Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:26610' (ECDSA) to the list of known hosts. 2025/01/21 22:47:40 fuzzer started 2025/01/21 22:47:41 dialing manager at localhost:44689 syzkaller login: [ 61.506477] cgroup: Unknown subsys name 'net' [ 61.590869] cgroup: Unknown subsys name 'cpuset' [ 61.617137] cgroup: Unknown subsys name 'rlimit' [ 66.488362] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 22:47:58 syscalls: 2217 2025/01/21 22:47:58 code coverage: enabled 2025/01/21 22:47:58 comparison tracing: enabled 2025/01/21 22:47:58 extra coverage: enabled 2025/01/21 22:47:58 setuid sandbox: enabled 2025/01/21 22:47:58 namespace sandbox: enabled 2025/01/21 22:47:58 Android sandbox: enabled 2025/01/21 22:47:58 fault injection: enabled 2025/01/21 22:47:58 leak checking: enabled 2025/01/21 22:47:58 net packet injection: enabled 2025/01/21 22:47:58 net device setup: enabled 2025/01/21 22:47:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 22:47:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 22:47:58 USB emulation: enabled 2025/01/21 22:47:58 hci packet injection: enabled 2025/01/21 22:47:58 wifi device emulation: enabled 2025/01/21 22:47:58 802.15.4 emulation: enabled 2025/01/21 22:47:58 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/21 22:47:58 fetching corpus: 0, signal 0/2383 (executing program) 2025/01/21 22:47:58 fetching corpus: 0, signal 0/2383 (executing program) 2025/01/21 22:48:01 starting 8 fuzzer processes 22:48:01 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x754, 0x40400) write(0xffffffffffffffff, &(0x7f0000000040)="c55ad466f99625a9c2f59855be99374ad691c921a34662332b92ea0dc02100e75bda1218c90e5149bcf877f8f59c8e3319ec9130498df24d35f4c359a8ad83cb4b78e2ae5f452cc003f60a10f8f13e6c35de6e3cef46b78d837e54f300fe6cc952e8ec4f0768bbe07098aea467a873830a1a01c54d60a3ca419b5083ab74dccf42947fdf8c6c010a9af2f2459026a4d5b0a93e8a8f049048dd1f3d50e114d39477c3b07e3ef9eb565b72b7d70d292ad70219bbe6926b593dc2595d8d9f5f0f42eed0a065c54940651d2ce623634e86be93c3be1d7ff315f12a9264a8d02125a1facaa2d30bb7437a9e16ce6221ed90c1c58303735177f2b1925048f9746821ee36cf4315ad36de2874bf7f0f839320bafc1deb244db34b50969cb95c7f789c8df9f94daa5ec00c69006d42cc6605d4b60e55ec812ca6628472eeb725ec1046a253e48f1592fdf3d36800d73417b3faf6bd8530df6189acecb4046ae7260760dfb242c0830ceeef9d4a3061ae88ff6f1dd3280e50979303e30a5cd99bef418bf64c7d41ea0fa0d8ab275c55a271194bcbc93dab1b80ef4093ba0e9094a37dc86e651c93d8021f0109336fe54443f121369dd67c7188588aaa16dc170913ee91717d6f23fb31514ff3e1cbbacec3f98f60bf0ebe3bb33aaa6d2588596fea12ef69f05c88dbec416a3d13d0fa1bc5c050a11b5ec7cc3d193d1f0cea678d328c6f53f7ec037c601403b8a3ef51a18c4314dd5030f58ca0c1f26a59e83148e1ebc28435ff496d2203340377b48f0892795a809735b0efb85dc35667984d0d643bb0beba49e764ad8b2a6784932f69cc2b335a340e596790fd8ff87f7617aa2a5c07bf5192eb297686336fe24d5929815e5137717b6464c96f211a30343d21d089e7cbf7e540d85fe9dcbfdb8154ce387e74a5e3ddad8a7701ed0e9febb5fe4ff4e49643abeb0b60acb0448ac41e8986e2e9fe4dd359831ebaac84888762e542afbb731f892683d94439fa43c4817fb286729c8c7f34715cd51b908e324e65439fc9d2f53fed4ba8b445456018cee9958fe7a0132fe617df7d8a485d5120dc2f9854c864ccdc05c528709892c4c274b65c64726cb2d396e8b951c511017cf0019c8602adf096bad5e1260f963f0c949767a95647f41cc96037f55f96db5c5f2ab71b544b3909bba6fcd7626c35fa6ffbf5fc7642bebd38dba03dbcb8cc8da4d2ed1a69297723079d6e2603b8fe869b3e4b1604dd3cb638dcc1d6ca0b9ca9d9a11deb4a30be26c224d6d822887201a327a43ff620e4676d7ec26e4fae92a641df7e20c88972f340876ad5560e771fcdb149eba21b738b4c950d996548f4ab4591e6c19b410d5665710d57f6b4e935ebe5b1cd8e9b2edabe17dc2744571c6070c03d7dbe19cd694411348143ece4d4c07f8e6a920fa05b6e3ae948ff53f1ac72675efe4dbda607e936e087bdb7429563ce51cff19ee03d655e4fd38675aacdd56348cee2e18fae05e737ad3391cccf3fea90fc46106c2c49f5804e4b98efaff7a786d09ab3cfcf090bcb74082f90f7211f7a5837b3120546d5e31ce44cd3c32dfc6b48f463453a1d4cdf58e0ac0a6e19e7e6cb6b9a1e04c4c88fd87fecea46678601cf4c0326a9d83b11c54e7e9ba53c52fc9d8380e0addf20e72c40bad68066ded863fa3f074815f8a82af2e3defc736d12d954d6e3d9833e166354cc26224929b9083c34069c02d3c97d7cb2a11e2ca4e31d3217a57120d59228882bf20b0574cd7cc474dc0639a7f49c02c5aceb99ee34e3609cc758e046fe43212ea2e324b46425ad3efbacbc1beb2dd2c3727a3354505d4b20162925a3e2650f441a28d71289c4ee7bc56417a9984a164bf6297f5cd5e45a6116000adb02c73b65e03212dfb363f186feb8d5fe3ac5af6366d945868f27e3c99ae6af879513d1594f6d27ba7442bd039017cb6f457caea80e48798a60ddb4a737db22d69da56ae129fb6fb66ee9795c30d8d9a5ef9e6fbff87fdecf3058164120f0091030705b2adafacff46e51e8bc899c53dbf74a9976b5457b5bdb4fa5b8fc3f24b53565e2bf7082ce61887c02cbf9ea77f2641a1b5353c1619540bde579eb3f79c4a99388195c7ac04a8f2e4df03e6896f6adb4b0fa2d9532aab4c39da9dc4985fc15434a956cedcb170efd6dd39007e04b1b5451994e6f946da0064021ca4842c9b55075c76fb80c1a15ec9e58767c9b33fbd919f879050d88e018601c55847cf4d1dca133ac66e9bdd994fd28cb5b123f5c46b4203aa0b1a14a467292e16df2be473919a010d840a384dce48ad1831d900e52cb14eeb33b788a65e19e41f5761b42ccf15875e4acc15843bf44553dc35a84d13637b169e500b2b4fae5887ace59f43a365f6ef02664a0ca0be6112afbd485399fec21fc1a4a4da504fac2d07137f7db976d39e341e6a4d0b2ebf31a8b030e1612ed2d8a6ab42cf31621cfbeb206cae406059aba4863658cc10c22c47b8a89f81223be98cdbce812ae2e9e1d887e23ee6f877a93740b0eae02a4f1f1422e2608272991e05bdef163d350ac1345f7ae702178bc98984e76dc3b47bdcc1b0b46310217e69c5cef37480444c997512d5c83050c047f7ada05a58c3c238f2c7090d3a24e1e45551ea03931c480aba111827e7556035e5516c6f8846e3f9d88deeb1afd8c1b432c9101d0fcfab4f62700f51d97e63cc5c6c43d78e1a703599f0e665818e782f54181a6b3a4d5455f18c522bf371669c3489963a33af89d5d78081fa39e9d38b376b68b8494a6ccc0b190e85792ef5948b78f8d0aa894128e3fb7b3a684a6b5b36da2c35877eac616f129a878f83be89c40d89da54f47faa964a1a53aa4ff84788a78bb7bcee1fc2cd5acfbe422ec1e8e8d3c0dd1cf38caf1f980c8bd6525ccf5ee4f5ab367ffe415a6779408c798ab5f41e45af32ecd3a2406aa11c9c3743a1d2dd80c5c5627863790c59ecf4a5f92a6e6eb1d853942ac5f8dffe20d7e33a136292e9da34e6886a88b42b4db680f3ce95d631b0d0cc1cc60f7bd65d417c3c598ccf51c07194fb781673d2e61e16c44275d427da02873764f2a23da0f1610ec4a4ea6dc9d95372b7f4d70eb078cc54e6bb31a16a4dc6f30579e750cd6e072b61a6593e0d6361c66901cc0413943af757957fb926f0e6529ea50bfe3b36b80a294c141f56ea9ea8a88a98284a4fff98a6175c6e6829dcc27897075fadeb0a9a4cd9df38d978bd8c1c80359dcdc9913efabdc2a42c761df0cf8005ae59ad143e939d8dae111cc92093c28f15c5f2a9f080edc92200d9e5a197019b48ea6f5f42215136ed87114fe8bed2bd18e18cf5d2f82809265cd6978ec02c219bdb0f309f76062cefeccb4d76035ddb1ed5294f8c6164137dca048405ac8d7b14adb04f9ef97c74ec7ef5eb9d51257a62d874cd35b5ee743d2584fd71bd28dae6f3178c708a017958a81e4f20bc77d86a6e01b1b906624544b69dab9c657efde448d55aa0aa38a535448695d1bd26821f3812ce3d10b302b8c654575b9ee6f07da3fc55ff3a10a59cc8f6ac35c51ea46dd7a9aa7456859febad616ac432a970fdb9d8c81efcbe31c7a8b58e22c3f4f923532f4196ded670196c79029363ad022fc7b79d2c7666168aed76d2ea0bd88e9b1778a2a8ca1c865e58aa6de2049f4dc97e005df5275b1a0eb97f765710a99c12d86e1de9163eeb11427b90fa8f08fd00b331853d5b9fa3c0e34af66a4c1aebdfee09d1297849c70a0ce057fc859b5a66e527860eeb5659ceb449f2c5600406bba1173b058317c2242f6bc98dedcbd6970f0fb86f18837f3a02880d60fab982c7eb9900b6eef8c341bc3c4905199c660942513bd51b994c2f799d26161529aa3baac9c91946807a661610a35be138fcef50b44f27c9d004d33a6b4fcf6212c9d68bcab098651e488f9f403e0128674c555f48b86f2930e359b500d412b909b82176762daeda2e6fac056fa893acbb55c6915a4ab34d28047d7cde3f6ba52fa125b402bef4b1e62f4d8bd3c9719f17d6c9d1cf72cbf4de2bed48e743167cacb798097da9041c83c972289641eefe17f94a0dd3085ac2e567b48a0007ad7ab496cada54608ffb2e33d037013bb5ea51b9358d023874c705f7e826c610fbcf14b120598f2806fcb4886a98a9fb99c6fb5cf11b00696c66c9f549457f4488609ad4b823f4e2b09721b9dc109a06cd8d1c556dd71c3886bd1be8b01d09b24c62f4ab4b2281dd9d393f171623fd92c293804e47fbfa68b295bb6ce95bf1adf4815b9bc5542df9f5163e1d3a6827ecfcf83cf9bcfe183b4a99de76f0adde60ea8900d1ba5710f1bec16e75a9f7609d4991b6fdf0f6d116d7d77f63a4229b3165ba3eca9dd95f975b765fe0dac1c429de52a5ad551209f1e9055782e84428098e803375be637c43d95184c9d94ea3bb85bfedaa6160d18ca5b25e4b6