Warning: Permanently added '[localhost]:24169' (ECDSA) to the list of known hosts. 2024/11/12 00:33:18 fuzzer started 2024/11/12 00:33:18 dialing manager at localhost:46317 syzkaller login: [ 63.987180] cgroup: Unknown subsys name 'net' [ 64.134316] cgroup: Unknown subsys name 'cpuset' [ 64.177023] cgroup: Unknown subsys name 'rlimit' 2024/11/12 00:33:35 syscalls: 2217 2024/11/12 00:33:35 code coverage: enabled 2024/11/12 00:33:35 comparison tracing: enabled 2024/11/12 00:33:35 extra coverage: enabled 2024/11/12 00:33:35 setuid sandbox: enabled 2024/11/12 00:33:35 namespace sandbox: enabled 2024/11/12 00:33:35 Android sandbox: enabled 2024/11/12 00:33:35 fault injection: enabled 2024/11/12 00:33:35 leak checking: enabled 2024/11/12 00:33:35 net packet injection: enabled 2024/11/12 00:33:35 net device setup: enabled 2024/11/12 00:33:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/12 00:33:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/12 00:33:35 USB emulation: enabled 2024/11/12 00:33:35 hci packet injection: enabled 2024/11/12 00:33:35 wifi device emulation: enabled 2024/11/12 00:33:35 802.15.4 emulation: enabled 2024/11/12 00:33:36 fetching corpus: 50, signal 21673/23475 (executing program) 2024/11/12 00:33:36 fetching corpus: 100, signal 28225/31701 (executing program) 2024/11/12 00:33:36 fetching corpus: 150, signal 34647/39651 (executing program) 2024/11/12 00:33:36 fetching corpus: 200, signal 45141/51392 (executing program) 2024/11/12 00:33:36 fetching corpus: 250, signal 49743/57326 (executing program) 2024/11/12 00:33:37 fetching corpus: 300, signal 54961/63769 (executing program) 2024/11/12 00:33:37 fetching corpus: 350, signal 56924/67047 (executing program) 2024/11/12 00:33:37 fetching corpus: 400, signal 61305/72515 (executing program) 2024/11/12 00:33:37 fetching corpus: 450, signal 64537/76784 (executing program) 2024/11/12 00:33:38 fetching corpus: 500, signal 67128/80482 (executing program) 2024/11/12 00:33:38 fetching corpus: 550, signal 69185/83692 (executing program) 2024/11/12 00:33:38 fetching corpus: 600, signal 71234/86820 (executing program) 2024/11/12 00:33:38 fetching corpus: 650, signal 73813/90368 (executing program) 2024/11/12 00:33:38 fetching corpus: 700, signal 77100/94520 (executing program) 2024/11/12 00:33:38 fetching corpus: 750, signal 79256/97597 (executing program) 2024/11/12 00:33:39 fetching corpus: 800, signal 81079/100361 (executing program) 2024/11/12 00:33:39 fetching corpus: 850, signal 83363/103476 (executing program) 2024/11/12 00:33:39 fetching corpus: 900, signal 84834/105876 (executing program) 2024/11/12 00:33:40 fetching corpus: 950, signal 86381/108272 (executing program) 2024/11/12 00:33:40 fetching corpus: 1000, signal 89014/111502 (executing program) 2024/11/12 00:33:41 fetching corpus: 1050, signal 91402/114534 (executing program) 2024/11/12 00:33:41 fetching corpus: 1100, signal 92505/116515 (executing program) 2024/11/12 00:33:41 fetching corpus: 1150, signal 95005/119474 (executing program) 2024/11/12 00:33:41 fetching corpus: 1200, signal 96222/121489 (executing program) 2024/11/12 00:33:42 fetching corpus: 1250, signal 97791/123683 (executing program) 2024/11/12 00:33:42 fetching corpus: 1300, signal 99642/126078 (executing program) 2024/11/12 00:33:42 fetching corpus: 1350, signal 101372/128347 (executing program) 2024/11/12 00:33:43 fetching corpus: 1400, signal 102917/130519 (executing program) 2024/11/12 00:33:43 fetching corpus: 1450, signal 104521/132610 (executing program) 2024/11/12 00:33:44 fetching corpus: 1500, signal 105257/134110 (executing program) 2024/11/12 00:33:44 fetching corpus: 1550, signal 106390/135847 (executing program) 2024/11/12 00:33:44 fetching corpus: 1600, signal 107590/137615 (executing program) 2024/11/12 00:33:45 fetching corpus: 1650, signal 108708/139297 (executing program) 2024/11/12 00:33:45 fetching corpus: 1700, signal 109872/140993 (executing program) 2024/11/12 00:33:45 fetching corpus: 1750, signal 111552/143004 (executing program) 2024/11/12 00:33:46 fetching corpus: 1800, signal 112497/144509 (executing program) 2024/11/12 00:33:46 fetching corpus: 1850, signal 115444/147274 (executing program) 2024/11/12 00:33:46 fetching corpus: 1900, signal 116363/148707 (executing program) 2024/11/12 00:33:47 fetching corpus: 1950, signal 117050/149945 (executing program) 2024/11/12 00:33:47 fetching corpus: 2000, signal 118057/151432 (executing program) 2024/11/12 00:33:47 fetching corpus: 2050, signal 118905/152813 (executing program) 2024/11/12 00:33:47 fetching corpus: 2100, signal 119809/154152 (executing program) 2024/11/12 00:33:48 fetching corpus: 2150, signal 120818/155580 (executing program) 2024/11/12 00:33:48 fetching corpus: 2200, signal 122125/157105 (executing program) 2024/11/12 00:33:48 fetching corpus: 2250, signal 122714/158210 (executing program) 2024/11/12 00:33:48 fetching corpus: 2300, signal 123593/159520 (executing program) 2024/11/12 00:33:49 fetching corpus: 2350, signal 124337/160745 (executing program) 2024/11/12 00:33:49 fetching corpus: 2400, signal 125333/162067 (executing program) 2024/11/12 00:33:49 fetching corpus: 2450, signal 127140/163769 (executing program) 2024/11/12 00:33:50 fetching corpus: 2500, signal 127817/164864 (executing program) 2024/11/12 00:33:50 fetching corpus: 2550, signal 128361/165821 (executing program) 2024/11/12 00:33:50 fetching corpus: 2600, signal 128949/166878 (executing program) 2024/11/12 00:33:50 fetching corpus: 2650, signal 129689/167933 (executing program) 2024/11/12 00:33:50 fetching corpus: 2700, signal 130686/169086 (executing program) 2024/11/12 00:33:50 fetching corpus: 2750, signal 131442/170126 (executing program) 2024/11/12 00:33:51 fetching corpus: 2800, signal 132379/171302 (executing program) 2024/11/12 00:33:51 fetching corpus: 2850, signal 133210/172348 (executing program) 2024/11/12 00:33:51 fetching corpus: 2900, signal 133875/173361 (executing program) 2024/11/12 00:33:51 fetching corpus: 2950, signal 134659/174373 (executing program) 2024/11/12 00:33:51 fetching corpus: 3000, signal 135086/175211 (executing program) 2024/11/12 00:33:52 fetching corpus: 3050, signal 136007/176236 (executing program) 2024/11/12 00:33:52 fetching corpus: 3100, signal 136581/177138 (executing program) 2024/11/12 00:33:52 fetching corpus: 3150, signal 137475/178130 (executing program) 2024/11/12 00:33:52 fetching corpus: 3200, signal 138598/179208 (executing program) 2024/11/12 00:33:52 fetching corpus: 3250, signal 139127/180033 (executing program) 2024/11/12 00:33:52 fetching corpus: 3300, signal 139785/180846 (executing program) 2024/11/12 00:33:53 fetching corpus: 3350, signal 140228/181638 (executing program) 2024/11/12 00:33:53 fetching corpus: 3400, signal 140774/182433 (executing program) 2024/11/12 00:33:53 fetching corpus: 3450, signal 141244/183212 (executing program) 2024/11/12 00:33:53 fetching corpus: 3500, signal 141748/183958 (executing program) 2024/11/12 00:33:53 fetching corpus: 3550, signal 142285/184694 (executing program) 2024/11/12 00:33:53 fetching corpus: 3600, signal 142810/185433 (executing program) 2024/11/12 00:33:54 fetching corpus: 3650, signal 143496/186208 (executing program) 2024/11/12 00:33:54 fetching corpus: 3700, signal 144174/186962 (executing program) 2024/11/12 00:33:54 fetching corpus: 3750, signal 145152/187790 (executing program) 2024/11/12 00:33:55 fetching corpus: 3800, signal 145560/188481 (executing program) 2024/11/12 00:33:55 fetching corpus: 3850, signal 146167/189249 (executing program) 2024/11/12 00:33:55 fetching corpus: 3900, signal 146514/189899 (executing program) 2024/11/12 00:33:55 fetching corpus: 3950, signal 147573/190695 (executing program) 2024/11/12 00:33:55 fetching corpus: 4000, signal 147906/191349 (executing program) 2024/11/12 00:33:56 fetching corpus: 4050, signal 148295/191994 (executing program) 2024/11/12 00:33:56 fetching corpus: 4100, signal 148776/192607 (executing program) 2024/11/12 00:33:56 fetching corpus: 4150, signal 149089/193224 (executing program) 2024/11/12 00:33:56 fetching corpus: 4200, signal 149450/193841 (executing program) 2024/11/12 00:33:56 fetching corpus: 4250, signal 150019/194496 (executing program) 2024/11/12 00:33:57 fetching corpus: 4300, signal 150456/195064 (executing program) 2024/11/12 00:33:57 fetching corpus: 4350, signal 150795/195644 (executing program) 2024/11/12 00:33:57 fetching corpus: 4400, signal 151258/196257 (executing program) 2024/11/12 00:33:58 fetching corpus: 4450, signal 151923/196899 (executing program) 2024/11/12 00:33:58 fetching corpus: 4500, signal 152432/197439 (executing program) 2024/11/12 00:33:58 fetching corpus: 4550, signal 153084/198024 (executing program) 2024/11/12 00:33:58 fetching corpus: 4600, signal 153692/198559 (executing program) 2024/11/12 00:33:58 fetching corpus: 4650, signal 154100/199074 (executing program) 2024/11/12 00:33:58 fetching corpus: 4700, signal 154653/199619 (executing program) 2024/11/12 00:33:58 fetching corpus: 4750, signal 154904/200117 (executing program) 2024/11/12 00:33:58 fetching corpus: 4800, signal 155511/200601 (executing program) 2024/11/12 00:33:59 fetching corpus: 4850, signal 155945/201064 (executing program) 2024/11/12 00:33:59 fetching corpus: 4900, signal 156318/201550 (executing program) 2024/11/12 00:33:59 fetching corpus: 4950, signal 156522/202045 (executing program) 2024/11/12 00:34:00 fetching corpus: 5000, signal 156994/202532 (executing program) 2024/11/12 00:34:00 fetching corpus: 5050, signal 157490/202967 (executing program) 2024/11/12 00:34:00 fetching corpus: 5100, signal 157859/203221 (executing program) 2024/11/12 00:34:00 fetching corpus: 5150, signal 158262/203221 (executing program) 2024/11/12 00:34:01 fetching corpus: 5200, signal 158616/203221 (executing program) 2024/11/12 00:34:01 fetching corpus: 5250, signal 159026/203221 (executing program) 2024/11/12 00:34:01 fetching corpus: 5300, signal 159792/203221 (executing program) 2024/11/12 00:34:01 fetching corpus: 5350, signal 160125/203221 (executing program) 2024/11/12 00:34:01 fetching corpus: 5400, signal 160504/203221 (executing program) 2024/11/12 00:34:02 fetching corpus: 5450, signal 161050/203221 (executing program) 2024/11/12 00:34:02 fetching corpus: 5500, signal 161253/203221 (executing program) 2024/11/12 00:34:02 fetching corpus: 5550, signal 161582/203221 (executing program) 2024/11/12 00:34:03 fetching corpus: 5600, signal 162274/203221 (executing program) 2024/11/12 00:34:03 fetching corpus: 5650, signal 162728/203221 (executing program) 2024/11/12 00:34:03 fetching corpus: 5700, signal 163228/203221 (executing program) 2024/11/12 00:34:04 fetching corpus: 5750, signal 163584/203221 (executing program) 2024/11/12 00:34:04 fetching corpus: 5800, signal 163896/203221 (executing program) 2024/11/12 00:34:04 fetching corpus: 5850, signal 164087/203221 (executing program) 2024/11/12 00:34:04 fetching corpus: 5900, signal 164398/203222 (executing program) 2024/11/12 00:34:05 fetching corpus: 5950, signal 164658/203222 (executing program) 2024/11/12 00:34:05 fetching corpus: 6000, signal 164973/203222 (executing program) 2024/11/12 00:34:06 fetching corpus: 6050, signal 165338/203222 (executing program) 2024/11/12 00:34:06 fetching corpus: 6100, signal 165744/203222 (executing program) 2024/11/12 00:34:06 fetching corpus: 6150, signal 166115/203222 (executing program) 2024/11/12 00:34:07 fetching corpus: 6200, signal 166406/203222 (executing program) 2024/11/12 00:34:07 fetching corpus: 6250, signal 167019/203222 (executing program) 2024/11/12 00:34:07 fetching corpus: 6300, signal 167279/203222 (executing program) 2024/11/12 00:34:07 fetching corpus: 6350, signal 167499/203222 (executing program) 2024/11/12 00:34:08 fetching corpus: 6400, signal 167806/203222 (executing program) 2024/11/12 00:34:08 fetching corpus: 6450, signal 168116/203222 (executing program) 2024/11/12 00:34:09 fetching corpus: 6500, signal 168410/203222 (executing program) 2024/11/12 00:34:09 fetching corpus: 6550, signal 168683/203222 (executing program) 2024/11/12 00:34:09 fetching corpus: 6600, signal 169046/203222 (executing program) 2024/11/12 00:34:09 fetching corpus: 6650, signal 169471/203222 (executing program) 2024/11/12 00:34:09 fetching corpus: 6700, signal 169780/203222 (executing program) 2024/11/12 00:34:09 fetching corpus: 6750, signal 170241/203222 (executing program) 2024/11/12 00:34:10 fetching corpus: 6800, signal 170559/203222 (executing program) 2024/11/12 00:34:10 fetching corpus: 6850, signal 170808/203222 (executing program) 2024/11/12 00:34:10 fetching corpus: 6900, signal 171233/203226 (executing program) 2024/11/12 00:34:11 fetching corpus: 6950, signal 171483/203226 (executing program) 2024/11/12 00:34:11 fetching corpus: 7000, signal 171744/203226 (executing program) 2024/11/12 00:34:11 fetching corpus: 7050, signal 172077/203226 (executing program) 2024/11/12 00:34:12 fetching corpus: 7100, signal 172383/203226 (executing program) 2024/11/12 00:34:12 fetching corpus: 7150, signal 172614/203226 (executing program) 2024/11/12 00:34:12 fetching corpus: 7200, signal 172897/203226 (executing program) 2024/11/12 00:34:12 fetching corpus: 7250, signal 173151/203226 (executing program) 2024/11/12 00:34:12 fetching corpus: 7300, signal 173345/203226 (executing program) 2024/11/12 00:34:12 fetching corpus: 7350, signal 173621/203226 (executing program) 2024/11/12 00:34:13 fetching corpus: 7400, signal 173916/203226 (executing program) 2024/11/12 00:34:13 fetching corpus: 7450, signal 174273/203226 (executing program) 2024/11/12 00:34:13 fetching corpus: 7500, signal 174595/203226 (executing program) 2024/11/12 00:34:13 fetching corpus: 7550, signal 174822/203226 (executing program) 2024/11/12 00:34:14 fetching corpus: 7600, signal 175218/203226 (executing program) 2024/11/12 00:34:14 fetching corpus: 7650, signal 175371/203226 (executing program) 2024/11/12 00:34:14 fetching corpus: 7700, signal 175737/203226 (executing program) 2024/11/12 00:34:14 fetching corpus: 7750, signal 176004/203226 (executing program) 2024/11/12 00:34:15 fetching corpus: 7800, signal 176191/203229 (executing program) 2024/11/12 00:34:15 fetching corpus: 7850, signal 176422/203229 (executing program) 2024/11/12 00:34:15 fetching corpus: 7900, signal 176655/203229 (executing program) 2024/11/12 00:34:16 fetching corpus: 7950, signal 176937/203229 (executing program) 2024/11/12 00:34:16 fetching corpus: 8000, signal 177173/203229 (executing program) 2024/11/12 00:34:16 fetching corpus: 8050, signal 177655/203229 (executing program) 2024/11/12 00:34:17 fetching corpus: 8100, signal 177922/203229 (executing program) 2024/11/12 00:34:17 fetching corpus: 8150, signal 178134/203229 (executing program) 2024/11/12 00:34:17 fetching corpus: 8200, signal 178581/203229 (executing program) 2024/11/12 00:34:18 fetching corpus: 8250, signal 179079/203231 (executing program) 2024/11/12 00:34:18 fetching corpus: 8300, signal 179379/203231 (executing program) 2024/11/12 00:34:18 fetching corpus: 