syzkaller login: [ 65.747894] scp (238) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:45075' (ECDSA) to the list of known hosts. 2025/01/21 18:14:31 fuzzer started 2025/01/21 18:14:32 dialing manager at localhost:44689 [ 68.661516] cgroup: Unknown subsys name 'net' [ 68.807281] cgroup: Unknown subsys name 'cpuset' [ 68.844551] cgroup: Unknown subsys name 'rlimit' [ 74.244132] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 84.196922] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 18:14:48 syscalls: 2217 2025/01/21 18:14:48 code coverage: enabled 2025/01/21 18:14:48 comparison tracing: enabled 2025/01/21 18:14:48 extra coverage: enabled 2025/01/21 18:14:48 setuid sandbox: enabled 2025/01/21 18:14:48 namespace sandbox: enabled 2025/01/21 18:14:48 Android sandbox: enabled 2025/01/21 18:14:48 fault injection: enabled 2025/01/21 18:14:48 leak checking: enabled 2025/01/21 18:14:48 net packet injection: enabled 2025/01/21 18:14:48 net device setup: enabled 2025/01/21 18:14:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 18:14:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 18:14:48 USB emulation: enabled 2025/01/21 18:14:48 hci packet injection: enabled 2025/01/21 18:14:48 wifi device emulation: enabled 2025/01/21 18:14:48 802.15.4 emulation: enabled 2025/01/21 18:14:48 fetching corpus: 0, signal 0/0 (executing program) 2025/01/21 18:14:50 starting 8 fuzzer processes 18:14:50 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6dde66ab913dc9f0}, 0x4000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008480}, 0x4008045) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x370, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x2a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "941c80bf89a10974611d42e7b482ca5c11a217edd36e2e86b481cf"}}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcc85}, @TIPC_NLA_NODE_ID={0xc7, 0x3, "ce05373107b63a65e197b1be3e32d15c74142d30a698ece338141288a38b7a3cab3665b20de5651c611ed52d11f1fbdc4dfdc970ed8e4b89d16244cad2c8be8d1992efced13a5499817d688cf1ca09fa822b08dbd97a375dc71bce08b291f148bd8ed224a623a7d5e444ac74dae674491eb324d164dd9afe55aa3fd04c98314c29397a944bed73422ff6de95c52d7987361c3bba6b0ef0ed7d3941408d8650634ef09e0ed25ca7710c72b679207db0651ca80ba00b50f7a0f94dda30906552fd2d5029"}, @TIPC_NLA_NODE_ID={0x7d, 0x3, "67e29386b20695bb109c3460206b8e688e53649859e32f81c110d40789a6d97cdd13fdd769fd1c5c2b1d0e7bfcec33d9de34b2ff57baecfeac3867b7f03cf64784f694b7d307a72ad8577038746127d8345adb83da1be72dead34f93fd5424bce45dd51f8a0718ca9f2c9625ead65d20ca43feeb4c60de2848"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xfd, 0x3, "a860a446b0d4342df57cdf0946fae35fd651d282c7aa2126f9cc4ac447d0d18d31b282de08459386721c3f5afd10000034b5763733570ca7a790338d1b5b2addabc6d691ee2b99b3836d90f4921f44a160e334be734f734081009a3ac94f25ff460c35d3f2208c78bc5e8bd3e66a82af259a871ae7a8de5b317b0796e9f15cc61702e24af303f0a5ecfdb391e753d96ddf4e8bc10e683533225475f18abb74534006646a85bbf323c4bbc6781e7458cbbb13550fab8a82bd6854176576da05b902b61a9bbef1758e99c39c1b7a16a2207ce266429884af091ea12cc870a05ada71cff348b0b1403cd83eaebae7c1a1f5ec38cdb24aa7b9c4ad"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x8025}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x90) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x985, 0x70bd28, 0x61d75a78, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000b80)={{0x1, 0x1, 0x7ff}, 0x6, 0x40, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c80)={0x0, 0x0}) r5 = openat2(r0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x200001, 0x11, 0x8}, 0x18) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x64, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4f}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8a5, 0x5f}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x4) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x164, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffce89}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x92}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5973}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9dce}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4880}, 0x10) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000001100)={0x0, 0x4c4}) 18:14:50 executing program 1: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8000}, {}, {r0, 0x200}, {0xffffffffffffffff, 0x2001}, {r1}, {0xffffffffffffffff, 0x3020}], 0x6, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)={[0x9]}, 0x8) rt_sigtimedwait(&(0x7f0000000180)={[0x9]}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x8) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000200)={0x1, 0x626, @status={[0xfffffffffffffff9, 0x0, 0x6, 0x100000000, 0x6, 0x8]}, [0x52, 0xda5, 0xd4, 0x0, 0x8, 0x401, 0x2, 0x800, 0xfffffffffffffffb, 0x6, 0x10000, 0x8, 0xe, 0x1, 0x1, 0x1aadd14b, 0x4, 0x4, 0x2, 0x4, 0x1ff, 0x4, 0x8, 0x62, 0x9, 0x400, 0x3, 0x5, 0x6, 0xdf81, 0x5, 0x8, 0x80, 0xc00000000000000, 0x100000001, 0x280000, 0x7, 0x113, 0x6, 0xff, 0x2, 0x100, 0x2, 0x0, 0xfffffffffffffff9, 0x80000001, 0xa401, 0x6, 0x6, 0x7fffffff, 0x9, 0x7f, 0x8, 0xe4, 0x400, 0x9, 0x401, 0x7, 0x3, 0x6b76, 0x7c, 0x1ff, 0x9]}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000c40), 0x301001, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r4, 0x9) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) mount$cgroup2(0x0, &(0x7f0000000d00)='./file0/file0\x00', &(0x7f0000000d40), 0x801400, &(0x7f0000000d80)={[{@subsystem='rdma'}, {@memory_recursiveprot}, {@subsystem='pids'}, {@memory_localevents}, {@memory_localevents}], [{@fowner_gt={'fowner>', 0xee00}}, {@seclabel}, {@seclabel}, {@fowner_gt}, {@uid_lt}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x3}}, {@euid_lt={'euid<', 0xee01}}, {@fsname={'fsname', 0x3d, ','}}]}) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000e80)={0x19, 0x9, 0x0, 0x9, 0x8, 0x81, 0x4, 0x103}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) write(r5, &(0x7f0000000f00)="246c9ef9538d1bdba34af7a4f46a139b6d6abdd1d65eaa55ce46d5b9cc312769f06e00d929a2e50c34ff7df73fe8094c", 0x30) setxattr$security_capability(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), &(0x7f0000000fc0)=@v3={0x3000000, [{0x1, 0x80000001}, {0xfffffff9, 0xfffffff9}], 0xee01}, 0x18, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001100)={&(0x7f0000001000)=""/200, 0xc8, 0x5}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r5) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x90, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5bc9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20000081) r7 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f0000001300)=0x5, 0x4) 18:14:50 executing program 5: sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xa}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x72d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x25e}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004005}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x12a41318}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe4, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f32}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa32b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_MON={0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt(r1, 0x33, 0xe1, &(0x7f0000000440)="f6ac12bb5c9237d009423bde6671f563b151579c5edcf3cc9ba92966c1f56e71bb95c821f469d9b46bbdf6c30a96baa9316373ca92b3de08f32903c730ec113093e26aa2bbc0675b66b01620a4a120912b30e1840a4c9f79bf2b2e35c173f66b0447615c19d5abde8de0c62837ae6aeea57fae76222035283249cfa7013f8546fb13dd19c6070f70b6db89fc92241262abbfc137e4c7f7e82f499051971712b6ccf9d5f8cb0e72b348d8de87f3a0305f20357f9ab47f85da393742e5f3c352e4f764d11d7f31208612a761ee4c72a1fee174edded61a7058c99a8f40197725474af63d8335cd1b88774debec", 0xec) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xc0, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc5c1}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24044040}, 0x20048814) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x10c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "06c45d128eaae7ab7100c4bf228e7b6b372b095e74b1a89a"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "de56b4ab9af8a9c8ab180a83f54008f70b2439a8aa8de13b"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "401e940e75878ec6a22c135faf4204b7d5a4cec711510521"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a84600eb652deda55afdbdd284a9e10a32fd69f97407613a"}]]}, 0x10c}, 0x1, 0x0, 0x0, 0x48084}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000a40)={r1, 0x0, 0xf5, 0x100000001}) ioctl$CDROMPLAYTRKIND(r5, 0x5304, &(0x7f0000000a80)={0x9, 0x81, 0x66, 0x3f}) r6 = dup3(0xffffffffffffffff, r1, 0x80000) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000f40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b00)={0x3f4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1d}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d32}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x531}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc2c000}]}, @TIPC_NLA_NODE={0x2a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0xea, 0x3, "b639424a45bf606aa72e9d66445148032e72bb9f041c1516de715003885eb7f13996dfa61ece43a528c822ae0e0fde4233e8af3fc446f949544df8b809aba875642d21266a4a4bb0e335b0dbf5edb99fa368b6f21e678346039b8dfb8cbf67a5c55b068dd49e0c0a189c39d8bd989dd4c6338e3070d4e0537c9847c1a705ff1d8a4ee7f9358fdc5015cb729f94a7b00c78aa5f1566b4503850dc993ec30a3570387885cdb65f43f638a9d4ef38e07fad0e82e3796f579c60e76e58bc89c4c7ee38c277e1bd361e63a84a8c90bc82c59c51b0553a5ee5d4955cf46969a8e8ac0e396bf6e08489"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "fa819a2ac3ce1f53b82aeca92f59fa6fe65b1ac97beaa2670c7fc2a2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8521}, @TIPC_NLA_NODE_ID={0xfa, 0x3, "92c4dc69633354449b8d38491f0813b964ccd473ba7d283cbf1c0578beb043e3e2cd69678a5864ac1c6c1dc608e1c5c92127b5c9ad2a7da17edde65413a1ce7542bebcecec8a8c589ca676237e59bb4863f8724da2cb7afbfb6bc1940d339bd42f7004e356f39824e6b57158a666dae11716484b0dc10c413e85df8914ebaf142c1dd8f1a8697ba2d02a3e162d0360a55da5098410bb2107b068050f3527d16e201cff6d3c538d8a6b1e7938ebd790b4da9d1d176b3982ff5dd34477925e598b26706afbd725061eced3b3546e1936f7d899e399dbb6c118c8140dedb9c612932e740735f835db911b9d59d8a0c92e8c845ca4143504"}, @TIPC_NLA_NODE_ID={0x62, 0x3, "2a2d0119f52258acbff9269b030ebc771f2bfdf190614e8cfa30ac7fea1b443b40b76aa13880fc904fa40a99a6752afdb7a37d2f2c7c358f22d56d0910d86fd3e97c19d793340d6b03f075c361de488d83b10712c78bc2eb5ea8299075b2"}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0xc38000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x5e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0xc080) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0x28}}, 0x5) 18:14:50 executing program 2: ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RREAD(r1, &(0x7f0000000080)={0x23, 0x75, 0x2, {0x18, "fbe8552750d905a4562f1b755f16512491f23c13332daf30"}}, 0x23) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) ptrace$getenv(0x4201, 0xffffffffffffffff, 0x4, &(0x7f0000000100)) fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f0000000180)=@v1={0x2, 'bZ'}, 0x3, 0x1) splice(r0, &(0x7f00000001c0)=0x2, r0, &(0x7f0000000200)=0x8, 0xf00d, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$P9_RATTACH(r1, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x10, 0x4, 0x6}}, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000280)=0x4, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x24}}, './file0\x00'}) write$P9_RFLUSH(r1, &(0x7f0000000340)={0x7, 0x6d, 0x1}, 0x7) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000380)=0x2) r4 = accept$inet(r3, &(0x7f00000003c0), &(0x7f0000000400)=0x10) dup(r4) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x2) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000480)=0x7) write$binfmt_elf32(r5, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x1f, 0x0, 0x1f, 0x3, 0x2, 0x3, 0x3f, 0x3e5, 0x38, 0x28e, 0xfff, 0x6, 0x20, 0x2, 0x15, 0x0, 0x7d52}, [{0x5, 0x5, 0x9, 0x9, 0x8000, 0x1, 0x4, 0x8}, {0x70000000, 0x0, 0xfffffffc, 0x1, 0x80000001, 0x80000001, 0x6603, 0x4}], "83308b7f91a5709c2e167b6b615db6599706e5574b7452c9f07bf75198e2b1a159830b9b88f4f627e63148031fcb39951e72b0781fd501b1c083ec4ac55193ff1e0ffeb8f4c271f4b04b1c8bc20bf2fb230fafdf61449b477c94a40bcb71a5e8280f032932da10b3b05b99543a2bd90bc7f9929954d011d0ab7dfe6fc9e7bf9ab05936bd5722ee31496bf37ea4aec6d586136563532305976c6eb4bc437af1216f89c5ed389fcad8ec43762caf4ee494cda41e3502", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x82d) 18:14:50 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x800) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x0, 0x5, 0x100, 0x0, 0x2, 0x7, 0x9, 0x8b}, &(0x7f00000000c0)={0x8, 0x5ce, 0x4, 0x859b, 0x10001, 0x4, 0xfffffffffffffe00, 0x7f}, &(0x7f0000000100)={0xffffffffffffff8e, 0x7fff, 0x4, 0x0, 0x1f, 0x406887e1, 0x7, 0x80000000}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@private=0xa010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0xe5, 0x4e22, 0x8, 0xa, 0x80, 0x0, 0x18, 0x0, 0xee01}, {0xff, 0x4, 0x7, 0xa75, 0x7, 0x8001, 0x2, 0x6}, {0xffff, 0x53d0, 0x3, 0x1ff}, 0x2, 0x6e6bba, 0x2, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d2, 0x33}, 0xa, @in=@loopback, 0x3507, 0x3, 0x1, 0x2, 0x7f, 0x3, 0x800}}, 0xe8) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x1e, &(0x7f0000000400)=@generic={0x1, 0x0, 0x16, "172adec1", "0f9e6051fac366004165315cda3596164158cf88359d"}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008886}, 0x40011) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000580)) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, 0x0) r4 = open_tree(r0, &(0x7f0000000680)='./file0\x00', 0x1) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000700)={@empty, 