Warning: Permanently added '[localhost]:34131' (ECDSA) to the list of known hosts. 2025/04/24 05:16:39 fuzzer started 2025/04/24 05:16:40 dialing manager at localhost:37747 syzkaller login: [ 94.165740] cgroup: Unknown subsys name 'net' [ 94.308186] cgroup: Unknown subsys name 'cpuset' [ 94.353589] cgroup: Unknown subsys name 'rlimit' 2025/04/24 05:16:56 syscalls: 200 2025/04/24 05:16:56 code coverage: enabled 2025/04/24 05:16:56 comparison tracing: enabled 2025/04/24 05:16:56 extra coverage: enabled 2025/04/24 05:16:56 setuid sandbox: enabled 2025/04/24 05:16:56 namespace sandbox: enabled 2025/04/24 05:16:56 Android sandbox: enabled 2025/04/24 05:16:56 fault injection: enabled 2025/04/24 05:16:56 leak checking: enabled 2025/04/24 05:16:56 net packet injection: enabled 2025/04/24 05:16:56 net device setup: enabled 2025/04/24 05:16:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/24 05:16:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/24 05:16:56 USB emulation: enabled 2025/04/24 05:16:56 hci packet injection: enabled 2025/04/24 05:16:56 wifi device emulation: enabled 2025/04/24 05:16:56 802.15.4 emulation: enabled 2025/04/24 05:16:56 fetching corpus: 0, signal 0/0 (executing program) 2025/04/24 05:16:58 starting 8 fuzzer processes 05:16:58 executing program 0: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x19, 0x2d, 0x7, 0xf, 0x1, 0xeffd, 0x2, 0x42, 0xffffffffffffffff}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x91d, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xcf6e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffeff}], @NL80211_ATTR_PRIVACY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040054}, 0x24000041) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000001c0)={0x0, "250dab123998d490604a39de186f4928f9b25bb280a0dfa067de1a81fbb6dbdef47e1480f85f6fd0e7185203542b1429f5e0a459caa27dc42081469db06b775f"}) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1202}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r1, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2e, 0x2}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x57}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7f}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xf0}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0)) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000500)={'binder1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000680)=0x100, 0x4) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x10001}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x4c000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x66c241, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r2, &(0x7f00000008c0)={0xffffffffffffffff, r3, 0x200}) r4 = syz_open_dev$vcsa(&(0x7f0000000900), 0x8001, 0x2083) syz_io_uring_setup(0x35c1, &(0x7f0000000940)={0x0, 0x14db, 0x4, 0x3, 0x389, 0x0, r4}, &(0x7f0000fef000/0xf000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 05:16:59 executing program 1: r0 = io_uring_setup(0x5fb6, &(0x7f0000000000)={0x0, 0x7b56, 0x1, 0x1, 0x1b1}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x13, r0, 0x10000000) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x6140) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r1, 0x1) r2 = socket(0x1e, 0x0, 0x80000001) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x3}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params, @NL80211_ATTR_OPER_CLASS={0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x0, 0x4400) syz_io_uring_setup(0x4a5b, &(0x7f0000000280)={0x0, 0x4b6b, 0x20, 0x3, 0x38c, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xcc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004005}, 0x8000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000580)) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000005c0)=r3, 0x1) r4 = syz_open_dev$vcsa(&(0x7f0000000600), 0x9, 0x400000) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000640)={0x10002000}) r5 = io_uring_setup(0x3153, &(0x7f0000000680)={0x0, 0x1f75, 0x4, 0x0, 0x211, 0x0, r1}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000700)=r1, 0x1) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r1, &(0x7f0000000740)={0x40000018}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000c00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x3c8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x53c, 0x4c}}}}, [@NL80211_ATTR_KEYS={0x1ac, 0x51, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "4d07d16d97"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0x9, 0x4, "68b4ec1788"}, @NL80211_KEY_SEQ={0x6, 0x4, "06e9"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ee63ec8a46317b5423d51e9220"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1c87bd7dbd"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f84598a063"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "26884f7e86"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x9, 0x4, "c065a22484"}, @NL80211_KEY_SEQ={0x14, 0x4, "2cd6cb393d9cd50c3eda33db7a076f25"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}]}]}, @NL80211_ATTR_IE={0x1f9, 0x2a, [@mic={0x8c, 0x10, {0x66f, "1ae6fa59230b", @short="73af4c333ef4dc4c"}}, @random_vendor={0xdd, 