Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:5654' (ECDSA) to the list of known hosts. 2025/01/24 20:39:48 fuzzer started 2025/01/24 20:39:49 dialing manager at localhost:40883 syzkaller login: [ 70.332540] cgroup: Unknown subsys name 'net' [ 70.428825] cgroup: Unknown subsys name 'cpuset' [ 70.447930] cgroup: Unknown subsys name 'rlimit' [ 76.048809] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 20:40:07 syscalls: 2217 2025/01/24 20:40:07 code coverage: enabled 2025/01/24 20:40:07 comparison tracing: enabled 2025/01/24 20:40:07 extra coverage: enabled 2025/01/24 20:40:07 setuid sandbox: enabled 2025/01/24 20:40:07 namespace sandbox: enabled 2025/01/24 20:40:07 Android sandbox: enabled 2025/01/24 20:40:07 fault injection: enabled 2025/01/24 20:40:07 leak checking: enabled 2025/01/24 20:40:07 net packet injection: enabled 2025/01/24 20:40:07 net device setup: enabled 2025/01/24 20:40:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 20:40:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 20:40:07 USB emulation: enabled 2025/01/24 20:40:07 hci packet injection: enabled 2025/01/24 20:40:07 wifi device emulation: enabled 2025/01/24 20:40:07 802.15.4 emulation: enabled 2025/01/24 20:40:07 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 20:40:07 fetching corpus: 0, signal 0/3688 (executing program) 2025/01/24 20:40:07 fetching corpus: 0, signal 0/3688 (executing program) 2025/01/24 20:40:10 starting 8 fuzzer processes 20:40:10 executing program 0: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0x52, 0x75, 0x1, {0x47, "7f504c54e3a96a017264ffc989d571721c5f212a8bdcc1f29c67efc3cbfc38ea255db82a6798e86050148ff0bcc2860112a1efb7e45c545fb1c29f1534bd642ac93c4356b3c77e"}}, 0x52) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x84001, 0x80}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) close_range(r0, r1, 0x0) mount$9p_tcp(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x20000, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_none}, {@privport}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@privport}, {@cache_none}, {@version_L}], [{@obj_role={'obj_role', 0x3d, '.(%#'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@smackfsroot}, {@smackfstransmute={'smackfstransmute', 0x3d, '\']$-,:.$^'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@euid_gt}, {@context={'context', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, '\''}}, {@dont_measure}]}}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1, @le_write_def_data_len={{0x2024, 0x4}, {0x9, 0xe780}}}, 0x8) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000380)={0xb, 0x77, 0x1, 0x47e}, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000400)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/kexec_loaded', 0x40001, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000480)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000500)={@desc={0x1, 0x0, @desc3}}) r5 = signalfd4(r2, &(0x7f0000000580)={[0x4]}, 0x8, 0x800) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000600)={0x7, 0x5, 0x7fffffff, 0x91e6, 0xd63}) accept4$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000006c0)=0x3c, &(0x7f0000000700)=0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000740)) 20:40:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'veth1_vlan\x00', {0x4}, 0x2}) r2 = pidfd_getfd(r1, r1, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) init_module(&(0x7f0000000100)='\x00', 0x1, &(0x7f0000000140)='veth1_vlan\x00') fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0xaf, 0x5, 0xde, "172d24761f84208c7fc3c064c5b7c8cc", "bb9bf9a4d1240e6b0bf7f7fd7e2e4a314a85a9c1d99bf35ec19df8be44c19857bedd4fd5b020a8d8c36975c55edbcf0826f488014f1d1e7b6d01d60a833e69504d2103658b9265060b6ff8f172e1ee5451da5c03aafab07249aec25500bf705e6cd2b6d904fa1bc688a052dc127493611092e008aab84dd1e565b716a028767ed1c7d88a06213a84a678f1e3ab911e0570b548d020edea7ef9f1"}, 0xaf, 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x13, 0xa, 0x306, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x24008000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x3, 0x3, 0xb80, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000500)={0x8, 0x4, 0x8, 0x3, 0x80, 0x200}) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0x49, 0x29, 0x2, {0x146e, [{{0x20, 0x0, 0x8}, 0x1f2f, 0x9, 0x7, './file0'}, {{0x1, 0x4, 0x6}, 0x0, 0xf2, 0x7, './file0'}]}}, 0x49) pwritev(r3, &(0x7f0000000700)=[{&(0x7f0000000640)="918e023168bd2886abc6c3ed3474aba4fcd896bb38032d514b9b0eeca9a6bc46eb5221c9a5bccead4032d8de603dc9bd3caad7ad640f9adedc408d269d6ccd97234dd731b73560a9cbb54a5e36f4fa", 0x4f}, {&(0x7f00000006c0)="7161b868f552b6f005f51624aaa390c41c8d43a7b6630f8a29186bf95467f06d59e55ce9a76aa0785de0", 0x2a}], 0x2, 0x0, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000740)={'ipvs\x00'}, &(0x7f0000000780)=0x1e) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x9a8, 0x6, 0x0, 0x12, 0x0, 0x29, "54a12e14637039b857e878aede5223a1f45b968c123ee014a1dad145ac16650e64493c513400a76214d83935a61d4ad6366953b693bd481461b43e130d12ea95", "f931c2d0e2ae67af21ed6646e0cac06a193ed9e4228673c45a7616dad83abab6c6d1ed14f1d0fbb5e75634f97a3b5cdd6b4ccb278dd1a2e31980f4796d287efb", "121e99ebccc4764efb5cb2fa26daca86ba832aeb82848080b2e116db385b04dc", [0x0, 0x4]}) 20:40:10 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e8, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "2c25eae685996093056f9eec1a4bdf2123cae8d3d6747a1df936f94571b9"}}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x113a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf535}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa622}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x50}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffc4f9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000300)='${##]+*\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r1, 0x3f5) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000480)=0x10000, 0x4) r2 = dup(r1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r3, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f00000006c0)=""/60) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x8, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb7f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1198}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1320}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb79}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000b40)) execveat(r1, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000d40)=[&(0x7f0000000bc0)='/dev/zero\x00', &(0x7f0000000c00)='[\x00', &(0x7f0000000c40)='syz0\x00', &(0x7f0000000c80)='TIPCv2\x00', &(0x7f0000000cc0)='nl80211\x00', &(0x7f0000000d00)=':./${(\\^,-\x00'], &(0x7f0000000e40)=[&(0x7f0000000d80)='netdevsim', &(0x7f0000000dc0)='nl80211\x00', &(0x7f0000000e00)=':\x80\\-{+$)!