Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:21011' (ECDSA) to the list of known hosts. 2024/12/04 02:27:04 fuzzer started 2024/12/04 02:27:05 dialing manager at localhost:37935 syzkaller login: [ 77.708502] cgroup: Unknown subsys name 'net' [ 77.854146] cgroup: Unknown subsys name 'cpuset' [ 77.872338] cgroup: Unknown subsys name 'rlimit' 2024/12/04 02:27:30 syscalls: 208 2024/12/04 02:27:30 code coverage: enabled 2024/12/04 02:27:30 comparison tracing: enabled 2024/12/04 02:27:30 extra coverage: enabled 2024/12/04 02:27:30 setuid sandbox: enabled 2024/12/04 02:27:30 namespace sandbox: enabled 2024/12/04 02:27:30 Android sandbox: enabled 2024/12/04 02:27:30 fault injection: enabled 2024/12/04 02:27:30 leak checking: enabled 2024/12/04 02:27:30 net packet injection: enabled 2024/12/04 02:27:30 net device setup: enabled 2024/12/04 02:27:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/04 02:27:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/04 02:27:30 USB emulation: enabled 2024/12/04 02:27:30 hci packet injection: enabled 2024/12/04 02:27:30 wifi device emulation: enabled 2024/12/04 02:27:30 802.15.4 emulation: enabled 2024/12/04 02:27:30 fetching corpus: 0, signal 0/0 (executing program) 2024/12/04 02:27:32 starting 8 fuzzer processes 02:27:32 executing program 0: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x1f, 0x4, 0x5, 0x4a, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x10, 0x6, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r0, 0x2f, 0x14, 0x3, 0x1, 0x2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7, 0x81, 0x40}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x1, 0x8, 0x7, 0x2, {{0xb, 0x4, 0x2, 0x9, 0x2c, 0x67, 0x0, 0xd6, 0x4, 0x0, @empty, @remote, {[@timestamp={0x44, 0x18, 0x91, 0x0, 0x6, [0x7, 0x2, 0x100, 0x81, 0x0]}]}}}}}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/mnt\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40884) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r4, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0) r5 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x211, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44040) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000006c0)={@remote, 0x6e, r1}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000700)) r7 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x18, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40854}, 0x4000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip6gre0\x00', r0, 0x29, 0x1f, 0x2, 0x6, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x700, 0x8000, 0x7, 0x2}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000900)={@loopback, 0x1f, r9}) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000940)) 02:27:32 executing program 1: setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x800) r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) r2 = socket$inet6(0xa, 0x2, 0x7fffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast2, @in=@broadcast}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) getsockname$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) syz_io_uring_setup(0x5337, &(0x7f0000000340)={0x0, 0xe719, 0x4, 0x0, 0x252}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0x1000, 0x0, 0xcc6b661, 0x4}, 0x3) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e22, 0x1ff, @remote, 0x1}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f00000004c0)="a8792e728ab60eb25837d11432a03142c71b40241784", 0x16, 0x8080, &(0x7f0000000500)={0xa, 0x4e24, 0x80000001, @mcast2}, 0x1c) r6 = socket(0x1a, 0x4, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000540)={'mangle\x00', 0xa8, "7d8b5d78874594b3f73ab871b1f517a8a46a9f02cf4e354261eefe4651a16bde8f32dc094041a0d8e25e31efe71b00d54c30847a7957f6234e401b3900e72815bf0d91b0ac4d57705f6923aaaac56b861d4c93e53e4447ee416f9b5f565987fe93fd5586002fbf7ac030b0568604a233dab66cdd4442b95327c32d35ac517ab2ad7c1544a61541607a08dd524c5745fdd19819abb2d2d96fa9a491a9f80e16eb2a58c3e23ea902f2"}, &(0x7f0000000640)=0xcc) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000680)={'security\x00', 0x8e, "4499b219092ac57e8b296137ce81c6ab84154e39508c4f6a0b91e59236b0d559ad4f04284f8009a508ad4edd6b5c7fbc0ad5e3c3fdd19d8ea6e94a1258a37f4be7e4941198e86d5d0412e511b54d7ab1306ba5da72ccd22ba4174e935d2f8eaac6ce353edfcf2d08eac8d40370654087a3178b70ea37be3e4806909e1058e91317ec3abc3a851b460772da294c25"}, &(0x7f0000000740)=0xb2) bind$inet6(r1, &(0x7f0000000780)={0xa, 0x4e23, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f00000007c0)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3f}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000800)="73496858b373f370b41e70878a6c6ec5f0db5030e8bae7d0fb1c48e6d72e37b2cf895d3d31d8e0fa96d78e06fb960bfbeed5473cfcf5ff93a55e83bdbfd562529e04a8f9f625f8c279826b7fb52a1e4d1c020586207bdffae4b235f8469947fa", 0x60}], 0x1}}], 0x1, 0x4000000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000900)='\x00', &(0x7f0000000940)='./file0\x00', 0xffffffffffffff9c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x6, 0x8000, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x40, 0x2, 0x1}}) 02:27:32 executing program 2: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0xfffffffffffffffd, 0x8000) ioctl$sock_ifreq(0xffffffffffffffff, 0x894a, &(0x7f0000000040)={'\x00', @ifru_data=&(0x7f0000000000)="c628420364e97db8e053dadda8b0cbeda6cde77ad683f8249e54586bbcadf7d7"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000811) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xee5f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x40, 0x10, 0x8001, 0x9, {{0x3b, 0x4, 0x3, 0x32, 0xec, 0x65, 0x0, 0x39, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1b, 0x36, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @cipso={0x86, 0x10, 0x1, [{0x2, 0x2}, {0x7, 0x2}, {0x2, 0x6, "35f53b73"}]}, @end, @ssrr={0x89, 0xb, 0x14, [@local, @broadcast]}, @rr={0x7, 0x7, 0x25, [@rand_addr=0x64010101]}, @cipso={0x86, 0x1b, 0x3, [{0x1, 0x4, 'Y\n'}, {0x0, 0xd, "fe9641001c500c7a812333"}, {0x6, 0x4, "86a1"}]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0xf, "ab9b64a9783306202e9561fbb9"}, {0x2, 0xa, "2cebf80aa64650d4"}, {0x1, 0xa, "fe36d48d426cb70e"}, {0x5, 0x4, "ba2b"}]}, @timestamp_addr={0x44, 0x14, 0xd3, 0x1, 0xf, [{@multicast2, 0x16b}, {@broadcast, 