syzkaller login: [ 73.039067] sshd (239) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:56480' (ECDSA) to the list of known hosts. 2025/01/24 03:45:02 fuzzer started 2025/01/24 03:45:03 dialing manager at localhost:45511 [ 77.616300] cgroup: Unknown subsys name 'net' [ 77.662648] cgroup: Unknown subsys name 'cpuset' [ 77.679884] cgroup: Unknown subsys name 'rlimit' [ 83.167964] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 03:45:19 syscalls: 2217 2025/01/24 03:45:19 code coverage: enabled 2025/01/24 03:45:19 comparison tracing: enabled 2025/01/24 03:45:19 extra coverage: enabled 2025/01/24 03:45:19 setuid sandbox: enabled 2025/01/24 03:45:19 namespace sandbox: enabled 2025/01/24 03:45:19 Android sandbox: enabled 2025/01/24 03:45:19 fault injection: enabled 2025/01/24 03:45:19 leak checking: enabled 2025/01/24 03:45:19 net packet injection: enabled 2025/01/24 03:45:19 net device setup: enabled 2025/01/24 03:45:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 03:45:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 03:45:19 USB emulation: enabled 2025/01/24 03:45:19 hci packet injection: enabled 2025/01/24 03:45:19 wifi device emulation: enabled 2025/01/24 03:45:19 802.15.4 emulation: enabled 2025/01/24 03:45:19 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 03:45:19 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/24 03:45:19 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/24 03:45:19 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/24 03:45:19 fetching corpus: 0, signal 0/8321 (executing program) 2025/01/24 03:45:19 fetching corpus: 0, signal 0/8321 (executing program) 2025/01/24 03:45:21 starting 8 fuzzer processes 03:45:21 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x8}, 0x100, './file0\x00'}) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x7) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000180)=""/4096) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000001180)={@id={0x2, 0x0, @auto="3ff52c8c50a26ae08d0affb058a849ec"}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) accept$unix(r2, &(0x7f0000001200)=@abs, &(0x7f0000001280)=0x6e) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000012c0), 0x20000, 0x0) getsockname$inet6(r1, &(0x7f0000001300)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001340)=0x1c) faccessat(r1, &(0x7f0000001380)='./file0\x00', 0x70) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000013c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001400)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000001440)={0x8, 'veth1_virt_wifi\x00', {'bond_slave_1\x00'}, 0xfffb}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r5 = accept4(r4, &(0x7f0000001480)=@rc, &(0x7f0000001500)=0x80, 0x80000) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000001540)=@gcm_128={{0x303}, "9ae3643013f9e56a", "f05c1aa9846709976b6dea4b295f1889", "3b1149fb", "e597a358997b1349"}, 0x28) getsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000001580), &(0x7f00000015c0)=0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000001640)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x124, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000001600)='team_slave_1\x00', 0x5, 0x2, 0xfa}) accept(0xffffffffffffffff, &(0x7f0000001780)=@ieee802154, &(0x7f0000001800)=0x80) 03:45:21 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x8c, @empty, 0x4}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x2, 0x3f, 0x3, 0xcfea}, 0x2, 0x1, 0x8000}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x688000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x80000000}}, './file0\x00'}) ioctl$RTC_UIE_OFF(r4, 0x7004) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_IE={0x2d, 0x2a, [@ht={0x2d, 0x1a, {0x0, 0x3, 0x0, 0x0, {0x4, 0x8a, 0x0, 0x8, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x6, 0x1f}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @chsw_timing={0x68, 0x4, {0x594, 0x9}}, @supported_rates={0x1, 0x2, [{0x18, 0x1}, {0x60}]}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x100}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_IE={0x16, 0x2a, [@mic={0x8c, 0x10, {0xea1, "e67b6c035761", @short="eaf9f59448c8ea28"}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040004}, 0x2004c091) r5 = openat2(r3, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x4000}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000380)=r4, 0x1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x80}}, 0x880) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000700)={{'\x00', 0x3}, {0x401}, 0x8c, 0x0, 0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)="1230600d32421b2a97bbed42ea224ce0667cd74023efb922b9fb8e1982517c7b26835d1b6cb534681100242745382e40b0269f2acdd8274cd7c6be", 0x3b, 0x0, &(0x7f00000005c0)={0x2, 0xa1, {0x1, 0xc, 0x64, "7ca653dc4408d8f20f41276994f66eb3795662aa2e52a64f940311784cfaa882331b789911ec2a7eeb3aa9bed55407449d6b743cf88ff6c581fd4085ec98fbda95381b4045e484d828a767fccebb7e0e7b136f9920f9dfd7bf84eac32dadf73297f0b533", 0x30, "575ea7fe3b2de3d548a7d8fcba61dacf8b9aab2870d412e1a1aba7a5ccd8f0d197960d9d24a1c161eba0214ec3af2d9e"}, 0x62, "66512b79eb8ac1e80a39d2066f2eee622b8cf45374b0837ba564464ef27c447f06cb85c7e8fafe6ba690043431e7a7a88da5f2792d18df28c794f6d129a974f8471b75dab75784e10b6353c54e7316e79c963c2256f0aefbbe60b7bca619078cb677"}, 0x10f}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000780), 0x10002, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r6, 0x40047211, &(0x7f00000007c0)=0x20) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000880)={{r3}, 0x0, 0x10, @inherit={0x58, &(0x7f0000000800)={0xf43e630cc5dc48fe, 