0x0}, &(0x7f0000000740)=0x14) sendmsg$nl_xfrm(r4, &(0x7f0000001900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000000780)=@delsa={0x111c, 0x11, 0x402, 0x70bd26, 0x25dfdbfb, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x2, 0x3c}, [@sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x0, 0x6, 0x1000, "cd02eaf1e2994e7fc2ac306c217122742c96dfc2cf858c508652bbeebcf293fbabe58c554188211624323c3eb839689193295af0c9b326f30a183a7706f06c27930ae3169f16d464c2c3a4c96cc17c3458a61436419b3b83d55714d0d006f272b27e41978cb53ab638502a02eddedeeac2d48b1fb9f69f579978a5c6196574f089dff11d677ae51a6b3df828aad80c5403073237c1a863e6b269cd10b574824ba9a799cb04e6c3079b7067df003b39a36817cf3c5717306e45becbf32f12e95ffd74242e05ce4ba1bfbb8a02a38a087fea182785fda2071a09c19bb2768b058cd216ee52fa38e6ad38c733b8cec6de360a279b109b308d86ced58976043b51fa0a2f6ac8c6ab1ebd889559ddbfd7198abf4ad6765740219d5c0ba7fbca190a48a52e177411f35692c0e2e772f0d07ecc72b2d210af6e4f61d3c6101622d0180ff57f3383fc7c0506eb572dd7b03407960554a6c424afb534b5bc870bc9ae27ad9133dbaa4c83f30a0c0af5bbb48580ab97085209ae923ecfc9b5071d7fc8933f1e576840e03cb0d74ab7b48d8856cfebed5e83805daead9edac0b9d6dc35ad019039ff8813c3e8d6c24278ac1788946da1fc305f4a504faeb3767f1db873ac540dd393ee3eb423fb4b46c1dd99aa4e3878c8381d9a3a2c21fe1e75c3b502bc777f888b5fee9449a2235bf376b6eb45dcf834dd58571c585eac57d218dbdf3b1be61aae289545494bbd8cacec31abf80175f91d390ccc935c7b406ce85a347d6e12cec8b8d56d7e45735d49618d6e6ef8576b3b87bb1ac6dc1b4eb406e2a4af961d4539fb43f603940d00daba02022bf9df120f6bf483e95f24462ca3b032c6d598f045895e722e77e1e629a87dec22544371f5aa30d9d3795dc8f8b2ad48812b90235e9392d0a8630105f4bf57e8592669784832f3072fbaf0852fbb7df47d62f5d175229732126f617f8a2697586906a7a46f41234e47bd2dd71249b209fb46ece294bd14850788ffdd786dfb975d6f2898f34de4dd0bbd74f00ddb430d9ad8186ae5a0977f55985ff747209bc157c07fb2bf4d08527afc0bf06ba8eb3837ee839100e13e1a24f4cf1437d2541482a432b5570640c5b38f098880dbff1b0bf6759a272208586d53180543107262b467863a54c55bdc8787060f0fbfec93fb410e46be35c0a2c8ffa44f0683ccc1dbbabdb956d52cd07cd16a9777dff654fd36284adbd516134071f57e24eb7bc9bc861f6f669dc980108b8288e2f4c28734c8825ae5079d866b945b443ae9822c14f4de63340e02e1317b2a111c16906ff74fa59cfc45aff80d1b121d5cdfef858b83b79c9699d14c67c82ce88a54d4bf06fb3a824fbcc4165954c82393c6cf33b4924f3eec434f5354d03e06fbf7358ed77cc791d9d48994b55674287d953213f888379bea434e451d305819cd245549c2e7f97e3ad311f0283d3f849c82317fa6d8ebb4f14a328ec8d86a4e31f04601688f78c6a395ba63c1fed5cb6619854e5384beadb8c25d347a6c728dc8f8132fd934ef129a4259a57fabe2f986c6aa326ff375ec9e1552190075567767e26208dcc1d56ce1eb1a751b3a5e1683a98bee55732f4584e7a1aa6fbbb261677e20f837cf55e7283b0a47c684e8cce9706331808c33bde2a121646387e2104b1d8e32c23239185f770405763e7c04cc1f19bc69d761b407f1c8985732613ec10d11b65b2473fc25f50c00c448ae56910740f7134a6c302d7f959890b71cc1d5400f505f45b6aed27e13f8b655d632c652e08eb540f50fc3ccdbb94fa6dba3e4fb8ab075ee5aacbe817560b57fafe340657dbf506a8b69c05e2258ae561451cd4f8c2cc693bb7f7105d03916c8b6e2bc2d88a37191286b138873c52035efe3a6aa2720266ceea44d4f41b2ccd964b9ad64ba6aef58e6af60a295d4a18a9b4ea271ffe220f28575cedd30770dcf898e49bcf6e4ad0f772c7221b1ce0525c3dff183c496e4ca0d56688c400ffd88c1f572dae0d55fbe09a9ad831892cecd93f88cd6035e728fd3f1f3a243ea6307d6e99317de69ec7feb90ee8c4881d7e0d5f3e4c27316f291223c891d0409094cb1852a3dd6cd3c7a93d99aee751c8c47d1904b538f75bf95a45237cb06002cebfc57aa586d23443ea9eabcd45f4473e167f24956c2d8dd5bddf15472c4e8d462c43882d48015332c8af04590cedc28e1673937152483ba8aeddb2584757cac7779a7189c8341bf16d2a7c2c158240954ceb1daf1bc60203822013f9d1d281c955e6d78d9bd20a95e08d8e79c955fe225f331de03ae7c51e9d721837193bd12e00e38d1d4f1a6ba0ba776c0006bf94f781ebb7f90bd5e7425d61bc12c8473ccdbf02af977d2181aa378c519c5c1ba7c701689ee8509ba094fd1a4ec0728973db1c71abf37087252e87b710745bb445fba7e3dcbf520bb2bc1eccd7b090263bb36f6599c6fb0c98921d7a6242bc874c4bcae18034a350e9d9162bc14a4363ba17413bb00ae850f02f35387f3593069870ffc4774388a2f567e560861c0dad683efe5341262122baf3f10e4e21d0a1c1b35a18545938adb39a629afe651909325d737f841770c38cd27ba1b5bbb1d0533c9384fe827ece28676c4a425d5b90f7ae0869404bb8072a01548e5ce1a566dcef83842680289330e030ac75a5dfc4ade910833975bc2fee7dd529780a6ca42132632dc875d01b73a758b197c903982c1055bdae808332eef9d91eaa434f2a5a8bbbe97d42097f9850947c6155a788e94e029c4eea8eff912f0ff324781dcca22d800698bbe192965d75e494f37bcc913e949c8f9c1dacdcba3ed5fee2dd707897f15e8dd6105959497783f33643bc6fc86b220f2e41f95cda73a103f2c370408356da091040cf89ed5e4462a374394715df88f5f53a276af410e4595aa41b1b658e3c9f6867904bdd17b9a02e7261469ccbbcbc21c61c756cd7fc39d5b6e1cdaf768834cd0edccce7279f1e661bc49f13020e3a8554b302130608078851a2df0e1d3d0ebc7935ecd7d079c5792032bcf9230bb17e918bc6098f450572939252b46cb3f49bbde7d89d4b8781cf52277b98dce4a780b9ec0cd0c1d4ddad5b543d790b736cba4685467129fd187c15d0f3a07283670924141578de12f62aaba5ab3871107c79c2540e2ea1282a3da3eeeaa3110d23d7c65d3350d4e1e49bb300c4231a4c958b7204ff3a1beaf8c73a0a3e279a90f60af7920390c5d9105f41eb7361210a0a5fc9e29e49e4b261767c474b6cf4f2cd79a775fe01947ec8be67ba34ff09bc4857f0ece389c0f894e970efde8adb28039a74f032695789fc5cb5bebd017e4be16f82afe59b9899468d3970f91eeb26931d2dfefc021f96d4a17ca4459ed77951c3285a1ae7839c241535b9d1dd615e533fdf3439ddd62eaba62af1e607018764ea2c552638a47daa1e7bc5ffd633f0cb756f4aca544ef133439fb5640f1ddb77265ee253692b0422394e42f235e24bcf14c160969aff76debde2f2b07734a9039fac64f4461553c8c5ff499ecbcbba8638a9b0c1d358292286e1c5215dd0d98303e349f49c026cbaf833ef1119d0b8dd18ce610ed858b62e47e19495fa0107e2ff8a8fe2980d372ec7d82b2975fd7fe4994f6b01ae4d192a7f331e64db639daebf0c3dc373e63962348af8e8d98b99585604dd97126fbfeb7269e977cfd968fe13f3de39a9fd4ab04019157718337d7a2368df7a593c9c8c19fd8a044fe8e446d3eca7ec5a56724a48eab3ca1517dd7e8bfa934e3bcbdce6c830412f600a00c6bac02b014197765d1e17618ea1b3cdb92b06a1b1fe34ee5361004965665e68cdda522c21e1e36d675f083ec8661d5850dbd960f55971329c73ec1d511f62e108385aae487714c4f00ef0afebe382e617a52b626e739b1ac65c58420dfb8fc0464420824e1d6ae9e874be5d5dfe42786a3cfff02ab660e00a064c61581c9d3d73239e04d228c561324418d535087d680107039ff8c0baf351da7d7363aa9679e9a6ed5d99b2c66746de6e2dc175d89775750c4f8e9855dad525354f1c03261114ca6af417b30d6877258ca8110250cf63e5b5f76f0f830d9a022b8c76a8123ddd4405f7296f1bae13085148e70942b65dee49daa980c91f30a1f32fa2c3d160356f78de2d0f2460c657a80edbfa881d9b3bbb029458db93d302dcc472fcfda52d3bdaec3d5a977b6b9cd20958409ce185ebc94e3e3188b81ed4034dcdafef6f2b7925f45878f5a547c22dbdfac27dc610e76c848c2e95b06b1af0d6a6fd6af7c043fa41ab12f135394212582841ec5b45a59eead68d0e9e2d783a225c7bc9b9aeb91f436945ca932958594e973a685c52449424afc19fa42f2536d95c79a18107ad7c07d61e1483b941240c4f2f552cb29357af20f1dbf8fe28a38f7ba25f6b9b68cf00db910510c309045668fccbf339e32b69dc60693ba068ba1292120a43ceee75a89f7c36a1d5722d55027417f6c72caf17a56678362d5626c6145a96e1655a2c1d4e9fba3b43bbaaebf93e5d29b63a4d1fe08ccf0fe320411fdea56376318f19f4bc81a39bd3fc1843eca67a77d8860b454579e723856916d6594134d3c56283b59884b3d300f997cd62e58d5dfb161c74202445dc6d88135d1e04c33470e1127dd61394f2de727c7f886abb1412d6e5bc4fdff14496498b87ce76baaa2597d1