0x5}]}, @timestamp_prespec={0x44, 0x3c, 0x23, 0x3, 0x4, [{@multicast1, 0x5}, {@multicast1, 0x7}, {@broadcast, 0x7fff}, {@local}, {@multicast1, 0x8}, {@broadcast, 0x7fffffff}, {@remote, 0x4a}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000680)={'syztnl0\x00', r4, 0x7, 0x7, 0x1, 0x3, {{0x10, 0x4, 0x0, 0x5, 0x40, 0x64, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local, {[@timestamp_addr={0x44, 0xc, 0x7b, 0x1, 0x4, [{@local, 0x5a2d}]}, @lsrr={0x83, 0x1f, 0x25, [@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010100, @local, @remote, @rand_addr=0x64010102, @remote]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10000) r7 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'gretap0\x00', &(0x7f00000008c0)={'syztnl1\x00', r5, 0x80, 0x40, 0xfffffffd, 0x4, {{0x6, 0x4, 0x1, 0x39, 0x18, 0x65, 0x0, 0x81, 0x29, 0x0, @broadcast, @private=0xa010102, {[@end, @end]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000a40)={{0x38, 0x4}, 0x0, 0x3, 0x72f, {0x1, 0x5}, 0x2, 0x4d9d3508}) 02:27:32 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000003980)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003940)={&(0x7f00000037c0)={0x158, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003a00), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000003ac0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x38, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xaf1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x191}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44b8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000003b40), r0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x34, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000003d00)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4040c10) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000003d40), 0x80000, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003dc0), r4) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000003e80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) perf_event_open(&(0x7f0000003f00)={0x3, 0x80, 0x0, 0x4, 0x3f, 0xff, 0x0, 0x80000000, 0x4038, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbf5f, 0x2, @perf_bp={&(0x7f0000003ec0)}, 0x5122, 0x3, 0x7, 0x1, 0x7fffffff, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) r7 = fsmount(r0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003fc0), 0xffffffffffffffff) r9 = syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000004180)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004140)={&(0x7f0000004000)={0x118, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4001}, 0x44085) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3188}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x30}}, 0x2000c094) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000042c0)=0x5, 0x4) [ 104.355759] audit: type=1400 audit(1733279252.487:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:27:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x488, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xa8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x17}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x44a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}]}]}, @NL80211_ATTR_TID_CONFIG={0x1a0, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x9}, {}, {0x2, 0x8}, {0x7, 0x9}, {0x1, 0x1}, {0x5, 0xa}, {0x2, 0x3}, {0x7}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x4}, {0x6}, {0x2, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x8}, {0x5, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x3, 0xa}, {0x2}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x4}, {0x4, 0x8}, {0x7, 0x9}, {0x6, 0x3}, {0x5, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4d8, 0xff, 0x20, 0x8, 0x3, 0x7fff, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x0, 0xc, 0x3, 0x3, 0x16, 0xc, 0x36, 0x1b, 0x6, 0x1, 0x12, 0x30, 0x14, 0x1b, 0x3c, 0x30, 0x6, 0x36, 0x5, 0xb, 0x18, 0x6c6d1d7aa5d54ffd, 0x6, 0x3, 0x41, 0x4, 0x1, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7ff, 0x6, 0x3, 0x9, 0x1, 0x400, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x20, 0x9, 0xff81, 0x1, 0x3, 0x89a9, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x0, 0x3c5f, 0x1ff, 0x6, 0xfa, 0x7, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x60, 0x65, 0x7, 0x3, 0x81, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x6, 0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x9}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x5}, {0x5, 0x6}, {0x6, 0x6}, {0x5, 0x2}, {0x2, 0x6}, {0x5, 0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x6, 0x1}, {0x6, 0x2}, {0x7, 0x3}, {0x4, 0xa}, {0x6, 0x3}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x5, 0xa}, {0x6, 0x6}, {0x4, 0x9}, {}, {0x2, 0x6}, {0x5, 0x9}, {0x0, 0x3}, {0x4, 0x8}, {0x3, 0x2}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x28}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7c}]}]}, @NL80211_ATTR_TID_CONFIG={0x90, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x194, 0x11d, 0x0, 0x1, [{0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x118, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x5, 0xa}, {0x2, 0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x5}, {0x4, 0x2}, {0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x1}, {0x7}, {0x2, 0x4}, {0x3, 0x4}, {0x4, 0x4}, {0x4, 0x3}, {0x4, 0x5}, {0x1}, {0x7, 0x6}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0x8}, {0x3, 0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x6, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x5, 0x4}, {0x7, 0x3}, {0x4, 0x7}, {0x0, 0x1}, {0x3, 0x4}, {0x7}, {0x5, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x3, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0xa}, {0x4, 0x5}, {0x2, 0x7}, {0x4, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x6, 0x2}, {0x3, 0x2}, {0x7, 0x9}, {0x5, 0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x1}, {0x5, 0xa}, {0x7, 0x5}, {0x2, 0x8}, {0x5, 0x7}, {0x6, 0x3}, {0x7, 0x1}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x1}, {0x5}, {0x7, 0x8}, {0x7, 0x1}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0x1}, {0x6, 0xa}, {0x2, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x5, 0x36, 0x6, 0x24, 0x18, 0x2, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4}, {0x3, 0x7}, {0x2, 