&\x00'], 0x400) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 20:40:10 executing program 4: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x16, 0x6, 0xaa3, 0xac, 0xe7, "84d7bc31123652ac63d72d6713179f1264a2d7", 0x9, 0xc58f}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f00000000c0)={0x0, 0xffff, 0x8000}) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) syz_usb_connect$uac1(0x0, 0xc5, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x0, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x4}, [@selector_unit={0xa, 0x24, 0x5, 0x1, 0xd1, "ba23be4b87"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x4, 0x5, "56ceabef67b90e3a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x6, 0x7, "d5", "1b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x80, 0x2, "c9", "ed"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x2, 0x2, {0x7, 0x25, 0x1, 0x3, 0x7, 0xaa85}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8d, 0x2, 0x20, 0x7f, "c6eab8279fe9"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x81, "02"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0x80, "4e50693257b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0xaa, 0xbb, {0x7, 0x25, 0x1, 0x1, 0x3, 0x4}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x5, 0x1, 0x7e, 0xe7, 0x2}, 0x14f, &(0x7f0000000280)={0x5, 0xf, 0x14f, 0x6, [@ptm_cap={0x3}, @generic={0x57, 0x10, 0x4, "10eef445a87f7353700e9f6e98767f7d6c8cea2b9f33be251170b43c1c7e0f4887b8829d654aec8c2147f66b7920619f77c4a2f5f0ac97f7c340d0835a19e62916acfd4968373b595e7a0158c2b4016e15c4084c"}, @generic={0x63, 0x10, 0x2, "805c9e22b98765d370d7277a31d7827de281b3398cba40b9b96f1c6855eefebca0fd67434680b011f0e840994f06d650d8a2aa18f78b00cf453967dfdfeb2583f8aab9593a7d6f3f0ad67f9e44364c80ae70861a82e39c6f2dd3ddbb2d702c04"}, @ss_container_id={0x14, 0x10, 0x4, 0x4b, "3dfcbad28a0c13cdc2dabe299c173682"}, @generic={0x65, 0x10, 0x4, "c0300f639447e3a5b76c8e3d6498236fdd35341b5c5f6f447bbbd267c25c3303a25da5edb102023ac1ffd7a01cd09ba525b43020d484c037ec38982486599256c1068b57bc96bed0708a117fbba53b60cc857b307de11b0ea9c6342f9dc51668881b"}, @ssp_cap={0x14, 0x10, 0xa, 0xfb, 0x2, 0x80, 0xf, 0x800, [0xc180, 0xff0000]}]}, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x400a}}, {0x2b, &(0x7f0000000440)=@string={0x2b, 0x3, "ab378944b365cf6b0c9f15f72de59009fc97b3e585bdea26df3a8f576b510635bdee72bf6750be89bb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42b}}, {0xf4, &(0x7f00000004c0)=@string={0xf4, 0x3, "92868238e4bc89f2015a5ce553bfcf08da7e6653aab68f0227879e4e69b3a3a5e598cbede29d5eec155d7a000f4412c0d45780535497e7c775cfc31a748a0e398a099e37cd9fa59ad497b2b1bfd603abc0234c7850759c8384848eb72245914b20719271898cfd666a279d5b866d79cd917d1967ff83fc410e8e31c28b8c659ae2dac7912edf210e5ace27580228a203afbbc2d3f122deda8f8f312dd3b2ff6f56efb3487b823113ba448777111f53fcdaee16ebacd408f344386b65ce9c6318cd78135df435e2923d1ad2efe9b883d7a0fab531a8998e84bb8bbb0f493858d03b1edef0cdac16d99922d53da1f35af4b608"}}, {0x90, &(0x7f00000005c0)=@string={0x90, 0x3, "3c55b5b93e71164cecc0c013728a2a0b6eb151d45d835273149d2106ded606751058d4cb340ccdf1a68b5860e707e4434a42e1410d6ad10892a4a238c85525e3df9d274e6240a8931996253022fd6d8f72c74415fc82536afa5e0e0248f126d9230914a288315d1b39f740d2bcfe6af87f20f4b26195dd730277248db0a7f3d107ceaf754f9982284b579e91e72a"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c01}}, {0x25, &(0x7f00000006c0)=@string={0x25, 0x3, "4923f120525eee84a2a2b1cc0f6fb6e06848de32b02657fa36eefe75a98f856731b323"}}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/resume', 0x42, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000007c0)={{0x3, 0x1, 0x18, 0x2, 0x8}, 0x8, 0x8, 'id1\x00', 'timer1\x00', 0x0, 0xa3, 0x8000, 0x10000, 0x78e4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r2, &(0x7f0000001a00)=[{&(0x7f0000000900)="907dfaa16d7c67cfeb3e31ad4fb957e5a23f63651d32776b9612a40c5bc46d871cdb702fd2eb3ea41eb78e4f8ec81802e57d4f30a35d0b51b368fb6a55aeec18a81693b4489692741848fc80e146e6057a19da7d66faf5480066f5b85d947d738e6d2007be421b153983589b4212704d06dfe76548af8593ac42fda3d8f1e67e11a2b7f5a2403a3edc50f773e75bbfc0f8f8c31c545371a3121a7603b4c02fa84ca9db7ec5a621bb3adaa5d9c424ac43e83f93466219cd2fb2de87713213883f0ea113b7f98a842fb7a0176165b938493f081b08762bdccb02787abd55192739db08a34e32ca7a7c", 0xe8}, {&(0x7f0000000a00)="782148b0caabfc140c26c909bb9db82788437eda0904059c7c6aa1df9f949212cd7c042902cb22ba15735c661f52c3de2b628062f07426fbee212d7bafc3664dc2eb4c91199df6759305108c32fe126d976692d6205321d304eae2ce219e9f29bc7dc839162316c7e489a61ae5e82ce51d87bf1ded7a8b71af499a07c33aa7f24e19459c61b6d8af0249cbadec1ecb27fad40a679630e67c0eb3abf02e26c5d922d3faef540d8469fc0a9fc28da8d6af0575304ce5991b02d8bedd85cebe4b11b7d570bf9aa0cccacf30273bff2e3d52ca6674cca014ef0e42bcb1b25057fe362502193d63813480397dad589c9c20ea3b53850c9737c4abbdb9423a4b81e2e0c29b88c94d90d53e924da773090120b0769bd83389f2cac2d153e8021ab190d1d211fe903a0e2ccd64750df3e6d41b313ad8e62324c304718def16bcdbea54562561797d900434279895eae68b1c4cd54df733c57a736595c68ba159487e993f00c59a8ee878971f0f15ec134966f408d1f14ab1ca931db73460f075052319da35d7dea5bf2cddf08fe1c1069dd6deb44d1286ccb83c270882ed8770cba4ac1ab6c3ec0d4c138016206bbefda39622302fd1bf13976aa038b2929d14dbd6a556904c5b35c7ff749968d2b4268535b4046f4b53e34e07c1d488124b3c758286d894dcd7c2d27ffc5457f241455e9254a10e17e9984e0539292279b7ec34ec9393d2961246048ffbe000112be64c65f8e69482cb3016f76b5404386e63ade4a7f9759b481b1bc8861124ea2117b5f8390104e59a3d9edc21e4c7effa3daa87eb7d96f4102f632dde0ce7b9cbe1bf536411ac3e88b25998a8825a620f669f0ae0c4f696a8fd71778771bc8f945cf601a621827f9fa492ee14148ab0f48ca8dc79c284d61a4c7ced4d332b91c710c7c802443cb53ace1ae528cb11bc5d71ca0423a1a099a4a06aafb2ba0d927ab96fdd12438149990d616de68401023ae09b43c0deaef70ad536ae3284c258ac83fc08bcc3de506948b0527124e303d978602d27021db4e7b49a26b6c31d54bf385a40aa81ac9f446df3b8fb0b0803e3706c246c767409073da5d26f3534c23c45950b9b990902e3f8df2092d39fde96faa49877b0bc054265d1e3c13b842b746d91eb367160ea68e82f0bd7c8cdd69d716fb32e5f041d23febfd25d5b61754796d9cb7126d01c00a76627d89cc62af41763a23327ad3408d6422fd73acf02d51967c0bb5660ceca31f03b3a58c5a492af0d87d27933810fdab2bebc798997a4da60c40db49a6af93e0f805edb22414da2fb1b1e27a6b633cbd34e0dc061fca3e88d16d97199d35f1f13cf457845aeecc338081d12091bd78285f98df599ed1684478f4c91cff8a8d568546666e5b3cdb2a616e2f19bbcf628758d430006a409764e3fe17515a381a0f1c12f39b1a5c48bdc075b604498ad908173cf1b77c60087068e549b48331c9fa8460b21c8d1d6181c3b622be56438aaf754bafba553051c2f589de6fb0fe9906c92b7494dd067e9f017c3cb4e37ac3b682c602ebb0f1bfb04c3543d77eeb57104f8fc80d519627c826c5f43bde26205376207d9adf111417d5b88c8aa78641fcdae83db733e6583fe0fb930f2a9e9e6fa764d5e43e6bc48a74789d65ecebfaeb6d3a2846884d44f624c41a3a8aa995d6bee8d4694ee220df5602dcb662f688d637bd16823706243f26ddacf0842d1d0979b410108da0ae3c4df2a9f91a8bf69709a0d17a68e79bf60c051d067ea4424c