Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:25278' (ECDSA) to the list of known hosts. 2025/01/22 03:51:28 fuzzer started 2025/01/22 03:51:29 dialing manager at localhost:44689 syzkaller login: [ 63.561765] cgroup: Unknown subsys name 'net' [ 63.661557] cgroup: Unknown subsys name 'cpuset' [ 63.698840] cgroup: Unknown subsys name 'rlimit' [ 69.804053] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 80.369937] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 03:51:46 syscalls: 2217 2025/01/22 03:51:46 code coverage: enabled 2025/01/22 03:51:46 comparison tracing: enabled 2025/01/22 03:51:46 extra coverage: enabled 2025/01/22 03:51:46 setuid sandbox: enabled 2025/01/22 03:51:46 namespace sandbox: enabled 2025/01/22 03:51:46 Android sandbox: enabled 2025/01/22 03:51:46 fault injection: enabled 2025/01/22 03:51:46 leak checking: enabled 2025/01/22 03:51:46 net packet injection: enabled 2025/01/22 03:51:46 net device setup: enabled 2025/01/22 03:51:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 03:51:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 03:51:46 USB emulation: enabled 2025/01/22 03:51:46 hci packet injection: enabled 2025/01/22 03:51:46 wifi device emulation: enabled 2025/01/22 03:51:46 802.15.4 emulation: enabled 2025/01/22 03:51:46 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/22 03:51:46 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/22 03:51:46 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/22 03:51:46 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/22 03:51:46 fetching corpus: 0, signal 0/10000 (executing program) 2025/01/22 03:51:46 fetching corpus: 0, signal 0/10248 (executing program) 2025/01/22 03:51:46 fetching corpus: 0, signal 0/10248 (executing program) 2025/01/22 03:51:49 starting 8 fuzzer processes 03:51:49 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x0, 0xffffffffffffffff, 0x8}) syncfs(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0x4, 0x3, 0x0, 'queue0\x00', 0x2}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x6, 0x2, {{0x10, 0x4, 0x0, 0xb, 0x40, 0x64, 0x0, 0x81, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp_prespec={0x44, 0x2c, 0xe, 0x3, 0x4, [{@local, 0x9}, {@local, 0x6}, {@empty, 0x80000}, {@loopback, 0x80000000}, {@remote, 0x3}]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@local, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0xfff, 0x8, 0x100, 0x9, 0x400208, r2}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000440)={0x0, @adiantum}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) fsetxattr$security_evm(r4, &(0x7f00000004c0), &(0x7f0000000500)=@md5={0x1, "232c0f617793ee5f53598711c2637a59"}, 0x11, 0x2) move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000540)=[&(0x7f0000800000/0x800000)=nil, &(0x7f0000b13000/0x3000)=nil], &(0x7f0000000580)=[0x7, 0xfffffec1, 0x800, 0xa39b, 0x4, 0x3], &(0x7f00000005c0)=[0x0], 0x4) r5 = memfd_secret(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000600)={0x20000016}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000640)) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000680)={0x0, 0x8, 0x0, [0x8, 0x0, 0x290, 0xfffffffffffffc00, 0x4], [0x8, 0x1ff, 0xfffffffffffffff9, 0x1f, 0x9, 0xc372, 0x4, 0x6, 0xfffffffffffffff9, 0x12e, 0x2, 0x1000, 0x8, 0x5, 0x2, 0x6, 0x1, 0x9, 0x7, 0x20, 0x6, 0x3, 0x1c00000000000000, 0x5, 0xf6a, 0x1253, 0x1, 0x80000000, 0x7, 0x9, 0x100, 0x3, 0x1, 0x3, 0x8001, 0x3ff, 0x0, 0xfffffffffffffffb, 0xffff, 0x1800000000, 0x1, 0x1, 0x7, 0xffffffffffffffff, 0x10001, 0xffffffffffff207b, 0x7f, 0xffff, 0x4, 0x6, 0x6, 0x2e, 0x81, 0x8000, 0xffffffffffff88a5, 0x8, 0x200, 0xa59, 0x80000000, 0x400, 0xc000000000000000, 0x15, 0x1000, 0x7, 0x1, 0x80, 0x80000001, 0x5, 0x1, 0x0, 0x6, 0xa8, 0x6, 0x3, 0x200, 0xb850, 0x6, 0x55a809a8, 0x9, 0x1f, 0x7264b202, 0x1, 0x8, 0x0, 0x0, 0xf4d, 0x8, 0x2000000000, 0x1, 0x1f, 0x400, 0x55, 0x0, 0x10001, 0x0, 0x4, 0x7ff80, 0x1b91, 0x8000, 0x1f, 0x6, 0x8, 0x5, 0x7ff, 0x4, 0x5, 0x20, 0x2, 0x4, 0x100, 0x6, 0x8, 0x7, 0x4ea, 0x5, 0x100000001, 0x8, 0x0, 0x7ff, 0x1, 0x1000]}) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000ac0)) 03:51:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x15) shutdown(r0, 0x1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000000)="68b5aa09aea35db1c184578db059cd5da6343ca4186154bff091fe3c6ed107197b20167b44dd1efde3756ab9bb413d82c5163f77260d8e3305bc82d66c314a", 0x3f) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0x7149}}, '\x00'}) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) signalfd(r2, &(0x7f0000000180)={[0x4]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000200)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) getresuid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) lchown(&(0x7f0000000540)='./file0\x00', r7, 0xee01) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x124, 0x0, 0x104, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xea7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x124}}, 0x4) keyctl$setperm(0x5, 0x0, 0x80004) fcntl$setstatus(r3, 0x4, 0x86800) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000840)={0x0, 0x0, 0x0, [0x400, 0x401, 0x4, 0x1ff, 0x86], [0x7fffffff, 0x8, 0x8, 0x4, 0x3b80000000, 0x1, 0x4, 0x7ff, 0x3, 0x100, 0x7, 0xfff, 0x8, 0x1, 0x9, 0x6, 0x7fffffff, 0x80000001, 0xffffffff, 0x8, 0x3, 0x7fffffff, 0x2e9c, 0x9, 0x7f, 0x40, 0x81, 0x0, 0x3, 0x7fffffff, 0x5, 0x7, 0x8001, 0x2c4, 0x5, 0x4, 0x80000000, 0x80000001, 0x0, 0x2, 0x7fffffff, 0x7, 0x1000, 0x8143, 0x7, 0xfffffffffffffff7, 0xbe4, 0x5, 0x9, 0x8, 0x1, 0x463, 0x7ff, 0x3, 0x0, 0x4, 0xcb, 0xdc5, 0x6, 0x408fd4e0, 0x2, 0x8000, 0x6, 0x101, 0x1, 0xfffffffffffffffc, 0x9, 0x81, 0xffffffffffffff80, 0x401, 0xffffffff, 0x7, 0xf68e, 0x9, 0x7fffffff, 0x8, 0x9, 0x10000, 0x3f, 0x2, 0x2, 0x37b2, 0x9, 0x8, 0x0, 0x80, 0x6, 0x7f, 0x7f, 0x7, 0x9, 0x7ff, 0xa980, 0x7, 0x2, 0x46, 0xfe0d, 0x200, 0x4, 0x6, 0x1, 0x8000, 0x200, 0x5, 0xffffffff, 0x1000, 0x7c5, 0x21f, 0x0, 0xfffffffffffffffa, 0xffffffff80000000, 0x9, 0x68e5, 0x100, 0x26c, 0x30, 0x5, 0x13fb, 0x2, 0x7ff, 0x100]}) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000c80)={'TPROXY\x00'}, &(0x7f0000000cc0)=0x1e) 03:51:49 executing program 2: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffa9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x9000) r0 = socket$inet6(0xa, 0xa, 0xfa3) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/243) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x8}}}}, [@NL80211_ATTR_TESTDATA={0xcc, 0x45, "ca1f8a08e8337d5063285ff08f61e0e777cee0d07307d460a36874edb86143d7e25310ca42ef3beaf281a4fbde7d0ff947a227efaafc739566fe1f7a4b8160ac3ea91710afbad985aa9b82d9250260a4fe738baf849f11b8f95f6e5a4e0742504a23763c6ad8e85235fedd1cda24f635c8b3a7da416a397fb7e5d05fe0d280ba6b0180910b8528155e3dbc43ff5afee456db9d970e0e7b552832771ec37879e570a424e378c0ec3e8cba837ebb1bf0eb733b96843b48ea0b849000c9293d64267bc62c8bd1be2e52"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000080}, 0xc0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x438, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r1 = open(&(0x7f00000004c0)='./file0\x00', 0x4000, 0xb0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001040}, 