syzkaller login: [ 67.419964] sshd (231) used greatest stack depth: 24272 bytes left Warning: Permanently added '[localhost]:14616' (ECDSA) to the list of known hosts. 2025/01/24 07:36:03 fuzzer started 2025/01/24 07:36:03 dialing manager at localhost:45511 [ 70.800598] cgroup: Unknown subsys name 'net' [ 70.907284] cgroup: Unknown subsys name 'cpuset' [ 70.938654] cgroup: Unknown subsys name 'rlimit' [ 75.799922] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 07:36:20 syscalls: 2217 2025/01/24 07:36:20 code coverage: enabled 2025/01/24 07:36:20 comparison tracing: enabled 2025/01/24 07:36:20 extra coverage: enabled 2025/01/24 07:36:20 setuid sandbox: enabled 2025/01/24 07:36:20 namespace sandbox: enabled 2025/01/24 07:36:20 Android sandbox: enabled 2025/01/24 07:36:20 fault injection: enabled 2025/01/24 07:36:20 leak checking: enabled 2025/01/24 07:36:20 net packet injection: enabled 2025/01/24 07:36:20 net device setup: enabled 2025/01/24 07:36:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 07:36:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 07:36:20 USB emulation: enabled 2025/01/24 07:36:20 hci packet injection: enabled 2025/01/24 07:36:20 wifi device emulation: enabled 2025/01/24 07:36:20 802.15.4 emulation: enabled 2025/01/24 07:36:20 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 07:36:20 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/24 07:36:20 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/24 07:36:20 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/24 07:36:20 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 07:36:20 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 07:36:23 starting 8 fuzzer processes 07:36:23 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x2, 0x4, 0x7}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1800) write$bt_hci(r1, &(0x7f00000001c0)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) fcntl$setpipe(r2, 0x407, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1fc, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x4a}}}}, [@NL80211_ATTR_IE={0x54, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x9d, 0x40}}, @channel_switch={0x25, 0x3, {0x1, 0x7, 0x8e}}, @dsss={0x3, 0x1, 0xb7}, @preq={0x82, 0x41, @ext={{0x0, 0x1, 0x1}, 0x0, 0x7, 0x8000, @broadcast, 0x800, @device_a, 0x1, 0x7, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x4a}, {{0x1}, @device_b, 0x6}, {{0x1}, @device_a, 0x11}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x41}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x148, 0x2a, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}, @random={0x3, 0x72, "e72eb329c835cc0372edb6919b0ea743816463bd9eb5ac3aabdc98449f2701fd25d8b08b86dad70ca7f6ec3b0d8ee9fb7e3326f3fb61530d0c7e643472f9716cdce53499684d8fe45a5a7f08e892dc16c275e67516bb4f7c4d377dc84b1bf8095a156e6034a9e94c0705a4a666459a44dcdd"}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x3, 0x0, {0x9, 0x18cf, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x9, 0x8d}}, @measure_req={0x26, 0x96, {0xff, 0x79, 0x2, "b06972b966f9fae003ab729a96fb06fa7f2754235d791e2da052de9388bc0b0b4f99afe47837ab7cbb89ade62bcc82c48b705d809f9594fc7e0c00d667253231387048fdb72f908390046aef907e89c5c98e292beff1fcf9836fe7bcccba7f16f82482a36dc1885bc05e15c3806c346f1d3fde6c8b0798a7127f65c33399023d3f9c8c434ab0b6fb59560adfa474761aab140e"}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8040000}, 0x40000) open_by_handle_at(r1, &(0x7f0000000540)=@reiserfs_2={0x8, 0x2, {0x62d, 0x6}}, 0x10100) r4 = signalfd4(r2, &(0x7f0000000580)={[0x7ff]}, 0x8, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r3, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x10}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8000) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000006c0)='gre0\x00') r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/class/vc', 0x100, 0x1) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000740)) write$bt_hci(r2, &(0x7f0000000780)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc8}}}, 0x6) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2b}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x480, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffff001}]}, 0x38}}, 0x40080) fsetxattr(r4, &(0x7f00000008c0)=@known='security.apparmor\x00', &(0x7f0000000900)='$@^!):\x00', 0x7, 0x2) fcntl$getflags(r1, 0x408) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000009c0)) 07:36:23 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7b}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000894}, 0x8611d8f9f2dc2169) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x11}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000081) sysfs$1(0x1, &(0x7f00000003c0)='-]+,.-\x00') r2 = open(&(0x7f0000000400)='./file1\x00', 0x400100, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x78271e9447929972) epoll_wait(r0, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x4, 0x8) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000600), 0xe400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000640)={'sit0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x46}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000840), &(0x7f0000000880)='./file1\x00', 0x8, 0x3) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f00000008c0)=0x5) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000900)={0x1, "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"}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 07:36:23 executing program 2: sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x240, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x125, 0x33, @mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40}, @broadcast, @device_b, @random="04a34f1deb40", {0x4, 0x2}}, 0x5200, 0x5, @device_a, {0x0, 