0x2, 0x0, 0x8381, {0x2, 0x1f, 0x1, 0xfffffffffffffeff, 0x8}, [0x3, 0xe93]}}, @devid}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001900), 0x3d1040, 0x0) lstat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0), 0x2008020, &(0x7f0000001ac0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x989}}, {@dfltgid={'dfltgid', 0x3d, r8}}], [{@smackfsroot={'smackfsroot', 0x3d, '^4%&'}}, {@fsname={'fsname', 0x3d, '/*'}}, {@subj_user={'subj_user', 0x3d, '/dev/bsg\x00'}}, {@pcr={'pcr', 0x3d, 0x15}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_lt={'uid<', r9}}]}}) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) 03:45:21 executing program 2: keyctl$revoke(0x3, 0x0) r0 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1be33ddda1d46e041a29309705d165e9c708658fb34bd781c60c9b85b1051281b2d343faaf268a15c1c5303fbacb2f976bd579cd581ba98fedad395d1a75f05b138228cd344fab86a7f3b44e37ab8060e24a9e13a89f88380660c3175a2aab4279958896d1546449112dba17b97591b90a603ff2bfa18f4d41851596d44e65950c993f8d9a2838bc6b5411bb1a8b8728d8e2a829ee926001b8095fbdeae30bd61b6885738e975cf4521354bd3e", 0xad}], 0x1, r0) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "dff27ddd94c13cdbd8b62608737b303146ddb259fefe5112be3d3c657bd064dcedc2373a07a81442e340324329accfe56b0818e1cd02ff726e4669fd3093d1ea", 0x14}, 0x48, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "3507d539bb787fc330668f9b0767baab6400e441e040b82034d04facb4711b22b3c3e99da4c1af53ba6abe1fc20078cef2fcfa4ab45071b127e98cd87a71dc06", 0x11}, 0x48, 0xfffffffffffffffd) keyctl$link(0x8, r1, r2) keyctl$clear(0x7, r2) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r3, r2) keyctl$read(0xb, r0, &(0x7f0000000440)=""/14, 0xe) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000980), 0x600001, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000009c0), 0x412800, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000a00), 0xfffffffffffffff7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0}, &(0x7f0000000a80)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000500)="ec6566b1a4dd52cbbbc344f3d1d0f313aebd1739767b1651ee502783200483d47f3ce448d31d99c7a50401c068c9c15e4df5f3b0760c4d97bd71872cb9f87cc3346e91b4bb9cd54677d48b0a961ee76cc5", 0x51}, {&(0x7f0000000580)="d600928f79e715323e299bd559b824f19e64cefd996dfac3684d1f5eeb3987c7a7104dc3b17bb6082166499fefd1154a8a33cd038e36fab17254d8958155ab9c7c3153af385df5fe68b6b25e8a8b3d9ecf61dfcddb826383c2be84e84f59054933dcc303b04304bd88a8af9873ff22e2185aa8c3050137df6fa0620ffe509319297789be6e1279e862d019f536e1a242af12450a31fdd4441017fa17c2c24de48f14985f4de20cd887aca3e7a4f6cfe3eee2eac3ef7ae355f8e143590c031edc425ee8b30aad82e6821e", 0xca}, {&(0x7f0000000680)="4492669f0b88b0907bea4fbcdc70d7e53b566fd0fcf57b6fcef394216982cbbe0bdfd6bb4d28b61d", 0x28}, {&(0x7f00000006c0)="89ae4a9018f2ad0ba59cce6d7223b9ea157859d4cdde3f145eafdc3757139f", 0x1f}, {&(0x7f0000000700)="e3d8380589f90e81180eb0786078a1fd0e5b39c4efaecf1b8b7ef5f859686220649bb1ad0e51af050331e07bf831ec79fdedd86496dddfa6dd2395a3650ee035b9b2d1f9d2a79cfff4b1b7172937146bbeb0b3a856a206", 0x57}, {&(0x7f0000000780)="29aa348f2a4e463586f96b57eaee94633b84c46846fe3b6977b8fbf8190db96aff2732adb8b17dcd665204560599b0e9cce0518faecf36bc173a9040e0895e4cafbf9333c214841e5980fda8d9dea3f14ba85f6df642af54335afcfffa2a542dd3d765c311cb1c96", 0x68}, {&(0x7f0000000800)="4a972614", 0x4}, {&(0x7f0000000840)="e17ba2dfeae4ee1e4a0a24e5abc5dfa8ce6731a84a6240774e7f48e8b40bc71ec49750b50036f57fa351e9f8688931b6168aba098b0791e517b5907500ca877e96bf57d92b62141c4e5d17a848be12b139c842625b5c512c7466ba1db249f07c241261dfe4990a4361caed844c7b056c868e4fd4e6c200402f6cde7135570aaad6a4387b0a", 0x85}], 0x8, &(0x7f0000000ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0xc0, 0x10}, 0x40000) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_netdev_private(r8, 0x89f1, &(0x7f0000000bc0)="465a32c42e") getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001c40)={'nat\x00', 0x0, 0x3, 0x1000, [0x4, 0x3, 0x7, 0x0, 0x4, 0x3b1c227f], 0x1, &(0x7f0000000c00)=[{}], &(0x7f0000000c40)=""/4096}, &(0x7f0000001cc0)=0x78) r9 = add_key$keyring(&(0x7f0000001e00), &(0x7f0000001e40)={'syz', 0x0}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000001d00), &(0x7f0000001d40)={'fscrypt:', @desc4}, &(0x7f0000001d80)={0x0, "e63d4916765a0f9fe216edf3fb8fe9d29f926622b0b90b6c225500351e079152942d0306d01e1de1002c4c8dd3ac961da39567787f0ce46b2f6cc08bae590cb6", 0x25}, 0x48, r9) [ 96.099849] audit: type=1400 audit(1737690321.798:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:45:21 executing program 3: ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200002, 0x40) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) tee(r2, r0, 0x8000, 0xa) r3 = openat$cgroup_devices(r1, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0xa0000, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r4}, 0x1, &(0x7f00000001c0)=[0x2], 0x9, 0x4, [0x7fffffff, 0xa87, 0xffffffff, 0x7fff]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4800) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) recvfrom(r4, &(0x7f0000000440)=""/109, 0x6d, 0x100, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @empty}, 0x1, 0x4, 0x3, 0x4}}, 0x80) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000540)) recvmmsg(r5, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000780)=""/58, 0x3a}], 0x3}, 0x7}, {{&(0x7f0000000800)=@tipc=@name, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000880)=""/80, 0x50}, {&(0x7f0000000900)=""/1, 0x1}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000a00)=""/65, 0x41}, {&(0x7f0000000a80)=""/72, 0x48}, {&(0x7f0000000b00)=""/195, 0xc3}, {&(0x7f0000000c00)=""/21, 