Bluetooth: hci2: command tx timeout [ 201.710520] Bluetooth: hci3: command tx timeout [ 201.774512] Bluetooth: hci4: command tx timeout [ 201.838444] Bluetooth: hci6: command tx timeout [ 201.902520] Bluetooth: hci7: command tx timeout [ 202.030413] Bluetooth: hci5: command tx timeout [ 203.567105] Bluetooth: hci0: command tx timeout [ 203.695382] Bluetooth: hci2: command tx timeout [ 203.695917] Bluetooth: hci1: command tx timeout [ 203.758466] Bluetooth: hci3: command tx timeout [ 203.822422] Bluetooth: hci4: command tx timeout [ 203.886467] Bluetooth: hci6: command tx timeout [ 203.950430] Bluetooth: hci7: command tx timeout [ 204.079364] Bluetooth: hci5: command tx timeout [ 205.614629] Bluetooth: hci0: command tx timeout [ 205.742479] Bluetooth: hci2: command tx timeout [ 205.743003] Bluetooth: hci1: command tx timeout [ 205.806415] Bluetooth: hci3: command tx timeout [ 205.870471] Bluetooth: hci4: command tx timeout [ 205.935370] Bluetooth: hci6: command tx timeout [ 205.998632] Bluetooth: hci7: command tx timeout [ 206.126476] Bluetooth: hci5: command tx timeout [ 259.971737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.977624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.978858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.987444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.990253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.991254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.471600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.476631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.477902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.480748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.484194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 260.485454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.549958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.556797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.559546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.566814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.570694] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.571557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.576993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.580996] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.585618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 260.586421] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.592624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.601101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.602082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.611147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.626573] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.630856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.633016] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.635988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.640703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.642556] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.649180] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 260.650375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.651774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.654742] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.658989] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.672854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.679272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.706496] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 260.711168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.711235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.723934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 260.754842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 260.763054] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.780184] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 260.802514] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 260.805289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 262.062401] Bluetooth: hci0: command tx timeout [ 262.510555] Bluetooth: hci1: command tx timeout [ 262.640462] Bluetooth: hci2: command tx timeout [ 262.728358] Bluetooth: hci6: command tx timeout [ 262.734432] Bluetooth: hci3: command tx timeout [ 262.832401] Bluetooth: hci4: command tx timeout [ 262.832414] Bluetooth: hci5: command tx timeout [ 262.895524] Bluetooth: hci7: command tx timeout [ 264.110430] Bluetooth: hci0: command tx timeout [ 264.558637] Bluetooth: hci1: command tx timeout [ 264.686390] Bluetooth: hci2: command tx timeout [ 264.752360] Bluetooth: hci3: command tx timeout [ 264.752417] Bluetooth: hci6: command tx timeout [ 264.878429] Bluetooth: hci4: command tx timeout [ 264.878562] Bluetooth: hci5: command tx timeout [ 264.942542] Bluetooth: hci7: command tx timeout [ 266.158498] Bluetooth: hci0: command tx timeout [ 266.606401] Bluetooth: hci1: command tx timeout [ 266.735393] Bluetooth: hci2: command tx timeout [ 266.799378] Bluetooth: hci6: command tx timeout [ 266.799413] Bluetooth: hci3: command tx timeout [ 266.926773] Bluetooth: hci4: command tx timeout [ 266.927388] Bluetooth: hci5: command tx timeout [ 266.990450] Bluetooth: hci7: command tx timeout [ 268.207405] Bluetooth: hci0: command tx timeout [ 268.654552] Bluetooth: hci1: command tx timeout [ 268.784382] Bluetooth: hci2: command tx timeout [ 268.846391] Bluetooth: hci3: command tx timeout [ 268.847438] Bluetooth: hci6: command tx timeout [ 268.974688] Bluetooth: hci4: command tx timeout [ 268.975932] Bluetooth: hci5: command tx timeout [ 269.038423] Bluetooth: hci7: command tx timeout [ 322.714796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.720822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.721841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.725048] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.727017] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.728021] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.978947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.986802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.988016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.993432] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.996140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 322.999692] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.074909] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.081138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.082860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.094172] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.097612] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 323.103504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.138733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.143496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.156942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.161860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.165819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.169526] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.176161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.182800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.184555] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 323.185647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.194755] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 323.196175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.239975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.243803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.245258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.252506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.255958] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 