0xb, @random="2b609c52676a75b2dc81b9"}, @void, @void, [{0xdd, 0x88, "2ca80a5ccee03dee9b6e56e48eec0d7fee6adab459e6d12c68ff436bf68fab711a186b8f0ae9f461baabfdbbd4388b3e64bdccc58ebd22a4f5cc2c151d2c37b47f0a3ee643efb86be88f161c23a67ade8938760ae5c6400ffdfdf436dd0ae9c45157b88d937fed1d1322f152c786323e39209d1a69cde14885ced804c7db88de2f973331caa498a0"}, {0xdd, 0x66, "fb198a9af3e648c5833a373212c6963de24fbba18ba18a7b9b5fd0b81c1ceeb65aa1b8625496e51c7b8b01bbe4bd6bd0f8ae9fb69f0481354021ff8fcaff8dc7e5098781ca320791313b3f92a088d3beb607a6544256485fe870856e767cce330d4869245eeb"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xc0, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x80}, @device_b, @device_b, @initial, {0x5, 0x63a}}, 0x4, @random=0x8, 0x1, @void, @void, @val={0x3, 0x1, 0x9d}, @val={0x4, 0x6, {0x9, 0x11, 0x0, 0x8000}}, @val={0x6, 0x2, 0xff}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x8}}, [{0xdd, 0x76, "1e2bb579b8b2f084d63fdc769472116f8149d871643d87a585a38e7bccdd76e2c920f5e9b573cbf98a5636d6fceddc7dae811f06360164db93e89d7184fe94e84fc56645c9b3585e27deea122dda1c5daef68dd65412b5ec8a0d881af3d0391b3ffb7e27f2f33df1fb16e692e9caed1938ad11854454"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x240}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000010) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x15c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x13c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d45de93c7cf348ee388842470e54cc0aaf19a96c656a4666cebc238cd0d51b67"}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "639adc0f30eaaf0ade319fc3d340c112f6e6dadc3c2c3410aff8d86d51fdd2f4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4ab76365852103b54c491420d61ded2efdaf3ee5e1d27f2a837a16860fd5a692"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b2add7a9e8642080b38a0e6afaa37960"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d70e3c357929a4b36c9e10429aa4d233"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "59e1032c5e58f078ce81c18d5ca710d19a8e36361c3abc40b57edcf6ed078c00"}]}]}, 0x15c}}, 0x4000000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8050) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x154, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x7f}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x444}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b0}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x540}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa9f}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x372}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x425}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x8c}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4e9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x401}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x7fffffff]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x79}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x81}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}]}, 0x154}}, 0x851) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x52001, 0xb, 0x8}, 0x18) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x6c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000095}, 0x44080) r7 = dup(r6) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f0000000d80)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x30040004}, 0xc010) timerfd_gettime(r7, &(0x7f0000000ec0)) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 07:36:23 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}, @enter_looper, @acquire_done], 0x27, 0x0, &(0x7f0000000040)="fafef1c4ccaaa184d8f729da76028c9e466945dee0587f577c4abfcda04b8baa9a2aed71ffa6bb"}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000000c0)={0x7}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x1c}}, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048001}, 0x8000800) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000340)) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffff7) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000003c0)={0x1000, 0x1ff}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000400)="18c2822c") r1 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000440)=')$\\{&\x00', 0x0, r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000480)={0x3, 'netdevsim0\x00', {0x80000000}, 0x2}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000004c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe276a6d05eb8307d}}, 0x10) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000540)={r0, 0x6ae, 0x2ce0, 0x6}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000044}, 0x800) r5 = socket$netlink(0x10, 0x3, 0xb) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x480c0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) [ 90.645732] audit: type=1400 audit(1737704183.615:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:36:23 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008084}, 0x4c800) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r0, 0x205, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'SEG6\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x44) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20080000}, 0x24004001) io_uring_enter(0xffffffffffffffff, 0x2b17, 0xf3d9, 0x0, &(0x7f00000003c0)={[0x8001]}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x24008884) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x384, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x6, @device_b, 0xfffffff7, "", 0x7, 0x8000}}, @supported_rates, @mesh_chsw={0x76, 0x6, {0x81, 0x7f, 0x3f, 0xfffb}}, @random={0x2, 0x1b, "32be0d3c9e2fbbeedb0d2a379c4da66fda525ca944181a6156bc6b"}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x10, {0xc95, "259cc0322f7d", @short="58f225bb830e4599"}}, @cf={0x4, 0x6, {0x63, 0x1, 0xe2a, 0x200}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x1e9, 