8350, signal 179638/203231 (executing program) 2024/11/12 00:34:18 fetching corpus: 8400, signal 179869/203231 (executing program) 2024/11/12 00:34:19 fetching corpus: 8450, signal 180075/203234 (executing program) 2024/11/12 00:34:19 fetching corpus: 8500, signal 180304/203234 (executing program) 2024/11/12 00:34:19 fetching corpus: 8550, signal 180565/203234 (executing program) 2024/11/12 00:34:20 fetching corpus: 8600, signal 180845/203234 (executing program) 2024/11/12 00:34:20 fetching corpus: 8650, signal 181058/203234 (executing program) 2024/11/12 00:34:20 fetching corpus: 8700, signal 181245/203234 (executing program) 2024/11/12 00:34:20 fetching corpus: 8750, signal 181581/203234 (executing program) 2024/11/12 00:34:21 fetching corpus: 8800, signal 181789/203234 (executing program) 2024/11/12 00:34:21 fetching corpus: 8850, signal 182030/203234 (executing program) 2024/11/12 00:34:21 fetching corpus: 8900, signal 182256/203234 (executing program) 2024/11/12 00:34:22 fetching corpus: 8950, signal 182481/203234 (executing program) 2024/11/12 00:34:22 fetching corpus: 9000, signal 182694/203234 (executing program) 2024/11/12 00:34:22 fetching corpus: 9050, signal 183006/203234 (executing program) 2024/11/12 00:34:23 fetching corpus: 9100, signal 183175/203234 (executing program) 2024/11/12 00:34:23 fetching corpus: 9150, signal 183565/203234 (executing program) 2024/11/12 00:34:23 fetching corpus: 9200, signal 183770/203234 (executing program) 2024/11/12 00:34:23 fetching corpus: 9250, signal 183907/203234 (executing program) 2024/11/12 00:34:23 fetching corpus: 9300, signal 184163/203242 (executing program) 2024/11/12 00:34:24 fetching corpus: 9350, signal 184351/203242 (executing program) 2024/11/12 00:34:24 fetching corpus: 9400, signal 184532/203242 (executing program) 2024/11/12 00:34:25 fetching corpus: 9450, signal 184812/203242 (executing program) 2024/11/12 00:34:25 fetching corpus: 9500, signal 184985/203242 (executing program) 2024/11/12 00:34:25 fetching corpus: 9550, signal 185139/203242 (executing program) 2024/11/12 00:34:25 fetching corpus: 9600, signal 185306/203242 (executing program) 2024/11/12 00:34:26 fetching corpus: 9650, signal 185454/203242 (executing program) 2024/11/12 00:34:26 fetching corpus: 9700, signal 185592/203242 (executing program) 2024/11/12 00:34:26 fetching corpus: 9750, signal 185845/203242 (executing program) 2024/11/12 00:34:27 fetching corpus: 9800, signal 186069/203242 (executing program) 2024/11/12 00:34:27 fetching corpus: 9850, signal 186298/203242 (executing program) 2024/11/12 00:34:27 fetching corpus: 9900, signal 186485/203242 (executing program) 2024/11/12 00:34:27 fetching corpus: 9950, signal 186781/203242 (executing program) 2024/11/12 00:34:27 fetching corpus: 10000, signal 187022/203242 (executing program) 2024/11/12 00:34:28 fetching corpus: 10050, signal 187298/203242 (executing program) 2024/11/12 00:34:28 fetching corpus: 10100, signal 187470/203242 (executing program) 2024/11/12 00:34:28 fetching corpus: 10150, signal 187891/203242 (executing program) 2024/11/12 00:34:29 fetching corpus: 10200, signal 188113/203242 (executing program) 2024/11/12 00:34:29 fetching corpus: 10250, signal 188556/203242 (executing program) 2024/11/12 00:34:29 fetching corpus: 10300, signal 188859/203242 (executing program) 2024/11/12 00:34:30 fetching corpus: 10350, signal 189031/203242 (executing program) 2024/11/12 00:34:30 fetching corpus: 10400, signal 189200/203242 (executing program) 2024/11/12 00:34:30 fetching corpus: 10450, signal 189358/203242 (executing program) 2024/11/12 00:34:31 fetching corpus: 10500, signal 189544/203242 (executing program) 2024/11/12 00:34:31 fetching corpus: 10550, signal 189726/203242 (executing program) 2024/11/12 00:34:31 fetching corpus: 10600, signal 189972/203242 (executing program) 2024/11/12 00:34:32 fetching corpus: 10650, signal 190128/203243 (executing program) 2024/11/12 00:34:32 fetching corpus: 10700, signal 190304/203243 (executing program) 2024/11/12 00:34:32 fetching corpus: 10750, signal 190436/203243 (executing program) 2024/11/12 00:34:33 fetching corpus: 10800, signal 190568/203243 (executing program) 2024/11/12 00:34:33 fetching corpus: 10850, signal 190740/203243 (executing program) 2024/11/12 00:34:33 fetching corpus: 10900, signal 190875/203243 (executing program) 2024/11/12 00:34:33 fetching corpus: 10930, signal 190964/203243 (executing program) 2024/11/12 00:34:33 fetching corpus: 10930, signal 190964/203243 (executing program) 2024/11/12 00:34:37 starting 8 fuzzer processes 00:34:37 executing program 0: r0 = semget(0x0, 0x2, 0x0) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000000)=""/73) r1 = semget$private(0x0, 0x3, 0x49f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000080)=[{0x4, 0xb83}, {0x4, 0x7f, 0x1000}, {0x2, 0x1ff, 0x1000}, {0x7, 0x81, 0x3400}, {0x0, 0x7b9, 0x1800}, {0x2, 0x9, 0x800}, {0x2, 0x1, 0x800}, {0x3, 0x0, 0x1000}, {0x3, 0x4, 0x1000}], 0x9, &(0x7f0000000100)={r2, r3+60000000}) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000140)=""/180) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0xffffffffffffffff, r5, 0xee01, 0x0, 0x8, 0xd0b1}, 0x3, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0xf800}) r6 = semget$private(0x0, 0x1, 0x4d0) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = semget(0x0, 0x4, 0x120) semctl$GETPID(r7, 0x3, 0xb, &(0x7f0000000340)=""/197) r8 = semget$private(0x0, 0x0, 0x208) semctl$GETPID(r8, 0x2, 0xb, &(0x7f0000000440)=""/13) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000580)=0xe8) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000005c0)={{0x0, r9, 0x0, r4, r5, 0x8, 0x8}, 0x623, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff}) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000640)=""/7) r10 = socket$netlink(0x10, 0x3, 0xed829d01cf7cf11d) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ppoll(&(0x7f00000007c0)=[{0xffffffffffffffff, 0x682}, {r10, 0x586d7e9f9d60b393}, {r11, 0x80}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x4400}], 0x5, &(0x7f0000000800)={0x77359400}, &(0x7f0000000840)={[0x1000]}, 0x8) 00:34:37 executing program 1: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x100, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)={{0x2, r0, r1, 0x0, 0xee01, 0x10, 0x44fb}, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}) semctl$SEM_INFO(0xffffffffffffffff, 0x0, 0x13, &(0x7f00000002c0)=""/104) r2 = semget$private(0x0, 0x3, 0x340) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$SEM_INFO(r2, 0x1, 0x13, &(0x7f0000000340)=""/44) semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000380)=""/141) r3 = semget$private(0x0, 0x1, 0x0) getresgid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) lchown(&(0x7f0000000440)='./file0\x00', r0, r4) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000540)=""/26) r5 = semget(0x1, 0x0, 0x342) semctl$GETPID(r2, 0x4, 0xb, &(0x7f0000000580)=""/182) semctl$GETPID(r3, 0x3, 0xb, &(0x7f0000000640)=""/4096) semctl$IPC_RMID(r5, 0x0, 0x0) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000001640)=""/4096) clock_gettime(0x0, &(0x7f0000002680)={0x0, 0x0}) semtimedop(r2, &(0x7f0000002640)=[{0x2, 0x4, 0x1800}, {0x0, 0x6, 0x800}], 0x2, &(0x7f00000026c0)={r6, r7+10000000}) semtimedop(r3, &(0x7f0000002700)=[{0x0, 0x8}, {0x1, 0x3, 0x1000}, {0x4, 0x7ff, 0x1000}, {0x2, 0x6, 0x1800}, {0x0, 0x7feb, 0xc00}, {0x4, 0x5}, {0x1, 0x0, 0x1000}, {0x0, 0x0, 0x1800}], 0x8, &(0x7f0000002780)) [ 142.172696] audit: type=1400 