227b6c905e3f74b4c694f79d73132fed42d9ca37b4a7ce46e827770d6e601a9114709fb479e78ecc0ae2fbb02815d64408294b8258b0cde3f20a7844f6206b341da0f010c33630e255f28e98f9b41db47c4d669d3815dab87f9a9323e404ae2ad1716f452e868fc4367a845a0d08415e5a074f647e7bd6b9072a890c8f392fdcb5026c2f2d6aa4bef6f36fffbda57ef9c45258f9bb057f29ad51c8d028885781fb27588d7b67af4d555fedf2a336d20233ce6e38a86ff0a240b82e61d581d9dff371d76b2634be298cacffa5d5841e589b4c5f712aeb71e1b422887513b7b332b3601939be11c7c391fc2a267075dd71238823931f5dc88d4f71bdb6d0a44ee8eda22c6649f680f10d78e7056c421fa40d1d05a65c149bddca6b402b70f35b07ba26cf8489afba29871316c22cd155f34e5107b8a5f6532ce9020fbafd0bd3aad27d5ab24c232a4e7acd9bba0c32b88ebd82bfdff243cbd0c085783ac6502f66547cc83d488282875ec5a292d5c841b29ae52dceea4919e7945902d0cb6c86c4cabb160b55ca8ddb52f9abf9d8d7bfd96755bb089fe239b56ffd89356c5cfa1250b99bde0269510169fb7dd2434426188b9c93315f40bd8cbf18e858c361c1d4d3cef33468f223a3ca5e9201f5c6f23c1ecd9e01a42a183ee8333829018c53b418b62ca787e4a8c72393c2dad9f48b59b43130e8bd8eac97a415b1d4c457e4e84f0997cb232d796efe5f8daacdb8feee5ef676c682b8d6905f1fe6657d637c62cec134614948bd7873c3e0f7906f010724fcc4b5aee4840b4a2732a718a400d936cfe9f0bcdd523a63ae3fa4d34aa867950e36b5b127c9415b9297f7e0f1e9da0929131e1e66f79165b723eb4ef63d723f1eb37de516c86aafd5d211f3f05a56223999a6b5791624c98f0a2ae5a1b08fed163d6ebc23ad80e6cb3ea119430cdd7957657f3fcfc48fa8fd9583e989107660b656d4f4dc21d09cfc1f61d6f26ef78afbe1c2b7ee05f4074372f56104bf1bdb223271b03eac2bcd546b213a25a2a83e8afdcb6b48e90f315832f5cf7f85170670afe8ad070d5519ec64eb62307686810dbfab4f6ddb01f79107540a965a17b6be423f3a13cfba262cc1622ba797f25f35629dfa41e2633c5fc5bbe99cbb18ae2d325e4cbb2a719bfb39f4af44a1b4683d3683c676a71608754da21cf61623625962094e856aa1ab216510482232960ac2747fac3118d7ba43980339ff95f6f80fd06f32ba44c1fda5e294dfa9fef7980fa33d2ca0404f7dc598fee348e4a9a72af13f9d09a50026d84a0836b94c830d47c88a91e672284d81854bd4d2d1c95f3936", 0x1000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040), 0x404200, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001080)=""/20, &(0x7f00000010c0)=0x14) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x811) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001240), 0x802200, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000001280)=""/243, 0xf3}, {&(0x7f0000001380)=""/56, 0x38}, {&(0x7f00000013c0)=""/200, 0xc8}, {&(0x7f00000014c0)=""/144, 0x90}, {&(0x7f0000001580)=""/137, 0x89}], 0x5, &(0x7f0000001b40)=[{&(0x7f00000016c0)=""/120, 0x78}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000001800)=""/181, 0xb5}, {&(0x7f00000018c0)=""/183, 0xb7}, {&(0x7f0000001980)=""/26, 0x1a}, {&(0x7f00000019c0)=""/51, 0x33}, {&(0x7f0000001a00)=""/221, 0xdd}, {&(0x7f0000001b00)=""/3, 0x3}], 0x8, 0x0) write$binfmt_script(r2, &(0x7f0000001bc0)={'#! ', './file0', [{0x20, ','}, {0x20, '/dev/hwrng\x00'}, {0x20, '$'}], 0xa, "657d1d52de20e29143fd7ab15b28cebae478653cbeaddbf3735855beba9c053b390d8753108b2f83a6a5dab61fe11355685182e6846ec742775e7f4522f59f2a5834f9df1377b6a01460eaabe9be00c9631a678706d678616379d36c7135a656a13e7728623ff38c2876448f73cfa57371f8959a9e80d3fd04d7f60cf10201de8cd44ccf75e7464f181ba3e8de8984ee84db68dccbc62240bdc9a24eb122b023c96a5746cc5557447ec382c1504a"}, 0xc9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x4c, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x73}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x94}, 0x20000000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000001e80)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r2) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000001f40)='.pending_reads\x00', 0x412201, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x4c, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x2e}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x183123322990f1e6}, 0x40880) r7 = memfd_create(&(0x7f0000002080)='V\x00', 0x2) r8 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r9 = accept4$packet(r6, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002100)=0x14, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002180)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x7, &(0x7f0000002140)=[r1, r6, r1, r7, r1, r8, r9], 0x7, 0x0, 0x1}, 0x54b) 22:48:01 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x2) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x7}, 0xb) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)=""/117, 0x75}], 0x1, &(0x7f00000001c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x1) r4 = fsmount(r2, 0x0, 0x1) write$P9_RMKDIR(r4, &(0x7f0000000280)={0x14, 0x49, 0x1, {0x8, 0x4, 0x8}}, 0x14) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000002c0)={'veth1_vlan\x00'}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x220400, 0x0) r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) fcntl$dupfd(r5, 0x0, r6) r7 = fsmount(r0, 0x0, 0x4) getsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) r8 = signalfd4(r4, &(0x7f0000000400)={[0xfffffffffffff000]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {r8}}, './file0\x00'}) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000000480)) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x4000) write$nbd(r9, &(0x7f0000000500)={0x67446698, 0x1, 0x4, 0x3, 0x4, "a3581638"}, 0x14) openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x20000, 0x8, 0x8}, 0x18) 22:48:01 executing program 2: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x890) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x418000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x44}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x210000, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x200022, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@nodevmap}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x66, 0x65, 0x32, 0x61, 0x62, 0x36, 0x64], 0x2d, [0x62, 0x34, 0x62, 0x65], 0x2d, [0x63, 0x36, 0x35, 0x31], 0x2d, [0x33, 0x32, 0x63, 0x32], 0x2d, [0x38, 0x63, 0x32, 0x39, 0x34, 0x64, 0x65, 0x64]}}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) mknodat$loop(r0, &(0x7f0000000400)='./file0\x00', 0x20, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xac}, 0x1, 0x0, 0x0, 0x814}, 0x40040) r4 = creat(&(0x7f0000000700)='./file1\x00', 0x192) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x60080) dup3(0xffffffffffffffff, r5, 0x80000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x1) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0x100, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd4d7}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6b1}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x20}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x252, 0x4e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) [ 81.275151] audit: type=1400 audit(1737499681.253:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:48:01 executing program 3: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/189) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/244, 0xf4}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f00000003c0)=""/192, 0xc0}, {&(0x7f0000000480)=""/148, 0x94}], 0x7, 0x81, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) r1 = getpid() r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/pid\x00') kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000006c0)={0xffffffffffffffff, r3, 0x3}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x97}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000811}, 0x44) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x94, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1f}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7e3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xb914}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x400c058) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000a00)={0x7, 0x15, 0x1}, 0x7) mknodat$null(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x8000, 0x103) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/103, 