0x2000c000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xfe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x80) r3 = syz_mount_image$tmpfs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x4262, 0x1, &(0x7f0000000840)=[{&(0x7f00000007c0)="cb7d6626288df656890952e43c6e3ac7694e91564b0f216f9ca433e17360c8429567f72eae64e6bf0904f841825b54998c241d00bce73b906c665f929fede032c0702bc6b46f4c36c995f2f51c7f4805816d8b5e", 0x54, 0x8a}], 0xa00409, &(0x7f0000000880)={[{@huge_advise}, {@size={'size', 0x3d, [0x36, 0x8ecac6b59199f122, 0x31, 0x78, 0x36, 0x6d, 0x2d]}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, 'wpan1\x00'}}]}) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x6, 0x5, 0x2e, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x32, 0xa9e}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'sit0\x00', r4, 0x4, 0x3, 0x81, 0x4, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x8000, 0xff, 0x1}}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000a40), 0x14000, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 's'}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "1903f072af"}], @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x4}}]}]}, 0x34}}, 0x24000014) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}]}, 0x48}}, 0x8000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000e80)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x3f, 0x7ff, 0x200, 0x1, 0x4}, {0x40, 0x101, 0x9a8, 0xd5d2, 0xfffffffffffffbff}], ['\x00']}) 03:51:49 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/scsi_generic', 0x14600, 0x2a) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x1c}}, 0x4000001) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x48}}, 0x4004) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x32}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat(r0, &(0x7f0000000400)='./file0\x00', 0x0, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x472}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf3a}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x67e}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x317}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdfb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2647}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x90000000}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000004}, 0x24044050) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x22102, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000780)=0x1, 0x4) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000007c0)={'mangle\x00', 0x0, [0x895, 0x9, 0x621f, 0xfff, 0x5]}, &(0x7f0000000840)=0x54) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r5, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000a00)={{}, 0x0, 0x0, @unused=[0x1, 0x1, 0x0, 0x2], @subvolid=0x7}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000001ac0)={'ip6gre0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x4, 0x7f, 0x60, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7800, 0x8000, 0x1, 0x8000}}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x58, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_FLAGS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000001c00)) fdatasync(r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000004380)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) [ 83.267504] audit: type=1400 audit(1737517909.193:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:51:49 executing program 4: shutdown(0xffffffffffffffff, 0x0) acct(&(0x7f0000000000)='./file0\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000040), 0x6e, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/253, 0xfd}, {&(0x7f0000001280)=""/22, 0x16}, {&(0x7f00000012c0)=""/249, 0xf9}], 0x6, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000014c0)=r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000001840)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001800)={&(0x7f00000015c0)={0x21c, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc788}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1c70}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x73}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80, @remote, 0x9667}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd22}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7c29, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x3}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x400) pipe(&(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a40), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a80)={0xd8, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24048010}, 0x4000) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}}, 0x14}}, 0x4000014) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001d00)="d71f12b2abe195ff868c34b83f48d205", 0x10) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000003300)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000032c0)={&(0x7f0000001d80)={0x1508, 0x1, 0x5, 0x101, 0x0, 0x0, {0xc, 0x0, 0xa}, [{{0x254, 0x1, {{0x3}, 0x20, 0x7f, 0x20, 0x258, 0x5, 'syz0\x00', "d77a2f22cf532ab60663f93cc3cc76de3f303277e0a3dc46324c5a3a7ee73ddf", "cc71b154630816737bb9a57f9be2d27c4d6c3ac4397f0b225aa267cf10866aff", [{0x0, 0x0, {0x1, 0xac}}, {0x80, 0x6, {0x3, 0x7}}, {0x3, 0x0, {0x0, 0x4}}, {0x4000, 0x9, {0x3}}, {0x7, 0x0, {0x2, 0x8}}, {0x9, 0x8, {0x2, 0x5}}, {0xb936, 0xfff9, {0x0, 0xffff}}, {0x5, 0x2, {0x3, 0x8}}, {0x9, 0x3ff, {0x1, 0x7}}, {0x3, 0x7d, {0x3, 0x3196}}, {0x19, 0x2b, {0x0, 0x5}}, {0x0, 0x2, {0x2, 0x6}}, {0x0, 0x9, {0x0, 0x7}}, {0x101, 0x3, {0x3, 0xc1d}}, {0x2, 0x1cf1, {0x1, 0x7}}, {0x4, 0x3f, {0x1, 0x5}}, {0x200, 0x4, {0x0, 0xee68}}, {0x83b, 0x2, {0x3, 0x40}}, {0x8, 0x3, {0x1, 0x3f}}, {0xfff7, 0x488c, {0x2}}, {0x3, 0x0, {0x1, 0x2}}, {0x0, 0x5, {0x3, 0x4777}}, {0x6, 0x23dc, {0x0, 0x8001}}, {0x7f, 0x0, {0x1, 0x80000001}}, {0xd6, 0x1f, {0x0, 0x4}}, {0x7, 0xffff, {0x3, 0x2f}}, {0x6, 0xbcba, {0x3}}, {0x1, 0x5, {0x2, 0x7f}}, {0xbfe1, 0x7, {0x3, 0xffffff7f}}, {0x1000, 0x1, {0x2}}, {0x2, 0xd3, {0x2, 0x5}}, {0xfc, 0x8000, {0x0, 0x3}}, {0x0, 0x1, {0x3, 0x5}}, {0x7fff, 0x8001, {0x1, 0x6}}, {0x2a, 0x4, {0x2, 0x8}}, {0x8001, 0x8, {0x3, 0x8}}, {0x6, 0x4, {0x0, 0xffffffff}}, {0x5, 0xd1, {0x2, 0x7}}, {0x7, 0x1ff, {0x2, 0x5b6d}}, {0x1, 0x40, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x29, 0xed, 0x7, 0x0, 0x22, 'syz0\x00', "0d321aee0677982da7acc957cd7ce22c16476fbf4628bfcbb9e842a88af2d3c5", "544c3add8284f5fab27bec2edb7790bd416c4c4c9eeeb648bc6798a37d316b9f", [{0x8, 0x0, {0x3, 0x8}}, {0xf53, 0x12, {0x2, 0x1}}, {0x7, 0x6, {0x0, 0x400}}, {0x1852, 0x8, {0x1, 0xa184}}, {0x3f, 0x0, {0x1, 0x7}}, {0xfe00, 0x5, {0x3, 0x8}}, {0x101, 0x1, {0x1, 0x6af}}, {0xf2, 0x7, {0x1, 0x62}}, {0xff, 0x7ad, {0x3, 0x9}}, {0xae6, 0x3, {0x1, 0xffff}}, {0x7, 0x1f, {0x1, 0xffff}}, {0x9, 0x7, {0x2, 0x3}}, {0xf69a, 0x101, {0x3}}, {0x6, 0x5, {0x3, 0x9}}, {0xd, 0x3, {0x2, 0x6}}, {0x2, 0x0, {0x1, 0x6}}, {0x5, 0x368, {0x3, 0xfffff107}}, {0x4, 0x1, {0x0, 0x7}}, {0x2, 0x4aa, {0x1, 0x2}}, {0x1eb5, 0xfffc, {0x2, 0xffff3976}}, {0x6, 0x5, {0x2, 0x3}}, {0x4, 0x4, {0x0, 0x8}}, {0x6, 0x1000, {0x2, 0x7}}, {0x8, 0x4, {0x1, 0x3}}, {0x200, 0x7f, {0x3, 0x7}}, {0x0, 0x1ff, {0x3, 0x4}}, {0x3, 0x3ff, {0x3, 0xa86e}}, {0x3f, 0x1, {0x3}}, {0x401, 0x400, {0x0, 0x9}}, {0x8000, 