audit(1731371677.230:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:34:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x5) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x20, 0x70bd25, 0xfffffffb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4008811) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/193, 0xc1}, {&(0x7f00000005c0)=""/180, 0xb4}, {&(0x7f0000000680)=""/117, 0x75}], 0x3, &(0x7f0000000740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/95, 0x5f}, {&(0x7f00000008c0)=""/60, 0x3c}, {&(0x7f0000000900)=""/253, 0xfd}], 0x3, &(0x7f0000000a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xe8}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000bc0)=""/101, 0x65}, {&(0x7f0000000c40)=""/251, 0xfb}, {&(0x7f0000000d40)=""/143, 0x8f}, {&(0x7f0000000e00)=""/198, 0xc6}, {&(0x7f0000000f00)=""/100, 0x64}, {&(0x7f0000000f80)=""/245, 0xf5}, {&(0x7f0000001080)=""/7, 0x7}, {&(0x7f00000010c0)=""/195, 0xc3}, {&(0x7f00000011c0)=""/247, 0xf7}, {&(0x7f00000012c0)=""/95, 0x5f}], 0xa}}, {{&(0x7f0000001400), 0x6e, &(0x7f0000001640)=[{&(0x7f0000001480)=""/90, 0x5a}, {&(0x7f0000001500)=""/67, 0x43}, {&(0x7f0000001580)=""/152, 0x98}], 0x3}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001680)=""/79, 0x4f}], 0x1, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000017c0)=@abs, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000001840)=""/12, 0xc}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/254, 0xfe}, {&(0x7f0000002980)=""/39, 0x27}, {&(0x7f00000029c0)=""/204, 0xcc}, {&(0x7f0000002ac0)=""/1, 0x1}, {&(0x7f0000002b00)=""/98, 0x62}, {&(0x7f0000002b80)=""/12, 0xc}], 0x8, &(0x7f0000002c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}], 0x6, 0x2003, &(0x7f0000002f00)={0x0, 0x3938700}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7f, 0x4]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xc4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044800}, 0x10) r6 = clone3(&(0x7f0000004200)={0x210000000, &(0x7f0000003080), &(0x7f00000030c0), &(0x7f0000003100), {0x1b}, &(0x7f0000003140)=""/109, 0x6d, &(0x7f00000031c0)=""/4096, &(0x7f00000041c0)=[0xffffffffffffffff, r2], 0x2, {r3}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000004300)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x30, r1, 0x300, 0xc616, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000004440)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004400)={&(0x7f0000004380)={0x78, 0x0, 0x601, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3f}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004480)='/sys/class/bsg', 0x900, 0x46) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000004580)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000004700)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004640)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x51}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004780), r5) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000004880)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x44, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffbff, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x3004c8d1}, 0x4005001) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000004980)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004940)={&(0x7f0000004900)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x74903bbcf6a8e21c}}]}, 0x2c}}, 0x20004000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f0000004b00)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x60, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8b}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4008118) 00:34:37 executing program 3: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = shmget(0x3, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10) r2 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x8000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/89) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x5000) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffa000/0x1000)=nil) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) move_pages(r3, 0x6, &(0x7f00000000c0)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000100)=[0x7fff, 0x6], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000180)=""/22) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 00:34:37 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x31a3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000011) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x228, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x81}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x228}}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc004) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}]}, 0x38}}, 0x20000000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0xc, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x44000) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xc4, r2, 0x11, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x51, 0x2}, {0x1, 0x7}, {0x5, 0x6}], "2455fd53170e35a7"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x7, 0x3}, {0x8, 0x2}, {0x7, 0x3}, {0x5}, {0x1, 0x7}, {0x6, 0x3}, {0xc0, 0x6}, {0x40, 0x4}], "0289f11890423ff1"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xfb, 0x2}, {0x9, 0x4}, {0x3, 0x1}, {0x3}, {0x1, 0x6}, {0x1, 0x4}], "2ed931606a8c5d72"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x3a, 0x2}, {0xc5, 0x3}, {0x3, 0x20}, {0x2}, {0x61, 0x6}, {0x0, 0x3}, {}, {0x7f, 0x6}, {0x8, 0x4}, {0x80, 0x7}, {0xff}, {0x4, 0x4}, {0x9}, {0x3, 0x3}, {0x3, 0x7}, {0x6, 0x1}, {0x20, 0x2}, {0x2, 0x6}, {0x9, 0x6}, {0x2, 0x4}, {0x4, 0x7}], "e389497f103ce6c4"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x7, 0x1}, {0x5}, {0x4, 0x2}, {0x9c, 0x5}, {0x1, 0x2}, {0x5, 0x12}, {0x6, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x91, 0x3}, {0x5, 0x6}, {0x2, 0x4}, {0xe0, 0x3}, {0x1, 0x6}, {0x2e, 0x7}, {0x43}, {0x7, 0x2}, {0x80, 0x6}], "0b98c75abd2feba6"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40081}, 0x4008801) r5 = openat$incfs(r1, &(0x7f0000000c40)='.log\x00', 0x8000, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000d00)={'erspan0\x00', 0x0, 0x702, 0x80, 0x0, 0x3ff, {{0x8, 0x4, 0x3, 0x39, 0x20, 0x66, 0x0, 0x5, 0x2f, 0x0, @remote, @multicast1, {[@cipso={0x86, 0xb, 0xffffffffffffffff, [{0x7, 0x5, '{Za'}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000f00)={'syztnl2\x00', &(0x7f0000000e80)={'syztnl2\x00', 0x0, 0x2f, 0x3f, 0xb1, 0x1, 0x56, @loopback, @private1, 0x0, 0x10, 0x400, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000064c0)={'ip6_vti0\x00', &(0x7f0000006440)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x81, 0x8, 0x20, @empty, @loopback, 0x700, 0x700, 0xffff, 0x3}}) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000006b80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006b40)={&(0x7f00000067c0)={0x358, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8000}, @ETHTOOL_A_EEE_MODES_OURS={0x68, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "23a5046b30a410509cfec90c575da5143d37ee9acccdc529e2e35308fbab5d3c38a0f800b7a890334756788714d6048677fd3410c76287a595f2bee0dbf9d67f0a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffc00}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_EEE_MODES_OURS={0x208, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "505a2102aad2cf6e5a2bf9ba19bfb8825067f7d5f53075b2932b5efcc7c03166ce4db31f19c7db32aad08bb4dfb0b211d167690f771e9635687591c0b9bb0150da8df2346782f8c4221e28ecb968f3f59c4f5d5b2868a56fd305dc41af7f6583dc26744d761a46a3a60d357c5e57b28098563d73848cb8eb52d1d680dfe1289b83211d2e5acf859912a429e44dfb613c1476e5ca407d8089a5d97ddd94cabe57cb804ebaa4dc47fb854d6db2db476c1228b1341b414adccb97b2def4e9dccba65a2096755101fee8dd5b06e22309395b11b5e2"}, @ETHTOOL_A_BITSET_MASK={0xb3, 0x5, "d6530c8aaa002f3a06fc30ca84ab859cf7b227eca63c0c296e5d0293c2f200d7c1a2d52d3ecf372f50140dab89fe3f739546d5f7fb22fa4d8952d8ec385a4b3bec322e9a1a9319b31d36936679a7b561f2887f17e3abfbb283162a5eada191a903f5719c46b7e3f85f2bdaac5b151a06f6fbf0928ba5e9067fa84b3ba6cc6d68598b3da5f8210b35a6d3656437343b0771de9d4f3dd8e52fea9b7628b3142447d46fd9f02a77e35fb7664e7c3f01db"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '}(!]]