0x67}, {&(0x7f0000000b40)=""/58, 0x3a}, {&(0x7f0000000b80)=""/29, 0x1d}], 0x3, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0x50}, 0x40) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_PID={0x8, 0x52, r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40d4005}, 0x8010) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000dc0)={'\x00', 0x4, 0x0, 0x7}) r6 = syz_open_dev$vcsu(&(0x7f0000000e40), 0x6, 0x100) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000001300)={0xffffffffffffffff, 0x0, &(0x7f00000012c0)={&(0x7f0000000e80)={0x43c, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfe, {0x4, 0x799cf91778b23e5f, 0xb, [0x3d, 0x100, 0x1, 0x81, 0x1000, 0xfff, 0x414, 0x5, 0x8, 0xa68d, 0x7, 0xffff, 0x7fffffff, 0x1000, 0x7e, 0x64, 0x20, 0xfff, 0x8, 0x1, 0x81, 0x7fff, 0xfc, 0x36, 0x1, 0x9, 0x2, 0x100, 0x400, 0xd, 0x1a5, 0xce4, 0x9, 0x3, 0xff, 0x1a, 0x4, 0x0, 0x181, 0xfffff764, 0x7, 0x6, 0x40, 0x5, 0x7, 0x20000000, 0x6, 0xfffffff9, 0x5, 0x9, 0x736, 0x2, 0x1ff, 0x5, 0x100, 0x1, 0x8001, 0xfffffffd, 0x7, 0x72, 0x1, 0x7fffffff, 0x3, 0xffffffff], [0x8, 0x8, 0x80000000, 0x7, 0x0, 0x80, 0x0, 0x1, 0x2, 0x2, 0x7ff, 0x1, 0x7f, 0x4, 0x3f, 0x9, 0xfffffffd, 0x0, 0xfffffff8, 0xfa, 0x5597bcec, 0x5, 0x68f, 0xffff, 0x2f, 0x7, 0x53de, 0x2, 0x2, 0xfff, 0xc07f, 0x9, 0x20, 0x9, 0x140000, 0xfea8, 0x3bb, 0x9, 0x7fffffff, 0x1, 0x4, 0xf15, 0x101, 0x0, 0x77880000, 0x9, 0x9, 0xa8, 0x9, 0xbf, 0x7, 0xff, 0x8, 0xffffffc1, 0x30a, 0x6, 0x9, 0x0, 0x2f, 0x3ff, 0x3, 0x8, 0xff, 0x2], [0xd8c3, 0x6, 0x4, 0xdae, 0x4, 0x7fff, 0x0, 0x6, 0xffff, 0x6, 0x3, 0x200, 0x2f, 0x1, 0x7c94421e, 0x100, 0x8cb8, 0x1843, 0xa9e9, 0xc7b2, 0x4, 0x200, 0x9, 0x0, 0x3ff, 0xfffffffa, 0x200, 0x3ff, 0x5, 0x8d11, 0x6, 0x1ff, 0x5, 0x10001, 0x4, 0x101, 0x4094, 0x37ba, 0x1, 0x0, 0x4, 0x5, 0x3, 0x1, 0x1, 0xdcc, 0xb53, 0xbc7b, 0x7, 0xb6, 0x8, 0x80, 0xfffff800, 0x40, 0x2, 0x0, 0x2, 0xfffffff8, 0xef3, 0x78, 0x7fffffff, 0x2, 0x4ccd, 0x5ca9], [0x5, 0xd52f, 0x2, 0xca, 0x8, 0x20, 0x46, 0x8, 0x1, 0x9, 0xfff, 0xfffffff7, 0x10001, 0x8, 0x6, 0xc1, 0x5, 0xa1, 0x5000000, 0x9, 0xbc, 0x80000000, 0x0, 0x100, 0x7, 0x3, 0x5, 0x8aa, 0x4, 0x0, 0xfffffc01, 0x101, 0x100, 0x5, 0x9, 0x3, 0x9, 0xdebc, 0x0, 0x2, 0x8, 0x1, 0x8, 0x6, 0xffff, 0x19, 0x6, 0x1ff, 0x9, 0x8001, 0x0, 0x7, 0x7, 0xa15f, 0xfc, 0x3, 0x0, 0x7f, 0x9, 0x4, 0x4, 0xc6b9, 0x6, 0xb8], 0x19, ['^-\\\x00', '\x00', 'ns/pid\x00', '@\'$\x00', '(/!\\,F*!\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000895}, 0x20008040) r7 = syz_open_dev$vcsa(&(0x7f0000001340), 0x9, 0x1a5000) ioctl$CDROMSEEK(r7, 0x5316, &(0x7f0000001380)={0x1, 0x80, 0x2f, 0x6, 0x2, 0x80}) getsockopt$packet_buf(r6, 0x107, 0x1, &(0x7f00000013c0)=""/13, &(0x7f0000001400)=0xd) 22:48:01 executing program 5: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)={0x80, 0x100000001, 0x9, 0x20, 0x6, 0x3ff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x3, 0xfa, [0x80000001, 0x8, 0x2, 0x1], 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)=""/250}, &(0x7f0000000280)=0x78) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x9c78, 0x5, &(0x7f0000000780)=[{&(0x7f0000000400)="d23ded877bafb9709c0f12acac06ff5e17bcee183e1a95b880bdce46e3cb46dfd19844b2e85213d25a58e7ebeb6023b55583f044522d6bf13d0902c909acf16cb7adbc543305e0a93ab689ea895791164c446f25ce040556d2d49556e7519a46d9a3ebda683ff767576573acf8f278913af1095b78cb8c4c5c51be49d669267411320149a783a290db2707b043ed0382f5471018cbd92764b330294c17f0ebce19ea0d21d0a4b932e91f7d636a2b26de7a1512a0d614fe6ecf05190304d2086b3edcf5204a5333589d491209a7016cafe1a898003914e3c4f70ff48d470ab052a5289adc94e609a75c82cd6e8413", 0xee, 0x8}, {&(0x7f0000000500)="8ed078feba0898dbd26198bcb1a923cb30fb5d8d7ddaa571a5859fb7eabe5cb8df8d22540df774ae2911b4d5d99bd74f3f09daaf00ffb7c6599eb2bdcaa579e39ecec66e2ad6b399bce3f05b2f20f4d6031b2f47514d6601fcc7a431c0f7baaf00bd5eacc26c5080500305a58e8739d6492555218b1cc30af1554bee508dfc5dd28c632cd47de3578eb7350ed96b98c68d96e8b01dc9baa9ac7ebc30faba1c88e028d040ef6bab04d46225cd503633996eb30105f4c2abee2f5dbb782cafc879ec1b36e35534a220fc80014c25bae79fdfbe83a0f5d75288bd6fd943917dd2528032f9", 0xe3, 0x3}, {&(0x7f0000000600), 0x0, 0xfffffffffffffff8}, {&(0x7f0000000640)="554a9e8b31dc3f7e5cc54cb1fb776d19f6cc521bef6353ab51927bc165c00ee3dfa1fc283d5f3028107d2cc603f65945a227cf070404d0d29ce3e0fc2f922d866e523f883e98658a48af3ee6cce90ca40b7cfca941bafb085b0bc4ad5e963137187149b53ea9af3579a43b294e883e31a3b7", 0x72, 0x8}, {&(0x7f00000006c0)="e21f48726a69705a6ebf6e19577faf1ac194a7c6536c01a612efd1008f51d127e43202764f70a5e7bc14bf69437a430cb9ff1ebdc5317fd3f2b3e6d3669b183669ed4eed2268896286c9d9f40295ebaf693d7605389ec586d59b4aaafc8875375f640618077153739c57012c95988dbaf3558033b22b2c1ad45e3fadbbae31800c44db2455f4100d212c09107796d47345c467832220fb268573", 0x9a, 0x1ffc0000}], 0x0, &(0x7f0000000800)={[{@shortname_winnt}, {@numtail}], [{@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0xffff}}, {@obj_type={'obj_type', 0x3d, 'nat\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'nat\x00'}}]}) utimensat(r1, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={{0x77359400}, {0x77359400}}, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000900)={0x8, 0x4}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000940)={0x0, @loopback, 0x4e22, 0x1, 'wlc\x00', 0x21, 0x80, 0x76}, 0x2c) r2 = syz_open_dev$vcsn(&(0x7f0000000980), 0x3ff, 0x10800) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000009c0)=0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000a40)={'raw\x00', 0x0, [0x1ff, 0x745, 0x2, 0xffffffff, 0x4]}, &(0x7f0000000ac0)=0x54) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) bind$bt_l2cap(r4, &(0x7f0000000b40)={0x1f, 0x800, @none, 0x5, 0x1}, 0xe) syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x200}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6db2f7c0b345db57}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000d00)={0xfe, "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"}) 22:48:01 executing program 4: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x46ea5223, 0x12}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "679922c3834972e1c3f3052d21d379a6"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f012f1d666e87eb126d580117749e7b6"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="42a0dcb020ef"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000400)={0x870, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x3f}}}}, [@NL80211_ATTR_TID_CONFIG={0x850, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x49}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x31}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x5}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8, 0x9, 0x5, 0x2, 0x0, 0x800, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1b, 0x9, 0x3, 0xc, 0x48, 0x12, 0x36, 0x71, 0xc, 0x30, 0x16, 0x1b, 0x16, 0x3, 0x8, 0x48, 0x1, 0x1, 0x12]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0xa}, {0x1, 0x3}, {0x7, 0xa}, {0x0, 0x4}, {0x3, 0x1}, {0x2, 0x4}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x6, 0x9}, {0x4, 0x3}, {0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x4, 0xa}, {0x5, 0x3}, {0x3, 0x8}, {0x2}, {0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x6, 0x6}, {}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0x7}, {0x0, 0x5}, {0x3, 0x7}, {0x4}, {0x1, 0x2}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0xa}, {0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x1}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x36, 0x18, 0x9, 0x30, 0x18, 0x9, 0x6c, 0x48, 0x5, 0x1, 0x4, 0x5, 0x1b]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x7, 0x4}, {0x7, 0x1}, {0x7, 0xa}, {0x6, 0xa}, {0x2, 0x2}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0x1}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x4, 0x2}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x2, 0xa}, {0x6, 0x9}, {0x7, 0x9}, {0x1, 0x3}, {0x5, 0x7}, {0x5, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x5, 