0x15}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/147, 0x93}], 0x9, &(0x7f0000001dc0)=""/77, 0x4d}, 0x8000}, {{&(0x7f0000001e40)=@rc={0x1f, @none}, 0x80, &(0x7f0000003500)=[{&(0x7f0000001ec0)=""/201, 0xc9}, {&(0x7f0000001fc0)=""/30, 0x1e}, {&(0x7f0000002000)=""/228, 0xe4}, {&(0x7f0000002100)=""/207, 0xcf}, {&(0x7f0000002200)=""/210, 0xd2}, {&(0x7f0000002300)=""/231, 0xe7}, {&(0x7f0000002400)=""/50, 0x32}, {&(0x7f0000002440)=""/180, 0xb4}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x9}, 0x200}, {{&(0x7f00000035c0)=@isdn, 0x80, &(0x7f0000003700)=[{&(0x7f0000003640)=""/166, 0xa6}], 0x1, &(0x7f0000003740)=""/82, 0x52}, 0xfffffeff}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000037c0)=""/88, 0x58}], 0x1, &(0x7f0000003880)=""/105, 0x69}, 0xfffffffd}, {{&(0x7f0000003900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003980)=""/191, 0xbf}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/80, 0x50}, {&(0x7f0000004ac0)=""/23, 0x17}, {&(0x7f0000004b00)=""/249, 0xf9}, {&(0x7f0000004c00)=""/226, 0xe2}, {&(0x7f0000004d00)=""/4096, 0x1000}], 0x7, &(0x7f0000005d80)=""/179, 0xb3}, 0x1}, {{&(0x7f0000005e40)=@nfc_llcp, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005ec0)=""/90, 0x5a}], 0x1, &(0x7f0000005f80)=""/205, 0xcd}, 0x4}, {{&(0x7f0000006080)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006100)=""/241, 0xf1}, {&(0x7f0000006200)=""/121, 0x79}, {&(0x7f0000006280)=""/209, 0xd1}, {&(0x7f0000006380)=""/162, 0xa2}, {&(0x7f0000006440)=""/224, 0xe0}, {&(0x7f0000006540)=""/111, 0x6f}], 0x6, &(0x7f0000006640)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000007640)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000007800)=[{&(0x7f00000076c0)=""/14, 0xe}, {&(0x7f0000007700)=""/232, 0xe8}], 0x2}, 0x7}], 0x9, 0x2020, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000007a80)={0x6, 'macvtap0\x00', {0x6}, 0x7}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r8 = open_tree(r2, &(0x7f0000007ac0)='./file0\x00', 0x1800) open_by_handle_at(r8, &(0x7f0000007b00)=@ocfs2={0xc, 0x1, {0x8001, 0x7, 0x1f}}, 0x80800) 03:45:21 executing program 4: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x4a000, 0x110) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000040)=""/118, 0x76}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000002100)=@xdp, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002180)=""/51, 0x33}], 0x1, &(0x7f0000002200)=""/124, 0x7c}, 0x2}], 0x2, 0x2142, &(0x7f0000002300)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000023c0)={'ip6tnl0\x00', &(0x7f0000002340)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0x10000, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x20, 0x0, 0xd937}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000002400)={@mcast1, 0x38, r2}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000002440)={0x30, 0xfffffffffffffff9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) readlinkat(0xffffffffffffffff, &(0x7f0000002900)='./file0\x00', &(0x7f0000002940)=""/93, 0x5d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000002a00), r0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000002b00)={&(0x7f00000029c0), 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x4c, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000060}, 0x40) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x76}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0x8000) r5 = syz_open_dev$loop(&(0x7f0000002c40), 0x4, 0x400) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000002c80)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000002cc0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd7e}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48d0}, 0x810) r8 = dup3(r7, r6, 0x80000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000002e00)) setsockopt$inet_int(r8, 0x0, 0x10, &(0x7f0000002e40)=0x400, 0x4) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000002e80), 0x101000, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) 03:45:21 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x10000}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r1, r2/1000+60000}}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00', r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r5 = dup2(0xffffffffffffffff, r3) r6 = openat$cgroup(r5, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x1b28, &(0x7f0000000200)={0x0, 0x33c7, 0x10, 0x0, 0x3a, 0x0, r4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r8 = syz_io_uring_complete(r7) sendmsg$nl_netfilter(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x9, 0x801, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x9}, [@typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) r9 = openat2(r4, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x24000, 0x10, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r9, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20001011}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) connect$unix(r4, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e24}, 0x6e) io_setup(0x9, &(0x7f0000000680)=0x0) io_submit(r13, 0x3, &(0x7f0000000a40)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2291a2294c9b9506, 0x101, r6, &(0x7f00000006c0)="f46573ad79b99d45cc1333fff4318c90bb418400ba805da6c34bebc7e848070817557e9c3fa0fa20daa85f728101171a0805352ac37a0c197f6a1d65e6bc3edd94f8170d10b1ab76a48a3f1a5a85e830d41bd753b403beb68ca433f82507b89ab9de23483e65e2daed99caf83d781f6391c7f0edfa50be08f5f1d2e7824f0e548edeea3597bec03ecc1af0c16951bda5c3ad0dbfc6e4d590900526248b386dec506af637f7cfcb17e79d184185970efe1ba63b9e57c4079538ba03b97c5f34643ea268b59e3a9f688b0e7ebb44941195731c9f791010ddd842a4753191c35f7a93013bfa11", 