@{--[{([+@*[@\x18%+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.log\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x358}}, 0x40000) 00:34:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'U+', 0x401}, 0x16, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl(r1, 0x22, &(0x7f00000000c0)="0c28d2f37d21c18ec6ba80e181c420bd91d611a24ca27504299ff1c26505c9a8794191d580e5739e6fe72331de933c46f3531497188ebef9d24dbbdff34f618d75748af04b749499b61a6a8a2ab715cacbf4a70053c05d85ff5ed5525e3e1cae07494a71bcdc8ff54563713b5bb4f88812993c79122875d37a53b1f0510eae801740315472510b24f7f9e6d6786adb671b94efd171211481be3fa62e3fa139f9e4603227421f7241e308a43632877a1fa91a6c59b3d6f3251ec217d5491d4a963fd9eedf45efdb8e1427959852eecffcd25c6c97e3a685953c6548") r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x410202, 0x4) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000200)=0x366) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x10b, 0x3}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000300)) r4 = signalfd(r2, &(0x7f0000000340)={[0x7]}, 0x8) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000380)={0x5, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x108) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) r6 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x6, 0x9e, 0x2, 0x1, 0x0, 0x200, 0x210, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0xff}, 0x40, 0x400, 0x0, 0x2, 0x8, 0x401, 0x7ff, 0x0, 0x8, 0x0, 0x2d3}, r5, 0x3, 0xffffffffffffffff, 0x1) r7 = accept(r0, &(0x7f00000005c0)=@alg, 0xfffffffffffffffd) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000640)={0x100000000, 0xe6, 0x2, 0x0, 0x0, [{{r3}, 0x6b9e}, {{r7}, 0x7}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff}}, './file0\x00'}) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000007c0)=0x0) perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x7, 0x0, 0x4, 0x1, 0x0, 0x1ff, 0x10000, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000000700)}, 0x800, 0xfff, 0xfff, 0x9, 0x3d10, 0x3f, 0x7fff, 0x0, 0x3}, r9, 0x1, r2, 0x1) 00:34:37 executing program 6: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0xfffffffffffffffd, 0xc000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000001) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, r0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3e82}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfaa1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf412}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe49}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0xec}}, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x6, 0x448202) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xcc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x48}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x100}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x700}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffaed1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c8}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ea}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xae}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x304}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x81}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) getpeername$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}}, 0x24004000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004044}, 0x40010) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000880)=0x7ff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}}, 0x40880) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000009c0)={0x0, "72a30934344846644bed0b045442fe4c"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000019c0)={r5, 0x10000, 0x7d, 0x1}) r6 = signalfd(r2, &(0x7f0000001dc0)={[0x3f]}, 0x8) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e40)={0xc8, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x91) r7 = memfd_secret(0x80000) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000002000)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x0, 0x1, 0x0, 0x7f, 0x8], 0x3, &(0x7f0000001fc0)=[{}], 0x0, [{}, {}, {}]}, 0xa8) 00:34:37 executing program 7: ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x5) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x5) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)={0xfff, 0x3, 0x20, 0x4, 0x800, 0x9}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000100)) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x4400) fsync(r1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000180)="c53aa3c460fc3e93ce4674f613f56919191ee16ea43f41114dbf3674681fabe3091428b938537e6071ccfd9a1b76e81b93e98e1d25f0045503cd650d1b0fb6a4d5537bbc671e0b074f52e6a7c2594cf65f7d8d47e8843c03e16fb4d7ea2e7f6b24b6378d87ca6f9f1e8ee12d08c05f5ee9974a6d31e830bf29fa3dbfae593a10f6556704154ce7c6d9ae6df46615d40b4e889e687f25d4693904920bf4905ae30aec4fee95b922fc85e9baceb262a08d35b7024aaa5c3b6ccba8bb3554dd28e41af30e94854086c1d0938f") r2 = io_uring_setup(0x6bcf, &(0x7f0000000280)={0x0, 0xcee6, 0x10, 0x1, 0x345, 0x0, r0}) dup2(r0, r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x7800, 0x8, 0x0, 0x3, {{0x11, 0x4, 0x2, 0x14, 0x44, 0x67, 0x0, 0x81, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3c}, {[@end, @end, @rr={0x7, 0x2b, 0xcc, [@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @multicast2, @multicast1, @remote, @private=0xa010100, @loopback, @private=0xa010102, @empty, @empty]}]}}}}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000003c0)={0x0, 'netpci0\x00', {}, 0x1000}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000400)={0x7, 0x2, 0x80, 0x1f, 0x15, "fd062faeaae286d6"}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0xd62b, 0xff}, {0x42b, 0x1}, {0x9d1, 0x2}]}) close(0xffffffffffffffff) [ 143.566606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.569878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.572322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.575018] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.576469] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.577733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.579547] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.585440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.586571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.592035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.603906] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.605323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.667165] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.673157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.676245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.677271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.681533] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.683280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.691306] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.695237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 