0xa8, "babe354749317e033ac3880a1e74c8eef20431d237e0432db681f7a8fb2a36b7e9d3cae2287b4082a8dbf153ea7399934d1aba5699469b106f56111ef3528353b94e920c4e5bc525f224e4e0738054ade7789d63ed0ccba88470aec33e9d32afd551a5dbd8903e3dce24fe77139f8d9af27dce8b4543347984054ca2ef1663020970f80ef9281ef2501f643068a1396ef8920e4795b69ff6d754386cac36abe7cc155ac65a5bad1f"}, @challenge={0x10, 0x1, 0x9c}, @chsw_timing={0x68, 0x4, {0x9, 0x3f}}, @peer_mgmt={0x75, 0x18, {0x0, 0x5, @val=0x5, @val=0x27, @val="60c863c47a2c9151a4a85ade68af8e55"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@from_mac, @device_b, @device_b}}, @preq={0x82, 0x6d, @ext={{0x1}, 0xd0, 0x66, 0x826, @device_a, 0xfffffffd, @device_b, 0x9d5c, 0x4, 0x7, [{{}, @device_b, 0x401}, {{0x1, 0x0, 0x1}, @broadcast, 0xffff0001}, {{}, @broadcast, 0x100}, {{0x1}, @device_b, 0x8}, {{0x0, 0x0, 0x1}, @device_b, 0x9}, {{}, @device_b}, {{}, @device_b, 0xb1}]}}, @channel_switch={0x25, 0x3, {0x0, 0x9}}, @fast_bss_trans={0x37, 0x84, {0x8, 0x3, "e405a676ae9f06dc6bd13838e8296c16", "32c007d762d79ac1000f451804288428b0a623627e5b19317a32556cfd1257b4", "a7368df7fad90d394c33a7ba44e4e803d935d740b600b5cdabac402e809cc182", [{0x4, 0x16, "2f84b263acfba2c49b6ce8a8d6f7bde02b1cf438fa85"}, {0x3, 0xe, "842682f2f5508ab75e8d17f870bd"}, {0x1, 0x8, "32dc4e59af069faa"}]}}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4080000}, 0x8000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) 05:16:59 executing program 2: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x25, @loopback, 0x81}}, 0x0, 0x0, 0x8, 0x0, "27eeffcf313313dc2480bb5849eb7f3ee5f02201bf92d849bd62c7d9276543c66ce059e9b9bc9e0af7d967dd61249d15fd2e38983a52105fc0b0369fedeb86710a289600e7336ef3d2acd53bb6855c28"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8001}}, 0x0, 0x0, 0x4e, 0x0, "ac90b724716c4737a6d4f43f1e76074ab300f4cb73ee46505d84b0d02af586614e931516e0d0162f5c0a30d9c6cc46087a741e1e6b4b67807dbcc04ff26d2a5a1426e3a15ff6388f0fdd552770a2491b"}, 0xd8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/66, 0x42, 0x1, &(0x7f0000000280)=""/137, 0x89}, &(0x7f0000000380)=0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000003c0)=0x419b, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000440)=@can, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/24, 0x18}, {&(0x7f0000000540)=""/108, 0x6c}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/185, 0xb9}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000000900)=""/122, 0x7a}, {&(0x7f0000000980)=""/128, 0x80}], 0xa, &(0x7f0000000ac0)=""/214, 0xd6}, 0x40000042) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000c00)=[@mss={0x2, 0x10000}, @window={0x3, 0x5, 0xff}, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0x3, 0xfffb}, @mss={0x2, 0x8}, @sack_perm], 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), 0xffffffffffffffff) r1 = accept4(r0, &(0x7f0000000c80)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000d00)=0x80, 0x80000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000d40), &(0x7f0000000d80)=0x14) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000dc0), &(0x7f0000000e40)=0x68) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000f40)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001040)=0x2, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001080)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000fee000/0x11000)=nil, 0x11000, 0x15, 0x1}, 0x1) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000011c0)={&(0x7f00000010c0), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x53, 0x4, 0x5}]}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2020}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r1) 05:16:59 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x9, 0x1, '!{+@\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '$\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0xf}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x5, 0x0, {0x2, 0x4, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x3, 0x1}}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xb9, 0x20}}]}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x855}, 0x840) r2 = socket(0x11, 0x1, 0x5) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffffc}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24048041) r3 = accept4(r1, &(0x7f00000003c0)=@nl, &(0x7f0000000440)=0x80, 0xc00) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4048801) socketpair(0x10, 0x6, 0x5, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xcc, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x10000}, {0xc, 0x90, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc, 0x90, 0x200}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) recvmmsg(r3, &(0x7f0000003e40)=[{{&(0x7f0000000800)=@caif=@dgm, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/137, 0x89}, {&(0x7f0000000940)=""/3, 0x3}, {&(0x7f0000000980)=""/9, 0x9}], 0x3, &(0x7f0000000a00)=""/60, 0x3c}, 0x9}, {{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000ac0)=""/110, 0x6e}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/99, 0x63}, {&(0x7f0000001bc0)=""/205, 0xcd}, {&(0x7f0000001cc0)=""/120, 0x78}], 0x5, &(0x7f0000001dc0)=""/162, 0xa2}, 0x7}, {{&(0x7f0000001e80)=@isdn, 0x80, &(0x7f0000002040)=[{&(0x7f0000001f00)=""/241, 0xf1}, {&(0x7f0000002000)=""/32, 0x20}], 0x2}, 0x1ff}, {{&(0x7f0000002080)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002100)=""/113, 0x71}], 0x1, &(0x7f00000021c0)=""/31, 0x1f}, 0xffffffff}, {{&(0x7f0000002200)=@nfc_llcp, 0x80, &(0x7f0000003540)=[{&(0x7f0000002280)=""/209, 