0x2a, [@fast_bss_trans={0x37, 0x123, {0x6, 0x9, "fc41638bd707c3dcd5b028a34265bddd", "4a77d5aa055d7fa5d5e3b7ff541bd32e3499ca7b88d2de1a2075487949b9407a", "69b008d2776f308d57220093b314714dcfd95e52f39d97d68e93539f21cfe433", [{0x3, 0x5, 'lundD'}, {0x2, 0x5, "a9339eb96d"}, {0x3, 0x24, "832777053e15028eee8ad2c7b9fa1ce45f7195f3af9d1a674c48a0e95994d7632965aad0"}, {0x1, 0x20, "03bca14f8f854430066914b0b8f2a86b614932e490f1dfeff9434ea946c8f4be"}, {0x1, 0x22, "6b977db2001557cafc0b339e2896a75654504774edc467949c88f1b39435b74654f8"}, {0x3, 0x25, "038b9c1b64806e32383cce3f7710e97bc4c051ad2c2ba99608e40e04c6c39d2ab8d77547f5"}, {0x1, 0x11, "2c68dc1b206b8b4d7892b547e3c500e910"}, {0x2, 0x11, "6e1a7510bb8ce16de4591e16e5d3d76cc9"}, {0x2, 0x8, "d1d596536039c73b"}]}}, @fast_bss_trans={0x37, 0x7c, {0x3, 0x2, "dc966fb7ef11293a699054096e5e6cb1", "c762298fbb3578638e870bd662495bd7410bd734492c44ec1177974e293283f2", "5e7aeeb190e31424f71a62f6fe5358618a491313e9217b1e9ae20645b763f4f7", [{0x1, 0xb, "c70c96765d2ff36b7a1924"}, {0x2, 0x1b, "3df1ac6434d612422b549f2460b53b0c6243103d79cf61b64e2e61"}]}}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x7}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @cf={0x4, 0x6, {0x6, 0x8e, 0x9, 0x8}}, @chsw_timing={0x68, 0x4, {0x680c, 0x1}}, @measure_req={0x26, 0x1c, {0x0, 0x4, 0x9, "16b6734663e931c12fcf3f89153d2aa60585d1bab7090ed265"}}]}, @NL80211_ATTR_IE={0xfa, 0x2a, [@mesh_id={0x72, 0x6}, @measure_req={0x26, 0x2f, {0x7f, 0xff, 0x1f, "721e663e28e282fa1f8429226f4ae9b05d606a2956e7f2aecf9f2ad46afb281f3cca6095cb5a0ef3f92c8700"}}, @fast_bss_trans={0x37, 0xa4, {0x83, 0x3, "e449cd69f247b1a38e92baeff0d5d321", "71f2ab7cfe38325b5e3675510ae4f0f5e7f222a3089480706c11cd3161271ca4", "3178b17ae962a9d6ba1f21281d578a9ce8884044e3e4126e41d7ccff2a4882a3", [{0x4, 0xc, "a2176a8429a5af21087966a8"}, {0x2, 0x21, "ada38f6c7dd31b9e5b98c8e92c740f3eb26a61b2641bdec0a5dbd5a16e7868c7d7"}, {0x4, 0x1f, "f32a00323807b4965decd866476d2441f06aa3b08a922d5104a821273429e0"}]}}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @challenge={0x10, 0x1, 0x5a}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, 0x1, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x230, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xbc, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b627baf}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73162979}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5a38e1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64838f14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4408b2bc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dadab30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45825378}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3db9a793}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21547c13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e3cdec3}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c8fce41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x717bbbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2286719f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11d6c358}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14c8b4b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fa7358a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3063}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x166f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c0c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa75f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfeff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f18}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23a0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe814}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7077}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cb16651}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec05}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dc35a9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12ff8e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e36d4a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bb827c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x294d42e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b3b2409}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000e80), 0x80000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd3b444cf98d7f1ac}, 0x4) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001000), 0x800c4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000001440)={&(0x7f0000001040)=@xdp={0x2c, 0x0, 0x0, 0x2e}, 0x80, &(0x7f0000001300)=[{&(0x7f00000010c0)="848b4c2f3721dde25d33f6cacc71b0edda8bf09d01c373a172647352de5a16c5b5218247e608d10120aef2b99dc3c030a9990f2ea34b1ad289e1f45f59a1b79974ecf6", 0x43}, {&(0x7f0000001140)="9c7aed00db9c68a8e54ade753a39e8cb2e6ecd3173a757ff297a0cf0746529f190248849eeebb9998f68a5bd3fab2e0a41aff883a25a66b7c13301ef5f8a302d7edfdef6c31a99b622f9e5ac5d1190e68032cf96636971e4c7e65e8260620b0d0f257bfba8639e8a603c8c664588c0b7e1127fd5236416d67501b51501ec9c52863a6b3d02125da7e6db6149ad901489f3251395327886f5859eb06eb2d3bb869bc4c3b4", 0xa4}, {&(0x7f0000001200)="ed689588f2da639a160601dcb29cac704b6834df0adb12741879c192a5311c0ab4cb3f6593a72c3185505c6cfb8edc44f43b30634969204682177047e2b37dfc9f2c", 0x42}, {&(0x7f0000001280)="3ab93a967f9a8a7fb902bcec9ea96b919458cd4c760af56262b4c28baccbc0af8c4666589d97b61dd89e6ec2bf36fbd8bd7c186a65d5f1cd924114c2988020085119f04e256571b3553b6b89811958ff8a95a4f436726a608580199fac305b7af27d6e419478", 0x66}], 0x4, &(0x7f0000001340)=[{0x80, 0x118, 0x315, "343b296d1fc196055f6042e0d9326e41569f05d7955098b9d8880e821ea6bc17f861700bbf09897f62664304d5f92047d30795866e85451626c1db4bda9ae9bd388f3e2f4573e0975159b9bddd43322d6a9eea98492112ceab80bbaabc15b2a54472cbc05c90d6e2b55fb07ce341"}, {0x48, 0x113, 