0xa}, {0x4, 0x5}, {0x3, 0x6}, {0x4, 0xa}, {0x2, 0x3}, {0x1, 0x4}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0xa}, {0x5, 0xa}, {0x5, 0xa}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x5}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0xa}, {0x0, 0x7}, {}, {0x0, 0x4}, {0x1, 0x9}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x3}, {0x4, 0xa}, {0x5, 0x9}, {0x4, 0x2}, {0x5, 0x6}, {0x1, 0x9}, {0x3, 0x3}, {0x5, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x4}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x6}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x4}, {0x0, 0x5}, {0x4}, {0x5, 0xa}, {0x3, 0xa}, {0x0, 0x9}, {0x6}, {0x0, 0x6}, {0x5}, {0x2, 0x6}, {0x2, 0x1}, {0x4, 0x14}, {0x7, 0x2}, {0x3, 0x8}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x3, 0xa}, {0x1, 0x4}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x2}, {0x2}, {0x3, 0x5}, {0x0, 0x2}, {0x2}, {0x1, 0x3}, {0x7, 0x9}, {0x5, 0x7}, {0x1, 0x9}, {0x7, 0x5}, {0x6, 0x6}, {0x7, 0x9}, {0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x4}, {0x3, 0x2}, {0x7, 0x8}, {0x4}, {0x2, 0x9}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0x7, 0x4, 0x3, 0x2, 0x1, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x1, 0x9, 0x753, 0x81, 0x1, 0x5fe]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x5c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0x2, 0x6, 0x48, 0x1, 0x2, 0x16, 0x60, 0x1b, 0x12, 0x30, 0x36, 0x30, 0x12, 0x16, 0x3, 0x18, 0x5, 0x2]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x3}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x2}, {0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {0x6, 0x5}, {0x5, 0x2}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {}, {0x4, 0x2}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x3, 0x36, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x6, 0x1, 0x6, 0x2, 0x8, 0x9, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0x4}, {0x7, 0x9}, {0x2, 0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x8}, {0x3, 0x7}, {0x5, 0x7}, {0x2}, {0x0, 0x4}, {0x3, 0x8}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0x5}, {0x2, 0xa}, {0x3, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x5, 0x5}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0xa}, {0x1, 0x7}, {0x4, 0x1}, {0x6, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0x48, 0x4, 0x1, 0x9, 0x48, 0x6, 0x12, 0x5, 0xb, 0x1, 0x36, 0xb, 0x60, 0x1, 0x5, 0xb, 0x12, 0x48]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0x31, 0x36, 0xb, 0x5, 0xb, 0x36, 0x12, 0x1b, 0x60, 0x24, 0x24, 0x6c, 0x48, 0x18, 0x2b, 0x60, 0x60, 0x2, 0x1b, 0x18, 0xc, 0x30, 0x5]}]}, @NL80211_BAND_5GHZ={0x108, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x3, 0x6c, 0x4, 0x76, 0x1b, 0x47, 0x24, 0x36, 0x12, 0x6c, 0x6, 0x2a, 0x6]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4}, {0x7, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {0x7, 0x7}, {0x2, 0x9}, {0x0, 0x1}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x7}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x7}, {0x4, 0x7}, {0x4, 0x4}, {0x7}, {0x3, 0x4}, {0x2, 0x6}, {}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x2, 0xa}, {0x0, 0xa}, {0x5, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x7, 0x9}, {0x4, 0x9}, {0x1, 0x8}, {0x5, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x1a}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x5}, {0x2, 0x6}, {0x7, 0x9}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x3}, {0x3, 0x1}, {0x3, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x5}, {0x2, 0x6}, {0x2, 0x8}, {0x7}, {0x1, 0x5}, {0x7}, {0x3, 0x5}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x6}, {0x3, 0x9}, {0x6, 0x7}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0xa}, {0x2, 0x7}, {0x5, 0x5}, {0x3, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x6, 0xd}, {0x1, 0xa}, {0x5, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x40, 0x1000, 0x2, 0x800, 0x7, 0x6, 0x80]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x5, 0x6c, 0x1b]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0xc, 0xc, 0x0, 0x30, 0x5, 0x1b, 0x1, 0x16, 0x2, 0xc, 0xe, 0x5, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x76, 0x5, 0x5, 0xfffc, 0x20]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x7, 0x6}, {0x4, 0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x4}, {0x2}, {0x0, 0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x4, 0x17}, {0x0, 0x2}, {0x3, 0x8}, {0x6, 0x1}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x1}, {0x5, 0x5}, {0x3, 0x2}, {0x3, 0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x3, 0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x7, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0xa}, {0x3, 0x5}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0xa}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x8}, {0x3}, {0x7, 0x7}, {0x5, 0x2}, {0x1, 0x8}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5}, {0x6, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x3}, {0x4, 0xa}, {0x4, 0x4}, {0x6, 0x4}, {0x4, 0x6}, {0x3, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x2, 0x2}, {}, {0x3, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x2, 0x3}, {}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x1, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x388, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0xb, 0x9, 0x5, 0x51, 0x6, 0x41, 0x1b, 0x24, 0xb, 0x36, 0x9, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x7, 0xf117, 0x400, 0x7ff, 0xd2ce, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x5, 0x81, 0x101, 0x5, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x3, 0x30, 0x60, 0x6, 0x16, 0x60, 0x48, 0x6c, 0x6c, 0x12, 0x36, 0x18, 0x36, 0x50, 0x24, 0x48, 0x48, 0x20, 0x12, 0x6c, 0x6, 0x18]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x3, 0x9, 0x3d, 0x0, 0x1b, 0x9, 0x6c, 0x2, 0x1, 0x24]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x5}, {0x5, 0x9}, {0x4, 0x8}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0x2}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x5, 0xa}, {0x2, 0x2}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x5}, {0x7, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0x8}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x0, 0x4, 0x4, 0xc, 0x5, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xea, 0x5, 0x4, 0x20, 0x3ff8, 0x8, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x60, 0x12]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0x5}, {0x5, 0x4}, {0x4, 0x1}, {0x4, 0x6}, {0x7, 0x4}, {0x0, 0x3}, {0x6}, {0x3, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x6}, {0x3}, {0x7}, {0x0, 0x8}, {0x0, 0x1}, {0x2}, {0x5, 0x4}, {0x3}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x1}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x6}, {0x5, 0x6}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x31, 0x60, 0x12, 0x3, 0x0, 0x2, 0x9, 0x60, 0x1b, 0x9, 0x12, 0x5, 0x63, 0x1b, 0x6c, 0x1, 0x18, 0x6c, 0x13, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x16, 0x48, 0x30, 0x6c, 0x2, 0x16, 0x36, 0x1b, 0x36, 0x6c, 0x3, 0x6, 0x60, 0x60, 0xc, 0x1, 0x1b, 0x16, 0xb, 0x48, 0x1, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x9}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0xa}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x3}, {}, {0x7, 0xa}, {0x6, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0x4}, {0x1, 0x3}, {0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x3, 0x6}, {0x6, 0x8}, {0x2, 0x1}, {0x5, 0x7}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x5, 0x7}, {0x7, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x9}, {0x4}, {0x0, 0x9}, {0x4, 0x4}, {0x2}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x6}, {0x0, 0x3}, {0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x3}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0xa}, {0x7, 0x8}, {0x5, 0x9}, {0x2, 0x2}, {0x3, 