2b68791f8acc3947aa85a1fa7d68b100e9e5955bc6315d37a71e1810eb944ec50a37c3ccb2c5f3468ef4adcaadea50efe67f7d01eb1a79bcbc66c02935309524ddacbcd797554d321d8fe407c4eade8fd68799efe7fcb6649575bba9be3c483b72356d59e0d09c22a9a98706b92a59ff3633768319e7f8820703ac9467e2b5b44732e3042115ef7871e056846a0da4225c936a6b744ebb5d9f40b45ceecdd36028fea0806e8acf76e34801a1a5a9219f1d13f1a35e0572bfcd6a78ef482cc7e81132e04f9b01aad1bd37211bfa8510084448a5471890585af2987dbff6f05abbd3bb6a16bf88aca03aec43b9ed273c20cd1f306a69b89186a97585d20a18272282d1497af4b69da836d74eb3b612953a52191aad3454ebfb099d001d5dba15e5f1c5eba51604ca3ea53e37b556ed958bb951cc2eab7ef973c850153f881602b078c5d91be3436ee2b17583cfb3c2872a7b441b0804727fbe903ca9afc7277237640697f4208f519a52acc705e1d84b544e65c087a6398e6c985fbdd0818232612c37fae2f32258616750c82fd621dd4a14f95f702182a7b32e94aeacd7f4bd296e0c5dbfabc601b0e77db0754b77c4ac9b9d938d96ed19d0f3200cf51c795fa455100fa2a51dc5cef51141e7caaf3d1777d93031d5b2c9d1a7a1730f422ad89638c1d374682ca82e138f23153648ed35a401629dfd17c88d9bddeb7e488b86e39593037ed62e3315ff46eb72ce0503945cbb17c1b839acb26c5111c96d4be954233682698f553441fdd6436303e6805da3084822bb3a33f11c523ebbd263f71f3fc97249cf59ab476662593fcb8ebd1c614a4042038f396af7ce7bf263f61eb292f46395d44dba2a444237170888285c1d09626e358dc708b87acdb2aa209d559c1222735d99701d51462a6bbae27218d0a949d5fd6cdf04d8378a0d606b56bae6c1d0f6c56eb4b53312ac6397b68493b0f7ec35ac522a972693177eb193a336d208e7745e231fc37a8a26b61f667895e7cba3299a9d9fccd291a5a9da7053844a5add5157c53b4bc20e35dd1cf64d3539933d47b3138a477ec7dc01e319a906245491d118cc8eabd5ad7f91276a1aa4078746617448edf0806826239f95ed14c74d0aa2d3631b59f99d7d1c5e7d543d9cc87daaf9e7b026ea6b964a536ea254090d1ef7ab67ea6edd500c1be31e94c42e7023ebf260d054bcfc446357f2a14fedaac534f8a127704236722214f93060dbad9197fac038c3c7545f94d11e6e1a1208be7862ffbc6c46e02014a03fac56a75830ddf2471d387d7685a271bda2eaeeb9c52d195c4f808a5bf73dcfe795d20f01d9e569452d54f1dcb2738b09edf89a48fc1cc50dfc8d43fd98f9570ce7f19c92809dadec9fa813385ab83851d7a4ddd2ae964bf2fef72daac17bdba7ba788da9cafee40f7869d060bb1dc1ca1fbb318742d91dc4d461b53f4d2779a7c634a3b7d238ce329d71dbd2929c1a770e7fc40739fb7f4a17d301c25fe0d2dcad64fe078ee0659d44b30b6c9cbf4727138cff703cd5d79215c3a60d80dc93409456657b9b1c1f63f5763cc8ce449779f22a6731ef0a1a3576df9ba86f12685b870dfaf57c7d6e955393c1640fef7dfe4d53a76e1720ed2f0226aa1ab7638b516c01226a2b79b296e0c8ce75ac0288974eec1029a20027ad9e83aac6a651313eca04352efbc8bc52c7475ef64e6b23deaa28c66297ae23237f719728f3cafbb355faf1fca7219a8c06b4f801a04329e4528403cf15de271df9e0fe3d9415aaaa6aa84e17a8abf32b07c73ea7a821e73262a13a5ea0906da8b4bb7c8cc442c4565dd0b32dbcff3b385bfb04ccae0ebb2cee984d9b3c306bddf617fbf298b202831ce63b6730d4890f06ea74b77c2a513650f7bfcb68e6a5a0d906b14139a9a5845c4d103cc7fff951e9849b820f63e63c46c8ab075cb3e89e1fcb13bc59e5beb21df9b1bd936342f825f747b1dbfea855705e4af5a84fd079ff5d213e705e5cc22bea1c150901189d55fc9230651ac23db5751e3161c6d19d05ce28ca919f111d5b7d5c44159460f8025b7fff2a0e43d27eb7befa53e469d3c3197dd1285354644f75d667fa926e6bf736c5e6cdc4d969dd77f3a0751a1156f84da528164082d64b09dc449d18254456675773e015d34d9549620334c20842bb822325d578198d0461b3043419e59afda6983ef05f4cb24ef819af3a720d37c5aff89dc5f50ba31e8b3ace28ea1cfb86195046bac103da27eac8ea0d7cd788063485463347d21baede918aca4ce62e0ab9776c6f0b73c54f9dc46305d5b4cdc39eb3d8a9890bbc70fa708d301af6860febada648746ccd21e200fba902ad5adb37c99792aecb45ba6e65d9d60ded253d0ab9cdfdb785705f2b5a58fad0a32e60fbfa130cf85b56842ae0b95d713ad7034286f71f39091347b2af4b4e2fc9d7d79df3df019259dad079ad2b77b289cd67947d8db0a651a1c7e6d3ed98d7c1708291518d5a4926457affe22f2a37b1021fb6c3412a9ee7d1b26b337e44b4b5c3c8013e0dc51144ad51ca685ddbe124cf8a1a8871910946b3b5dac44ab2673d550c84df8c09ec02a2ad30f4c0d0c50e03ecbda198e0efe96e27224a50ac500816dc7446f45c557b6e8265f2618600a7df5f34dc2d682a8a34cce93d322b37f59ae987363bbf2351d19602bb8162411e10c8c86b61d764b5fa44be85bcbd9bf8ec9dfbee36585af789a36d4931d03211b4454fff35b1f3d51c3d7a39ceb08baec62bee5bf367a34be1bd6f581258e4329ca2fc7e0976f324a21f3f223d6d360f5aa226fee0dccdeb171cf96042ae9127ffdf1f5fcfcda9e7ca392b7f457b583c892a98c2fdec1d788d8be40bdcfea175176d24c1b6981c76dbba893143f60bc4b6d0487154d04bbc334f1eaf4912a5bcb81f37f0580c18e3c35500c4cc4245c4f7d907eba0c4f57d96398c42beed10c3249bc27b9d50e345d02aa0e179eaf21bf65181e5c7e963b634680376e768d1945e7e33e8370a3f9310b7e47937339e436351726ab19581a79ea67ffd715c00d2e34171c6369b0bd590d9bfa1e6036f78d3b0b1662166e317c4858f8cae96ca877ef5fe4299076c251f647c4756bea7ba27e8ca86228d841f83fadf04f41ba6b9b97f935abb0eeb689b7f81d26df80db1f62b66c5279282afa59c9fbc625853bc1f364fdd4755498b1cf91df509455bfbf32798a6f27e88ffa2289f055553687d6993d456c0b5718dc7a8e63cf6bda1cfd6036737ceaef3630b06ab328ec520d2d7f9573f908dd96ef3f5fe59fd68dc8d8456131701fa65e3c43cf23c3c8ecc133c8c5695ac572697357d0d69db96ae9155c5ed4fd5e67728b0d00cd00ba19c043bad14d31066d135789f9b71bbac2e955c6fac31bd485edcf4eb20425528586ddd7de9e40bbaec456d696acaafd88955df78210dc0129dbe82d1de8082ab01636591625a471150413ef6cfd038feaee163e34ce2aeee82cab78566dddd576677196cc4f7fe4d07c8ec6d3801203c01319340b5df19ee50cd0e9e3b0334af062e7ace96c8ac9c488cf464125c6a0e41405a0b248635a24cc33e7a425fc54b5710314326de68f643a52d2c525dc5e1022ea957ffd7ce63f1534b36f0f885eaf03e72d28160bec1d395823a28d8afb4d48b750ef8480c6e78f07bfd6631089e80dc6c93b5d2d4abe2201cffbc47a794bb553dc55f4481b9cfa4231978ea688d1bb5fe7a87a3e7e26d52e34a0150c6077642d4742e79b36c130474874ee4946158e6b49450044dc63c1221f5afec849aed4046e5598ab8f128727ee9bc29a7c0abbde1a1f3be5ea3687dd933c3486b74c6f7c4e7772a43aac784b9426db7390a82fd5fa7db73fcde8193829c0e9e116baac9d89bc7768d8ff4966f6c5aa95d210ef4831506ec6a15c3f1a6ce4011169427e9df3c24b82f8fa41d0273f0c0e33485b046485dbd9d91c76c37aab1a90e6cf58ef90bd9495bfd15d7affc2156796c9abb9e3cb2aad6b9d", 0x1000}], 0x2, 0x9, 0x5) r3 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000001a40)=""/4096) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002a40)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000002a80)={{0x3, 0x2, 0xffffffff, 0x0, 0x800}, 0x3, 0x7, 'id0\x00', 'timer0\x00', 0x0, 0xab93, 0xfffffffffffffffd, 0x2}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002b80)={0x1, 0x100, 0x3ff}) read$hidraw(r4, &(0x7f0000002bc0)=""/239, 0xef) r5 = signalfd(r2, &(0x7f0000002cc0)={[0x9]}, 0x8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x1c, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8844}, 0x20004800) 20:40:10 executing program 3: sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x134, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x0, 0x6d, 0xfffd, 0x7, 0x6, 0xffff]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0xf1, 0x33, @reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_a, @device_b, @random="2a30be44cb0a", {0xc, 0xffb}}, @ver_80211n={0x0, 0x3502, 0x2, 0x2, 0x0, 0x0, 0x1}}, 0x100, 0x3, @broadcast, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x9}, {0x8}, {0x60}, {0x30, 