0xd1}, {&(0x7f0000002380)=""/236, 0xec}, {&(0x7f0000002480)=""/58, 0x3a}, {&(0x7f00000024c0)=""/70, 0x46}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x5, &(0x7f00000035c0)=""/105, 0x69}, 0x7fff}, {{&(0x7f0000003640), 0x80, &(0x7f0000003d80)=[{&(0x7f00000036c0)=""/145, 0x91}, {&(0x7f0000003780)=""/131, 0x83}, {&(0x7f0000003840)=""/99, 0x63}, {&(0x7f00000038c0)=""/153, 0x99}, {&(0x7f0000003980)=""/117, 0x75}, {&(0x7f0000003a00)=""/240, 0xf0}, {&(0x7f0000003b00)=""/133, 0x85}, {&(0x7f0000003bc0)=""/217, 0xd9}, {&(0x7f0000003cc0)=""/158, 0x9e}], 0x9}, 0xfff}], 0x6, 0x40000060, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000004000), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000005940)={'sit0\x00', &(0x7f00000058c0)={'ip6tnl0\x00', r0, 0x2f, 0x3f, 0x2, 0x6a, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x20, 0x80, 0x3f, 0x1f}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000005980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000005a80)={'team0\x00', 0x0}) getpeername(r1, &(0x7f0000005b80)=@can={0x1d, 0x0}, &(0x7f0000005c00)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000005d00)={'syztnl1\x00', &(0x7f0000005c80)={'ip6gre0\x00', r0, 0x29, 0x12, 0x1f, 0xffffff80, 0x76, @loopback, @local, 0x20, 0xe2bf2d911549509a, 0xdd90, 0x4}}) recvmsg(r1, &(0x7f0000006400)={&(0x7f0000005d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000006300)=[{&(0x7f0000005dc0)=""/171, 0xab}, {&(0x7f0000005e80)=""/174, 0xae}, {&(0x7f0000005f40)=""/38, 0x26}, {&(0x7f0000005f80)=""/89, 0x59}, {&(0x7f0000006000)=""/226, 0xe2}, {&(0x7f0000006100)=""/103, 0x67}, {&(0x7f0000006180)=""/237, 0xed}, {&(0x7f0000006280)=""/72, 0x48}], 0x8, &(0x7f0000006380)=""/89, 0x59}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000006b00)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006440)={0x644, r7, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x80, 0x4, 0xfffffffc}, {0x400, 0x20, 0x8f, 0x2}, {0x401, 0x40, 0x4, 0x6}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9e}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x1f, 0x6, 0xfd}, {0x1000, 0x3f, 0x40, 0x81}, {0x8, 0x6, 0xfc, 0x9}, {0x200, 0x0, 0xfb, 0x5}, {0x5, 0xc5, 0x2, 0x20}, {0x3f, 0x0, 0x17, 0xff}, {0x1000, 0x6, 0x1, 0x7}, {0x1ff, 0x80, 0x7f, 0x473}, {0x693, 0x0, 0x3, 0x8000}, {0x0, 0x0, 0x1f, 0x83e}]}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6e}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x89a, 0x1, 0x7, 0x7f}, {0x1, 0x3, 0x1, 0x3ff}, {0x1f, 0x1f, 0xb4, 0xc0cc}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x200, 0xca, 0x9, 0xff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0xff, 0x6, 0x2}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r13}}}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x4044010}, 0x20040897) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000006c40)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006c00)={&(0x7f0000006b80)={0x70, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x67f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) [ 113.003921] audit: type=1400 audit(1745471819.133:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:16:59 executing program 4: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @llc={0x1a, 0x30e, 0x3, 0xfa, 0xdd, 0x1f, @link_local}, @nl=@kern={0x10, 0x0, 0x0, 0x80}, @l2={0x1f, 0xffff, @none, 0xfbff, 0x1}, 0x4c5f, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000000)='batadv0\x00', 0x40, 0x9a, 0x5}) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00') syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r2, 0x1, {0x0, r3}, 0x5e4, 0x2, 0x1, {0x0, 0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r5, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r2, 0xd49, 0x0, 0x9, 0x4, 0x1}, 0xfffffffd) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x0, @vsock={0x28, 0x0, 0xffffffff, @host}, @hci={0x1f, 0x1, 0x4}, @ethernet={0x6}, 0x1, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)='macvlan1\x00', 0x4, 0x7ed4, 0x20}) r6 = socket(0x21, 0x3, 0xffffffff) getpeername(0xffffffffffffffff, &(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x480d1}, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x1) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000700)={0x0, @ax25={0x3, @default, 0x2}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x800, 0x0, 0x0, 0x0, 0x4, &(0x7f00000006c0)='wg2\x00', 0x0, 0x5, 0x6}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000780)={0x33, 0x4, 0x12, 0x18, 0xb, 0x8, 0x4, 0xce}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f00000007c0)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r6) ioctl$CDROM_GET_MCN(r2, 0x5311, &(0x7f0000000800)) socket$nl_generic(0x10, 0x3, 0x10) 05:16:59 executing program 5: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="9f4b8389e06eecdada2346003ebb696b", 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000240)) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x4004015) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380), 0x4) getsockname(r0, &(0x7f00000003c0)=@rc={0x1f, @fixed}, &(0x7f0000000440)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000480)=[@mss={0x2, 0x3}, @mss={0x2, 0x9}, @sack_perm], 0x3) r1 = accept4(r0, 0x0, &(0x7f00000004c0), 0x80800) r2 = socket(0x27, 0x0, 0x5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000500)=[@window={0x3, 