0x5, {0x3, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x3, 0x7, {0x1, 0x6}}, {0x0, 0x3, {0x0, 0xfffff001}}, {0x5, 0x3, {0x3, 0x8}}, {0x8458, 0x94, {0x0, 0x6}}, {0x1000, 0x1, {0x0, 0x2}}, {0x6, 0x6, {0x3, 0x2}}, {0x6b7, 0xfff, {0x3, 0x8}}, {0x3f, 0x100, {0x2, 0x3ff}}, {0x0, 0x3, {0x2, 0xfffffffb}}]}}}, {{0x254, 0x1, {{0x3, 0x81}, 0x7a, 0x94, 0xe4ea, 0x2, 0x6, 'syz0\x00', "f0bb0210707bdaf97efcddac545d7bfba01c41edf8d965fb69fd95ab0bcba03d", "8c50d81e96e39146a852ad3c72827bb7afe297c463a93f08b0c42f1dece7720d", [{0x20, 0x2, {0x0, 0x134}}, {0x6, 0x8, {0x1, 0x3}}, {0x4, 0xff, {0x1, 0x8000}}, {0x401, 0x40, {0x0, 0x1}}, {0x7, 0x1, {0x0, 0xffff0b40}}, {0x1000, 0x8, {0x2}}, {0x1, 0x1000, {0x3, 0xffff}}, {0x80, 0x8}, {0xfa8, 0xfffa, {0x1, 0x4}}, {0x4, 0x4, {0x1, 0x6}}, {0x1, 0x4, {0x2, 0x10001}}, {0x2, 0x4, {0x2, 0x8}}, {0x101, 0x7f, {0x2, 0x3ff}}, {0xfb, 0x1, {0x2, 0x4}}, {0x80, 0xfffb, {0x1, 0x1}}, {0xa2, 0x8, {0x0, 0x5}}, {0x9, 0xf849, {0x2}}, {0x1, 0xc0, {0x3, 0x1ff}}, {0x40, 0x1f, {0x2, 0x6}}, {0x200, 0x9, {0x1, 0x80000000}}, {0x80, 0x7, {0x3, 0x7ff}}, {0x552, 0x6, {0x3, 0x7}}, {0x5, 0x5, {0x2, 0xffffffff}}, {0x80, 0x8, {0x3, 0x9}}, {0x81, 0x2, {0x3, 0x9}}, {0x401, 0x5, {0x1, 0x1000}}, {0x7ff, 0x200, {0x0, 0xa00000}}, {0xfff8, 0x30, {0x0, 0x3}}, {0x7fff, 0x7ff, {0x0, 0x101}}, {0x6, 0x7, {0x2, 0x1ff}}, {0x6, 0x656, {0x1, 0x400}}, {0x45, 0x3, {0x3, 0xe0}}, {0x0, 0x5, {0x0, 0x1000}}, {0x6a, 0x0, {0x1, 0x6}}, {0x4, 0x101, {0x3, 0x20}}, {0x89, 0x7fff, {0x2, 0xff}}, {0xfff, 0xd03, {0x0, 0x547a}}, {0x7fff, 0x4, {0x3, 0x400}}, {0x8, 0xe6f, {0x0, 0x8}}, {0x1ce, 0x6, {0x1, 0x20}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x3, 0x4, 0x56a3, 0xfffe, 0x1a, 'syz0\x00', "4aee97e15a177589ad1618f4e5355750a82294239938e15e916923549c12c049", "7c692b21eda7118c91921767d86fc054ff3a3e60ee36ace257be8711fbdf6bb5", [{0x7f, 0x40, {0x3, 0x40}}, {0x8, 0x95e4, {0x3, 0xd35}}, {0xa, 0xd24, {0x3, 0xfffffff7}}, {0x1a4, 0x100, {0x1, 0x3ff}}, {0x20, 0x8, {0x1, 0x9}}, {0x9, 0x6, {0x0, 0x7}}, {0x6, 0x1000, {0x0, 0x7fff}}, {0x100, 0xffff, {0x2, 0x991f}}, {0x9, 0x101, {0x3, 0x80}}, {0x1, 0x7, {0x1, 0x5}}, {0x2, 0x3, {0x3, 0x1ff}}, {0x42, 0x3, {0x1, 0x81}}, {0x9, 0xffe1, {0x2, 0x10001}}, {0x0, 0x1, {0x3, 0x5}}, {0x9, 0x1, {0x0, 0xc9b}}, {0x1, 0x800}, {0x81, 0x8, {0x0, 0x7}}, {0x3, 0x40, {0x0, 0x6}}, {0x1, 0xc1dd, {0x3, 0x81}}, {0x2, 0x9c18, {0x1, 0x361}}, {0x7fff, 0xb1, {0x3}}, {0x0, 0xe2b, {0x3, 0x8}}, {0x7, 0x7, {0x2, 0xd22}}, {0x1, 0x2, {0x0, 0x5}}, {0x6, 0xfff, {0x2, 0x1}}, {0x3ff, 0x4, {0x1, 0x7}}, {0x100, 0x200, {0x0, 0xead}}, {0x0, 0x20, {0x2, 0x4}}, {0x0, 0xf6f2, {0x0, 0x1}}, {0xccc5, 0xfff7, {0x1, 0x40}}, {0x2, 0xfacf, {0x0, 0x401}}, {0x5, 0x5, {0x2, 0x3}}, {0x401, 0x926, {0x2, 0x5}}, {0x9, 0x800, {0x1, 0x1}}, {0x6, 0x5, {0x1}}, {0xf4e, 0x40, {0x2, 0x2}}, {0xfffb, 0x100, {0x0, 0x4800000}}, {0x0, 0x8, {0x0, 0x1}}, {0xff01, 0x80, {0x3}}, {0xff, 0x6, {0x2, 0x99}}]}}}, {{0x254, 0x1, {{0x1, 0xcc75}, 0xaf, 0x3f, 0x8, 0x1, 0xe, 'syz0\x00', "7309c0ca2a3df560d2c9282ffc567d65d23632a46bc88ab5ca83d85dcb77fe9c", "45dbbb44c19649f2e33ac60bf980e1ae6df02660136d4087de67ca8ced86c4b4", [{0x1, 0x9, {0x1, 0xe4f}}, {0x8, 0x800, {0x1, 0x3}}, {0x5, 0x6, {0x0, 0x5}}, {0xff80, 0x9, {0x3}}, {0x4, 0x3f, {0x0, 0x5}}, {0x2, 0x7, {0x3, 0xffffffff}}, {0x9, 0x0, {0x0, 0x9}}, {0x2, 0x200, {0x0, 0x10000}}, {0x4, 0x5a, {0x2, 0x8001}}, {0x200, 0x7, {0x3, 0x3}}, {0x1, 0x5, {0x1, 0x5}}, {0x3f, 0x0, {0x4, 0x8}}, {0x7, 0x1}, {0x8, 0x5e7, {0x1, 0x9}}, {0x7, 0x7ff, {0x3, 0xa43}}, {0x2, 0x1, {0x3, 0x5}}, {0x8001, 0x1, {0x2, 0x8001}}, {0x8, 0x800, {0x2, 0xedf}}, {0x43b, 0x5, {0x0, 0x7}}, {0x7, 0x7fff, {0x3, 0x7}}, {0x3, 0x0, {0x1, 0x4}}, {0x81, 0xff80, {0x3, 0x154b14a2}}, {0xfffa, 0x3, {0x3, 0xeb0}}, {0x8, 0x6, {0x3, 0x8e0c}}, {0x6, 0x7, {0x0, 0x6}}, {0x13, 0x2, {0x1, 0xfffffff8}}, {0x4, 0xab4, {0x3, 0x10001}}, {0x1, 0x6, {0x0, 0x400}}, {0x5, 0x5, {0x2, 0x34}}, {0x6, 0x20, {0x2, 0x80000001}}, {0x1, 0x1, {0x1, 0x7}}, {0x9, 0x20, {0x2}}, {0x9, 0x2, {0x0, 0x1}}, {0x9, 0xa9, {0x1, 0x100}}, {0x20, 0x20, {0x2, 0x3}}, {0x8, 0x8f4, {0x3, 0x2c}}, {0x5, 0x8, {0x3}}, {0x1, 0x7ff, {0x1, 0x7ff}}, {0xd3e, 0x4, {0x1, 0x200}}, {0xda1, 0x7f, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0xffffff11}, 0x90, 0x9, 0x23, 0x6, 0x27, 'syz1\x00', "5df569c48036335f16602b151773f73642a2965d0834ca3aee97c97ce78a06bb", "75dc9d95d08647fa919e11b42632935e5c9540d6933aa94b43a27e46857330de", [{0xfffa, 0x9, {0x1, 0x9}}, {0x3, 0xdb4, {0x2, 0x4}}, {0x100, 0x9, {0x2, 0x7fffffff}}, {0x3, 0x7, {0x3, 0xfff}}, {0x9, 0x7fff, {0x0, 0x6}}, {0x0, 0x4, {0x0, 0x7f}}, {0x7, 0x40}, {0xffff, 0x0, {0x2, 0xffff674a}}, {0xbd7, 0xfffb, {0x3, 0x4}}, {0x0, 0x80, {0x0, 0x7}}, {0x7, 0x5, {0x1, 0x3}}, {0xec, 0xfffd, {0x3, 0x5}}, {0x3717, 0x2, {0x1, 0x24}}, {0x6, 0x7, {0x2, 0x81}}, {0x0, 0x7ff, {0x1, 0x20}}, {0x3f, 0xfff9, {0x0, 0x9}}, {0x1f, 0x1, {0x0, 0xffffffc0}}, {0x40, 0x5, {0x3, 0x7}}, {0x0, 0x6, {0x1, 0x8}}, {0x9d7f, 0x0, {0x1, 0x8}}, {0x2, 0x556, {0x3, 0xff}}, {0x8, 0x8000, {0x1, 0x7}}, {0x7, 0x2, {0x0, 0x1}}, {0x0, 0x4, {0x0, 0x3f}}, {0x3e64, 0x1ff, {0x2, 0x3}}, {0x8, 0x6, {0x2, 0x4}}, {0x40, 0x231, {0x2}}, {0x4711, 0x1, {0x3, 0x7f}}, {0x1ff, 0x8f, {0x3, 0x7955}}, {0x5, 0x6, {0x2, 0x3fe00000}}, {0x8, 0xf800, {0x1, 0x2}}, {0x8f5, 0x501, {0x2, 0x7fffffff}}, {0x5, 0x80, {0x2, 0x6}}, {0x8001, 0xfe01, {0x3, 0xfffffffe}}, {0x400, 0x60, {0x1, 0xffff}}, {0x8000, 0x4, {0x1, 0xab}}, {0x3, 0x4, {0x3, 0x80000001}}, {0x5, 0x7ff, {0x3, 0xf3}}, {0x1, 0x8001, {0x0, 0xfff}}, {0xff, 0x800, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffffb}, 0x4a, 0x4, 0x1, 0x5, 0x10, 'syz1\x00', "8fdb97dfbe018c520e7a06ad91e98fa3e9f8b84a9134f76f4dae6d0ac100803b", "b3f69d490af84e2f776969945f489fa5af8575b7d1ba172858d833df3965c2eb", [{0x3, 0x80, {0x1, 0x646}}, {0x3681, 0x9, {0x3, 0x600000}}, {0x3, 0x3b5, {0x2, 0x1}}, {0x3, 0x3, {0x2, 0x1}}, {0x1, 0x1, {0x0, 0x2}}, {0xfffa, 0x1f, {0x3, 0xfffffff7}}, {0xed2, 0x1, {0x0, 0x5}}, {0x9, 0x5, {0x3}}, {0x5, 0x1, {0x0, 0x80000001}}, {0xd5, 0xaec3, {0x1, 0x78}}, {0x4, 0x7e, {0x3, 0x100}}, {0xff, 0x9, {0x2, 0x1db}}, {0x401, 0x8, {0x3, 0x49}}, {0x1, 0x0, {0x0, 0xef}}, {0xffff, 0x8, {0x2}}, {0x0, 0x5, {0x2, 0xf0}}, {0x3f, 0x8, {0x0, 0x3f}}, {0x80, 0x8, {0x0, 0x40}}, {0xa68, 0x9, {0x3, 0x2b05}}, {0xff, 0x9, {0x2}}, {0x7f, 0x1, {0x0, 0x8}}, {0x5, 0x4, {0x2, 0xef7}}, {0xa9, 0x9, {0x0, 0x401}}, {0x5, 0x100, {0x1, 0x8}}, {0x3f, 0x7, {0x2, 0x88a}}, {0x4, 0x1000, {0x0, 0x6}}, {0x3, 0x4, {0x0, 0x2}}, {0x2, 0x29, {0x3, 0xfffffffa}}, {0x42, 0x1ff, {0x3, 0x8}}, {0x40, 0x0, {0x2, 0x5cae}}, {0x5df8, 0x100, {0x1, 0xb}}, {0x3ff, 0x7fff, {0x2, 0x1}}, {0x2, 0x5, {0x0, 0x3}}, {0x8, 0x0, {0x0, 0x8001}}, {0x8, 0x2, {0x3, 0x4}}, {0x1, 0x1, {0x2, 0x7fff}}, {0x4, 0x3ff, {0x2, 0x7ff}}, {0x1ff, 0x400, {0x3, 0x80}}, {0x7, 0x5, {0x0, 0x10000}}, {0xfff0, 0x101, {0x1, 0x247c}}]}}}, {{0x254, 0x1, {{0x1, 0x7fff}, 0x91, 0x3, 0x6, 0x1, 0x5, 'syz1\x00', "8cd00abf98ccf01f742aaf7c2fcaf0248a24fdf9726e561bb85a2bdaa885605b", "d8435fd6d2f8222750292a78b81d7c41012cfe737096d7e6f64329cf3ccbae67", [{0x101, 0x8001, {0x0, 0x40}}, {0x200, 0x1ff, {0x1, 0x400}}, {0x101, 0x3f, {0x3, 0x8000}}, {0x3, 0x5af9, {0x1, 0x2}}, {0x1f, 0x4, {0x3, 0x6}}, {0x30f4, 0xff, {0x0, 0xbe8f}}, {0x7c00, 0x23d, {0x0, 0x81}}, {0x5, 0x9, {0x2, 0x9}}, {0x4, 0x200, {0x1, 0x2f2aa17d}}, {0x3f, 