b0dcb9ea65fd35b6f28869d41a95781a14acda8867070575aa5e0a2b6094ace2dc9bc4868fa31fc522bcdf5fc926231fea7b7138ead0119331f7ceff9b70d315a5bc8bdbb47dbc76017dbe2ab9a88b58e9c74c710f171f7a5c63063a4f16c7f7fd8291d19b7fc94dff2b1f8a1b4ad28e6e795a7f987c42f590ffa8fe01ada47a48da6bcdcf148b73f83bfcf21c667199bab5a46a8f50890ac6ff1f5f71f4213e64c2fde536256fc852223f74c76be78678f43f9f4d9e0f788efc0ee447cbee8d34b45117fa2be6a20def9bf782c20f3d3d366193e47504294a813445b2cd73e4398354851c341586ef47a6126e703be3a6d6a1a777f5ab46ff7c861fe85ffdb31306d75b6cd17842e3d85b683095fee60ff265720949f07374a277d8ff93bb6c628d927fc02934b3607cdbd04c4801217efb3184e1aaa3f67c2027c7100d2064cafd6ca6723cf279bb73e41a35411fcdec32cb2a093ca7ded28d4777c962b7cec23f81df9a67606e1196db528c83aafca7cf223600b0b6929a68dc9081c8c6ea648c8dde38d9a04f34c044d5a09505539b3aa664cbf7b81aff9a9b588d752572754bbab53d9854df63b3bb1289551f8b0ad52c29959eef826a742c7343b5d18025f53ad174bfcb548b031405ab747b06229b2c97455052acc668767d6cecfe2c8bcce09cd7a01ff01278ee6e0bfd1a83d4c64264783c85356594ab1c43fd8a2090388a3d8b641dff23a5e6fdf86e6b32f88cfe0ae0d5f84e9c250d3f2da329a48e84b63882f2d1bdd65a2fd5d405a03f9c86d37eed484c81d1654000412d6a7f07829024636427138ee6db3be9f6e2dcb49aeeb14cbbc87a38323e9e3fdd12c09aa62d31173ee3aa674c51520d318cdc7b9cb7e8e6afdd1acc1bb24bf7397687886c45b1e91085e94f79b895c6b4e8a155d5b578be5a7cd24703bfe05673baab1027065ad2787db998adb544f108de1f49c1ccc9cc5d02b14269fdfa29415d1d1daca6c7a95eeceebd79fe47ce26344ff97064c35db7a55c4433f115a35feeb3d08e68fbabc0c45ae8b35a92e3de76b8e220377ffd50aad6ef31c850522d3b7f56c2bb8"}}, @proto={0x5, 0x19, 0x3c}, @encap={0x1c, 0x4, {0x3, 0x3ff, 0x4e23, @in=@remote}}, @offload={0xc, 0x1c, {r5, 0x2}}, @algo_crypt={0xb0, 0x2, {{'ctr(cast5)\x00'}, 0x340, "004f6b39bd7a9f5e39bf65b92b4feac42839a7f243eb322c30028267b07a2584cdf1550f5c8adff5a1e1c88122b634d8797ebfe93f86ae572c9f1375c8d16f2096740d8a2e729a39ec27c27a5a0c428563b2df531663196ddeb510f977a574036d0258eb7b8d7904"}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x111c}, 0x1, 0x0, 0x0, 0x4041}, 0x40) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c1}, 0x8000) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmat(r6, &(0x7f0000fff000/0x1000)=nil, 0x6000) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001a40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000001ac0)=""/43) 18:14:50 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x100000001) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x20) r2 = accept$unix(r0, &(0x7f0000000180), &(0x7f0000000200)=0x6e) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000240)=0xf0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xb, 0x4, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fdatasync(r1) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) write$eventfd(r4, &(0x7f0000000400)=0x6, 0x8) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x808823, &(0x7f0000000500)={'trans=virtio,', {[{@access_client}, {}, {@debug={'debug', 0x3d, 0xdfb}}, {@loose}, {@nodevmap}, {@privport}, {@version_L}, {@version_9p2000}, {@cache_none}], [{@smackfsdef={'smackfsdef', 0x3d, '(#'}}, {@subj_type}]}}) getsockopt$inet6_int(r0, 0x29, 0x6a, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r5 = accept$unix(r0, 0x0, &(0x7f0000000640)) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000680)={0x2, 0x2, 0x18}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000006c0)='I', 0x1, 0x81) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) [ 86.914991] audit: type=1400 audit(1737483290.502:7): avc: denied { execmem } for pid=273 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:14:50 executing program 6: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x1, 0x9, 0x100, 0x800}}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x5, 0x1]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000080)={0x5, 0x1, {0xffffffffffffffff, 0x1, 0x7, 0x0, 0x80000000}, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000100)={0x200, 0x0, {0x1, 0x3, 0x4f, 0x1, 0x800}, 0x7}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0x1c1000) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={r0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x400001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = accept4(r1, &(0x7f00000003c0)=@in={0x2, 0x0, @local}, &(0x7f0000000440)=0x80, 0x800) r6 = dup3(r1, r1, 0x80000) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xc0, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4589179fc3e448d1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x90}, 0x45) accept4$inet6(r6, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000600)=0x1c, 0x800) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x8080, 0x0) preadv2(r7, &(0x7f0000000980)=[{&(0x7f0000000680)=""/78, 0x4e}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000740)=""/210, 0xd2}, {&(0x7f0000000840)=""/110, 0x6e}, {&(0x7f00000008c0)=""/147, 0x93}], 0x5, 0x1, 0x7, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x24020000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) 18:14:50 executing program 3: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x5, 0xe8, {0xe8, 0x1, "41cfcc9276279efeb7b41e01b1defc9abfe99925165fb2e84876300b17ab8f00b511a7fc8a0a018496ec687f9c537264a83112ef28364eeac093a9623b1cabb8191c74f90cfbc3c325186cb221edb8921ae9d5909d3bd43a9327e5fd922aecf7d10a498ff4c0e47e2ed2596a31133d3e13ac8c994781a8490e6045efee2f58a610fe5aeee296cea2c2a1507ea8d144eed68813a4a75ae7f94488d022408e8e40031231caad779cdedfa0202f8422d9b257a0b7157c68c223250cc4f30974e0974d418e7af0a0990e501aa45991877629a1e9a1a8400ba6a501cd5d8b7b49ed107bbe56aba606"}}, &(0x7f0000000100)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "67c3019f53934832cd8e1c47747cdbb0efc28d6b765fbbc2d67429af084dccb563d915a0ca6291072d12afbd1e53219ad30a003800b10c0f27694c9ea6f86dc0a17044549bc6f0c488af0613a8da186edd4029e0c71424d34f7b6bef4b"}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x6, 0xba, "0a346c821daecab95c7a8807260bfcc03a71b7adf1f10663598a09b13bcfe86c484734a80d03a07a17b83c804b0d13406d24c5d5a0a25c191c14c112dd5fcab70a10f53fd27956cc7ad2228354d28d738e081da5931cf365e80fadc83163c76f09d0d93662ff163dac57accc4c651fcd56182d815743ff9553c2fe259048ec6314be2c195af9e9194df8ad1bbc1a305cb03fa9057319fa89d0bb139075e24a0ecac6225f9e4631184146beabb98dcb412284f5ceda3245093d62"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x81, 0x2, 'lR'}, &(0x7f0000000340)={0x20, 0x82, 0x3, "48d275"}, &(0x7f0000000380)={0x20, 0x83, 0x2, "8eb3"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "1842"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "d04239"}}) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x6, 0x2, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x7800, 0x80, 0x4, 0x7ff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f00000008c0)={'ip_vti0\x00', 0x0, 0x80, 0x700, 0x8, 0x1f, {{0x2b, 0x4, 0x0, 0x6, 0xac, 0x67, 0x0, 0x1f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x6, 