0x3}, {0x6}, {0x2, 0x5}, {0x7, 0x6}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x5}, {0x5, 0x5}, {0x1, 0x1}, {0x6, 0x3}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x1}, {0x3, 0x4}, {0x1, 0x2}, {0x1}, {0x6, 0x5}, {0x6, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x5, 0x2}, {0x4, 0x6}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x7}, {0x3, 0x4}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x3}, {0x6, 0x2}, {0x2, 0x6}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0x3}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x7}, {0x6, 0x4}, {0x1}, {0x7, 0xa}, {0x1}, {0x6, 0x3}, {0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0xa}, {0x5, 0x6}, {0x6, 0x5}, {0x5, 0x5}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x2}, {0x5, 0xa}, {0x7, 0x7}, {0x3, 0x7}, {0x4, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x0, 0x6}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0x6}, {0x6, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x3, 0x7}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x6}, {0x4, 0x6}, {0x4, 0x6}, {0x2, 0xa}, {0x1, 0x9}, {0x4, 0x8}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x2, 0x9}, {0x5, 0x2}, {0x4, 0x8}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x1}, {0x4, 0x2}, {0x7, 0x1}, {0x4, 0xa}, {0x1, 0x9}, {0x2, 0xa}, {0x4}, {0x6, 0x8}, {0x6, 0x5}, {0x5, 0x1}, {0x2, 0x4}, {0x4, 0x8}, {0x5, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x9}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x488}}, 0x24004881) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x6, &(0x7f0000000e00)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, &(0x7f0000000780)="e33bb6a08fa7dda4cd29b06ff7e3ca6de216853fd7001c4d27170e7aa9aa92c36863afc22910ec2fabd3469973d9db03bdee45615d4a163694ab8d76c47f57abd70f3b7184ef5fdc74f21ae97c601095a28a343f01cab6e1cb0098f1a1435011aa212d7736842b7653c367be3b881b1d082c5602d3cf2c0850c76ac5738eb2c1aa6d0fc29d689f9088ed943d5ca48b3134bd8ff11fc153f04207c4505538ca05da1b4807160a1eb224aecf997d25b95d525cbdd0", 0xb4, 0xfff, 0x0, 0x1}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000880)="0ac5f60ec92d9bcc08f39ec292133258d4ab5c817031846b18fda7f6656f3b1cdeae31ba5fc1de125f71f970e9a79afcd05d92ec317c4827c2309c8dcfa0b071a33b4fae824faad0aab3833ffebc79960fbf9fb8a863a93ed69cdec6fb6e95c2cd8ad37576e763ef4be1f40a5b73b6bb21fdc5da00f404b84aa9e7180438b41bcce0efec5d568a397c1a5b25b6fff46d2093f1854816d9605c13aef4001e43bc7a6fc9871104ba40ff106560f822088831369f023a2abe9c53af1969a90213934e04176034ef9111a5edbd75950d8a3de9c6a395f722c999a05216b175894092751409f52ae0224eefc033db877f33884cf26a6cf5d32b9c02", 0xf9, 0x9, 0x0, 0x2, r4}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x2, 0xff, r5, &(0x7f00000009c0)="ceecf6ad48ce1380d7f58d1e7aa94e723def9e2da5f70949d687a175629e4cf0ebe17d71bb10ca4adace896bb0e45a9068fdce484e60f56c2240480650d9f8f3f867b9f0fd1ff07af99d787689a2b7", 0x4f, 0x0, 0x0, 0x1}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000a80)="2385249a24acf18a55ee49a48acff300a15d5b7c978cce96fef5b5f6ad123afa0ed79f78451ef52e7ccb6428f6d77ac551a6b77357610d232f8a09f3a6a243f610d6d74228c84ca851b19c2513320c7950c38f5fe3d7469d4dc0801c2d9f403b5f9fe43084abc39a5176f120629dc755c891d0a6b791ed9b82b455003c78cda49dd81c3e4bae0653", 0x88, 0xffffffffffff6cef, 0x0, 0x3}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x7ff, r6, &(0x7f0000000b80)="71107da2dd7c33a234c732558c14d316cbf044c564a73f1ff6370a39b9d10bc72ae96e089815f66dd60875d434d70bf2ebf56620646d42059fda72460a041016c3fc931935ec7426c28782e6e7f2f05025024b1f09b96fbe142964bf8cedbe3ee19667b7f04d47ef94c4cfb6eab2ca84a4f5efa3b1f939c10e6cb7c27e8111f6e0accb6e734bce2db62110520a8003a00abfcbd7606b84c7181a39ae2ace730c8ab5238782eb5f78d3ecc2ba47ec3c93ea78088e33973e119e69d7260ff4ae6d42860666b341cfd76126494d2305116df6b48a91c78b407c670230ba39027182bfddc3063428e1795421", 0xea, 0x10000, 0x0, 0x1}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0x8000, 0xffffffffffffffff, &(0x7f0000000cc0)="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", 0xfa, 0x0, 0x0, 0x3}]) syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000e80)=0x1, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x5c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44004}, 0x8010) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000003840), 0x80000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f00000039c0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x4c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x40}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6c7, 0x3f}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xcd0c}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000000) syz_genetlink_get_family_id$team(&(0x7f0000003a00), r7) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000003a40)={0x2, 0x8, 0x2, 0x3f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000003ac0)={{0x81, 0xff}, 'port0\x00', 0xe0fda2207e7ddcdc, 0x1c08, 0x1000, 0xaa0, 0x80, 0x0, 0xfffffffd, 0x0, 0x6, 0x8}) 02:27:32 executing program 5: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@empty}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x1}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x5, 0x0, 0x2, 0x0, 0x7, 0x70100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000240), 0x1e91605dafe2a038}, 0x180, 0x79, 0x2, 0x9, 0x1000000000, 0x20000000, 0x6, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x6e24, &(0x7f0000000300)={0x0, 0xb36b, 0x4, 0x0, 0x355}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x4, 0x490, 0x0, 0x0, 0x0, 0x1}, 0xad) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000440)={@private0, 0x0}, &(0x7f0000000480)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'gretap0\x00', r3, 0x40, 0xced0d0de9599ec8, 0x2, 0x0, {{0x2d, 0x4, 0x3, 0x7, 0xb4, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop, @noop, @timestamp={0x44, 0x10, 0x3b, 0x0, 0x6, [0x64e7, 0x1000, 0x4]}, @rr={0x7, 0x2b, 0x8b, [@loopback, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @multicast2, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @empty]}, @timestamp_prespec={0x44, 0x24, 0x3e, 0x3, 0x9, [{@private=0xa010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb8}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010100, 0xffff}]}, @ra={0x94, 0x4, 0x1}, @end, @end, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x0, 