0x81, 0x800}, @timestamp, @sack_perm], 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000540)=@ccm_128={{0x304}, "93e9f2bc33aa25cf", "d486e25ac9e5dd4397726ffcc18cb6f9", "3f1fe03c", "16e46d9cf857731d"}, 0x28) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x84) socketpair(0x29, 0x1, 0x1, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/165, 0xa5}], 0x1}, 0x0) accept4(r1, &(0x7f0000000840)=@xdp, &(0x7f00000008c0)=0x80, 0x80000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) epoll_pwait(r4, &(0x7f0000000900)=[{}, {}, {}, {}], 0x4, 0x1f, &(0x7f0000000940)={[0x400]}, 0x8) 05:16:59 executing program 6: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000010}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@llc={0x4, {@llc={0xd4, 0xb6, "c1", "82716d73e4b7881619b84f6f249af70379b823ad2b2c8d8653d2fee8d76b3e0a7b157d6a76ff685ac80b49e5b60935293c8f9dfd76e0adb078a89840b59d599d72ee6392f4e4dfae36382c80eacf1cdc880e8065cac22b9aaf306f37027f6edd75aa047851a940583172e709efd66c6348a35ac8a0811ee98320337eb3856abeb7d002016e930b80de86883cdab619a2846ea042a8aebcda9bf41cd0d525df1cfc545e26325bb8408b90a134a3635f9eb623dcbf551d97"}}}}}}, 0xcc) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140), 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7f}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040031}, 0x50) epoll_create(0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x59}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "78f1d6221a4541e3cac26dee5cbf78f8"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "29dcb70262298dd5f597147e0d7e831d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "dd238e767fc89d8d49759ec4204b456f"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xfffffffb}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1c8, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xe4}, {0xc, 0x90, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x1f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x5e84}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xc0}, 0x4008011) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) select(0x40, &(0x7f00000008c0)={0x7, 0x5, 0x6, 0x4, 0x2, 0x0, 0x7, 0xd5ab}, &(0x7f0000000900)={0xfff, 0x6, 0x0, 0x0, 0x7ff, 0x8000000000000000, 0xcc, 0x6}, &(0x7f0000000940)={0x6, 0x5, 0x6, 0x5, 0x8, 0xa644, 0x1, 0x9}, &(0x7f00000009c0)={r4, r5/1000+10000}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x2000, 0x0) write$tun(r6, &(0x7f0000000a40)={@void, @val={0x0, 0x3, 0x0, 0x1, 0xbbd, 0x1}, @ipv6=@generic={0x5, 0x6, "4c8d0d", 0x195, 0x6, 0xff, @local, @mcast1, {[@hopopts={0x32, 0x27, '\x00', [@generic={0x7, 0x10, "a9b2644c78547ee571f0cd6a98039dc5"}, @generic={0x20, 0x64, "a0b61880eb80d13f7123a81673f20c3e5423361e94be3c96ab1269e98e1a6cd07604a4ab1f2766d883e2205c2e8749e5e2d18c6b7807ac8fd5cd3094c2ad18d118cf2da679e5e709aaebe230e6d4795bac6f6b54560b302838189b7a8c122f566411d694"}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @generic={0x9, 0xb8, "8fef76444654be42023195765770b2b0cd79b4987c846a343cdce6bb5923bef6c4e38abef841a18deab6ca3454cb435d1b0fa4d02a5f18a09d12abc6880ee0ae932900b44729bfad85e8ebdd179d080027dd751df27bdb6aa259ae5ff7318863c1f3496b3b0c931cc47e066db1ac9866920c9839a70887b7a080ddbdf0cede8dd0cbf647906c88f29d56f0af86756efb2ef2c875f9726afc7d9fc4b997fe61ef9885f2964403a82eba9fa2532581224600392725bc719e25"}, @pad1]}, @fragment={0x8, 0x0, 0x80, 0x1, 0x0, 0x1, 0x68}], "c04cf995519870bbe226d5f241c8a4c35afb0a0a104127bdcc44aa42da6bcd77fa1c9b3b596efd27d5493c042b2708aa886bd160dc7daf2d70a24866d53e6758cdffacc653"}}}, 0x1c7) syz_io_uring_setup(0x2f02, &(0x7f0000000c40)={0x0, 0xbd89, 0x8, 0x2, 0x21e}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000cc0), &(0x7f0000000d00)) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000d40)={0x2, 0x101, 0x2, 0x80, 0x1000, 0x2, 0x6, 0x400}, &(0x7f0000000d80)={0x40, 0x23a9a189, 0x6bc, 0x5787, 0x50768261, 0x7fffffff, 0x4, 0x5}, &(0x7f0000000dc0)={0x10000, 0x101, 0x8000, 0x6, 0x6, 0x2, 0xfffffffffffff78f, 0x2}, &(0x7f0000000e40)={r7, r8+10000000}, &(0x7f0000000ec0)={&(0x7f0000000e80)={[0x20]}, 0x8}) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 05:16:59 executing program 7: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x84}}, 0x20000000) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@alg, &(0x7f0000000240)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc011}, 0x4000054) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r4, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb5f, 0x47}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]]}, 0x50}, 0x1, 0x0, 0x0, 0x35d9a571b2af27b7}, 0x20044050) socketpair(0x1, 0x806, 0x1, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r5) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x49de}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x81) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r8, 0x310, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf9f}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x17]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x2, 0x3]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40002) r9 = syz_open_dev$vcsa(&(0x7f0000000b00), 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000b40)={0x4000001a}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r2, &(0x7f0000000b80)={0xffffffffffffffff, r6, 