143.698265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.699514] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.711959] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.714637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.721640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.726585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.732281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.735553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.737974] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.743005] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.746047] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.747128] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.747583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.767754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.780923] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 143.792172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 143.794773] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 143.801343] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.802307] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 143.804428] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.817717] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 143.823929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 143.829240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 143.832978] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.848156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 143.877447] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 143.885131] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 143.888365] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.613024] Bluetooth: hci0: command tx timeout [ 145.675022] Bluetooth: hci1: command tx timeout [ 145.739876] Bluetooth: hci2: command tx timeout [ 145.805875] Bluetooth: hci3: command tx timeout [ 145.866991] Bluetooth: hci4: command tx timeout [ 145.869744] Bluetooth: hci5: command tx timeout [ 145.930901] Bluetooth: hci6: command tx timeout [ 145.995916] Bluetooth: hci7: command tx timeout [ 147.660068] Bluetooth: hci0: command tx timeout [ 147.725039] Bluetooth: hci1: command tx timeout [ 147.788096] Bluetooth: hci2: command tx timeout [ 147.851984] Bluetooth: hci3: command tx timeout [ 147.916151] Bluetooth: hci5: command tx timeout [ 147.916266] Bluetooth: hci4: command tx timeout [ 147.979911] Bluetooth: hci6: command tx timeout [ 148.043917] Bluetooth: hci7: command tx timeout [ 149.708426] Bluetooth: hci0: command tx timeout [ 149.772891] Bluetooth: hci1: command tx timeout [ 149.836955] Bluetooth: hci2: command tx timeout [ 149.899962] Bluetooth: hci3: command tx timeout [ 149.962880] Bluetooth: hci4: command tx timeout [ 149.965954] Bluetooth: hci5: command tx timeout [ 150.027497] Bluetooth: hci6: command tx timeout [ 150.090992] Bluetooth: hci7: command tx timeout [ 151.754868] Bluetooth: hci0: command tx timeout [ 151.820023] Bluetooth: hci1: command tx timeout [ 151.882910] Bluetooth: hci2: command tx timeout [ 151.947206] Bluetooth: hci3: command tx timeout [ 152.010943] Bluetooth: hci5: command tx timeout [ 152.010965] Bluetooth: hci4: command tx timeout [ 152.075080] Bluetooth: hci6: command tx timeout [ 152.138889] Bluetooth: hci7: command tx timeout [ 206.580198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.581388] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.582798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.583806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.586365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.587752] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.588872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.611087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.620686] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.630012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.630329] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.635073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.636147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.637417] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.654402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.657135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.660332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.662389] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.671225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.673237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.674297] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.675319] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.676396] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.679665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.680723] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.682536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.692159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.694483] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.695670] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.698586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.706243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.707954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 206.709238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.717705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.719538] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 206.720659] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.794648] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.799118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.800590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.808639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 206.810371] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 206.811470] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 206.826221] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.850024] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.853323] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.865121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 206.885183] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 206.894092] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.651048] Bluetooth: hci0: command tx timeout [ 208.715970] Bluetooth: hci1: command tx timeout [ 208.780096] Bluetooth: hci2: command tx timeout [ 208.780135] Bluetooth: hci3: command tx timeout [ 208.843242] Bluetooth: hci5: command tx timeout [ 208.843493] Bluetooth: hci4: command tx timeout [ 208.908920] Bluetooth: hci7: command tx timeout [ 208.971272] Bluetooth: hci6: command tx timeout [ 210.698883] Bluetooth: hci0: command tx timeout [ 210.762905] Bluetooth: hci1: command tx timeout [ 210.826905] Bluetooth: hci3: command tx timeout [ 210.826951] Bluetooth: hci2: command tx timeout [ 210.891321] Bluetooth: hci4: command tx timeout [ 210.892700] Bluetooth: hci5: command tx timeout [ 210.956151] Bluetooth: hci7: command tx timeout [ 211.020026] Bluetooth: hci6: command tx timeout [ 212.748034] Bluetooth: hci0: command tx timeout [ 212.811937] Bluetooth: hci1: command tx timeout [ 212.875979] Bluetooth: hci3: command tx timeout [ 212.876022] Bluetooth: hci2: command tx timeout [ 212.939365] Bluetooth: hci5: command tx timeout [ 212.939925] Bluetooth: hci4: command tx timeout [ 213.004993] Bluetooth: hci7: command tx timeout [ 213.066941] Bluetooth: hci6: command tx timeout [ 214.794987] Bluetooth: hci0: command tx timeout [ 214.858915] Bluetooth: hci1: command tx timeout [ 214.922867] Bluetooth: hci2: command tx timeout [ 214.922957] Bluetooth: hci3: command tx timeout [ 214.988155] Bluetooth: hci5: command tx timeout [ 214.989437] Bluetooth: hci4: command tx timeout [ 215.051478] Bluetooth: hci7: command tx timeout [ 215.116836] Bluetooth: hci6: command tx timeout [ 268.866730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.869019] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.870046] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.872325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.873916] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 268.876998] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.144570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.148031] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.150677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.154468] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.158128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.161867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.221116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.233400] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.234431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.238353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.240146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.241420] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.266325] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.280773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.284191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.285743] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.294968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.296248] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.303000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.303058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.309186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.309262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.327209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.329656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.331647] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.333523] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.335298] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.337335] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 269.339304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.343649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.402418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.430004] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.441076] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.479375] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.494528] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 269.497303] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.627581] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.645110] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.655005] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.722967] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.743142] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 269.749168] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.922995] Bluetooth: hci0: command tx timeout [ 271.178925] Bluetooth: hci1: command tx timeout [ 271.307412] Bluetooth: hci2: command tx timeout [ 271.436985] Bluetooth: hci5: command tx timeout [ 271.437400] Bluetooth: hci3: command tx timeout [ 271.438812] Bluetooth: hci4: command tx timeout [ 271.626940] Bluetooth: hci6: command tx timeout [ 271.818899] Bluetooth: hci7: command tx timeout [ 272.971851] Bluetooth: hci0: command tx timeout [ 273.227879] Bluetooth: hci1: command tx timeout [ 273.355960] Bluetooth: hci2: command tx timeout [ 273.482859] Bluetooth: hci4: command tx timeout [ 273.482919] Bluetooth: hci3: command tx timeout [ 273.484121] Bluetooth: hci5: command tx timeout [ 273.675870] Bluetooth: hci6: command tx timeout [ 273.867856] Bluetooth: hci7: command tx timeout [ 275.019045] Bluetooth: hci0: command tx timeout [ 275.274868] Bluetooth: hci1: command tx timeout [ 275.403801] Bluetooth: hci2: command tx timeout [ 275.530868] Bluetooth: hci5: command tx timeout [ 275.530896] Bluetooth: hci3: command tx timeout [ 275.531371] Bluetooth: hci4: command tx timeout [ 275.724048] Bluetooth: hci6: command tx timeout [ 275.916795] Bluetooth: hci7: command tx timeout [ 277.098856] Bluetooth: hci0: command tx timeout [ 277.324822] Bluetooth: hci1: command tx timeout [ 277.451866] Bluetooth: hci2: command tx timeout [ 277.579026] Bluetooth: hci3: command tx timeout [ 277.579588] Bluetooth: hci4: command tx timeout [ 277.580920] Bluetooth: hci5: command tx timeout [ 277.771848] Bluetooth: hci6: command tx timeout [ 277.963797] Bluetooth: hci7: command tx timeout [ 331.547208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.550004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.551840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.556133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.557961] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.559416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.781962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.786034] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.789627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.795333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.797863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.808960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.809819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.814265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 331.815854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.816898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.825339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 331.827132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.003786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.011585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.014207] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.020188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.022396] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.034246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.040936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.046124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.051018] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.052987] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.058576] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.059960] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.061969] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.063432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.063462] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.073885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.074616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.081127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.083613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.085960] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.093100] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.096222] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.098942] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.103915] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.110442] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.122040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.129019] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.152614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.164046] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.176996] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.578872] Bluetooth: hci0: command tx timeout [ 333.835824] Bluetooth: hci1: command tx timeout [ 333.900902] Bluetooth: hci2: command tx timeout [ 334.155047] Bluetooth: hci7: command tx timeout [ 334.218940] Bluetooth: hci6: command tx timeout [ 334.218989] Bluetooth: hci5: command tx timeout [ 334.219566] Bluetooth: hci3: command tx timeout [ 334.283254] Bluetooth: hci4: command tx timeout [ 335.626863] Bluetooth: hci0: command tx timeout [ 335.885318] Bluetooth: hci1: command tx timeout [ 335.947902] Bluetooth: hci2: command tx timeout [ 336.203023] Bluetooth: hci7: command tx timeout [ 336.266923] Bluetooth: hci5: command tx timeout [ 336.267435] Bluetooth: hci6: command tx timeout [ 336.268024] Bluetooth: hci3: command tx timeout [ 336.331005] Bluetooth: hci4: command tx timeout [ 337.676840] Bluetooth: hci0: command tx timeout [ 337.930907] Bluetooth: hci1: command tx timeout [ 337.994957] Bluetooth: hci2: command tx timeout [ 338.250896] Bluetooth: hci7: command tx timeout [ 338.314943] Bluetooth: hci3: command tx timeout [ 338.315497] Bluetooth: hci6: command tx timeout [ 338.316063] Bluetooth: hci5: command tx timeout [ 338.378850] Bluetooth: hci4: command tx timeout [ 339.723686] Bluetooth: hci0: command tx timeout [ 339.979562] Bluetooth: hci1: command tx timeout [ 340.042827] Bluetooth: hci2: command tx timeout [ 340.299026] Bluetooth: hci7: command tx timeout [ 340.362943] Bluetooth: hci5: command tx timeout [ 340.363458] Bluetooth: hci6: command tx timeout [ 340.364012] Bluetooth: hci3: command tx timeout [ 340.427942] Bluetooth: hci4: command tx timeout [ 394.148377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.151651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.156074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.164279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.166989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 394.168290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.647712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.650911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.652860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.661140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.665178] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 394.667845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.710448] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.716021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.720230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 394.733666] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 394.738153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 394.740999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 394.782340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 394.782687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 394.794509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 394.808622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 394.811051] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 394.817231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 394.822337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 394.824877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.830271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 394.850206] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 394.864219] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 394.870302] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 394.877999] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 394.880059] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 394.898013] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 394.900449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.904056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 394.906418] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 394.909148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 394.920173] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 394.932399] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 394.937343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 394.938271] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 394.939879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 394.964061] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 394.986204] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 394.987669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 395.002506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.006389] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 395.010846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.234987] Bluetooth: hci0: command tx timeout [ 396.683149] Bluetooth: hci1: command tx timeout [ 396.812838] Bluetooth: hci2: command tx timeout [ 396.875827] Bluetooth: hci4: command tx timeout [ 396.938951] Bluetooth: hci3: command tx timeout [ 397.002980] Bluetooth: hci7: command tx timeout [ 397.066859] Bluetooth: hci5: command tx timeout [ 397.068156] Bluetooth: hci6: command tx timeout [ 398.282965] Bluetooth: hci0: command tx timeout [ 398.730884] Bluetooth: hci1: command tx timeout [ 398.859821] Bluetooth: hci2: command tx timeout [ 398.924787] Bluetooth: hci4: command tx timeout [ 398.987021] Bluetooth: hci3: command tx timeout [ 399.051004] Bluetooth: hci7: command tx timeout [ 399.114892] Bluetooth: hci6: command tx timeout [ 399.116670] Bluetooth: hci5: command tx timeout [ 400.331827] Bluetooth: hci0: command tx timeout [ 400.778886] Bluetooth: hci1: command tx timeout [ 400.907506] Bluetooth: hci2: command tx timeout [ 400.970956] Bluetooth: hci4: command tx timeout [ 401.035986] Bluetooth: hci3: command tx timeout [ 401.100777] Bluetooth: hci7: command tx timeout [ 401.162945] Bluetooth: hci5: command tx timeout [ 401.164520] Bluetooth: hci6: command tx timeout [ 402.380820] Bluetooth: hci0: command tx timeout [ 402.826812] Bluetooth: hci1: command tx timeout [ 402.954834] Bluetooth: hci2: command tx timeout [ 403.018819] Bluetooth: hci4: command tx timeout [ 403.082844] Bluetooth: hci3: command tx timeout [ 403.146863] Bluetooth: hci7: command tx timeout [ 403.210846] Bluetooth: hci6: command tx timeout [ 403.212345] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 00:39:37 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff817e8f47 RDX=ffff88800a83d280 RSI=ffffffff817e8f67 RDI=0000000000000007 RBP=ffffea0001b3f640 RSP=ffff888039a7f830 R8 =0000000000000000 R9 =fffff94000367ec8 R10=0000000000000000 R11=ffff88803ecba028 R12=ffffea0001b3f640 R13=ffffea0001b3f640 R14=0000000000000000 R15=ffff888039a7fce0 RIP=ffffffff817e8f67 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f49be8cd4a1 CR3=0000000036c94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff818ee514 RCX=ffffffff8683f801 RDX=1ffff11006852e4e RSI=0000000000000000 RDI=ffffffff818ee514 RBP=ffff888034297270 RSP=ffff8880342971e8 R8 =ffffffff8683f8e2 R9 =ffff888034297258 R10=000000000003c001 R11=0000000000024d65 R12=ffff8880342972e0 R13=0000000000000000 R14=ffff88800e879b80 R15=0000000000000cc0 RIP=ffffffff8121f1ef RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005579cebe3080 CR3=000000001637a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000