0x1}, {0x18}, {0x36, 0x1}]}, @void, [{0xdd, 0x2b, "5db13b75521b15e8460be1b474b233ffd65dd8352dced5729623ee5d43f4058554c98e54dafdde5ebe8b93"}, {0xdd, 0x88, "fa26ba5b8942de98518173b4736e7913bbb294168a4f8c3d7d81f7cd8417256b3506204161a67fe9f9db7ccbb6f0aec5b64aa4499a372bce71a380aa4759dab71aad07a0e4a18c7db91a2cee71360f394c54dda26d1f8adbfdb1c83a5e112ddf70ae9278dc20cc647b405e3f3ecf40d0372543fd4533e476dbea212afd3d64864e37264b883b9152"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) r0 = syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7d}, {0x6, 0x11, 0x400}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x200088d0}, 0x40) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000003c0)=""/113) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x85cf15a7dd3bc918}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x3c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x2}, @NL80211_TXQ_ATTR_AIFS={0x5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xb19}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x9}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x9}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x7a4e}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xc088}, 0x8800) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x140, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x48}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x62b}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x41}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb09}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20}, 0x40080) r3 = accept4(r2, &(0x7f0000000800)=@qipcrtr, &(0x7f0000000880)=0x80, 0x80800) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0x3f, 0x0, 0xc40, 0x5, 0x8e}) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$CDROMPLAYTRKIND(r4, 0x5304, &(0x7f0000000940)={0xfc, 0x1, 0x7f, 0x2}) r5 = memfd_secret(0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x5}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x801}, 0xc4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100001c, 0x4010, r4, 0x0) syz_io_uring_complete(r6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x80, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008800) [ 91.069052] audit: type=1400 audit(1737751210.346:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:40:10 executing program 6: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x831}, 0x20000010) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x100) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x44d8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x2f}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x10e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x310, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5c}}}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @link_id={0x65, 0x12, {@random="a71571e54703"}}, @peer_mgmt={0x75, 0x6, {0x0, 0xfff9, @void, @val=0x15, @void}}, @chsw_timing={0x68, 0x4, {0x3, 0x81}}, @perr={0x84, 0x88, {0x8, 0x8, [@ext={{}, @device_a, 0x7, @broadcast, 0x6}, @ext={{}, @device_a, 0x81, @broadcast, 0x38}, @not_ext={{}, @broadcast, 0x685, "", 0x31}, @not_ext={{}, @broadcast, 0xfffffffa, "", 0x3f}, @ext={{}, @broadcast, 0xffffffff, @device_b, 0x17}, @ext={{}, @broadcast, 0x8, @device_b, 0x22}, @ext={{}, @device_a, 0x2, @device_a, 0x3f}, @not_ext={{}, @device_a, 0x80, "", 0xd}]}}, @rann={0x7e, 0x15, {{0x1, 0xa}, 0x2, 0x9, @broadcast, 0xe51, 0x8, 0x8001}}, @cf={0x4, 0x6, {0x6, 0x8, 0x4, 0x81}}, @challenge={0x10, 0x1, 0x97}, @chsw_timing={0x68, 0x4, {0x80, 0x1f}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x58, 0x2a, [@mic={0x8c, 0x18, {0x4a6, "97dc5be87ac7", @long="97b15d8692b5d3e2d24edc8d6c05db3f"}}, @channel_switch={0x25, 0x3, {0x1, 0x7c, 0x9}}, @link_id={0x65, 0x12, {@random="326cb861af19"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x7, 0x0, @device_b, 0x400, "", 0x8000, 0x7e7, @device_b, 0x7f}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_IE={0x164, 0x2a, [@dsss={0x3, 0x1, 0x40}, @preq={0x82, 0x2b, @ext={{0x0, 0x0, 0x1}, 0x11, 0x9, 0x2, @device_a, 0x7ff, @device_b, 0x400, 0x4, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0xfff}]}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x5, 0x0, {0x6, 0x17d8, 0x0, 0x3f, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x450d45b5, 0xf7}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_chsw={0x76, 0x6, {0x1, 0x6, 0x1d, 0x8}}, @mic={0x8c, 0x10, {0x92c, "adf89c6de204", @short="bed770633958ea57"}}, @fast_bss_trans={0x37, 0x6d, {0x80, 0x3, "91666171c3924578b0d2e62810349879", "a91f98518ae716c11d8e146787fa13c3144f34b608c44e8b809b67523092ffbc", "9ed6bbfd938a814b7dcb90196d3a838e8a5d13909bb85fbd862dd396ffce5bd8", [{0x1, 0x4, "9de2b259"}, {0x4, 0xe, "68760182cb4d36926236fe9994d4"}, {0x4, 0x3, "fd48f6"}]}}, @preq={0x82, 0x83, @ext={{0x1, 0x1, 0x1}, 0x3f, 0x1, 0x6, @broadcast, 0x3ff, @broadcast, 0x0, 0x7, 0x9, [{{}, @device_b, 0x4}, {{}, @device_b, 0x7e}, {{0x1}, @broadcast, 0x800}, {{0x1}, @broadcast, 0x9}, {{}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{}, @broadcast, 0x9}, {{0x1}, @device_a, 0x6}, {{}, @device_a, 0x9e5e}]}}, @challenge={0x10, 0x1, 0xa4}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x40011}, 0x4000041) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r4, 0xa06, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}}, 0x10) r5 = dup(r2) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x100000000) connect(r0, &(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'wg1\x00'}}, 0x80) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8844}, 0x821) r7 = creat(&(0x7f0000000a40)='./file0\x00', 0x98) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x379c9ffe379acc47}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004002}, 0x4000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000cc0)={&(0x7f0000000b80), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000800) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TIOCSBRK(r7, 0x5427) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000f40)={'broute\x00', 0x0, 0x3, 0x76, [0xf2, 0x3, 0xd3, 0xfff, 0xffffffffffffffe0, 0x3ff], 0x7, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000ec0)=""/118}, &(0x7f0000000fc0)=0x78) 20:40:10 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x200, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xee01) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x56c4}, 0x4) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000180)) prctl$PR_GET_KEEPCAPS(0x7) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000240)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x410000, 0x0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000002c0)=0x800, 0x2) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x800, 