0x8, "c782167c9435"}, {0x5, 0xc, "9108461e727e25d056cf"}, {0x2, 0x12, "c89fa04c2f15820ddd79d3825fb2409c"}, {0x7, 0x5, "8f7d86"}, {0x5, 0x5, 'IeU'}]}]}}}}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x20000, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x84, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "93d5533ba417eef42f938d5060b01c8b"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x48}, @NL80211_ATTR_PMK={0x14, 0xfe, "41e1712a170567c075288018b8273150"}, @NL80211_ATTR_PMKID={0x14, 0x55, "fe1d50ef898a7f174e5b1a144ef42d4b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfff7}, @NL80211_ATTR_MAC={0xa, 0x6, @random="55be442dad6b"}]}, 0x84}}, 0x400c004) r5 = socket(0x25, 0x2, 0x2) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000003980)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003940)={&(0x7f0000003800)={0x114, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xf0, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x537b}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x200800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20da}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8a}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1e30}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40184b90}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x114}, 0x1, 0x0, 0x0, 0x44000}, 0x9005) syz_genetlink_get_family_id$nl802154(&(0x7f00000039c0), 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000003a00)={0xa, 0x7e, 0xfffff800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000003a80), r5) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003bc0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000003d00)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c40)={0x68, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x14}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_PID={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x800) 02:27:32 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000), 0x7fff8000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x150}, 0x1, 0x0, 0x0, 0x2404c800}, 0x4000000) r2 = socket(0x11, 0xa, 0x7fff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a8, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x51c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20040050}, 0x20000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x100010, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x7, 0x0, 0x23, 0x3, 0x1}, 0x100) syz_io_uring_setup(0x6f1f, &(0x7f0000000580)={0x0, 0xbe80, 0x20, 0x0, 0x1c0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) r5 = fsmount(0xffffffffffffffff, 0x0, 0x81) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r5) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xf55}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40881}, 0x4000050) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000800)={@loopback, 0x101, 0x0, 0x2, 0xe, 0xfffd, 0x5}, 0x20) r6 = fsmount(r5, 0x1, 0x9) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r7, 0x300, 0x0, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_FLOW={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44003}, 0x4001) setsockopt$inet_udp_int(r5, 0x11, 0xb, &(0x7f0000000980)=0x5, 0x4) recvmmsg(r6, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/222, 0xde}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000000bc0)=""/162, 0xa2}], 0x3}, 0x1}, {{&(0x7f0000000cc0)=@nfc_llcp, 0x80, &(0x7f0000001080)=[{&(0x7f0000000d40)=""/86, 0x56}, {&(0x7f0000000dc0)=""/218, 0xda}, {&(0x7f0000000ec0)=""/120, 0x78}, {&(0x7f0000000f40)=""/149, 0x95}, {&(0x7f0000001000)=""/117, 0x75}], 0x5, &(0x7f0000001100)=""/122, 0x7a}, 0x3}, {{&(0x7f0000001180)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001200)=""/129, 0x81}, {&(0x7f00000012c0)=""/75, 0x4b}, {&(0x7f0000001340)=""/62, 0x3e}, {&(0x7f0000001380)=""/156, 0x9c}], 0x4, &(0x7f0000001480)=""/184, 0xb8}, 0x7c7}], 0x3, 0x40011020, &(0x7f0000001600)={0x77359400}) 02:27:32 executing program 7: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @private1, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @remote, 0xeb23}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdb06}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x396d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', r0, 0x20, 0x80, 0x4, 0x8, {{0x11, 0x4, 0x3, 0x16, 0x44, 0x66, 0x0, 0x70, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x82, 0x10, "dcb1eccdb7bfe8cd40eb417ba38e"}, @timestamp={0x44, 0x14, 0x12, 0x0, 0x3, [0xac, 0xffffff01, 0x5, 0x9]}, @rr={0x7, 0xb, 0xf9, [@multicast2, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x270, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x37, 0x5, "09d3a72ea2a5bd8026c1baa6acffd46502113a806c1be901d2beee3ba7a3ed5aedd50dad1c97e4cbf7ab9073bf5f402b69105d"}, @ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "e2538ee6fe9af0c1280065312e4f2489d6da07467de3b7393943ab9fb640e36d79dd0f531a713374f4b12eda87c92f800a18f44736d2ae509c6c2d23c015db3de9069d40e639748db573a4e2a4b33aeea716573647bc6689b34365a1eb946411a96e1ae12629d136ecf637e5ad9113fff82132f12d2c53142b6cdb2a34b76d27ddbb1d2fb95b69b6e73fb980fc8af374cb465fd475bad2eca491e462e8c1d8083e03d43aebba720b8ad1cbd2ec12fe810e5814a3d24023c1e1aff06bd010fb0be0"}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "d0f7a722a101b12e332f46fdbae911639145d15e2a9b30f09f8041aa769a4818d51bea861bcc6fa388"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff52}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\']\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x23, 0x5, "241826a94f66247e469685ab396eda26d65a60b50d7a9a728ae42c4144221c"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40004}, 0x408c4) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000740)) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x77}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x54}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x1) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000002bc0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002b80)={&(0x7f0000000880)=@phonet, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/247, 0xf7}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/251, 0xfb}], 0x4, &(0x7f0000002b40)=""/59, 0x3b}, 0x0, 0x10001, 0x0, {0x2}}, 