0x3}, @end, @timestamp_prespec={0x44, 0x24, 0x9a, 0x3, 0x3, [{@broadcast, 0x3}, {@remote, 0x21}, {@multicast2, 0x5}, {@loopback, 0x4}]}, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x0, [{@remote, 0xac8}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x23, 0xa8, [@empty, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @loopback, @local, @empty, @empty]}, @lsrr={0x83, 0xb, 0x27, [@multicast2, @rand_addr=0x64010102]}, @timestamp={0x44, 0x20, 0xf1, 0x0, 0x2, [0x81, 0x10001, 0x20, 0xffffffff, 0x7, 0x7fff, 0xac]}, @timestamp_prespec={0x44, 0xc, 0x52, 0x3, 0x2, [{@remote, 0x401}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x9, 0x5, {{0xe, 0x4, 0x3, 0x0, 0x38, 0x66, 0x0, 0xa8, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x88, 0xd, "f4c90e9c2522728d9487c8"}, @timestamp={0x44, 0x14, 0x2a, 0x0, 0x7, [0x9, 0x2, 0x1000, 0x1f]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x8, 0xffff1e4b, 0xe, @dev={0xfe, 0x80, '\x00', 0x13}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x20, 0x7800, 0xab, 0x4}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'team_slave_0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e00)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000e40)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x1, 0x5, {{0x4b, 0x4, 0x0, 0x1, 0x12c, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@cipso={0x86, 0x28, 0x2, [{0x0, 0x10, "cfcb39f966b4a2976048a4141fb2"}, {0x2, 0x5, "d65681"}, {0x5, 0xd, "67ff7623ed9eb1354abfbc"}]}, @rr={0x7, 0x17, 0xe9, [@dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0xe}, @local]}, @generic={0x82, 0x7, "ce94cb1f2b"}, @timestamp_prespec={0x44, 0x54, 0xe4, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5f}, {@loopback, 0xfffeffff}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@rand_addr=0x64010101, 0x24}, {@rand_addr=0x64010100, 0xe52d}, {@loopback, 0x5}, {@multicast1, 0x6}, {@loopback, 0x7}, {@loopback, 0x3ff}]}, @rr={0x7, 0xb, 0x67, [@rand_addr=0x64010100, @multicast1]}, @ssrr={0x89, 0x7, 0xc2, [@private=0xa010101]}, @timestamp={0x44, 0x2c, 0x12, 0x0, 0x6, [0x0, 0x400, 0xfffffff8, 0x3, 0xffffffff, 0x7, 0x3, 0x80000001, 0x6, 0x8]}, @timestamp={0x44, 0x1c, 0x46, 0x0, 0xa, [0x7f, 0x7, 0x0, 0x6484, 0x3, 0x5]}, @timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffffc}, {@loopback, 0x7}, {@rand_addr=0x64010100, 0xffffffff}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001800)={&(0x7f0000001000)={0x7d4, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x97}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffecf}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa1c}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd29}}}]}}]}, 0x7d4}}, 0x20000000) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000001880)='.log\x00', 0x230580, 0x124) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f00000018c0)={@loopback}, &(0x7f0000001900)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000019c0)={'sit0\x00', &(0x7f0000001940)={'syztnl0\x00', 0x0, 0x0, 0x6, 0x80, 0x5648fbf1, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7800, 0x8000, 0x6, 0x5}}) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000001a00)={{0x2, 0x4e23, @empty}, {0x1, @link_local}, 0x5c, {0x2, 0x4e22, @remote}, 'geneve1\x00'}) r9 = openat(r8, &(0x7f0000001a80)='./file0\x00', 0x4000, 0x10c) syncfs(r9) mount$tmpfs(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x10, &(0x7f0000001b40)={[{@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x70]}}], [{@subj_role={'subj_role', 0x3d, 'user_linkup\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'mcast_rejoin_interval\x00'}}, {@obj_role={'obj_role', 0x3d, '{\x954'}}]}) timerfd_gettime(r9, &(0x7f0000001bc0)) fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f0000001c00)) sendmsg$NL80211_CMD_UPDATE_FT_IES(r8, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1000}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) [ 88.467047] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.467773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.472542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.474691] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.476597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.480542] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.483646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.487675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.487704] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.492376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.525748] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.528924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.539051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.545859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.548146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.554461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.564238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.569244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.594178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.603945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.606785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.608790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.616207] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.622377] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.622872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.628592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.630575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.640511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.641392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.645353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.648404] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.651331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.653355] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.655532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.672455] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.674895] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.679475] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.686592] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.699361] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.707317] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.716794] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.718786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.721493] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.728576] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.738891] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.739160] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.739354] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.743617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.539210] Bluetooth: hci1: command tx timeout [ 90.602290] Bluetooth: hci0: command tx timeout [ 90.667008] Bluetooth: hci2: command tx timeout [ 90.730042] Bluetooth: hci4: command tx timeout [ 90.730235] Bluetooth: hci3: command tx timeout [ 90.795002] Bluetooth: hci7: command tx timeout [ 90.858189] Bluetooth: hci6: command tx timeout [ 90.858454] Bluetooth: hci5: command tx timeout [ 92.587084] Bluetooth: hci1: command tx timeout [ 92.650753] Bluetooth: hci0: command tx timeout [ 92.715015] Bluetooth: hci2: command tx timeout [ 92.778228] Bluetooth: hci3: command tx timeout [ 92.779168] Bluetooth: hci4: command tx timeout [ 92.842214] Bluetooth: hci7: command tx timeout [ 92.906392] Bluetooth: hci5: command tx timeout [ 92.906499] Bluetooth: hci6: command tx timeout [ 94.634833] Bluetooth: hci1: command tx timeout [ 94.698126] Bluetooth: hci0: command tx timeout [ 94.762917] Bluetooth: hci2: command tx timeout [ 94.826211] Bluetooth: hci4: command tx timeout [ 94.826313] Bluetooth: hci3: command tx timeout [ 94.891033] Bluetooth: hci7: command tx timeout [ 94.954057] Bluetooth: hci6: command tx timeout [ 94.954155] Bluetooth: hci5: command tx timeout [ 96.682116] Bluetooth: hci1: command tx timeout [ 96.746202] Bluetooth: hci0: command tx timeout [ 96.810204] Bluetooth: hci2: command tx timeout [ 96.874291] Bluetooth: hci3: command tx timeout [ 96.874576] Bluetooth: hci4: command tx timeout [ 96.938140] Bluetooth: hci7: command tx timeout [ 97.002382] Bluetooth: hci5: command tx timeout [ 97.002675] Bluetooth: hci6: command tx timeout [ 151.170715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.171993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.173181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.176839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.178442] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.180161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.311275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.315463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.318426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.324120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.327555] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.329906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.442642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.449415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.451379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.458671] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.460555] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.462405] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.463473] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.466497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.477182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.482637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.485847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.487661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.560264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.569125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.575136] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.598168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.609342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.619567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.638432] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.656377] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.661519] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.678559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.687181] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.693360] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.776361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.786689] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.805861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.815138] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.815492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.817041] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.824802] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.829355] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.842336] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.877518] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.887383] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.921173] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.258578] Bluetooth: hci0: command tx timeout [ 153.386093] Bluetooth: hci1: command tx timeout [ 153.515087] Bluetooth: hci2: command tx timeout [ 153.578064] Bluetooth: hci3: command tx timeout [ 153.706211] Bluetooth: hci4: command tx timeout [ 153.770114] Bluetooth: hci5: command tx timeout [ 154.026300] Bluetooth: hci6: command tx timeout [ 154.026379] Bluetooth: hci7: command tx timeout [ 155.308004] Bluetooth: hci0: command tx timeout [ 155.436038] Bluetooth: hci1: command tx timeout [ 155.562082] Bluetooth: hci2: command tx timeout [ 155.626049] Bluetooth: hci3: command tx timeout [ 155.755308] Bluetooth: hci4: command tx timeout [ 155.818061] Bluetooth: hci5: command tx timeout [ 156.074297] Bluetooth: hci6: command tx timeout [ 156.074891] Bluetooth: hci7: command tx timeout [ 157.355431] Bluetooth: hci0: command tx timeout [ 157.482083] Bluetooth: hci1: command tx timeout [ 157.610125] Bluetooth: hci2: command tx timeout [ 157.675376] Bluetooth: hci3: command tx timeout [ 157.806072] Bluetooth: hci4: command tx timeout [ 157.869054] Bluetooth: hci5: command tx timeout [ 158.123082] Bluetooth: hci7: command tx timeout [ 158.123241] Bluetooth: hci6: command tx timeout [ 159.402100] Bluetooth: hci0: command tx timeout [ 159.530031] Bluetooth: hci1: command tx timeout [ 159.658095] Bluetooth: hci2: command tx timeout [ 159.723976] Bluetooth: hci3: command tx timeout [ 159.852078] Bluetooth: hci4: command tx timeout [ 159.914086] Bluetooth: hci5: command tx timeout [ 160.170029] Bluetooth: hci6: command tx timeout [ 160.170064] Bluetooth: hci7: command tx timeout [ 