0x9}, {0x7, 0xa}, {0x7, 0x8}, {0x4, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x99a, 0x5, 0x4, 0x4, 0x6, 0xff]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x5}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x8}, {0x6, 0xa}, {0x2, 0x1}, {0x3, 0x7}, {0x2, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x7}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x3}, {0x7}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x2}, {0x1}, {0x5, 0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x5, 0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0x7}, {0x4, 0x6}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x6}, {0x4, 0x8}, {0x7, 0xa}, {0x3, 0x7}, {0x4}, {0x0, 0x8}, {0x4, 0x1}, {0x3, 0x8}, {0x5}, {0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x5}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0x2}, {0x1}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x4, 0x5}, {0x2}, {0x7, 0x5}, {0x0, 0xa}, {0x1}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xa5da, 0x7, 0x800, 0x2, 0x0, 0xdd9, 0x9a0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x6, 0xffff, 0xfff, 0x1, 0xfff, 0x5, 0xe80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x2, 0xc4, 0x9, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5c, 0x9, 0xea, 0x0, 0x5, 0x9, 0x400, 0xa2f2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x12, 0x6c, 0x6, 0x14, 0x6c, 0x1d, 0x2, 0x4, 0x4, 0x1b]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x24, 0x60, 0x4, 0x60, 0x4, 0x5, 0x1b, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xd8a5, 0xbb5, 0xd35, 0x9, 0x81, 0x3, 0x1]}}]}, @NL80211_BAND_5GHZ={0x10c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x4}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x5}, {0x1, 0x1}, {}, {0x3, 0x7}, {0x1, 0x4}, {0x3, 0x3}, {0x3, 0x2}, {}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x3}, {0x3, 0x5}, {0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {}, {0x2, 0x2}, {0x2, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x8}, {0x5, 0x5}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0x7}, {0x7}, {0x1, 0x4}, {0x6, 0x6}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x2, 0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x6}, {0x5, 0x8}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x3}, {0x5}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x9}, {0x4, 0xa}, {0x2}, {0x6, 0x3}, {0x6, 0x3}, {0x0, 0x4}, {}, {0x2, 0x7}, {0x4, 0x6}, {}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x2, 0x6f, 0x6c, 0x24, 0x48, 0x48, 0x2, 0x12, 0x3, 0x9, 0x36, 0x30, 0x6, 0x6]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1d, 0x9, 0x30, 0x12, 0x6c, 0x6]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x3}, {}, {0x2}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x9}, {0x5, 0x7}, {0x6, 0xc}, {0x7, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x6}, {0x4, 0xa}, {0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x3}, {0x2, 0x8}, {0x7}, {0x4, 0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x5}, {0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x1}, {0x0, 0x6}, {0x7, 0x9}, {0x7, 0x9}, {0x6, 0x7}, {0x1}, {0x4, 0x9}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x2}, {0x1, 0xa}, {0x4, 0x5}, {0x1, 0xa}, {0x5, 0x7}, {0x4, 0x3}, {0x4, 0xa}, {0x3, 0x6}, {0x2, 0x8}, {0x2, 0x3}, {0x6, 0x9}, {0x4, 0x3}, {0x3, 0x3}, {0x2, 0x2}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0x1, 0x9, 0x6c, 0x1, 0x48, 0x60, 0x0, 0x24, 0x24, 0x1b, 0x6, 0x36, 0x2, 0x2, 0x2, 0x12, 0x3, 0x6c, 0x16, 0x60, 0xb, 0xc, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x870}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, r0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x2d}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xc}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x886c}]}, 0x40}, 0x1, 0x0, 0x0, 0xb6d46a51b36850d6}, 0x8000) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x6) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e80)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r2) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x55}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x58}}, 0x20008010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x38, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0xe, 0x2a, [@cf={0x4, 0x6, {0x7, 0x9, 0x1f, 0x1}}, @supported_rates]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000013c0)=""/4096, 0x1000) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000002600)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x805410e0}, 0xc, &(0x7f00000025c0)={&(0x7f0000002400)={0x1a0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x48040}, 0x10000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002640)='/proc/tty/drivers\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000002680)={0x1, {{0x2, 0x4e24, @multicast1}}}, 0x88) 22:48:01 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0xdd4, 0xff, &(0x7f0000000000)=""/71, &(0x7f0000000080)=0x47) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)) r1 = signalfd4(r0, &(0x7f0000000100)={[0x7]}, 0x8, 0x80000) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000140)={0x305, 0x3, 0x5, 0x3f}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000001c0)={{0x2, 0x3, 0xfffffffb, 0x2, 0x7}, 0x9, 0x3}) r3 = openat$cgroup_subtree(r2, &(0x7f0000000240), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000300)={{0x88, @multicast1, 0x4e22, 0x3, 'sed\x00', 0x37, 0x80000000, 0x5b}, {@multicast2, 0x4e24, 0x2000, 0xc1b, 0x53d1, 0x7}}, 0x44) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r4, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x29}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc22}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb4d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$MON_IOCQ_URB_LEN(r7, 0x9201) openat$cgroup_subtree(r5, &(0x7f0000000680), 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r2) 22:48:01 executing program 7: sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)) shmget(0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x7) syz_io_uring_setup(0x4fe7, &(0x7f00000000c0)={0x0, 0xfe1a, 0x8, 0x2, 0x42}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x6) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x40004) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '\x00'}}, 0xa) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000340)=""/197) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000440)=0x6, 0xc, 0x6) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/58, 0x3a}], 0x1, &(0x7f0000000600)=""/119, 0x77}, 0x2}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/95, 0x5f}], 0x1, &(0x7f00000007c0)=""/17, 0x11}, 0x1}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/245, 0xf5}, {&(0x7f0000000900)=""/232, 0xe8}, {&(0x7f0000000a00)=""/202, 0xca}], 0x3, &(0x7f0000000b40)=""/181, 0xb5}, 0x3}, {{&(0x7f0000000c00)=@l2, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/113, 0x71}, {&(0x7f0000001d00)=""/16, 0x10}], 0x3, &(0x7f0000001d80)=""/8, 0x8}, 0x6}, {{&(0x7f0000001dc0)=@isdn, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001e40)=""/163, 0xa3}, {&(0x7f0000001f00)=""/74, 0x4a}], 0x2, &(0x7f0000001fc0)}, 0x8001}], 0x5, 0x20, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002180)={0x210, r0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x44000}, 0x4c0c5) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000026c0)={&(0x7f0000002480)={0x204, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "90dbbd0dede6527802748f6462b304cd02178339bae0868c9b855026b863fa36757d9fe3"}}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdc}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3aa0f963}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffe0}]}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x67}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @loopback, 