0x7fff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c40)={0xa0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x80) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000002e00)={0x14, &(0x7f0000002d80)={0x20, 0x3, 0x15, {0x15, 0x2, "bac02dd532987d5383d84ed2a633324f620735"}}, &(0x7f0000002dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002f40)={0x1c, &(0x7f0000002e40)={0x40, 0xe, 0x6e, "945fe760134b4f90eba3ea075d6785c90444ac296eb5b50a4fe0c07652c05a60eb4e1084e1cffd905771c5e3b253d4602a48cd221bcdf157248a86b254cfec3a0e51b2870da9973a1141cccadd6d91cefd4260f93e29149bcaf42bab4d555c2b3b68c8c12229db1b42102c340066"}, &(0x7f0000002ec0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000002f00)={0x0, 0x8, 0x1, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000002f80)={0x8, 0xca, 0x10001, 0x4, 0x8, 0x1ff}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000003000), 0x8040, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000003100)={@mcast2, 0x21, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r6, &(0x7f00000032c0)={&(0x7f0000003140)=@nl=@unspec, 0x80, &(0x7f0000003240)=[{&(0x7f00000031c0)=""/108, 0x6c}], 0x1, &(0x7f0000003280)=""/58, 0x3a}, 0x20) syz_genetlink_get_family_id$team(&(0x7f0000003300), r4) [ 105.849536] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.858031] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.878321] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.879495] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.885048] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.887083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 105.922165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.924518] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.925997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.927602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 105.929668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.930674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.931748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.935048] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.936046] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.937066] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.947047] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.948436] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 105.949433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.950370] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 105.953700] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.954322] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.956023] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.964282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 105.965174] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.966545] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 105.967260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.968700] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 105.969818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.976316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 105.977614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 105.978609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.983576] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.985379] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.986501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.989413] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 105.990537] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.991540] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 105.992926] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 105.994439] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 105.996652] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 105.997496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.004226] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 106.005521] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.010058] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 106.011056] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 106.012700] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.017586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.995165] Bluetooth: hci1: command tx timeout [ 108.057964] Bluetooth: hci6: command tx timeout [ 108.058580] Bluetooth: hci0: command tx timeout [ 108.059921] Bluetooth: hci5: command tx timeout [ 108.060189] Bluetooth: hci7: command tx timeout [ 108.060645] Bluetooth: hci4: command tx timeout [ 108.061418] Bluetooth: hci2: command tx timeout [ 108.121042] Bluetooth: hci3: command tx timeout [ 110.041411] Bluetooth: hci1: command tx timeout [ 110.106155] Bluetooth: hci4: command tx timeout [ 110.106286] Bluetooth: hci2: command tx timeout [ 110.107137] Bluetooth: hci7: command tx timeout [ 110.107591] Bluetooth: hci0: command tx timeout [ 110.107597] Bluetooth: hci5: command tx timeout [ 110.107639] Bluetooth: hci6: command tx timeout [ 110.169982] Bluetooth: hci3: command tx timeout [ 112.090098] Bluetooth: hci1: command tx timeout [ 112.152911] Bluetooth: hci6: command tx timeout [ 112.154509] Bluetooth: hci0: command tx timeout [ 112.154549] Bluetooth: hci5: command tx timeout [ 112.155000] Bluetooth: hci7: command tx timeout [ 112.155532] Bluetooth: hci4: command tx timeout [ 112.155947] Bluetooth: hci2: command tx timeout [ 112.217220] Bluetooth: hci3: command tx timeout [ 114.137987] Bluetooth: hci1: command tx timeout [ 114.200949] Bluetooth: hci2: command tx timeout [ 114.201080] Bluetooth: hci5: command tx timeout [ 114.201409] Bluetooth: hci6: command tx timeout [ 114.201934] Bluetooth: hci4: command tx timeout [ 114.202340] Bluetooth: hci7: command tx timeout [ 114.202739] Bluetooth: hci0: command tx timeout [ 114.266863] Bluetooth: hci3: command tx timeout [ 168.362450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.364208] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.366540] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.373200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.378220] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 