0x3a1881) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000480)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000004c0)={'team_slave_1\x00', {0x2, 0x0, @multicast1}}) recvmsg$unix(r4, &(0x7f00000008c0)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/51, 0x33}, {&(0x7f00000005c0)=""/160, 0xa0}, {&(0x7f0000000680)=""/245, 0xf5}, {&(0x7f0000000780)=""/8, 0x8}], 0x4, &(0x7f0000000800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x2002) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x48}}, 0x8001) 20:40:10 executing program 5: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="82d92a4b37431aadfe46f573ec4bfdec9feec9ea003722e1c46504044baf3ed7247ca1f3300d877726d83dd3b3549463a08553fbdb49ed763748f8", 0x3b) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000001c0)) sendmsg$AUDIT_USER(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x3ed, 0x800, 0x70bd28, 0x25dfdbfd, "16e5ff386c218c2614a11fddd5a9247e485ad7dd230bb0a74b850acf355fde6762272fab7f8bcaec8ca51f905dcac096a2d55e6d09bc4c", ["", ""]}, 0x48}}, 0x4010) r1 = memfd_secret(0x80000) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000340)) r2 = mq_open(&(0x7f0000000380)='..\x00', 0x40, 0x60, &(0x7f00000003c0)={0x3, 0x7ff, 0x4, 0x5}) ioctl(r2, 0x9, &(0x7f0000000400)="acd7becc496e0895e0b09d1b8204976def59552b1559bdf38d3a84a04c30db0d51f75554ab3029236b9f51df5593e920a3814cc06f3012c0c178cf3fa34e309dbf18d93a75d940417b88c9567280fc6086ece0f2f306ca318b734bcf6227728f04711f77f59a89ba0564ff9393a131d2c38bd07a354a09e9e7") fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x258, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x16d0, 0x80, 0x8, 0x7}, {0x4, 0x2b, 0x7, 0xf1df}, {0xac68, 0x6, 0x0, 0xe}, {0x6, 0x1, 0x1, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa1d1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xba93}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x94}, 0x20000000) r5 = syz_open_dev$vcsu(&(0x7f0000000840), 0x1, 0x200000) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x81}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xbd}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5e}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x97}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f00000009c0)={0x1, 0x40, 0x9, 0x2, 0x2, 0x82}) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x9f26b3935cb437bb}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x2, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x24000000}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004081}, 0x20004880) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) read$ptp(r6, &(0x7f0000000c40)=""/65, 0x41) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d40)={0x1f4, 0x0, 0x200, 0x70bd25, 0x8, {}, [@ETHTOOL_A_LINKMODES_OURS={0x174, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xae, 0x5, "93c44423fd7221ad7077a31619a7f367491018bf0b541a335262428e97481b76c65726f780604da903608f0e4670258cc843d111aa1ea0aea2394060642538d61517068a475f205d7a1a9a973a49b4e0c13d2f3ee4f904fd184a26c28957659bd5b4a829937d56420825ce879260557aff92a662fa7ab9dc48f65dbf3116f1dbc92a58e051ea758107b2b346a0ae0c9ba0a203180a9e5f436038df216a861e00f25c42c9f62e1cccdaae"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\'[@}]@*[-&])\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '.$}}%_}-^/+,@&%\b\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '4@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vcsu#\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}:&,{[\x00'}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x18}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x44000}, 0x4000004) [ 92.717916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.720072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.726490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.728705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.730868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.732755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.745015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.747408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.753507] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.754564] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.756592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.758743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.801210] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.804900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.807045] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.814429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.820714] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.822746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.857108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.863571] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.868681] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.870792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.872442] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.884764] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.885883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.890792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.897579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.899589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.916542] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.924314] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.927716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.928937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.930484] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.939628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.946594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.955193] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.959608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.961951] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.967061] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.967104] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.988896] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.990584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.009450] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.022696] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.023968] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.027102] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.029027] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.039712] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.799285] Bluetooth: hci0: command tx timeout [ 94.800016] Bluetooth: hci1: command tx timeout [ 94.861862] Bluetooth: hci2: command tx timeout [ 94.989624] Bluetooth: hci3: command tx timeout [ 95.053264] Bluetooth: hci5: command tx timeout [ 95.053305] Bluetooth: hci4: command tx timeout [ 95.117297] Bluetooth: hci6: command tx timeout [ 95.117431] Bluetooth: hci7: command tx timeout [ 96.845277] Bluetooth: hci0: command tx timeout [ 96.848161] Bluetooth: hci1: command tx timeout [ 96.910250] Bluetooth: hci2: command tx timeout [ 97.039190] Bluetooth: hci3: command tx timeout [ 97.101368] Bluetooth: hci5: command tx timeout [ 97.101871] Bluetooth: hci4: command tx timeout [ 97.165820] Bluetooth: hci7: command tx timeout [ 97.165859] Bluetooth: hci6: command tx timeout [ 98.893268] Bluetooth: hci1: command tx timeout [ 98.893358] Bluetooth: hci0: command tx timeout [ 98.958277] Bluetooth: hci2: command tx timeout [ 99.085437] Bluetooth: hci3: command tx timeout [ 99.149498] Bluetooth: hci4: command tx timeout [ 99.150015] Bluetooth: hci5: command tx timeout [ 99.213261] Bluetooth: hci6: command tx timeout [ 99.213290] Bluetooth: hci7: command tx timeout [ 100.942091] Bluetooth: hci0: command tx timeout [ 100.943178] Bluetooth: hci1: command tx timeout [ 101.005324] Bluetooth: hci2: command tx timeout [ 101.133242] Bluetooth: hci3: command tx timeout [ 101.197506] Bluetooth: hci5: command tx timeout [ 101.197538] Bluetooth: hci4: command tx timeout [ 101.261401] Bluetooth: hci6: command tx timeout [ 101.262377] Bluetooth: hci7: command tx timeout [ 152.462496] syz-executor.3 (282) used greatest stack depth: 23552 bytes left [ 155.028308] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.034353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.039772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.043921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.050591] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.052785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.094090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.097688] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.102261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.109552] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.116503] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.118345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.120370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.121016] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.122303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.125352] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.127549] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.128506] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.265622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.273633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.279853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.288086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.288856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.307419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.309494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.315363] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.320110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.320885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.323459] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.324792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.329460] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.330077] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.330983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.351462] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.355586] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.379819] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.382455] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.437496] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.469017] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.469440] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.473385] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.474728] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.475623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.483703] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.498718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.548597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.550856] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.552243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.134356] Bluetooth: hci0: command tx timeout [ 157.197330] Bluetooth: hci2: command tx timeout [ 157.198386] Bluetooth: hci1: command tx timeout [ 157.391201] Bluetooth: hci4: command tx timeout [ 157.392011] Bluetooth: hci3: command tx timeout [ 157.453256] Bluetooth: hci6: command tx timeout [ 157.581448] Bluetooth: hci7: command tx timeout [ 157.645238] Bluetooth: hci5: command tx timeout [ 159.181281] Bluetooth: hci0: command tx timeout [ 159.245253] Bluetooth: hci1: command tx timeout [ 159.245719] Bluetooth: hci2: command tx timeout [ 159.439198] Bluetooth: hci3: command tx timeout [ 159.439686] Bluetooth: hci4: command tx timeout [ 159.501209] Bluetooth: hci6: command tx timeout [ 159.629212] Bluetooth: hci7: command tx timeout [ 159.693394] Bluetooth: hci5: command tx timeout [ 161.229281] Bluetooth: hci0: command tx timeout [ 161.293229] Bluetooth: hci2: command tx timeout [ 161.293688] Bluetooth: hci1: command tx timeout [ 161.485309] Bluetooth: hci4: command tx timeout [ 161.485787] Bluetooth: hci3: command tx timeout [ 161.549228] Bluetooth: hci6: command tx timeout [ 161.677417] Bluetooth: hci7: command tx timeout [ 161.742171] Bluetooth: hci5: command tx timeout [ 163.277229] Bluetooth: hci0: command tx timeout [ 163.341241] Bluetooth: hci2: command tx timeout [ 163.341686] Bluetooth: hci1: command tx timeout [ 163.533352] Bluetooth: hci4: command tx timeout [ 163.533868] Bluetooth: hci3: command tx timeout [ 163.598156] Bluetooth: hci6: command tx timeout [ 163.725360] Bluetooth: hci7: command tx timeout [ 163.789479] Bluetooth: hci5: command tx timeout [ 