0x7, "27bf8d50b7f05b7ce7e33e0617bd8ceab0512d444ee6c4675e73d1f8bff6cad3c09d1c83580f5452b027433c2ed7856ef372914f9e57ae48"}], 0xc8}, 0x0, 0x20000080, 0x1}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff7}]}, 0x1c}}, 0x800) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4004800}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0xe900a1ca8c0e2f}, 0x6008802) 07:36:23 executing program 5: ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x1) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000000000)={@msf={0x3, 0x3}, 0x0, 0x3}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x100, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000140)={'\x00', 0x44d, 0x3}) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800, 0x5) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x440, 0x0) r1 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x101080, 0x0, 0x8}, 0x18) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x84081}, 0x10000004) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xc, 0x2, @l2={'eth', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}}, 0x40000) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x46, 0x7, 0x0, 0x8, @private1, @mcast2, 0x7, 0x40, 0x9, 0x9}}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x4e23, 0x53d, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x3a, r5, r6}, {0x3dfa, 0xc8ed, 0xfff, 0x5, 0x10001, 0xe5c, 0xffffffff, 0x5}, {0x6, 0x4, 0x401, 0x4}, 0x7fffffff, 0x6e6bbe, 0x2, 0x1, 0x1}, {{@in6=@private0, 0x4d2, 0xff}, 0x2, @in=@local, 0x3504, 0x1, 0x1, 0xff, 0xfffffffe, 0x8, 0xfff}}, 0xe8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xcc, r7, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x656}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040414) r8 = accept$inet(r1, &(0x7f0000000a40)={0x2, 0x0, @initdev}, &(0x7f0000000a80)=0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) 07:36:23 executing program 6: r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x80, 0x800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2008000, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x1ff}}, {@rq={'rq', 0x3d, 0x78}}, {@rq={'rq', 0x3d, 0x1}}], [{@subj_type={'subj_type', 0x3d, '^'}}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x5dcf}}, './file0\x00'}) fcntl$addseals(r2, 0x409, 0x4) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x400, 0xfffffffe}, 0x100, './file0\x00'}) mount$9p_xen(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2010, &(0x7f0000000500)={'trans=xen,', {[], [{@pcr={'pcr', 0x3d, 0x19}}, {@uid_gt={'uid>', 0xee00}}, {@appraise}, {@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\b{*\a,}]-\x06@:-'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}}, 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r1) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x2004c891) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x24a600, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f00000008c0)={0x0, 0x72f67723, 0x1, 0x9, 0x2, [{0x200, 0x81, 0x7fff, '\x00', 0x84}, {0x8, 0x9, 0x800, '\x00', 0x2}]}) pipe(&(0x7f0000000980)) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x48000) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) process_mrelease(r7, 0x0) 07:36:23 executing program 7: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8c1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x958}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf06}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1ff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfc10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x14}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8001}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000540)={{}, 0x0, 0x10, @inherit={0x50, &(0x7f00000004c0)={0x0, 0x1, 0x1, 0x3ff, {0x21, 0xafd, 0x100000001, 0xd5a, 0xddcf}, [0x80000000]}}, @subvolid=0xfffffffffffffff8}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/keys\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000001600)={&(0x7f0000001580), &(0x7f00000015c0)=""/51, 0x33}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, r1, 0x10000000) r3 = epoll_create(0x400) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001640)={0x0, 0x1, 0x5, 0x101}) flistxattr(r3, &(0x7f0000001680)=""/4, 0x4) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f00000016c0)=0x3) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000884) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000001800)={0x2, 0x8}) r4 = socket$inet(0x2, 0x5, 0x5) connect(r4, &(0x7f0000001840)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0xa3a1, @mcast2, 0xfffff770}}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000001bc0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x3c2b657419b4e581}, 0xc, &(0x7f0000001b80)={&(0x7f0000001940)={0x218, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33b1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "e21cc878700e5ec973d138e141798faf4c7346862bef187fbe1ad12bd6f3aa14074f5f6cc8ca02d34b1800530f1fc360f7816633d0e4c03d32d9a3222bc6d0be3eb498f1d46386016acdebd72025207ad39b981d3dd50f34df894a2d315d8bcd82a176236c2aacd3910ab5b823059ce4b759317cb25f6e46ab2c50f1c4610738efa2d601bae1440adf29b0bb1b3e2c23ee5635d501e78d2336a317268ecf9aeac0d79f3167a93c2e793d455a352171ebb28c80c3df2273295b"}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x1}, 0x4) [ 