168.381426] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.418490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.424696] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.429115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.436100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.443508] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.446109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.491441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.495398] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.512171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.513463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.520560] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.523294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.525801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.527872] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 168.529773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.539057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.540596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.545996] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.552552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.554293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 168.557076] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.558092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.559112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.564253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.566114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 168.568089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.598610] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 168.616169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.624096] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 168.631037] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 168.635019] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.638130] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 168.655496] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 168.659317] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.665759] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 168.668592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 168.670995] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 168.681491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 168.688089] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 168.691161] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 168.693940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 168.718036] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 170.457255] Bluetooth: hci0: command tx timeout [ 170.521903] Bluetooth: hci1: command tx timeout [ 170.585807] Bluetooth: hci3: command tx timeout [ 170.585895] Bluetooth: hci4: command tx timeout [ 170.714633] Bluetooth: hci2: command tx timeout [ 170.714644] Bluetooth: hci7: command tx timeout [ 170.776935] Bluetooth: hci6: command tx timeout [ 170.777736] Bluetooth: hci5: command tx timeout [ 172.504924] Bluetooth: hci0: command tx timeout [ 172.571026] Bluetooth: hci1: command tx timeout [ 172.632952] Bluetooth: hci4: command tx timeout [ 172.635895] Bluetooth: hci3: command tx timeout [ 172.761062] Bluetooth: hci7: command tx timeout [ 172.762890] Bluetooth: hci2: command tx timeout [ 172.826237] Bluetooth: hci5: command tx timeout [ 172.826796] Bluetooth: hci6: command tx timeout [ 174.554877] Bluetooth: hci0: command tx timeout [ 174.616920] Bluetooth: hci1: command tx timeout [ 174.680954] Bluetooth: hci3: command tx timeout [ 174.681084] Bluetooth: hci4: command tx timeout [ 174.808965] Bluetooth: hci2: command tx timeout [ 174.809536] Bluetooth: hci7: command tx timeout [ 174.872952] Bluetooth: hci6: command tx timeout [ 174.872984] Bluetooth: hci5: command tx timeout [ 176.602936] Bluetooth: hci0: command tx timeout [ 176.666023] Bluetooth: hci1: command tx timeout [ 176.728993] Bluetooth: hci4: command tx timeout [ 176.729999] Bluetooth: hci3: command tx timeout [ 176.857878] Bluetooth: hci7: command tx timeout [ 176.858414] Bluetooth: hci2: command tx timeout [ 176.921060] Bluetooth: hci5: command tx timeout [ 176.922506] Bluetooth: hci6: command tx timeout [ 225.439707] hrtimer: interrupt took 4806756 ns [ 230.588698] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.593687] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.594845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.598397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.600671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.603332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.607199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.613477] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.629136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.642145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.645721] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 230.656706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.719172] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.724048] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.732193] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.748146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.753157] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 230.754315] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.787075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.796629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.807017] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.819017] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.825075] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.827931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.833835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.859919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.878236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.891116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.899846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.905954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.914063] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.932273] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 230.941691] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.943454] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.945074] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 