0x7fff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x27}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) [ 82.778858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.784258] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.786711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.788369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.790644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.792703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.794287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.797540] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.799431] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.803112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.804145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.804444] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.835107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.837945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.843474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.846926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.849290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.850458] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.898076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.904283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.908667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.913619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.918282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.919356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.962617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.982072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.989132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.991081] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.997091] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.001031] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.012308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.020428] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.022970] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.035409] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.042196] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.076104] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.082931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.083032] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.087242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.088196] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.093393] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.095495] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.104953] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.105396] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.117579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.126337] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.143375] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.149262] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.848955] Bluetooth: hci1: command tx timeout [ 84.848997] Bluetooth: hci0: command tx timeout [ 84.911918] Bluetooth: hci2: command tx timeout [ 85.042037] Bluetooth: hci3: command tx timeout [ 85.103924] Bluetooth: hci6: command tx timeout [ 85.168877] Bluetooth: hci4: command tx timeout [ 85.168909] Bluetooth: hci5: command tx timeout [ 85.232121] Bluetooth: hci7: command tx timeout [ 86.896018] Bluetooth: hci1: command tx timeout [ 86.896628] Bluetooth: hci0: command tx timeout [ 86.960898] Bluetooth: hci2: command tx timeout [ 87.088065] Bluetooth: hci3: command tx timeout [ 87.151872] Bluetooth: hci6: command tx timeout [ 87.216113] Bluetooth: hci4: command tx timeout [ 87.216195] Bluetooth: hci5: command tx timeout [ 87.279849] Bluetooth: hci7: command tx timeout [ 88.943973] Bluetooth: hci0: command tx timeout [ 88.944022] Bluetooth: hci1: command tx timeout [ 89.009849] Bluetooth: hci2: command tx timeout [ 89.135892] Bluetooth: hci3: command tx timeout [ 89.200863] Bluetooth: hci6: command tx timeout [ 89.263960] Bluetooth: hci5: command tx timeout [ 89.264040] Bluetooth: hci4: command tx timeout [ 89.327893] Bluetooth: hci7: command tx timeout [ 90.991985] Bluetooth: hci1: command tx timeout [ 90.993524] Bluetooth: hci0: command tx timeout [ 91.055978] Bluetooth: hci2: command tx timeout [ 91.184598] Bluetooth: hci3: command tx timeout [ 91.249018] Bluetooth: hci6: command tx timeout [ 91.312055] Bluetooth: hci4: command tx timeout [ 91.313880] Bluetooth: hci5: command tx timeout [ 91.376051] Bluetooth: hci7: command tx timeout [ 142.635493] syz-executor.1 (282) used greatest stack depth: 23248 bytes left [ 145.338399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.339017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.340988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.342542] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.346620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.351313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.351985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.356634] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.359720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.364023] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.379651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.388031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.434572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.437194] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.454325] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.467705] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.482632] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.489921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.498711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.506567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.507077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.511084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.519663] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.522124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.528331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.529009] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.537186] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.538006] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.538398] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.557218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.630444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.636682] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.639122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.641070] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.645413] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.647361] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.647758] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.654116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.661289] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.662612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.663138] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.665227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.666288] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.666648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.681313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.700261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.712223] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.714254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.440992] Bluetooth: hci1: command tx timeout [ 147.441026] Bluetooth: hci0: command tx timeout [ 147.567915] Bluetooth: hci2: command tx timeout [ 147.631918] Bluetooth: hci4: command tx timeout [ 147.632207] Bluetooth: hci3: command tx timeout [ 147.695900] Bluetooth: hci6: command tx timeout [ 147.696283] Bluetooth: hci7: command tx timeout [ 147.761165] Bluetooth: hci5: command tx timeout [ 149.488204] Bluetooth: hci1: command tx timeout [ 149.488568] Bluetooth: hci0: command tx timeout [ 149.615941] Bluetooth: hci2: command tx timeout [ 149.680830] Bluetooth: hci3: command tx timeout [ 149.680851] Bluetooth: hci4: command tx timeout [ 149.746006] Bluetooth: hci7: command tx timeout [ 149.746063] Bluetooth: hci6: command tx timeout [ 149.808919] Bluetooth: hci5: command tx timeout [ 151.535932] Bluetooth: hci0: command tx timeout [ 151.535983] Bluetooth: hci1: command tx timeout [ 151.665819] Bluetooth: hci2: command tx timeout [ 151.728087] Bluetooth: hci4: command tx timeout [ 151.729341] Bluetooth: hci3: command tx timeout [ 151.791865] Bluetooth: hci6: command tx timeout [ 151.792958] Bluetooth: hci7: command tx timeout [ 151.856870] Bluetooth: hci5: command tx timeout [ 153.584064] Bluetooth: hci1: command tx timeout [ 153.585883] Bluetooth: hci0: command tx timeout [ 153.713047] Bluetooth: hci2: command tx timeout [ 153.776238] Bluetooth: hci3: command tx timeout [ 153.776489] Bluetooth: hci4: command tx timeout [ 153.839979] Bluetooth: hci7: command tx timeout [ 153.840163] Bluetooth: hci6: command tx timeout [ 153.905873] Bluetooth: hci5: command tx timeout [ 207.365805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.370310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.378113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.384441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.387185] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.389672] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.541719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.544638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.548173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.562849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.563388] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.570536] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.571720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.576584] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.577185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.578180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.579358] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.580182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.616342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.620005] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.622333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.632405] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.646702] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.650318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.771672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.780092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.782582] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.784307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.806457] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.835015] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.839053] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.839233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.844465] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.851974] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.854668] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.860401] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.861583] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.862713] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.865076] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.865730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.866984] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.868987] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.883447] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.905072] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.936222] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.956044] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.971016] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.972055] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.456048] Bluetooth: hci0: command tx timeout [ 209.648026] Bluetooth: hci1: command tx timeout [ 209.648854] Bluetooth: hci2: command tx timeout [ 209.711954] Bluetooth: hci3: command tx timeout [ 209.904555] Bluetooth: hci5: command tx timeout [ 209.968080] Bluetooth: hci6: command tx timeout [ 209.968107] Bluetooth: hci4: command tx timeout [ 210.097392] Bluetooth: hci7: command tx timeout [ 211.504613] Bluetooth: hci0: command tx timeout [ 211.695906] Bluetooth: hci2: command tx timeout [ 211.696002] Bluetooth: hci1: command tx timeout [ 211.760843] Bluetooth: hci3: command tx timeout [ 211.951903] Bluetooth: hci5: command tx timeout [ 212.015848] Bluetooth: hci4: command tx timeout [ 212.015923] Bluetooth: hci6: command tx timeout [ 212.145850] Bluetooth: hci7: command tx timeout [ 213.551888] Bluetooth: hci0: command tx timeout [ 213.743929] Bluetooth: hci1: command tx timeout [ 213.743973] Bluetooth: hci2: command tx timeout [ 213.807961] Bluetooth: hci3: command tx timeout [ 213.999968] Bluetooth: hci5: command tx timeout [ 214.065131] Bluetooth: hci4: command tx timeout [ 214.065333] Bluetooth: hci6: command tx timeout [ 214.191974] Bluetooth: hci7: command tx timeout [ 215.600068] Bluetooth: hci0: command tx timeout [ 215.791959] Bluetooth: hci1: command tx timeout [ 215.792110] Bluetooth: hci2: command tx timeout [ 215.855892] Bluetooth: hci3: command tx timeout [ 216.048112] Bluetooth: hci5: command tx timeout [ 216.111913] Bluetooth: hci6: command tx timeout [ 216.112206] Bluetooth: hci4: command tx timeout [ 216.239916] Bluetooth: hci7: command tx timeout [ 269.500633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.503222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.504642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.510386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.512459] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.513634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.690197] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.699393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.700719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.702587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.704411] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.707664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.708233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.709814] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.710513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.716046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.728420] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.729363] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.775857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.783194] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.784980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.793119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.805217] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.812823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.825541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.830239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.839280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.850850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.868078] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.870681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.872562] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.880725] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.883663] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 