323.257151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.519703] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.521728] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.532616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.549887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.574588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.597109] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.598193] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.601216] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.603811] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 323.604840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 323.607716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.610013] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.785368] Bluetooth: hci0: command tx timeout [ 325.039586] Bluetooth: hci1: command tx timeout [ 325.166480] Bluetooth: hci2: command tx timeout [ 325.230507] Bluetooth: hci3: command tx timeout [ 325.298411] Bluetooth: hci5: command tx timeout [ 325.299052] Bluetooth: hci4: command tx timeout [ 325.742429] Bluetooth: hci6: command tx timeout [ 325.742435] Bluetooth: hci7: command tx timeout [ 326.831094] Bluetooth: hci0: command tx timeout [ 327.087547] Bluetooth: hci1: command tx timeout [ 327.216625] Bluetooth: hci2: command tx timeout [ 327.278389] Bluetooth: hci3: command tx timeout [ 327.342519] Bluetooth: hci4: command tx timeout [ 327.342601] Bluetooth: hci5: command tx timeout [ 327.790437] Bluetooth: hci6: command tx timeout [ 327.793400] Bluetooth: hci7: command tx timeout [ 328.878389] Bluetooth: hci0: command tx timeout [ 329.134473] Bluetooth: hci1: command tx timeout [ 329.262426] Bluetooth: hci2: command tx timeout [ 329.326432] Bluetooth: hci3: command tx timeout [ 329.390425] Bluetooth: hci4: command tx timeout [ 329.390452] Bluetooth: hci5: command tx timeout [ 329.838505] Bluetooth: hci7: command tx timeout [ 329.838555] Bluetooth: hci6: command tx timeout [ 330.926380] Bluetooth: hci0: command tx timeout [ 331.184331] Bluetooth: hci1: command tx timeout [ 331.311503] Bluetooth: hci2: command tx timeout [ 331.375544] Bluetooth: hci3: command tx timeout [ 331.438609] Bluetooth: hci4: command tx timeout [ 331.438780] Bluetooth: hci5: command tx timeout [ 331.886632] Bluetooth: hci7: command tx timeout [ 331.887384] Bluetooth: hci6: command tx timeout [ 385.471573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.492589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.495901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.519963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.551956] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 385.560578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.723148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.727499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.728570] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.733515] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.737134] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 385.738363] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.799454] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.802300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.803729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.804518] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.805673] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.806586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.811300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.819505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.824766] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 385.831639] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 385.831725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.833665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.858180] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.860868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.862672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.884875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.887425] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.898596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.901103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 385.906226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.929665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.937739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.939826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.943433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.946064] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 385.948384] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.956918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 385.967458] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 385.970537] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 385.976545] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 385.978969] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 386.011473] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.013954] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 386.097142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.103386] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 386.107995] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 387.632511] Bluetooth: hci0: command tx timeout [ 387.758720] Bluetooth: hci1: command tx timeout [ 387.950379] Bluetooth: hci3: command tx timeout [ 388.014425] Bluetooth: hci4: command tx timeout [ 388.015062] Bluetooth: hci2: command tx timeout [ 388.080134] Bluetooth: hci5: command tx timeout [ 388.206521] Bluetooth: hci7: command tx timeout [ 388.270516] Bluetooth: hci6: command tx timeout [ 389.678372] Bluetooth: hci0: command tx timeout [ 389.806361] Bluetooth: hci1: command tx timeout [ 389.998354] Bluetooth: hci3: command tx timeout [ 390.062541] Bluetooth: hci2: command tx timeout [ 390.062796] Bluetooth: hci4: command tx timeout [ 390.126402] Bluetooth: hci5: command tx timeout [ 390.256320] Bluetooth: hci7: command tx timeout [ 390.318382] Bluetooth: hci6: command tx timeout [ 391.726347] Bluetooth: hci0: command tx timeout [ 391.854460] Bluetooth: hci1: command tx timeout [ 392.046434] Bluetooth: hci3: command tx timeout [ 392.110435] Bluetooth: hci2: command tx timeout [ 392.112013] Bluetooth: hci4: command tx timeout [ 392.175734] Bluetooth: hci5: command tx timeout [ 392.304595] Bluetooth: hci7: command tx timeout [ 392.366480] Bluetooth: hci6: command tx timeout [ 393.775436] Bluetooth: hci0: command tx timeout [ 393.914538] Bluetooth: hci1: command tx timeout [ 394.094562] Bluetooth: hci3: command tx timeout [ 394.158595] Bluetooth: hci4: command tx timeout [ 394.158664] Bluetooth: hci2: command tx timeout [ 394.222478] Bluetooth: hci5: command tx timeout [ 394.350411] Bluetooth: hci7: command tx timeout [ 394.415331] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:09:53 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=000000000002b000 RCX=ffffffff817c6037 RDX=ffff88803eb30000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000100012 RSP=ffff888033e67a28 R8 =0000000000000001 R9 =ffff88803eb30a38 R10=0000000000000000 R11=0000000000000001 R12=000055eebe80e000 R13=0000000000000000 R14=0000000000000001 R15=ffff888015cb4000 RIP=ffffffff81517c24 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0787bf4368 CR3=000000003f730000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff867c2db0 RBX=0000000000000002 RCX=ffffffff867c2db0 RDX=0000000000000000 RSI=ffffffff867c2db0 RDI=ffffffff864747c8 RBP=ffff88806cf09ad0 RSP=ffff88806cf09a08 R8 =ffffffff867c2db0 R9 =ffff88806cf09ab8 R10=000000000003c001 R11=00000000000111a0 R12=ffff88806cf09ad8 R13=ffff88806cf09ac0 R14=ffff88806cf09ab9 R15=ffff88806cf09a78 RIP=ffffffff81149514 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc4bbb1bd90 CR3=000000000edb4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000