92.047215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.052781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.056117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.060426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.063732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.068699] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.071916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.087566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.088800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.091275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.092579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.095186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.095955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.102120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.103557] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.109241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.110052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.110764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.115673] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.120425] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.124699] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.128999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.134904] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.141745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.166214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.168082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.174711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.182125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.186535] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.187838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.195457] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.200849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.203459] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.207817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.209184] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.211713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.228724] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.231063] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.241146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.242953] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.244655] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.254697] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.262839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.264946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.268624] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.271537] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.273093] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.286639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.122877] Bluetooth: hci0: command tx timeout [ 94.186737] Bluetooth: hci2: command tx timeout [ 94.187621] Bluetooth: hci1: command tx timeout [ 94.251612] Bluetooth: hci5: command tx timeout [ 94.251685] Bluetooth: hci3: command tx timeout [ 94.317410] Bluetooth: hci6: command tx timeout [ 94.318015] Bluetooth: hci4: command tx timeout [ 94.380481] Bluetooth: hci7: command tx timeout [ 96.171405] Bluetooth: hci0: command tx timeout [ 96.236601] Bluetooth: hci1: command tx timeout [ 96.236622] Bluetooth: hci2: command tx timeout [ 96.298481] Bluetooth: hci5: command tx timeout [ 96.299404] Bluetooth: hci3: command tx timeout [ 96.363444] Bluetooth: hci4: command tx timeout [ 96.363556] Bluetooth: hci6: command tx timeout [ 96.427359] Bluetooth: hci7: command tx timeout [ 98.219367] Bluetooth: hci0: command tx timeout [ 98.282436] Bluetooth: hci1: command tx timeout [ 98.285386] Bluetooth: hci2: command tx timeout [ 98.346410] Bluetooth: hci3: command tx timeout [ 98.346601] Bluetooth: hci5: command tx timeout [ 98.410465] Bluetooth: hci6: command tx timeout [ 98.410558] Bluetooth: hci4: command tx timeout [ 98.475526] Bluetooth: hci7: command tx timeout [ 100.267502] Bluetooth: hci0: command tx timeout [ 100.331424] Bluetooth: hci2: command tx timeout [ 100.331503] Bluetooth: hci1: command tx timeout [ 100.394574] Bluetooth: hci3: command tx timeout [ 100.394920] Bluetooth: hci5: command tx timeout [ 100.458601] Bluetooth: hci6: command tx timeout [ 100.459523] Bluetooth: hci4: command tx timeout [ 100.523461] Bluetooth: hci7: command tx timeout [ 138.816422] modprobe (2860) used greatest stack depth: 24216 bytes left [ 152.030535] syz-executor.3 (284) used greatest stack depth: 24160 bytes left [ 154.569187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.573873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.577710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.591706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.597556] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.603088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.688428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.690899] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.694010] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.701897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.703128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.705635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.707155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.708735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.711968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.715187] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.719034] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.720509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.722270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.723442] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.727892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.745715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.747714] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.748962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.778777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.786234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.791656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.795558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