0x5}) [ 114.574113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.583168] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.584383] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.591241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.593246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.604230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.605946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.611534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.623535] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.625211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.627705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.629804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.641022] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.643598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.644851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.656955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.658330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.660881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.667172] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.678178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.708230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.714394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.715242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.717979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.725425] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.746133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.757372] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.769904] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.774378] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.798854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.808091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.815797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.820687] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.826574] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.829351] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.835069] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.852444] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.869238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.880077] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.895249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.711433] Bluetooth: hci1: command tx timeout [ 116.712851] Bluetooth: hci2: command tx timeout [ 116.776153] Bluetooth: hci0: command tx timeout [ 116.838769] Bluetooth: hci3: command tx timeout [ 116.839717] Bluetooth: hci4: command tx timeout [ 116.904706] Bluetooth: hci6: command tx timeout [ 116.905537] Bluetooth: hci5: command tx timeout [ 116.968061] Bluetooth: hci7: command tx timeout [ 118.759899] Bluetooth: hci1: command tx timeout [ 118.760397] Bluetooth: hci2: command tx timeout [ 118.822748] Bluetooth: hci0: command tx timeout [ 118.886910] Bluetooth: hci3: command tx timeout [ 118.887379] Bluetooth: hci4: command tx timeout [ 118.952719] Bluetooth: hci6: command tx timeout [ 118.953184] Bluetooth: hci5: command tx timeout [ 119.016727] Bluetooth: hci7: command tx timeout [ 120.807761] Bluetooth: hci1: command tx timeout [ 120.808258] Bluetooth: hci2: command tx timeout [ 120.871717] Bluetooth: hci0: command tx timeout [ 120.934722] Bluetooth: hci3: command tx timeout [ 120.935186] Bluetooth: hci4: command tx timeout [ 120.999835] Bluetooth: hci5: command tx timeout [ 121.000297] Bluetooth: hci6: command tx timeout [ 121.063736] Bluetooth: hci7: command tx timeout [ 122.857135] Bluetooth: hci2: command tx timeout [ 122.857718] Bluetooth: hci1: command tx timeout [ 122.919827] Bluetooth: hci0: command tx timeout [ 122.982739] Bluetooth: hci4: command tx timeout [ 122.983206] Bluetooth: hci3: command tx timeout [ 123.048027] Bluetooth: hci6: command tx timeout [ 123.048537] Bluetooth: hci5: command tx timeout [ 123.110739] Bluetooth: hci7: command tx timeout [ 174.712101] syz-executor.1 (283) used greatest stack depth: 23800 bytes left [ 177.334170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.339261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.343086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.350868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.357593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.465240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.470440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.472911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.480558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.486403] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.628946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.650561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.656073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.659289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.671391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.680208] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.682693] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.690452] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.694339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.699154] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.706123