0xc00, {0x3}}, {0x1f, 0x3, {0x905017a2681aa683, 0x13}}, {0x0, 0x2, {0x3, 0x2}}, {0x4, 0x8, {0x0, 0x1b68}}, {0x3, 0x0, {0x0, 0x5}}, {0x5, 0x8, {0x0, 0x3}}, {0x7, 0x6c90, {0x3, 0x614c}}, {0x5, 0xdeb4, {0x2, 0x2}}, {0x0, 0x8, {0x1, 0x5}}, {0x43, 0x5, {0x0, 0xac}}, {0x9, 0x2, {0x2, 0x2}}, {0x3, 0x9, {0x3, 0x2}}, {0x8, 0x40, {0x1, 0x6}}, {0x4, 0x200, {0x3, 0x6}}, {0xfff, 0x0, {0x0, 0x2e}}, {0x7fff, 0x2, {0x1, 0xefd}}, {0x8, 0x8, {0x1, 0x2}}, {0x427c, 0x9, {0x1}}, {0x400, 0x7, {0x0, 0x5}}, {0x3, 0x1, {0x2, 0x69}}, {0x100, 0xbe, {0x2, 0x1}}, {0x8bc3, 0x6, {0xf03ea5f393672de8, 0xe106}}, {0x55ad, 0x400, {0x0, 0x4b09}}, {0x5, 0x53e, {0x1, 0x9}}, {0xffe0, 0x1000, {0x0, 0x80000001}}, {0x3, 0x3, {0x0, 0x3ff}}, {0x9, 0x800, {0x1, 0x4}}, {0xffff, 0xfc00, {0x1, 0xffffffff}}, {0x3, 0x8, {0x2}}, {0x2, 0x3, {0x3}}, {0xfe01, 0xfbff, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x401}, 0x12, 0x7f, 0x6, 0x0, 0x1b, 'syz1\x00', "9c6a01914a0e89f27c03832e63fe51773eaedab471dc4a0cb020cbc25f4ba43d", "91bef94a91fa4456516f6e595064a62098505daa93745150510b3dddc723983a", [{0x1, 0x7f, {0x2, 0x8}}, {0x20, 0x101, {0x3, 0xfffffffa}}, {0x40, 0x9, {0x3, 0xffff}}, {0x0, 0x2, {0x3, 0xfffffff8}}, {0xbd, 0x80, {0x2, 0x5b0}}, {0xa735, 0x5, {0x0, 0x4}}, {0x1, 0x1400, {0x0, 0x80}}, {0x200, 0x20, {0x2, 0x450}}, {0x51b, 0x2, {0x1, 0xc1}}, {0x6, 0x7, {0x1, 0xfffeffff}}, {0x7fff, 0x7fff, {0x3, 0x7}}, {0x2, 0x7ec6, {0x1, 0x8}}, {0x6, 0x3f, {0x1, 0x8}}, {0x1ff, 0x3, {0x0, 0x2}}, {0x7, 0x9, {0x3, 0x5}}, {0x5, 0x800, {0x3, 0x5}}, {0x3f, 0x955, {0x1, 0x2c8}}, {0x8001, 0x122, {0x0, 0x2}}, {0x3, 0x1, {0x1, 0x9}}, {0x1f, 0x56b, {0x3, 0x4}}, {0x7, 0xfff8, {0x3, 0x2}}, {0x4, 0x4, {0x3}}, {0x80d4, 0xfff8, {0x2, 0xffffffff}}, {0x7, 0x4, {0x0, 0x5bf}}, {0x3f, 0x4, {0x0, 0x4}}, {0x9, 0x2, {0x2, 0x9}}, {0xb3, 0x1, {0x1, 0x2}}, {0xd15b, 0xff, {0x3, 0x5}}, {0x8000, 0x9, {0x0, 0xd604}}, {0x2, 0x4, {0x2, 0x2}}, {0x80, 0x0, {0x0, 0xfff}}, {0x3ff, 0x0, {0x2, 0x3ff}}, {0x100, 0x3ff, {0x5, 0x7fffffff}}, {0x200, 0x2, {0x2, 0x6}}, {0x8, 0x7, {0x2, 0x1}}, {0x100, 0xff, {0x2, 0x7}}, {0x4, 0x4, {0x3, 0xffffec72}}, {0x4, 0x100, {0x3, 0x1}}, {0x0, 0x76, {0x1}}, {0x8, 0x1, {0x2, 0xeccf}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x4051}, 0x48400) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003340), 0x301800, 0x0) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000003380)) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r7 = geteuid() setxattr$security_capability(&(0x7f00000033c0)='./file0\x00', &(0x7f0000003400), &(0x7f0000003440)=@v3={0x3000000, [{0x9, 0x2}, {0xc83d, 0x6}], r7}, 0x18, 0x1) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x3}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x694}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x2404c041) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000003700)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "718098208c"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, '7b'}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) 03:51:49 executing program 5: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0xc080) r0 = socket$netlink(0x10, 0x3, 0xe) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000280)={0x50c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_TESTDATA={0x23, 0x45, "24d4f613abe374da7250343e4e984ddfa8747ae4c14d34926b890612ca36a1"}, @NL80211_ATTR_TESTDATA={0xb3, 0x45, "09dc878825bdb3a4ea844f08f037f8e39d2d60793c3a58681a467611fc932bb11576401dea23a67c32565abc22d197e6704f611d735b34a803ba7475373953fa4e0177eba85236073cbfea2e64b7fd0f255f95240f0e2d86decc57fd399784d47bba1393f66408ebf76f10177746265a213066f297c8ca80c1d7917ee7294303c8aa61fa04def046a887a2a2f0e1cf068b5fbb5a0cd8a1e7ff7e253b085ce068b5864b00ebd491f031df13a1f8b881"}, @NL80211_ATTR_TESTDATA={0xfd, 0x45, "f3591338a4927230c6d6a69648fd7b506e681a0a40d02cbed63c1a0172843d0f035c7e4f87ac8c73472ec35e847039374de142fcf6c4efa0e0c1d1804e22849f6a5178287174c2c1152bf97e6878c1481ebc05e6e90d4aa097de2fed6b2d15461e798bb4281324e051a2d2cab7f5deea0f0b52d60f964684edf0c285f893bacfd0c748e83d0f912845f74adb0566297ebf7bbf41418b912a3c536002af62b4535850c1c7feb0da38e338f58b4fcfd8109fcaf6c0cecba121d9a64a92d749ca38cfb037d215c8f0f640616da96d6cf447a2d898994eb373bd4036931e481a64946e6353d69f5bcf9279741683d79b13758521fa0157c5cbc86c"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x50, 0x45, "257a2d466aea16965a1304479f9c951106421787732b0897c28c83928b8ad77bbcb04e9934f1b0ace1659b02b8aff60879091bbc698f623b4e762c25371128e5006be190d4a07845ef36fc5d"}, @NL80211_ATTR_TESTDATA={0xa6, 0x45, "d9d3e493849eb7cf07b8a0ca8530c9e9306262e83213d2b4b2f9f64b95704a296be53a2db0b55c84e81b34b26bf5336a3c9798d437606ae3ef0e1f5f96c7e6840b0d06457f6d70f02f9089b16076663858b2eb5c3c8a37877207fd3b461706a01230c6d622ecc90b126807e53c36dfc7344d8abbc1d3f534eddf4be28d2dd1eac28d26d2bd0b8adf507c4bdc520dc3eaac103b85949634c2b6cb75a012c1cebf8790"}, @NL80211_ATTR_TESTDATA={0xae, 0x45, "22a20cffc75855ff624d41ceb6a9ccb439f6d251e06e639cc154a08c1b7c89f2dccfc860732690ee6c5b8b3bd66991c66a73d833117a1ead911e9fbf516b07ee3e3ceab72d1b438266fc251f15ad3c394bbd1669f13b87f8236329364eaf37e929557166cbf89b5768b07a7bdb821a073e6fd3ab0a555d87c06c7c645ab750e1b80f7745d342fcbe7199a898b221ee93d2c95d31a930e4d44bfe69182359e40a4e408747d00b8aa89936"}, @NL80211_ATTR_TESTDATA={0xbc, 0x45, "0eec96709b6ec106cf36e2d9c8699f7ea6eb93b164593be7f1b403908d18cbb31a1dbbddf4d37c64b4250f0fb4558dc504b42733209dbefa30bad801d82334089ecb3b8c1dde9fed26ff713d34f64a881b078c3d9ec29b06a3bf8515e845f20b49ec99ccce92fa76d80998d4a600730483ea2ea567a85e5adc22c24af98771d094b56761ae26994d2fa2eea984f0cd2535cec7afd26d49b02705342297ec7f7c745f37eb0ff3e70ceeb9f8ba57d3822a20a42e73b516b6b5"}, @NL80211_ATTR_TESTDATA={0xac, 0x45, "c33c30c8f20678d13bb3dfdcdc82129e0e9d9ac9f9ab26c705ab20f55e2d113c1debe370bf6d4d4d4b187ada290ad400971ab90adb8617aa9bc664209ee15e138fe0687c67ec70f7ae647b7ec98c2364c73671afb61ba06458f269321f14ec9a1e52779c372821ae82a7cc2be1b446ea9cb4ce4ed026d3283eb9fc4cfa466f1f397cd32314befb0622c90736ff586f48146499287c9c038416f79f125caec76b7ebc8f1842d354a5"}]}, 0x50c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40040) r3 = syz_open_dev$sg(&(0x7f0000000840), 0x7, 0x20200) fstatfs(r3, &(0x7f0000000880)=""/39) getpeername$inet(r1, &(0x7f00000008c0)={0x2, 0x0, @empty}, &(0x7f0000000900)=0x10) r4 = fsmount(r2, 0x1, 0x70) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000d00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)={0x310, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x37}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x186}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b1514a1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xafb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2cfc9c6a}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4ca}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x14}, 0x20044000) r5 = fsopen(&(0x7f0000000d40)='ntfs\x00', 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) fremovexattr(r4, &(0x7f0000000d80)=@random={'user.', ':\x00'}) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x10, 0x3f8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x2c, 0x80000, 0x6, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x8050) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000001000)={0x3c, 