.796977] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.811684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.825002] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.832536] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.834576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.844184] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.849940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.872625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.876067] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.884511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.886962] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.891794] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.894018] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.896918] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.899263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.912122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.918929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.929588] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.934154] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.935803] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.650399] Bluetooth: hci0: command tx timeout [ 156.778412] Bluetooth: hci3: command tx timeout [ 156.842483] Bluetooth: hci2: command tx timeout [ 156.842614] Bluetooth: hci1: command tx timeout [ 156.907382] Bluetooth: hci5: command tx timeout [ 156.970477] Bluetooth: hci7: command tx timeout [ 156.970517] Bluetooth: hci4: command tx timeout [ 157.035812] Bluetooth: hci6: command tx timeout [ 158.698404] Bluetooth: hci0: command tx timeout [ 158.827362] Bluetooth: hci3: command tx timeout [ 158.890642] Bluetooth: hci1: command tx timeout [ 158.890658] Bluetooth: hci2: command tx timeout [ 158.954386] Bluetooth: hci5: command tx timeout [ 159.019395] Bluetooth: hci7: command tx timeout [ 159.019872] Bluetooth: hci4: command tx timeout [ 159.082656] Bluetooth: hci6: command tx timeout [ 160.746578] Bluetooth: hci0: command tx timeout [ 160.874808] Bluetooth: hci3: command tx timeout [ 160.938560] Bluetooth: hci2: command tx timeout [ 160.938614] Bluetooth: hci1: command tx timeout [ 161.002365] Bluetooth: hci5: command tx timeout [ 161.066562] Bluetooth: hci4: command tx timeout [ 161.066931] Bluetooth: hci7: command tx timeout [ 161.131389] Bluetooth: hci6: command tx timeout [ 162.795371] Bluetooth: hci0: command tx timeout [ 162.923460] Bluetooth: hci3: command tx timeout [ 162.986459] Bluetooth: hci1: command tx timeout [ 162.988371] Bluetooth: hci2: command tx timeout [ 163.050465] Bluetooth: hci5: command tx timeout [ 163.115366] Bluetooth: hci4: command tx timeout [ 163.115389] Bluetooth: hci7: command tx timeout [ 163.179452] Bluetooth: hci6: command tx timeout [ 216.827530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.829628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.834617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.841001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.842941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.847474] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.883473] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.888473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.891387] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.899386] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.908225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.910490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.990235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.995977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.000608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.015663] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.016785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.019471] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.020581] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.021845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.022776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.029306] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.036814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.039470] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.113156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.143983] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.149516] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.157410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.163635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.165219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.166689] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.169403] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.172922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.175862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.181577] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.183976] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.191619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.208692] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.212735] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.216725] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.220701] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.225728] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.231393] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.252577] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.273141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.284042] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.285782] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.286894] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.925372] Bluetooth: hci0: command tx timeout [ 218.986547] Bluetooth: hci1: command tx