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.711404] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.713343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.722498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.723159] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.729074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.735895] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.753206] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.766534] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.768451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.777445] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.794152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.805190] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.807014] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.812966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.836576] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.838316] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.855148] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.856249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.894316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.431064] Bluetooth: hci0: command tx timeout [ 179.558780] Bluetooth: hci1: command tx timeout [ 179.815100] Bluetooth: hci3: command tx timeout [ 179.942789] Bluetooth: hci4: command tx timeout [ 180.007567] Bluetooth: hci5: command tx timeout [ 180.007762] Bluetooth: hci2: command tx timeout [ 180.008565] Bluetooth: hci6: command tx timeout [ 180.070715] Bluetooth: hci7: command tx timeout [ 181.478749] Bluetooth: hci0: command tx timeout [ 181.606742] Bluetooth: hci1: command tx timeout [ 181.862723] Bluetooth: hci3: command tx timeout [ 181.990705] Bluetooth: hci4: command tx timeout [ 182.054714] Bluetooth: hci6: command tx timeout [ 182.056659] Bluetooth: hci2: command tx timeout [ 182.056682] Bluetooth: hci5: command tx timeout [ 182.118705] Bluetooth: hci7: command tx timeout [ 183.526999] Bluetooth: hci0: command tx timeout [ 183.656689] Bluetooth: hci1: command tx timeout [ 183.910996] Bluetooth: hci3: command tx timeout [ 184.038780] Bluetooth: hci4: command tx timeout [ 184.102961] Bluetooth: hci2: command tx timeout [ 184.103058] Bluetooth: hci6: command tx timeout [ 184.104010] Bluetooth: hci5: command tx timeout [ 184.170025] Bluetooth: hci7: command tx timeout [ 185.574696] Bluetooth: hci0: command tx timeout [ 185.702719] Bluetooth: hci1: command tx timeout [ 185.959007] Bluetooth: hci3: command tx timeout [ 186.088017] Bluetooth: hci4: command tx timeout [ 186.150775] Bluetooth: hci5: command tx timeout [ 186.150812] Bluetooth: hci6: command tx timeout [ 186.152058] Bluetooth: hci2: command tx timeout [ 186.214723] Bluetooth: hci7: command tx timeout [ 239.604497] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.613798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.616708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.625300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.632546] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.813314] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.818107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.823085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.828844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.834592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.876005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.883162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.885935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.893569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.904268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.924436] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.926463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.928848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.956117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.960044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.978203] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.986094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.997770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.037989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.061045] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.103298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.106314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.108457] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.128777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.141128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.222958] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.265914] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.270925] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.272861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.286611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.287567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.291372] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.299392] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.338601] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.342018] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.702780] Bluetooth: hci0: command tx timeout [ 241.898228] Bluetooth: hci1: command tx timeout [ 241.958708] Bluetooth: hci2: command tx timeout [ 242.086758] Bluetooth: hci3: command tx timeout [ 242.151701] Bluetooth: hci4: command tx timeout [ 242.279697] Bluetooth: hci5: command tx timeout [ 242.406735] Bluetooth: hci6: command tx timeout [ 242.470762] Bluetooth: hci7: command tx timeout [ 243.750732] Bluetooth: hci0: command tx timeout [ 243.942711] Bluetooth: hci1: command tx timeout [ 244.006777] Bluetooth: hci2: command tx timeout [ 244.136669] Bluetooth: hci3: command tx timeout [ 244.200362] Bluetooth: hci4: command tx timeout [ 244.327777] Bluetooth: hci5: command tx timeout [ 244.454708] Bluetooth: hci6: command tx timeout [ 244.518915] Bluetooth: hci7: command tx timeout [ 245.799706] Bluetooth: hci0: command tx timeout [ 245.991189] Bluetooth: hci1: command tx timeout [ 246.056670] Bluetooth: hci2: command tx timeout [ 246.183098] Bluetooth: hci3: command tx timeout [ 246.246864] Bluetooth: hci4: command tx timeout [ 246.376056] Bluetooth: hci5: command tx timeout [ 246.502768] Bluetooth: hci6: command tx timeout [ 246.567078] Bluetooth: hci7: command tx timeout [ 247.846703] Bluetooth: hci0: command tx timeout [ 248.038708] Bluetooth: hci1: command tx timeout [ 248.103043] Bluetooth: hci2: command tx timeout [ 248.231024] Bluetooth: hci3: command tx timeout [ 248.294690] Bluetooth: hci4: command tx timeout [ 248.423056] Bluetooth: hci5: command tx timeout [ 248.551866] Bluetooth: hci6: command tx timeout [ 248.614702] Bluetooth: hci7: command tx timeout [ 302.030444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.038023] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.039992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.043807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.050976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.055247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.057462] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.061094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.070478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.081226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.206864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.217388] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.227488] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.243728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.253164] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.432024] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.455254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.471421] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.492422] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.507230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.778141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.793049] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.808318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.830313] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.865409] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.964604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.968833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.971557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.973743] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.975660] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.978349] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.982115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.987548] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.989708] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.994294] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.022041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.039123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.042046] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.064220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.076900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.166837] Bluetooth: hci1: command tx timeout [ 304.166890] Bluetooth: hci0: command tx timeout [ 304.295193] Bluetooth: hci2: command tx timeout [ 304.552666] Bluetooth: hci3: command tx timeout [ 304.935672] Bluetooth: hci4: command tx timeout [ 305.062743] Bluetooth: hci7: command tx timeout [ 305.318719] Bluetooth: hci5: command tx timeout [ 305.703763] Bluetooth: hci6: command tx timeout [ 306.216653] Bluetooth: hci0: command tx timeout [ 306.216701] Bluetooth: hci1: command tx timeout [ 306.342806] Bluetooth: hci2: command tx timeout [ 306.599753] Bluetooth: hci3: command tx timeout [ 306.983474] Bluetooth: hci4: command tx timeout [ 307.110965] Bluetooth: hci7: command tx timeout [ 307.368004] Bluetooth: hci5: command tx timeout [ 307.750703] Bluetooth: hci6: command tx timeout [ 308.263084] Bluetooth: hci0: command tx timeout [ 308.263548] Bluetooth: hci1: command tx timeout [ 308.391833] Bluetooth: hci2: command tx timeout [ 308.647656] Bluetooth: hci3: command tx timeout [ 309.030715] Bluetooth: hci4: command tx timeout [ 309.158763] Bluetooth: hci7: command tx timeout [ 309.414900] Bluetooth: hci5: command tx timeout [ 309.798690] Bluetooth: hci6: command tx timeout [ 310.311848] Bluetooth: hci1: command tx timeout [ 310.311912] Bluetooth: hci0: command tx timeout [ 310.438794] Bluetooth: hci2: command tx timeout [ 310.696655] Bluetooth: hci3: command tx timeout [ 311.079088] Bluetooth: hci4: command tx timeout [ 