0xe5, 0x6, 0x0, 0x1}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x688419df129bb587, 0x8, r8, &(0x7f0000000800)="711f98090da0abb3779a5601e8ff34d7fabb8ec13ae9043281cf66377daf8114feb69c17e38f7b65c1cdbded888cdc4ca8669ea934769c4a4f41c44756a760d4ab82833c6245ce84a7397c80f35c21982730d23dd4175164885c985acf5e14dea871445d4f75e7e515065dac993f5fc769984d4546d5e192ab5209a23aff1a10bfe6d4487ca9a1ab00083016c167d6ebb2f057d024d99c0628ee5ba4c63ca3c26bb537b215d8ee7bd0f9296d6bf8db694500e2f3a6f1a728a0500c072293d1e77594673084ac1da5025ad5ad57e970873fbe97", 0xd3, 0x0, 0x0, 0x2, r12}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x5, 0x3ff, r8, &(0x7f0000000940)="67140b39ef42656ede14ca32c1fa6a687e6d34c3ded41f21bc16c926ea3f6a6de014244b65b5c2d0c226010ae167ad850659884de1d38edb63fd8553b2878f92282b8dd9683f4881e1a93bbb1b0d4e6420c8097678cd78d8c60d3b34e02153a78e79012003184cd163a07125dcb01d49", 0x70, 0x6, 0x0, 0x2}]) 03:45:21 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x84080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "b5990ecd81ea44875656844ad3ce1789"}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c093ba30530a1803b18289b25712ad99"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40041}, 0x200048c1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r3) r4 = accept4(r0, &(0x7f0000000340)=@generic, &(0x7f00000003c0)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4008c01) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2002040}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x20}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x72}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008124) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000640)="2d7aa2a4e93c375188ab977d1990c3e836f18582ef190b609b8e0e2278bc9f71b31f0392545df25de41cca0e7dd0388d66baa94bd93854baa29ce8a1f6d182cba4767c993772fc087c8efa3dbac47baa918c9b605ac29ced1a8b71aa7ff9ae765c79e1e24f9a9ad3f6dc8ab91bca53d15a10aefe2f0ae8c60de1ff3fbd2098a4e8abf9d9486b36c10090c7b13cbee985f50593c13b250e634fb58c4c1abbdcf1a292f5d527c39bab") r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000700)={{r4}, {@val, @actul_num={@void, 0xa5fa, 0x6d}}}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044004}, 0x40040) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x0, [0x101, 0x20, 0x7ff]}, &(0x7f00000008c0)=0x44) r7 = openat2(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x401, 0x10, 0x1a}, 0x18) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0x80) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a80)) 03:45:21 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x77}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, 0x0, 0x20, 0x0, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @DEVLINK_ATTR_RATE_NODE_NAME={0x66, 0xa8, @random="0e5955c97456565b27f22344368496d1b731629accee6241f16e83135f1ba650320abf671c4ca38b0a5613ca98241652a587e6b58b724b4a888776aa9578f4e11f810f6a123a6e9f8d1d3d90345a6ec2814d3842a3bc500a190fc49ab8fad6ed3496"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x5]}, 0x8, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x805}, 0xc0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x452}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5dfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88}, 0x4010) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x33}}]}]}, 0x34}}, 0x4004000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x53}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4001100) r3 = accept(r1, &(0x7f00000007c0)=@ieee802154, &(0x7f0000000840)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xfffffffffffe0106}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x68}}, 0x4004) syz_genetlink_get_family_id$wireguard(&(0x7f0000000b00), r1) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b40), 0x4002, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r6, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x40) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008080}, 0x10) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xb8, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x428}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9c}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x40) [ 97.460175] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.462558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.464092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.469929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.474587] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.475989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.703786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.711808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.716056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.719801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.724628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.729610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.731018] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.738702] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.740900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.745557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.752177] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.754064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.788055] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.800190] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.801586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.803884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.804670] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.806791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.809707] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.810728] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.814913] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.815842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.817212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.820618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.822324] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.827706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.832110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.866888] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.869806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.871815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.875249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.876483] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.877822] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.878819] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.883228] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.890860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.891745] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.895137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.913830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.929192] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.942318] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 97.952683] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 99.551048] Bluetooth: hci0: command tx timeout [ 99.807498] Bluetooth: hci2: command tx timeout [ 99.808298] Bluetooth: hci1: command tx timeout [ 99.870554] Bluetooth: hci4: command tx timeout [ 99.871154] Bluetooth: hci3: command tx timeout [ 99.934485] Bluetooth: hci5: command tx timeout [ 99.935137] Bluetooth: hci6: command tx timeout [ 99.998454] Bluetooth: hci7: command tx timeout [ 101.599490] Bluetooth: hci0: command tx timeout [ 101.856229] Bluetooth: hci1: command tx timeout [ 101.856733] Bluetooth: hci2: command tx timeout [ 101.920461] Bluetooth: hci3: command tx timeout [ 101.920884] Bluetooth: hci4: command tx timeout [ 101.983503] Bluetooth: hci6: command tx timeout [ 101.983982] Bluetooth: hci5: command tx timeout [ 102.046597] Bluetooth: hci7: command tx timeout [ 103.648395] Bluetooth: hci0: command tx timeout [ 103.904913] Bluetooth: hci1: command tx timeout [ 103.905673] Bluetooth: hci2: command tx timeout [ 103.967492] Bluetooth: hci4: command tx timeout [ 103.967999] Bluetooth: hci3: command tx timeout [ 104.030885] Bluetooth: hci6: command tx timeout [ 104.032256] Bluetooth: hci5: command tx timeout [ 104.095146] Bluetooth: hci7: command tx timeout [ 105.694492] Bluetooth: hci0: command tx timeout [ 105.951626] Bluetooth: hci2: command tx timeout [ 105.953112] Bluetooth: hci1: command tx timeout [ 106.014691] Bluetooth: hci3: command tx timeout [ 106.015856] Bluetooth: hci4: command tx timeout [ 106.078614] Bluetooth: hci5: command tx timeout [ 106.080037] Bluetooth: hci6: command tx timeout [ 106.143536] Bluetooth: hci7: command tx timeout [ 157.573190] syz-executor.0 (284) used greatest stack depth: 23568 bytes left [ 160.373713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.377536] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.380547] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.390059] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.394992] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.397875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.400756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.405682] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.412085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.413256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.445437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.449642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.476832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.482841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.485666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.491000] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.501784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.503814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.510671] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.514768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.518888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.520864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.527016] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.533340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.538125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.541796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.544825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.557876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.560151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.564621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.567750] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.569237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 160.569568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.575249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 160.577560] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.582957] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 160.598077] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.600190] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 