timeout [ 219.050404] Bluetooth: hci2: command tx timeout [ 219.114910] Bluetooth: hci3: command tx timeout [ 219.306540] Bluetooth: hci6: command tx timeout [ 219.306613] Bluetooth: hci5: command tx timeout [ 219.307439] Bluetooth: hci4: command tx timeout [ 219.370435] Bluetooth: hci7: command tx timeout [ 220.971598] Bluetooth: hci0: command tx timeout [ 221.037410] Bluetooth: hci1: command tx timeout [ 221.099369] Bluetooth: hci2: command tx timeout [ 221.166036] Bluetooth: hci3: command tx timeout [ 221.354652] Bluetooth: hci5: command tx timeout [ 221.355966] Bluetooth: hci4: command tx timeout [ 221.357701] Bluetooth: hci6: command tx timeout [ 221.418789] Bluetooth: hci7: command tx timeout [ 223.018474] Bluetooth: hci0: command tx timeout [ 223.083359] Bluetooth: hci1: command tx timeout [ 223.146424] Bluetooth: hci2: command tx timeout [ 223.211389] Bluetooth: hci3: command tx timeout [ 223.402425] Bluetooth: hci6: command tx timeout [ 223.402563] Bluetooth: hci4: command tx timeout [ 223.402891] Bluetooth: hci5: command tx timeout [ 223.466523] Bluetooth: hci7: command tx timeout [ 225.066452] Bluetooth: hci0: command tx timeout [ 225.131014] Bluetooth: hci1: command tx timeout [ 225.194343] Bluetooth: hci2: command tx timeout [ 225.258406] Bluetooth: hci3: command tx timeout [ 225.450404] Bluetooth: hci4: command tx timeout [ 225.450929] Bluetooth: hci5: command tx timeout [ 225.450983] Bluetooth: hci6: command tx timeout [ 225.514377] Bluetooth: hci7: command tx timeout [ 278.907599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.911781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.915152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.920806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.928830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.931823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.971511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.974316] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.978754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.983910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.988506] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.998571] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.056757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.069733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.073696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.085900] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.106638] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.111020] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.196099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.224473] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.227498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.239511] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.243979] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.245762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.314429] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.319425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.322150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.328158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.331232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.332685] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.363656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.380207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.382020] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.387724] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.390833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.392616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.395670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.437165] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.460509] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.481622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.489198] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.506548] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.510180] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.521117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.528741] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.563481] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.567544] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.569145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.002423] Bluetooth: hci0: command tx timeout [ 281.066424] Bluetooth: hci1: command tx timeout [ 281.194408] Bluetooth: hci2: command tx timeout [ 281.324366] Bluetooth: hci3: command tx timeout [ 281.450495] Bluetooth: hci4: command tx timeout [ 281.514444] Bluetooth: hci5: command tx timeout [ 281.578472] Bluetooth: hci6: command tx timeout [ 281.643357] Bluetooth: hci7: command tx timeout [ 283.050402] Bluetooth: hci0: command tx timeout [ 283.114549] Bluetooth: hci1: command tx timeout [ 283.242606] Bluetooth: hci2: command tx timeout [ 283.371319] Bluetooth: hci3: command tx timeout [ 283.498386] Bluetooth: hci4: command tx timeout [ 283.563306] Bluetooth: hci5: command tx timeout [ 283.626316] Bluetooth: hci6: command tx timeout [ 283.690454] Bluetooth: hci7: command tx timeout [ 285.099359] Bluetooth: hci0: command tx timeout [ 285.165321] Bluetooth: hci1: command tx timeout [ 285.290448] Bluetooth: hci2: command tx timeout [ 285.419401] Bluetooth: hci3: command tx timeout [ 285.547668] Bluetooth: hci4: command tx timeout [ 285.611559] Bluetooth: hci5: command tx timeout [ 285.674582] Bluetooth: hci6: command tx timeout [ 285.739362] Bluetooth: hci7: command tx timeout [ 287.147496] Bluetooth: hci0: command tx timeout [ 287.211339] Bluetooth: hci1: command tx timeout [ 287.339373] Bluetooth: hci2: command tx timeout [ 287.467474] Bluetooth: hci3: command tx timeout [ 