213.755590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.757417] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.759430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.765154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.767471] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.768590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.820994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.828538] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.830006] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.840390] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.843251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.849376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.884543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.907460] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.913194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.918404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.923317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.924793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.928289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.931760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.934711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.936319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.959331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.963878] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.965148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.000719] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.003158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.014165] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.031678] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.042467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.101484] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.104488] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.119472] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.121697] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.143572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.144520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.149872] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.157870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.166212] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.188669] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.194494] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.195973] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.223050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.227016] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.230329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.259762] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.278197] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.296199] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.787098] Bluetooth: hci0: command tx timeout [ 215.914031] Bluetooth: hci1: command tx timeout [ 216.042047] Bluetooth: hci2: command tx timeout [ 216.106024] Bluetooth: hci4: command tx timeout [ 216.170017] Bluetooth: hci3: command tx timeout [ 216.299211] Bluetooth: hci6: command tx timeout [ 216.363009] Bluetooth: hci5: command tx timeout [ 216.426027] Bluetooth: hci7: command tx timeout [ 217.834260] Bluetooth: hci0: command tx timeout [ 217.962128] Bluetooth: hci1: command tx timeout [ 218.091008] Bluetooth: hci2: command tx timeout [ 218.155168] Bluetooth: hci4: command tx timeout [ 218.219025] Bluetooth: hci3: command tx timeout [ 218.346290] Bluetooth: hci6: command tx timeout [ 218.410032] Bluetooth: hci5: command tx timeout [ 218.475103] Bluetooth: hci7: command tx timeout [ 219.883112] Bluetooth: hci0: command tx timeout [ 220.011956] Bluetooth: hci1: command tx timeout [ 220.139177] Bluetooth: hci2: command tx timeout [ 220.202259] Bluetooth: hci4: command tx timeout [ 220.267055] Bluetooth: hci3: command tx timeout [ 220.394988] Bluetooth: hci6: command tx timeout [ 220.458982] Bluetooth: hci5: command tx timeout [ 220.522978] Bluetooth: hci7: command tx timeout [ 221.932954] Bluetooth: hci0: command tx timeout [ 222.058103] Bluetooth: hci1: command tx timeout [ 222.186704] Bluetooth: hci2: command tx timeout [ 222.251954] Bluetooth: hci4: command tx timeout [ 222.314040] Bluetooth: hci3: command tx timeout [ 222.443048] Bluetooth: hci6: command tx timeout [ 222.505997] Bluetooth: hci5: command tx timeout [ 222.569989] Bluetooth: hci7: command tx timeout [ 273.565758] syz-executor.5 (6583) used greatest stack depth: 23896 bytes left [ 276.028089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.033867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.038339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.041526] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.048846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.051527] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.057369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.057416] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.064676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.067586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.089759] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.096659] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.101221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.111385] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.140248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.144670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.147519] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.151382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.186243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.189721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.193118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.198140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.202832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.208173] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.216133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.241276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.244236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.248444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.250667] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.254794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.257759] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.258554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.278540] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.329501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.388331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.398549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.399610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.434852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.471607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.483364] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.527117] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.529270] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.559886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.568998] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.573321] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.575564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.600114] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.609738] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.123279] Bluetooth: hci0: command tx timeout [ 278.186616] Bluetooth: hci1: command tx timeout [ 278.379170] Bluetooth: hci2: command tx timeout [ 278.443056] Bluetooth: hci3: command tx timeout [ 278.698245] Bluetooth: hci5: command tx timeout [ 278.890084] Bluetooth: hci4: command tx timeout [ 278.954072] Bluetooth: hci7: command tx timeout [ 279.082192] Bluetooth: hci6: command tx timeout [ 280.170017] Bluetooth: hci0: command tx timeout [ 280.234447] Bluetooth: hci1: command tx timeout [ 280.426035] Bluetooth: hci2: command tx timeout [ 280.490016] Bluetooth: hci3: command tx timeout [ 280.746089] Bluetooth: hci5: command tx timeout [ 280.938134] Bluetooth: hci4: command tx timeout [ 281.002035] Bluetooth: hci7: command tx timeout [ 281.129974] Bluetooth: hci6: command tx timeout [ 282.218046] Bluetooth: hci0: command tx timeout [ 282.282160] Bluetooth: hci1: command tx timeout [ 282.473996] Bluetooth: hci2: command tx timeout [ 282.538986] Bluetooth: hci3: command tx timeout [ 282.794052] Bluetooth: hci5: command tx timeout [ 282.986043] Bluetooth: hci4: command tx timeout [ 283.050071] Bluetooth: hci7: command tx timeout [ 283.178268] Bluetooth: hci6: command tx timeout [ 284.266128] Bluetooth: hci0: command tx timeout [ 284.330229] Bluetooth: hci1: command tx timeout [ 284.524125] Bluetooth: hci2: command tx timeout [ 284.586085] Bluetooth: hci3: command tx timeout [ 284.842552] Bluetooth: hci5: command tx timeout [ 285.033988] Bluetooth: hci4: command tx timeout [ 285.098099] Bluetooth: hci7: command tx timeout [ 285.226089] Bluetooth: hci6: command tx timeout [ 338.882571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.890640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.894475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.899520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.901241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.905233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.911688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.912959] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.915583] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.915751] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.918786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.920835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.938077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.946643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.954334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.968582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.978781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.983169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.021837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.023450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.028595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.029586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.031718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.033222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.039202] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.040012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.046085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.071588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.085824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.090374] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.118662] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.119596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.120163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.127729] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.137144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.141455] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.143600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.153674] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.155357] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.159162] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.167595] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.174702] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.331150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.337641] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.343387] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.376518] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.397541] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.402950] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.971084] Bluetooth: hci0: command tx timeout [ 340.971361] Bluetooth: hci1: command tx timeout [ 341.035183] Bluetooth: hci2: command tx timeout [ 341.162287] Bluetooth: hci3: command tx timeout [ 341.226094] Bluetooth: hci5: command tx timeout [ 341.226536] Bluetooth: hci6: command tx timeout [ 341.290993] Bluetooth: hci4: command tx timeout [ 341.483006] Bluetooth: hci7: command tx timeout [ 343.019687] Bluetooth: hci1: command tx timeout [ 343.019796] Bluetooth: hci0: command tx timeout [ 343.082754] Bluetooth: hci2: command tx timeout [ 343.210067] Bluetooth: hci3: command tx timeout [ 343.274133] Bluetooth: hci5: command tx timeout [ 343.276034] Bluetooth: hci6: command tx timeout [ 343.338007] Bluetooth: hci4: command tx timeout [ 343.531131] Bluetooth: hci7: command tx timeout [ 345.067103] Bluetooth: hci0: command tx timeout [ 345.067298] Bluetooth: hci1: command tx timeout [ 345.130093] Bluetooth: hci2: command tx timeout [ 345.258020] Bluetooth: hci3: command tx timeout [ 345.323946] Bluetooth: hci6: command tx timeout [ 345.324050] Bluetooth: hci5: command tx timeout [ 345.386024] Bluetooth: hci4: command tx timeout [ 345.579961] Bluetooth: hci7: command tx timeout [ 347.114139] Bluetooth: hci1: command tx timeout [ 347.114180] Bluetooth: hci0: command tx timeout [ 347.178964] Bluetooth: hci2: command tx timeout [ 347.307946] Bluetooth: hci3: command tx timeout [ 347.370181] Bluetooth: hci5: command tx timeout [ 347.370248] Bluetooth: hci6: command tx timeout [ 347.433961] Bluetooth: hci4: command tx timeout [ 347.628005] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:19:50 Registers: info registers vcpu 0 RAX=ffffc90000660000 RBX=ffff88800af90c40 RCX=1ffff110015f2268 RDX=1ffff110015f21ce RSI=0000000000000004 RDI=ffff88800af91340 RBP=1ffff110012baf61 RSP=ffff8880095d7a90 R8 =0000000000000001 R9 =ffffed10012baf40 R10=0000000000000003 R11=0000000000000001 R12=ffff88800af90e58 R13=0000000000000000 R14=ffff88800af90000 R15=ffff88800af90c40 RIP=ffffffff834a69de RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb4d76e06f4 CR3=0000000031690000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fb4d76ef47000007fb4d76eef20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffea00001db400 RCX=ffffffff8199a84c RDX=ffff888024598000 RSI=ffffffff818e7e16 RDI=ffffea00001db400 RBP=ffffea00001db400 RSP=ffff888013bf7828 R8 =0000000000000000 R9 =fffff9400003b680 R10=0000000000000000 R11=0000000000000001 R12=00000000076d0025 R13=00007f2193461000 R14=ffff888013bf7ce8 R15=0000000000000000 RIP=ffffffff84ab2f40 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f21938fd6f4 CR3=00000000293aa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f219390c47000007f219390bf20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000