0x1a, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @generic={0x1, 0x2b, "e591607979e1d956e256050818350c74aafb488b8721ecc875dca821f4047194f325660d988a6d764c59f7"}, @generic={0x9, 0x7f, "8f45a9fcbd23d8a915cc25369eed51cea97f10b9537115c710b71c7a6a132ba716702f7e4acbbbde710d824efffa9c5f358a95782d0bc9c4f3e8e61ccced3a7d09a3190fe441c01156d4c8179f8e55664377554070589cdeea696803449e07220981152257a9201577f08d92fff05b5de6fdb6c2bb745042533d4c3e981762"}, @pad1, @enc_lim={0x4, 0x1, 0x24}, @pad1]}, 0xe0) r7 = syz_open_dev$sg(&(0x7f0000001100), 0x3, 0x200000) fsetxattr(r7, &(0x7f0000001140)=@random={'os2.', '(\'\x00'}, &(0x7f0000001180)='{\x00', 0x2, 0x1) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1d8943f531fe5db1}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x881) 03:51:49 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x266, 0xe}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x20000801) chdir(&(0x7f0000000140)='./file0\x00') sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x849}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000094) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x2, 0x1f, 0x20, @remote, @rand_addr=' \x01\x00', 0x423290919f9e3324, 0x7800, 0x7fff, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x7ff, 0x401, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @remote, {[@end, @timestamp={0x44, 0x14, 0xca, 0x0, 0xc, [0x5797, 0x5, 0x7, 0x0]}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @local, @multicast2}, &(0x7f00000006c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000700)={0x4d8, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9e}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x200080d0}, 0x20000010) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, r0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r5, 0x0, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8a0210}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x40010) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x43}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '(\\/%\v{\xa0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x10000000) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f00000012c0)='.pending_reads\x00', 0x488000, 0x188) sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, r0, 0x12, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x16}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000030) 03:51:49 executing program 6: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x3b}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe3e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4010) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x30000, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a0, 0x0, 0x118, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3590}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @loopback}, 0xee48}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f9f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd9}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd90}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4014) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000c80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000005c0)={0x66c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xf67}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x5b0, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x564, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1a8, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "430d2f0d26203fefe07a5c806df31ff55ce6f289f16451a17b128461cf2376ab"}, @WGPEER_A_ALLOWEDIPS={0x380, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "01a04e81a5fcbf0ece1bf12d7c79be4d1a2ed4b5e9c56e698d2f0cbd36391d1c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @local, 0x2}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x66c}}, 0x2000080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000ec0)={&(0x7f0000000d00), 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xd0, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf1b}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040014) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000f00)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000f40)=0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000f80)={'mangle\x00', 0x4e, "542136529e5661338008758430b3bbbeaac64bed852f989ae025fd67228056159eaf4a84de454b7741977d9fb19867b7671b1f74da198854260ac9ff311f73f3db1b7d962ec6f1f2f50200b79912"}, &(0x7f0000001000)=0x72) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r2) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x36}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xc81, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, r8, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xff}, @NL80211_ATTR_SSID={0x10, 0x34, @random="fa62e65187599f169ffb76bc"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="583c2eb8a944"}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) r9 = openat$incfs(r2, &(0x7f00000012c0)='.pending_reads\x00', 0x94a00, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r7) sendmsg$NL80211_CMD_RADAR_DETECT(r9, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, r10, 0xc00, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4) [ 84.668075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.671355] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.672123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.676896] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.677638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.678292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.681948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.682402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.686661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.692491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.694611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.717436] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.720009] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.720718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.723334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.724510] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.725062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.725891] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.729365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.729947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.733866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.738848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.740519] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.741932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.814532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.816685] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.817900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.829507] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.842385] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.854349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.885670] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.891748] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.899129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.905842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.916478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.919918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.920392] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.928711] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.931999] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.933580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.938377] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.939422] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.942709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.949817] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.956898] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.969476] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.001996] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.002653] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.814436] Bluetooth: hci0: command tx timeout [ 86.814517] Bluetooth: hci3: command tx timeout [ 86.815127] Bluetooth: hci2: command tx timeout [ 86.877291] Bluetooth: hci1: command tx timeout [ 86.941415] Bluetooth: hci4: command tx timeout [ 87.005327] Bluetooth: hci5: command tx timeout [ 87.069360] Bluetooth: hci6: command tx timeout [ 87.069582] Bluetooth: hci7: command tx timeout [ 88.864951] Bluetooth: hci3: command tx timeout [ 88.865116] Bluetooth: hci2: command tx timeout [ 88.865311] Bluetooth: hci0: command tx timeout [ 88.925432] Bluetooth: hci1: command tx timeout [ 88.989531] Bluetooth: hci4: command tx timeout [ 89.053405] Bluetooth: hci5: command tx timeout [ 89.117478] Bluetooth: hci7: command tx timeout [ 89.117740] Bluetooth: hci6: command tx timeout [ 90.909287] Bluetooth: hci2: command tx timeout [ 90.909354] Bluetooth: hci3: command tx timeout [ 90.910426] Bluetooth: hci0: command tx timeout [ 90.974450] Bluetooth: hci1: command tx timeout [ 91.040343] Bluetooth: hci4: command tx timeout [ 91.102252] Bluetooth: hci5: command tx timeout [ 91.165310] Bluetooth: hci7: command tx timeout [ 91.165340] Bluetooth: hci6: command tx timeout [ 92.958295] Bluetooth: hci0: command tx timeout [ 92.958486] Bluetooth: hci2: command tx timeout [ 92.958681] Bluetooth: hci3: command tx timeout [ 93.021504] Bluetooth: hci1: command tx timeout [ 93.085225] Bluetooth: hci4: command tx timeout [ 93.149328] Bluetooth: hci5: command tx timeout [ 93.213433] Bluetooth: hci7: command tx timeout [ 93.214412] Bluetooth: hci6: command tx timeout [ 144.278780] syz-executor.1 (282) used greatest stack depth: 23312 bytes left [ 146.861646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.867398] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.870265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.876724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.884959] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.889909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.940914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.947800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.960792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.963334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.969283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.973417] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.976990] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.981541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.982722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.984828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.987168] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.987710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.995850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.998543] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.002815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.010544] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.024781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.026554] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.030472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.036907] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.038861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.052533] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.060420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.062598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.065521] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.071343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.074273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.081252] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.083384] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.085511] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.137546] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.145504] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.146889] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.153851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.161521] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.164548] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.165507] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.170670] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.171659] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.184737] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.186764] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.187845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.958461] Bluetooth: hci0: command tx timeout [ 149.022812] Bluetooth: hci1: command tx timeout [ 149.085204] Bluetooth: hci2: command tx timeout [ 149.085476] Bluetooth: hci4: command tx timeout [ 149.149414] Bluetooth: hci3: command tx timeout [ 149.150460] Bluetooth: hci5: command tx timeout [ 149.214330] Bluetooth: hci7: command tx timeout [ 149.278742] Bluetooth: hci6: command tx timeout [ 151.005228] Bluetooth: hci0: command tx timeout [ 151.071321] Bluetooth: hci1: command tx timeout [ 151.134266] Bluetooth: hci4: command tx timeout [ 151.134363] Bluetooth: hci2: command tx timeout [ 151.199174] Bluetooth: hci5: command tx timeout [ 151.199276] Bluetooth: hci3: command tx timeout [ 151.262260] Bluetooth: hci7: command tx timeout [ 151.326212] Bluetooth: hci6: command tx timeout [ 153.054212] Bluetooth: hci0: command tx timeout [ 153.118234] Bluetooth: hci1: command tx timeout [ 153.182212] Bluetooth: hci2: command tx timeout [ 153.182314] Bluetooth: hci4: command tx timeout [ 153.246827] Bluetooth: hci3: command tx timeout [ 153.246924] Bluetooth: hci5: command tx timeout [ 153.310309] Bluetooth: hci7: command tx timeout [ 153.374328] Bluetooth: hci6: command tx timeout [ 155.101240] Bluetooth: hci0: command tx timeout [ 155.166217] Bluetooth: hci1: command tx timeout [ 155.229242] Bluetooth: hci2: command tx timeout [ 155.229342] Bluetooth: hci4: command tx timeout [ 155.294324] Bluetooth: hci3: command tx timeout [ 155.294771] Bluetooth: hci5: command tx timeout [ 155.357227] Bluetooth: hci7: command tx timeout [ 155.422213] Bluetooth: hci6: command tx timeout [ 