160.612581] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.614011] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.616520] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 160.621559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.625622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.627768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.629199] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 160.637978] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 160.647987] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.650101] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.462651] Bluetooth: hci2: command tx timeout [ 162.590432] Bluetooth: hci0: command tx timeout [ 162.591477] Bluetooth: hci1: command tx timeout [ 162.654516] Bluetooth: hci3: command tx timeout [ 162.655140] Bluetooth: hci6: command tx timeout [ 162.718553] Bluetooth: hci5: command tx timeout [ 162.719227] Bluetooth: hci7: command tx timeout [ 162.720063] Bluetooth: hci4: command tx timeout [ 164.511532] Bluetooth: hci2: command tx timeout [ 164.638935] Bluetooth: hci1: command tx timeout [ 164.639588] Bluetooth: hci0: command tx timeout [ 164.702592] Bluetooth: hci6: command tx timeout [ 164.703038] Bluetooth: hci3: command tx timeout [ 164.766527] Bluetooth: hci4: command tx timeout [ 164.767663] Bluetooth: hci7: command tx timeout [ 164.768414] Bluetooth: hci5: command tx timeout [ 166.558495] Bluetooth: hci2: command tx timeout [ 166.686593] Bluetooth: hci1: command tx timeout [ 166.687077] Bluetooth: hci0: command tx timeout [ 166.750550] Bluetooth: hci3: command tx timeout [ 166.751704] Bluetooth: hci6: command tx timeout [ 166.814470] Bluetooth: hci7: command tx timeout [ 166.814588] Bluetooth: hci5: command tx timeout [ 166.814971] Bluetooth: hci4: command tx timeout [ 168.606509] Bluetooth: hci2: command tx timeout [ 168.734787] Bluetooth: hci0: command tx timeout [ 168.736009] Bluetooth: hci1: command tx timeout [ 168.799457] Bluetooth: hci6: command tx timeout [ 168.800546] Bluetooth: hci3: command tx timeout [ 168.862852] Bluetooth: hci7: command tx timeout [ 168.863601] Bluetooth: hci5: command tx timeout [ 168.863960] Bluetooth: hci4: command tx timeout [ 222.271000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.279016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.291494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.299788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.305519] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.312248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.521046] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.527562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.531836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.549922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.554869] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.557008] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.562886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.592618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.598053] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.608794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.611321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.615037] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.621410] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.627529] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 222.629303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.636687] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.650175] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 222.653938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.663709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.668173] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.676017] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.701616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.703018] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.724896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.726765] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.734550] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 222.736222] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 222.742822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.747979] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.753975] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 222.762591] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 222.765937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.770591] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 222.775832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 222.784794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 222.788991] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 222.803768] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 222.810648] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 222.814168] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 222.847121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 222.869056] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 222.876251] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.350617] Bluetooth: hci0: command tx timeout [ 224.606534] Bluetooth: hci1: command tx timeout [ 224.670536] Bluetooth: hci2: command tx timeout [ 224.799535] Bluetooth: hci4: command tx timeout [ 224.862523] Bluetooth: hci3: command tx timeout [ 224.863458] Bluetooth: hci5: command tx timeout [ 224.926674] Bluetooth: hci7: command tx timeout [ 224.927515] Bluetooth: hci6: command tx timeout [ 226.399520] Bluetooth: hci0: command tx timeout [ 226.655417] Bluetooth: hci1: command tx timeout [ 