311.206707] Bluetooth: hci7: command tx timeout [ 311.464738] Bluetooth: hci5: command tx timeout [ 311.846856] Bluetooth: hci6: command tx timeout [ 364.231298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.239598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.247438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.257238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.266982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.409485] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.412155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.419969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.426650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.431293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.611196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.623101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.626353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.633740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.648207] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.743341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.751379] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.758893] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.783152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.790271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.822506] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.830318] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.844871] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.853227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.858484] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.861118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.876332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.881451] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.892829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.892995] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.915875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.923536] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.929572] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.931634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.935412] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.143427] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.159189] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.169033] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.240540] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.264244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.310737] Bluetooth: hci0: command tx timeout [ 366.504712] Bluetooth: hci1: command tx timeout [ 366.695716] Bluetooth: hci2: command tx timeout [ 366.886763] Bluetooth: hci3: command tx timeout [ 367.078780] Bluetooth: hci4: command tx timeout [ 367.142771] Bluetooth: hci5: command tx timeout [ 367.143452] Bluetooth: hci6: command tx timeout [ 367.335673] Bluetooth: hci7: command tx timeout [ 368.358896] Bluetooth: hci0: command tx timeout [ 368.550774] Bluetooth: hci1: command tx timeout [ 368.742907] Bluetooth: hci2: command tx timeout [ 368.934746] Bluetooth: hci3: command tx timeout [ 369.126744] Bluetooth: hci4: command tx timeout [ 369.191763] Bluetooth: hci6: command tx timeout [ 369.192246] Bluetooth: hci5: command tx timeout [ 369.383650] Bluetooth: hci7: command tx timeout [ 370.407099] Bluetooth: hci0: command tx timeout [ 370.598705] Bluetooth: hci1: command tx timeout [ 370.790888] Bluetooth: hci2: command tx timeout [ 370.982681] Bluetooth: hci3: command tx timeout [ 371.175657] Bluetooth: hci4: command tx timeout [ 371.238705] Bluetooth: hci6: command tx timeout [ 371.239149] Bluetooth: hci5: command tx timeout [ 371.430915] Bluetooth: hci7: command tx timeout [ 372.454809] Bluetooth: hci0: command tx timeout [ 372.646965] Bluetooth: hci1: command tx timeout [ 372.838905] Bluetooth: hci2: command tx timeout [ 373.030765] Bluetooth: hci3: command tx timeout [ 373.223077] Bluetooth: hci4: command tx timeout [ 373.286710] Bluetooth: hci6: command tx timeout [ 373.287167] Bluetooth: hci5: command tx timeout [ 373.478695] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:22:08 Registers: info registers vcpu 0 RAX=0000000000000005 RBX=ffff888015ae5340 RCX=0000000000000200 RDX=873d0e13b074236a RSI=ffff888015ae5de8 RDI=ffff888015ae5de8 RBP=0000000000000000 RSP=ffff88806ce088f0 R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000000 R11=0000000000008636 R12=ffff888015ae5de8 R13=0000000000000000 R14=0000000000000002 R15=ffff888015ae5d98 RIP=ffffffff81511da3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8aa28c0540 00000000 00000000 GS =0000 ffff8880e564e000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d18600c868 CR3=000000002cf72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000001255 RCX=ffffffff819cb0df RDX=ffff88802b0e1bc0 RSI=0000000000000014 RDI=ffff888015b8e180 RBP=0000000000000000 RSP=ffff888033d77e68 R8 =0000000000000001 R9 =fffff94000044656 R10=0000000000000000 R11=0000000000090000 R12=0000000000000200 R13=00007fc5edb7ab70 R14=0000000000000000 R15=ffff888015b8e180 RIP=ffffffff819b4df2 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574e000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc5edb7ab70 CR3=000000002cd7a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000