230.949239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 230.950639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.953133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 230.955099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.960006] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 230.964648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 230.968003] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 230.968098] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 230.970866] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 230.972063] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.012304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.025101] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 231.042069] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.665020] Bluetooth: hci1: command tx timeout [ 232.729770] Bluetooth: hci0: command tx timeout [ 232.793932] Bluetooth: hci2: command tx timeout [ 232.858055] Bluetooth: hci3: command tx timeout [ 233.049929] Bluetooth: hci4: command tx timeout [ 233.050861] Bluetooth: hci5: command tx timeout [ 233.114296] Bluetooth: hci7: command tx timeout [ 233.116091] Bluetooth: hci6: command tx timeout [ 234.713908] Bluetooth: hci1: command tx timeout [ 234.776898] Bluetooth: hci0: command tx timeout [ 234.840970] Bluetooth: hci2: command tx timeout [ 234.904901] Bluetooth: hci3: command tx timeout [ 235.100942] Bluetooth: hci4: command tx timeout [ 235.101733] Bluetooth: hci5: command tx timeout [ 235.160972] Bluetooth: hci7: command tx timeout [ 235.162476] Bluetooth: hci6: command tx timeout [ 236.761025] Bluetooth: hci1: command tx timeout [ 236.825944] Bluetooth: hci0: command tx timeout [ 236.888925] Bluetooth: hci2: command tx timeout [ 236.952936] Bluetooth: hci3: command tx timeout [ 237.145072] Bluetooth: hci5: command tx timeout [ 237.147137] Bluetooth: hci4: command tx timeout [ 237.209410] Bluetooth: hci7: command tx timeout [ 237.210725] Bluetooth: hci6: command tx timeout [ 238.808974] Bluetooth: hci1: command tx timeout [ 238.873877] Bluetooth: hci0: command tx timeout [ 238.937120] Bluetooth: hci2: command tx timeout [ 239.002988] Bluetooth: hci3: command tx timeout [ 239.194080] Bluetooth: hci5: command tx timeout [ 239.195876] Bluetooth: hci4: command tx timeout [ 239.258184] Bluetooth: hci6: command tx timeout [ 239.258729] Bluetooth: hci7: command tx timeout [ 293.047467] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.051323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.052762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.054099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.057048] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.059154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.060392] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.063185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.064239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.065581] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.065617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.072197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.096678] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.105756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.110540] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.114169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.119739] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 293.121056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.238702] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.240159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.244013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.248848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.252486] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 293.253426] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.255158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.286095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.313739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.336368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.352690] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.361062] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.363093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.364725] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 293.366396] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.379676] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 293.387415] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 293.390134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.393411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 293.398740] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.402696] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.405207] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 293.422305] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 293.430161] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 293.432461] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 293.447046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.449201] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 293.450610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.467026] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 293.473305] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 295.130043] Bluetooth: hci0: command tx timeout [ 295.130094] Bluetooth: hci1: command tx timeout [ 295.192931] Bluetooth: hci2: command tx timeout [ 295.321002] Bluetooth: hci3: command tx timeout [ 295.448941] Bluetooth: hci4: command tx timeout [ 295.577137] Bluetooth: hci5: command tx timeout [ 295.834989] Bluetooth: hci7: command tx timeout [ 295.897108] Bluetooth: hci6: command tx timeout [ 297.178838] Bluetooth: hci0: command tx timeout [ 297.178901] Bluetooth: hci1: command tx timeout [ 297.241901] Bluetooth: hci2: command tx timeout [ 297.371924] Bluetooth: hci3: command tx timeout [ 297.497869] Bluetooth: hci4: command tx timeout [ 297.626964] Bluetooth: hci5: command tx timeout [ 297.882344] Bluetooth: hci7: command tx timeout [ 297.945865] Bluetooth: hci6: command tx timeout [ 299.224928] Bluetooth: hci1: command tx timeout [ 299.227931] Bluetooth: hci0: command tx timeout [ 299.288990] Bluetooth: hci2: command tx timeout [ 299.416875] Bluetooth: hci3: command tx timeout [ 299.544892] Bluetooth: hci4: command tx timeout [ 299.672893] Bluetooth: hci5: command tx timeout [ 299.929345] Bluetooth: hci7: command tx timeout [ 299.992876] Bluetooth: hci6: command tx timeout [ 301.273002] Bluetooth: hci0: command tx timeout [ 301.273057] Bluetooth: hci1: command tx timeout [ 301.337860] Bluetooth: hci2: command tx timeout [ 301.464928] Bluetooth: hci3: command tx timeout [ 301.592918] Bluetooth: hci4: command tx timeout [ 301.720921] Bluetooth: hci5: command tx timeout [ 301.976911] Bluetooth: hci7: command tx timeout [ 302.043021] Bluetooth: hci6: command tx timeout [ 355.510377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.518588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.521845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.526835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.530029] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 355.537082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.624056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.626297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.630906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.634943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.636003] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.638303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.641014] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.643025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.645983] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 355.647634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.649520] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 355.651044] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.756726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.763025] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.764471] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.771331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.772559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.774359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.775277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.776459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.780964] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.784458] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 355.784479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.786648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.794910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.800498] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 355.804537] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.818542] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.819812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.822006] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 355.823537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.843051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.844035] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.854151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.872680] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.891365] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.910269] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.915569] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 355.916633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.919152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 355.921455] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 355.927199] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 357.593042] Bluetooth: hci0: command tx timeout [ 357.722114] Bluetooth: hci1: command tx timeout [ 357.723445] Bluetooth: hci2: command tx timeout [ 357.848893] Bluetooth: hci5: command tx timeout [ 357.914014] Bluetooth: hci4: command tx timeout [ 357.914049] Bluetooth: hci3: command tx timeout [ 357.976875] Bluetooth: hci6: command tx timeout [ 357.976973] Bluetooth: hci7: command tx timeout [ 359.640883] Bluetooth: hci0: command tx timeout [ 359.769645] Bluetooth: hci2: command tx timeout [ 359.769699] Bluetooth: hci1: command tx timeout [ 359.896867] Bluetooth: hci5: command tx timeout [ 359.960872] Bluetooth: hci3: command tx timeout [ 359.960950] Bluetooth: hci4: command tx timeout [ 360.024907] Bluetooth: hci7: command tx timeout [ 360.026435] Bluetooth: hci6: command tx timeout [ 361.688856] Bluetooth: hci0: command tx timeout [ 361.816961] Bluetooth: hci1: command tx timeout [ 361.816980] Bluetooth: hci2: command tx timeout [ 361.944994] Bluetooth: hci5: command tx timeout [ 362.009033] Bluetooth: hci4: command tx timeout [ 362.010368] Bluetooth: hci3: command tx timeout [ 362.073150] Bluetooth: hci7: command tx timeout [ 362.074956] Bluetooth: hci6: command tx timeout [ 363.736857] Bluetooth: hci0: command tx timeout [ 363.865817] Bluetooth: hci2: command tx timeout [ 363.865847] Bluetooth: hci1: command tx timeout [ 363.992840] Bluetooth: hci5: command tx timeout [ 364.057085] Bluetooth: hci4: command tx timeout [ 364.057574] Bluetooth: hci3: command tx timeout [ 364.120915] Bluetooth: hci7: command tx timeout [ 364.121881] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 02:32:34 Registers: info registers vcpu 0 RAX=ffff88800a27e0e0 RBX=ffff888027ee0a78 RCX=ffff888027ee0a78 RDX=ffff88800a27e108 RSI=0000000000000040 RDI=ffff888027ee0a38 RBP=ffff888027ee0a40 RSP=ffff888030b0f380 R8 =00000000ffffffff R9 =0000000000000000 R10=0000000000000000 R11=0000000000000128 R12=ffff88800cf93940 R13=ffff888027ee0000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff812f8c00 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f064d1ba260 CR3=000000000ee38000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffed1002d58ebc RBX=ffff888016ac7540 RCX=ffffffff81180161 RDX=ffffed1002d58ebc RSI=00000000000000a0 RDI=ffff888016ac7540 RBP=ffffed1002d58ea8 RSP=ffff8880367cf960 R8 =0000000000000000 R9 =ffffed1002d58ebb R10=ffff888016ac75df R11=0000000000000000 R12=00000000000000a0 R13=ffff88800e62c2a0 R14=000000000000002c R15=0000000000000000 RIP=ffffffff818bf1a7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2777fcb540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f27784a5000 CR3=000000002b5a2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000