226.722389] Bluetooth: hci2: command tx timeout [ 226.847520] Bluetooth: hci4: command tx timeout [ 226.910567] Bluetooth: hci3: command tx timeout [ 226.911054] Bluetooth: hci5: command tx timeout [ 226.976406] Bluetooth: hci7: command tx timeout [ 226.976893] Bluetooth: hci6: command tx timeout [ 228.446433] Bluetooth: hci0: command tx timeout [ 228.702552] Bluetooth: hci1: command tx timeout [ 228.767480] Bluetooth: hci2: command tx timeout [ 228.895457] Bluetooth: hci4: command tx timeout [ 228.960642] Bluetooth: hci3: command tx timeout [ 228.961598] Bluetooth: hci5: command tx timeout [ 229.022627] Bluetooth: hci6: command tx timeout [ 229.023966] Bluetooth: hci7: command tx timeout [ 230.495943] Bluetooth: hci0: command tx timeout [ 230.751425] Bluetooth: hci1: command tx timeout [ 230.815501] Bluetooth: hci2: command tx timeout [ 230.943416] Bluetooth: hci4: command tx timeout [ 231.007582] Bluetooth: hci5: command tx timeout [ 231.008056] Bluetooth: hci3: command tx timeout [ 231.071518] Bluetooth: hci6: command tx timeout [ 231.071966] Bluetooth: hci7: command tx timeout [ 284.724192] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.732847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.737188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.748617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.758175] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 284.762067] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.917242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.919606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.923016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.931628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.937265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 284.939112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.102941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.106175] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.108271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.113060] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.117470] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.119221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.164399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.170605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.186667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.205992] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.210786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.213717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.247796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.257900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.270366] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.293123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.299563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.302152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.338819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.339133] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.342882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.361003] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.368293] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.371879] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.374269] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.378138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.380124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 285.390584] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.393680] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 285.405670] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.405703] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.408739] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 285.410938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.425553] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 285.433576] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 285.439884] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.814984] Bluetooth: hci0: command tx timeout [ 287.007696] Bluetooth: hci1: command tx timeout [ 287.199488] Bluetooth: hci2: command tx timeout [ 287.327782] Bluetooth: hci3: command tx timeout [ 287.454553] Bluetooth: hci4: command tx timeout [ 287.518546] Bluetooth: hci5: command tx timeout [ 287.520040] Bluetooth: hci6: command tx timeout [ 287.582566] Bluetooth: hci7: command tx timeout [ 288.862723] Bluetooth: hci0: command tx timeout [ 289.054471] Bluetooth: hci1: command tx timeout [ 289.246513] Bluetooth: hci2: command tx timeout [ 289.376452] Bluetooth: hci3: command tx timeout [ 289.502441] Bluetooth: hci4: command tx timeout [ 289.566445] Bluetooth: hci6: command tx timeout [ 289.566922] Bluetooth: hci5: command tx timeout [ 289.632364] Bluetooth: hci7: command tx timeout [ 290.910424] Bluetooth: hci0: command tx timeout [ 291.103262] Bluetooth: hci1: command tx timeout [ 291.294396] Bluetooth: hci2: command tx timeout [ 291.422471] Bluetooth: hci3: command tx timeout [ 291.551865] Bluetooth: hci4: command tx timeout [ 291.614418] Bluetooth: hci6: command tx timeout [ 291.614930] Bluetooth: hci5: command tx timeout [ 291.678404] Bluetooth: hci7: command tx timeout [ 292.959814] Bluetooth: hci0: command tx timeout [ 293.150431] Bluetooth: hci1: command tx timeout [ 293.342417] Bluetooth: hci2: command tx timeout [ 293.470444] Bluetooth: hci3: command tx timeout [ 293.598378] Bluetooth: hci4: command tx timeout [ 293.662613] Bluetooth: hci5: command tx timeout [ 293.663126] Bluetooth: hci6: command tx timeout [ 293.726614] Bluetooth: hci7: command tx timeout [ 