217.049728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.051343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.052910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.056015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.060514] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.062181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.189397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.195456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.197864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.205755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.210420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.213709] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.215323] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.215692] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.222623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.251805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.266622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.268952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.330034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.335008] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.340251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.347498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.348888] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.350307] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.383699] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.386147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.402361] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.406717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.415213] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.417837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.424736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.426312] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.460503] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.462939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.487404] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.489833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.496749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.499697] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.574462] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.591341] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.598494] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.599367] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.610941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.621421] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.622429] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.662766] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.664023] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.665668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.085223] Bluetooth: hci0: command tx timeout [ 219.277322] Bluetooth: hci1: command tx timeout [ 219.341202] Bluetooth: hci2: command tx timeout [ 219.405382] Bluetooth: hci3: command tx timeout [ 219.533723] Bluetooth: hci4: command tx timeout [ 219.597193] Bluetooth: hci5: command tx timeout [ 219.725597] Bluetooth: hci6: command tx timeout [ 219.789758] Bluetooth: hci7: command tx timeout [ 221.133189] Bluetooth: hci0: command tx timeout [ 221.325283] Bluetooth: hci1: command tx timeout [ 221.389226] Bluetooth: hci2: command tx timeout [ 221.453424] Bluetooth: hci3: command tx timeout [ 221.582221] Bluetooth: hci4: command tx timeout [ 221.646155] Bluetooth: hci5: command tx timeout [ 221.773240] Bluetooth: hci6: command tx timeout [ 221.837609] Bluetooth: hci7: command tx timeout [ 223.181709] Bluetooth: hci0: command tx timeout [ 223.373171] Bluetooth: hci1: command tx timeout [ 223.437359] Bluetooth: hci2: command tx timeout [ 223.501178] Bluetooth: hci3: command tx timeout [ 223.630198] Bluetooth: hci4: command tx timeout [ 223.693262] Bluetooth: hci5: command tx timeout [ 223.821193] Bluetooth: hci6: command tx timeout [ 223.887228] Bluetooth: hci7: command tx timeout [ 225.229234] Bluetooth: hci0: command tx timeout [ 225.421173] Bluetooth: hci1: command tx timeout [ 225.485242] Bluetooth: hci2: command tx timeout [ 225.549354] Bluetooth: hci3: command tx timeout [ 225.677211] Bluetooth: hci4: command tx timeout [ 225.741295] Bluetooth: hci5: command tx timeout [ 225.869175] Bluetooth: hci6: command tx timeout [ 225.933621] Bluetooth: hci7: command tx timeout [ 279.446911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.450495] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.452312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.457363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.459910] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.461604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.536543] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.545561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.550470] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.563378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.580591] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.585748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.587855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.600542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.608459] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.638315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.644049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.649559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.743061] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.754771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.770930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.811201] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.815861] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.817785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.854606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.866022] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.871722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.883029] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.909557] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.914050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.011496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.019871] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.037754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.082869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.091712] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.102558] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.293851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.312660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.313332] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.342743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.342759] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.349681] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.432561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.443441] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.470639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.475557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.481659] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.489916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.550224] Bluetooth: hci0: command tx timeout [ 281.677256] Bluetooth: hci2: command tx timeout [ 281.677283] Bluetooth: hci1: command tx timeout [ 281.933354] Bluetooth: hci3: command tx timeout [ 282.062413] Bluetooth: hci5: command tx timeout [ 282.253306] Bluetooth: hci7: command tx timeout [ 282.575179] Bluetooth: hci6: command tx timeout [ 282.575196] Bluetooth: hci4: command tx timeout [ 283.597222] Bluetooth: hci0: command tx timeout [ 283.725199] Bluetooth: hci1: command tx timeout [ 283.726248] Bluetooth: hci2: command tx timeout [ 283.981320] Bluetooth: hci3: command tx timeout [ 284.109352] Bluetooth: hci5: command tx timeout [ 284.301158] Bluetooth: hci7: command tx timeout [ 284.623626] Bluetooth: hci4: command tx timeout [ 284.623693] Bluetooth: hci6: command tx timeout [ 285.645264] Bluetooth: hci0: command tx timeout [ 285.773491] Bluetooth: hci1: command tx timeout [ 285.773674] Bluetooth: hci2: command tx timeout [ 286.029408] Bluetooth: hci3: command tx timeout [ 286.157208] Bluetooth: hci5: command tx timeout [ 286.349197] Bluetooth: hci7: command tx timeout [ 286.669171] Bluetooth: hci4: command tx timeout [ 286.669206] Bluetooth: hci6: command tx timeout [ 287.693439] Bluetooth: hci0: command tx timeout [ 287.821219] Bluetooth: hci2: command tx timeout [ 287.822136] Bluetooth: hci1: command tx timeout [ 288.077194] Bluetooth: hci3: command tx timeout [ 288.205212] Bluetooth: hci5: command tx timeout [ 288.397230] Bluetooth: hci7: command tx timeout [ 288.717813] Bluetooth: hci4: command tx timeout [ 288.717862] Bluetooth: hci6: command tx timeout [ 341.658906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.664319] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.667829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.677394] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.684857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.687849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.850264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.854334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.858235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.863877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.867615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.869928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.925211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.929766] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.932231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.936167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.940534] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.945886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.949876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.952655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.953959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.956038] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.957900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.958614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.960512] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.962029] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.963037] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.015022] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.030952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.032170] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.033590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.036343] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.039811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.049194] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.054629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.056353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.059278] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.061658] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.062731] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.064555] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.082499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.092736] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.120460] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.124281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.126584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.154764] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.157695] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.159923] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.757366] Bluetooth: hci0: command tx timeout [ 343.949236] Bluetooth: hci1: command tx timeout [ 344.013539] Bluetooth: hci2: command tx timeout [ 344.078373] Bluetooth: hci3: command tx timeout [ 344.141659] Bluetooth: hci4: command tx timeout [ 344.143463] Bluetooth: hci6: command tx timeout [ 344.205374] Bluetooth: hci7: command tx timeout [ 344.207043] Bluetooth: hci5: command tx timeout [ 345.805162] Bluetooth: hci0: command tx timeout [ 345.997230] Bluetooth: hci1: command tx timeout [ 346.062182] Bluetooth: hci2: command tx timeout [ 346.125303] Bluetooth: hci3: command tx timeout [ 346.189314] Bluetooth: hci4: command tx timeout [ 346.190228] Bluetooth: hci6: command tx timeout [ 346.253279] Bluetooth: hci5: command tx timeout [ 346.254237] Bluetooth: hci7: command tx timeout [ 347.855191] Bluetooth: hci0: command tx timeout [ 348.045281] Bluetooth: hci1: command tx timeout [ 348.109950] Bluetooth: hci2: command tx timeout [ 348.173187] Bluetooth: hci3: command tx timeout [ 348.237423] Bluetooth: hci4: command tx timeout [ 348.238013] Bluetooth: hci6: command tx timeout [ 348.301414] Bluetooth: hci7: command tx timeout [ 348.302012] Bluetooth: hci5: command tx timeout [ 349.901629] Bluetooth: hci0: command tx timeout [ 350.093266] Bluetooth: hci1: command tx timeout [ 350.158274] Bluetooth: hci2: command tx timeout [ 350.221172] Bluetooth: hci3: command tx timeout [ 350.285194] Bluetooth: hci4: command tx timeout [ 350.285791] Bluetooth: hci6: command tx timeout [ 350.349292] Bluetooth: hci5: command tx timeout [ 350.350258] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:45:17 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888027be7c58 RCX=ffffffff818a3da8 RDX=ffff888024fa8000 RSI=0000000000000008 RDI=0000000000000001 RBP=ffffea0001b3fd40 RSP=ffff888027be7b38 R8 =0000000000000000 R9 =fffff94000367fa8 R10=0000000000000000 R11=0000000000000000 R12=000000000000000f R13=dffffc0000000000 R14=0000000000000000 R15=ffff888027be7d98 RIP=ffffffff818a3db7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7b796a6820 CR3=0000000036412000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000b RBX=0000000000000001 RCX=ffffffff812d1ae2 RDX=000000000000000b RSI=ffffffff8678c08c RDI=ffffffff86452408 RBP=ffff888013b7f570 RSP=ffff888013b7f440 R8 =ffffffff8678c08c R9 =ffff888013b7f558 R10=000000000003ab7c R11=0000000000004330 R12=ffff888013b7f578 R13=ffff888013b7f560 R14=ffff888013b7f559 R15=ffff888013b7f518 RIP=ffffffff81348496 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4e3e80f310 CR3=0000000033abe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000