287.596313] Bluetooth: hci4: command tx timeout [ 287.659508] Bluetooth: hci5: command tx timeout [ 287.723352] Bluetooth: hci6: command tx timeout [ 287.787312] Bluetooth: hci7: command tx timeout [ 341.388743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.393140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.399401] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.406789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.413007] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.416079] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.509194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.513006] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.516603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.521721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.524729] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.526776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.658157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.670845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.673629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.697062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.704403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.707694] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.715667] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.720759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.722704] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.751894] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.762741] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.767324] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.775068] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.791710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.796719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.807846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.827363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.829220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.843725] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.849177] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.850847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.854920] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.866362] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.882565] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.884519] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.891971] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.893805] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.896619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.899137] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.901139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.123949] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.130969] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.157569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.171757] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.197617] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.212444] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.467465] Bluetooth: hci0: command tx timeout [ 343.595336] Bluetooth: hci1: command tx timeout [ 343.786376] Bluetooth: hci2: command tx timeout [ 343.850369] Bluetooth: hci3: command tx timeout [ 344.042410] Bluetooth: hci4: command tx timeout [ 344.042445] Bluetooth: hci6: command tx timeout [ 344.109289] Bluetooth: hci5: command tx timeout [ 344.362354] Bluetooth: hci7: command tx timeout [ 345.515416] Bluetooth: hci0: command tx timeout [ 345.643315] Bluetooth: hci1: command tx timeout [ 345.835340] Bluetooth: hci2: command tx timeout [ 345.898348] Bluetooth: hci3: command tx timeout [ 346.090330] Bluetooth: hci6: command tx timeout [ 346.093280] Bluetooth: hci4: command tx timeout [ 346.154512] Bluetooth: hci5: command tx timeout [ 346.410343] Bluetooth: hci7: command tx timeout [ 347.562324] Bluetooth: hci0: command tx timeout [ 347.690307] Bluetooth: hci1: command tx timeout [ 347.882347] Bluetooth: hci2: command tx timeout [ 347.946548] Bluetooth: hci3: command tx timeout [ 348.138389] Bluetooth: hci4: command tx timeout [ 348.138423] Bluetooth: hci6: command tx timeout [ 348.202330] Bluetooth: hci5: command tx timeout [ 348.458599] Bluetooth: hci7: command tx timeout [ 349.610496] Bluetooth: hci0: command tx timeout [ 349.738502] Bluetooth: hci1: command tx timeout [ 349.931381] Bluetooth: hci2: command tx timeout [ 349.994396] Bluetooth: hci3: command tx timeout [ 350.187386] Bluetooth: hci4: command tx timeout [ 350.187738] Bluetooth: hci6: command tx timeout [ 350.252314] Bluetooth: hci5: command tx timeout [ 350.507320] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 07:41:32 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff8684b79e RDX=0000000000000000 RSI=1ffff1100d9c1357 RDI=0000000000000001 RBP=ffff88806ce09ad0 RSP=ffff88806ce09a08 R8 =ffffffff8684b7a2 R9 =ffff88806ce09ab8 R10=000000000003ab7c R11=00000000000241a1 R12=ffff88806ce09ad8 R13=ffff88806ce09ac0 R14=ffff88806ce09ab9 R15=ffff88806ce09a78 RIP=ffffffff8134937b RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe12ae4e570 CR3=0000000036e84000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000006477746567006e65706f64 XMM04=7374656700746867696c7961645f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffffffffffff RBX=ffffea0000d84e40 RCX=0000000000000007 RDX=0000000000000200 RSI=00000000000000ff RDI=ffffed1006c27200 RBP=0000000036139000 RSP=ffff888027dd7770 R8 =0000000000000000 R9 =0000000000000000 R10=ffffed1006c27200 R11=0000000000000001 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffea0000d84e74 RIP=ffffffff84a8f8d6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1addf35368 CR3=0000000035cce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000