347.327955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.334730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.341031] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.348643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.351742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.353913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.366788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.370039] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.377603] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.377739] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.382046] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.383910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.418780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.424762] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.430974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.447821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.449745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.458017] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 347.464929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.466540] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.468662] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.482369] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.489177] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 347.498111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.506822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.510689] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.525825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.533213] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.540857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.543210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.546164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.548804] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 347.557754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 347.585807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.589944] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 347.595718] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 347.602724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.608975] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 347.648187] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 347.650561] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 347.653139] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 347.658214] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.668523] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 347.709908] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 347.712788] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 347.718458] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 347.720751] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 347.733238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.408457] Bluetooth: hci0: command tx timeout [ 349.470440] Bluetooth: hci1: command tx timeout [ 349.535381] Bluetooth: hci2: command tx timeout [ 349.599415] Bluetooth: hci3: command tx timeout [ 349.663461] Bluetooth: hci5: command tx timeout [ 349.663662] Bluetooth: hci4: command tx timeout [ 349.792383] Bluetooth: hci7: command tx timeout [ 349.792406] Bluetooth: hci6: command tx timeout [ 351.455351] Bluetooth: hci0: command tx timeout [ 351.518433] Bluetooth: hci1: command tx timeout [ 351.582397] Bluetooth: hci2: command tx timeout [ 351.646465] Bluetooth: hci3: command tx timeout [ 351.711812] Bluetooth: hci5: command tx timeout [ 351.712093] Bluetooth: hci4: command tx timeout [ 351.838514] Bluetooth: hci7: command tx timeout [ 351.838715] Bluetooth: hci6: command tx timeout [ 353.502457] Bluetooth: hci0: command tx timeout [ 353.568346] Bluetooth: hci1: command tx timeout [ 353.630639] Bluetooth: hci2: command tx timeout [ 353.694500] Bluetooth: hci3: command tx timeout [ 353.758494] Bluetooth: hci4: command tx timeout [ 353.759042] Bluetooth: hci5: command tx timeout [ 353.886386] Bluetooth: hci6: command tx timeout [ 353.886838] Bluetooth: hci7: command tx timeout [ 355.551377] Bluetooth: hci0: command tx timeout [ 355.616706] Bluetooth: hci1: command tx timeout [ 355.679694] Bluetooth: hci2: command tx timeout [ 355.743399] Bluetooth: hci3: command tx timeout [ 355.807887] Bluetooth: hci5: command tx timeout [ 355.809385] Bluetooth: hci4: command tx timeout [ 355.934435] Bluetooth: hci7: command tx timeout [ 355.934460] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:50:22 Registers: info registers vcpu 0 RAX=0000000000000286 RBX=0000000000000000 RCX=ffffffff81509004 RDX=1ffffffff0ba0cf6 RSI=0000000000000004 RDI=ffff88801582f608 RBP=ffff8880152fc128 RSP=ffff88801582f698 R8 =0000000000000000 R9 =ffffed1002b05ec1 R10=0000000000000003 R11=0000000000000001 R12=ffff88803551e000 R13=00000000000000a0 R14=0000000000000001 R15=0000000000000cc0 RIP=ffffffff81aef7b4 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6f0dbb6580 CR3=00000000153d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff818e233b RDX=fffff9400013ea61 RSI=0000000000000008 RDI=ffffea00009f5300 RBP=ffffea00009f5300 RSP=ffff88803544fa70 R8 =0000000000000000 R9 =fffff9400013ea60 R10=ffffea00009f5307 R11=0000000000000000 R12=ffff888009444440 R13=ffff88806cf36300 R14=0000000000000001 R15=ffff88803544fb18 RIP=ffffffff84ab2f40 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3ff9c78540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3ffa13b000 CR3=000000000a124000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000