269.885304] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.894909] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.897364] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.961543] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.973600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.975720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.027231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.056528] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.075886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.246186] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.276995] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.303381] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.355372] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.357029] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.357969] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.600847] Bluetooth: hci0: command tx timeout [ 271.791925] Bluetooth: hci2: command tx timeout [ 271.856949] Bluetooth: hci3: command tx timeout [ 271.857371] Bluetooth: hci1: command tx timeout [ 271.985816] Bluetooth: hci5: command tx timeout [ 272.239962] Bluetooth: hci6: command tx timeout [ 272.240503] Bluetooth: hci4: command tx timeout [ 272.496159] Bluetooth: hci7: command tx timeout [ 273.647913] Bluetooth: hci0: command tx timeout [ 273.840001] Bluetooth: hci2: command tx timeout [ 273.903915] Bluetooth: hci3: command tx timeout [ 273.904024] Bluetooth: hci1: command tx timeout [ 274.032001] Bluetooth: hci5: command tx timeout [ 274.287904] Bluetooth: hci4: command tx timeout [ 274.288355] Bluetooth: hci6: command tx timeout [ 274.544805] Bluetooth: hci7: command tx timeout [ 275.696047] Bluetooth: hci0: command tx timeout [ 275.887864] Bluetooth: hci2: command tx timeout [ 275.953164] Bluetooth: hci1: command tx timeout [ 275.953280] Bluetooth: hci3: command tx timeout [ 276.080819] Bluetooth: hci5: command tx timeout [ 276.336924] Bluetooth: hci6: command tx timeout [ 276.337021] Bluetooth: hci4: command tx timeout [ 276.591954] Bluetooth: hci7: command tx timeout [ 277.743812] Bluetooth: hci0: command tx timeout [ 277.937800] Bluetooth: hci2: command tx timeout [ 278.000939] Bluetooth: hci3: command tx timeout [ 278.001158] Bluetooth: hci1: command tx timeout [ 278.128949] Bluetooth: hci5: command tx timeout [ 278.383975] Bluetooth: hci4: command tx timeout [ 278.384195] Bluetooth: hci6: command tx timeout [ 278.640912] Bluetooth: hci7: command tx timeout [ 331.843621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.849341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.852151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.861235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.865410] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.868207] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.092405] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.098898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.101588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.112654] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.118632] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.122266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.233384] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.244856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.245607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.252099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.252691] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.261802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.298181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.299890] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.300698] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.314165] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.333161] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.335988] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.353086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.378710] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.384692] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.387414] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.390703] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.394630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.408100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.409145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.419534] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.427424] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.442954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.455715] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.456429] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.462357] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.472249] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.485144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.485470] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.492664] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.515191] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.522049] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.529076] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.552399] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.555822] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.580212] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.935823] Bluetooth: hci0: command tx timeout [ 334.192014] Bluetooth: hci1: command tx timeout [ 334.383886] Bluetooth: hci2: command tx timeout [ 334.448821] Bluetooth: hci3: command tx timeout [ 334.576840] Bluetooth: hci4: command tx timeout [ 334.641829] Bluetooth: hci6: command tx timeout [ 334.704870] Bluetooth: hci5: command tx timeout [ 334.768843] Bluetooth: hci7: command tx timeout [ 335.984931] Bluetooth: hci0: command tx timeout [ 336.240866] Bluetooth: hci1: command tx timeout [ 336.432959] Bluetooth: hci2: command tx timeout [ 336.497461] Bluetooth: hci3: command tx timeout [ 336.625785] Bluetooth: hci4: command tx timeout [ 336.687984] Bluetooth: hci6: command tx timeout [ 336.753968] Bluetooth: hci5: command tx timeout [ 336.815800] Bluetooth: hci7: command tx timeout [ 338.033071] Bluetooth: hci0: command tx timeout [ 338.287809] Bluetooth: hci1: command tx timeout [ 338.480802] Bluetooth: hci2: command tx timeout [ 338.543804] Bluetooth: hci3: command tx timeout [ 338.672785] Bluetooth: hci4: command tx timeout [ 338.737041] Bluetooth: hci6: command tx timeout [ 338.801877] Bluetooth: hci5: command tx timeout [ 338.864794] Bluetooth: hci7: command tx timeout [ 340.080857] Bluetooth: hci0: command tx timeout [ 340.337955] Bluetooth: hci1: command tx timeout [ 340.528549] Bluetooth: hci2: command tx timeout [ 340.592796] Bluetooth: hci3: command tx timeout [ 340.720848] Bluetooth: hci4: command tx timeout [ 340.783830] Bluetooth: hci6: command tx timeout [ 340.848876] Bluetooth: hci5: command tx timeout [ 340.914784] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:53:10 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff85c70a20 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff81722767 RDI=ffffffff85c70a20 RBP=00007ff2cfb18e27 RSP=ffff88803604f4f0 R8 =0000000000000001 R9 =ffff88803122dd88 R10=ffffffff864057d7 R11=0000000000000000 R12=00007ff2cfb18e27 R13=0000000000000000 R14=ffff88803122d340 R15=0000000000000001 RIP=ffffffff8171a2f8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff2cf5e7540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff2cf7d2620 CR3=0000000024c9a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c18d00 RBP=0000000000000000 RSP=ffff8880339bf370 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff864057d7 R11=0000000000000000 R12=ffff888027380000 R13=ffffffff85c18d00 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff814fd261 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb9f514e8e0 CR3=0000000028922000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000