208.696731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.697893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.700597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.702179] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.703084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.703854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.707678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.709324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.710786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.712507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.722583] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.724278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.838816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.841327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.843951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.850526] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.856537] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.859980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.918978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.954888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.960442] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.968782] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.973640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.981050] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.984345] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.986341] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.035832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.038472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.039503] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.042995] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.047651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.050650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.052047] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.063802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.071524] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.082522] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.097646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.105317] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.109935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.113993] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.114888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.119074] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.122008] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.124617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.127787] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.132426] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.138979] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.174255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.782641] Bluetooth: hci0: command tx timeout [ 210.783349] Bluetooth: hci1: command tx timeout [ 210.973309] Bluetooth: hci2: command tx timeout [ 211.037284] Bluetooth: hci6: command tx timeout [ 211.165242] Bluetooth: hci3: command tx timeout [ 211.229464] Bluetooth: hci7: command tx timeout [ 211.293268] Bluetooth: hci4: command tx timeout [ 211.293721] Bluetooth: hci5: command tx timeout [ 212.830226] Bluetooth: hci1: command tx timeout [ 212.830320] Bluetooth: hci0: command tx timeout [ 213.022168] Bluetooth: hci2: command tx timeout [ 213.085167] Bluetooth: hci6: command tx timeout [ 213.215694] Bluetooth: hci3: command tx timeout [ 213.278261] Bluetooth: hci7: command tx timeout [ 213.342261] Bluetooth: hci5: command tx timeout [ 213.342342] Bluetooth: hci4: command tx timeout [ 214.878188] Bluetooth: hci0: command tx timeout [ 214.878285] Bluetooth: hci1: command tx timeout [ 215.070305] Bluetooth: hci2: command tx timeout [ 215.134554] Bluetooth: hci6: command tx timeout [ 215.262168] Bluetooth: hci3: command tx timeout [ 215.325186] Bluetooth: hci7: command tx timeout [ 215.389265] Bluetooth: hci4: command tx timeout [ 215.389353] Bluetooth: hci5: command tx timeout [ 216.925632] Bluetooth: hci1: command tx timeout [ 216.925855] Bluetooth: hci0: command tx timeout [ 217.117656] Bluetooth: hci2: command tx timeout [ 217.181499] Bluetooth: hci6: command tx timeout [ 217.309384] Bluetooth: hci3: command tx timeout [ 217.374182] Bluetooth: hci7: command tx timeout [ 217.437261] Bluetooth: hci4: command tx timeout [ 217.437431] Bluetooth: hci5: command tx timeout [ 271.140602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.142313] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.143457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.147980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.150194] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.151485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.340762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.343334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.344364] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.350547] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.352365] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.353345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.415988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.420884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.421920] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.423534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.423827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.425989] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.428266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.429584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.430953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.432637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.433666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.434735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.437173] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.438013] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.441978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.443348] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.451795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.451965] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.457256] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.458436] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.463355] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.472412] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.474792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.480451] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.481945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.487812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.492455] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.510329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.517589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.530677] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.660402] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.669151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.672404] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.682640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.688472] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.689734] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.181192] Bluetooth: hci0: command tx timeout [ 273.373194] Bluetooth: hci1: command tx timeout [ 273.501624] Bluetooth: hci6: command tx timeout [ 273.631394] Bluetooth: hci5: command tx timeout [ 273.631836] Bluetooth: hci3: command tx timeout [ 273.631850] Bluetooth: hci4: command tx timeout [ 273.693411] Bluetooth: hci2: command tx timeout [ 273.757384] Bluetooth: hci7: command tx timeout [ 275.230686] Bluetooth: hci0: command tx timeout [ 275.421473] Bluetooth: hci1: command tx timeout [ 275.549240] Bluetooth: hci6: command tx timeout [ 275.677963] Bluetooth: hci3: command tx timeout [ 275.678453] Bluetooth: hci5: command tx timeout [ 275.678551] Bluetooth: hci4: command tx timeout [ 275.741249] Bluetooth: hci2: command tx timeout [ 275.807152] Bluetooth: hci7: command tx timeout [ 277.278176] Bluetooth: hci0: command tx timeout [ 277.470355] Bluetooth: hci1: command tx timeout [ 277.598248] Bluetooth: hci6: command tx timeout [ 277.725199] Bluetooth: hci3: command tx timeout [ 277.725748] Bluetooth: hci4: command tx timeout [ 277.726382] Bluetooth: hci5: command tx timeout [ 277.789565] Bluetooth: hci2: command tx timeout [ 277.853658] Bluetooth: hci7: command tx timeout [ 279.325300] Bluetooth: hci0: command tx timeout [ 279.517235] Bluetooth: hci1: command tx timeout [ 279.646230] Bluetooth: hci6: command tx timeout [ 279.775159] Bluetooth: hci4: command tx timeout [ 279.775224] Bluetooth: hci5: command tx timeout [ 279.775244] Bluetooth: hci3: command tx timeout [ 279.837578] Bluetooth: hci2: command tx timeout [ 279.901597] Bluetooth: hci7: command tx timeout [ 333.425010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.433304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.438065] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.445703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.453650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.461753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.558935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.559922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.564485] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.566340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.568535] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.570024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.578565] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.580201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.586576] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.588470] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.590994] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.591557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.631845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.641412] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.649740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.660423] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.664457] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.666683] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.680771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.682560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.689478] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.691851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.694183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.696678] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.696866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.706485] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.712731] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.729679] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.758840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.762858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.782746] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.796594] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.797703] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.802458] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.804143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.808848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.839443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.844042] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.846609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.847637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.855506] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.861697] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.517975] Bluetooth: hci0: command tx timeout [ 335.709218] Bluetooth: hci1: command tx timeout [ 335.709578] Bluetooth: hci2: command tx timeout [ 335.774242] Bluetooth: hci4: command tx timeout [ 335.840273] Bluetooth: hci5: command tx timeout [ 335.840591] Bluetooth: hci3: command tx timeout [ 335.901199] Bluetooth: hci6: command tx timeout [ 335.965852] Bluetooth: hci7: command tx timeout [ 337.565356] Bluetooth: hci0: command tx timeout [ 337.757657] Bluetooth: hci2: command tx timeout [ 337.757852] Bluetooth: hci1: command tx timeout [ 337.821210] Bluetooth: hci4: command tx timeout [ 337.886163] Bluetooth: hci3: command tx timeout [ 337.886326] Bluetooth: hci5: command tx timeout [ 337.949272] Bluetooth: hci6: command tx timeout [ 338.013495] Bluetooth: hci7: command tx timeout [ 339.615160] Bluetooth: hci0: command tx timeout [ 339.805331] Bluetooth: hci2: command tx timeout [ 339.805502] Bluetooth: hci1: command tx timeout [ 339.869383] Bluetooth: hci4: command tx timeout [ 339.933279] Bluetooth: hci5: command tx timeout [ 339.933459] Bluetooth: hci3: command tx timeout [ 339.997631] Bluetooth: hci6: command tx timeout [ 340.061338] Bluetooth: hci7: command tx timeout [ 341.661215] Bluetooth: hci0: command tx timeout [ 341.853235] Bluetooth: hci1: command tx timeout [ 341.853387] Bluetooth: hci2: command tx timeout [ 341.918043] Bluetooth: hci4: command tx timeout [ 341.981446] Bluetooth: hci3: command tx timeout [ 341.981606] Bluetooth: hci5: command tx timeout [ 342.045848] Bluetooth: hci6: command tx timeout [ 342.109319] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:56:57 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88806ce41480 RCX=ffffffff815091c4 RDX=ffffed100d9c13a9 RSI=0000000000000004 RDI=ffff88806ce09d48 RBP=1ffff1100d9c13a5 RSP=ffff88806ce09d18 R8 =0000000000000001 R9 =ffffed100d9c13a9 R10=0000000000000003 R11=0000000000000000 R12=0000000000000000 R13=000000000000d2b5 R14=ffffea000034ad40 R15=ffff88806ce41480 RIP=ffffffff84ab2f40 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1c75190000 CR3=000000003320c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880157fb940 RCX=0000000000000000 RDX=ffff888031a59bc0 RSI=ffffffff84a10ca4 RDI=ffffffff852d8e20 RBP=000000000003a64c RSP=ffff88800c7f79d8 R8 =0000000000000001 R9 =ffffed1002bef946 R10=0000000000000001 R11=0000000000000001 R12=ffff88800c7f7a48 R13=ffffffff852d8e20 R14=ffff88800c7f7a48 R15=0000000000000001 RIP=ffffffff8171a2f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055590a869080 CR3=000000000e2c2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000