Warning: Permanently added '[localhost]:55659' (ECDSA) to the list of known hosts. 2025/04/26 07:41:44 fuzzer started 2025/04/26 07:41:45 dialing manager at localhost:46629 syzkaller login: [ 93.723696] cgroup: Unknown subsys name 'net' [ 93.787349] cgroup: Unknown subsys name 'cpuset' [ 93.810573] cgroup: Unknown subsys name 'rlimit' 2025/04/26 07:42:01 syscalls: 202 2025/04/26 07:42:01 code coverage: enabled 2025/04/26 07:42:01 comparison tracing: enabled 2025/04/26 07:42:01 extra coverage: enabled 2025/04/26 07:42:01 setuid sandbox: enabled 2025/04/26 07:42:01 namespace sandbox: enabled 2025/04/26 07:42:01 Android sandbox: enabled 2025/04/26 07:42:01 fault injection: enabled 2025/04/26 07:42:01 leak checking: enabled 2025/04/26 07:42:01 net packet injection: enabled 2025/04/26 07:42:01 net device setup: enabled 2025/04/26 07:42:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/26 07:42:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/26 07:42:01 USB emulation: enabled 2025/04/26 07:42:01 hci packet injection: enabled 2025/04/26 07:42:01 wifi device emulation: enabled 2025/04/26 07:42:01 802.15.4 emulation: enabled 2025/04/26 07:42:01 fetching corpus: 0, signal 0/0 (executing program) 2025/04/26 07:42:03 starting 8 fuzzer processes 07:42:03 executing program 0: read$snapshot(0xffffffffffffffff, &(0x7f0000000000)=""/247, 0xf7) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000300)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = accept4$inet(r1, &(0x7f0000000400)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0x10, 0x80800) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000480)={0x10}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x6c31c72fb6cfbf3b, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000500)) r4 = syz_open_dev$sg(&(0x7f0000000540), 0x3, 0x200040) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(r5, &(0x7f0000000580)={0x2, 0x0, @remote}, &(0x7f00000005c0)=0x10, 0x800) recvmmsg$unix(r1, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/21, 0x15}, {&(0x7f0000000640)=""/182, 0xb6}], 0x2, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000002b40)=[{&(0x7f00000008c0)=""/5, 0x5}, {&(0x7f0000000900)=""/155, 0x9b}, {&(0x7f00000009c0)=""/127, 0x7f}, {&(0x7f0000000a40)=""/237, 0xed}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x6, &(0x7f0000002bc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000003000)=[{&(0x7f0000002dc0)=""/240, 0xf0}, {&(0x7f0000002ec0)=""/126, 0x7e}, {&(0x7f0000002f40)=""/148, 0x94}], 0x3, &(0x7f0000003040)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003100), 0x6e, &(0x7f0000004500)=[{&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/101, 0x65}, {&(0x7f0000004200)=""/166, 0xa6}, {&(0x7f00000042c0)=""/228, 0xe4}, {&(0x7f00000043c0)=""/72, 0x48}, {&(0x7f0000004440)=""/9, 0x9}, {&(0x7f0000004480)=""/113, 0x71}], 0x7, &(0x7f0000004580)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000045c0)=@abs, 0x6e, &(0x7f0000004640), 0x0, &(0x7f0000004680)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x5, 0x20, 0x0) read$char_usb(r6, &(0x7f0000004800)=""/240, 0xf0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000008440)=[{{&(0x7f0000004e40)=@abs, 0x6e, &(0x7f0000006040)=[{&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/162, 0xa2}, {&(0x7f0000005f80)=""/177, 0xb1}], 0x3, &(0x7f0000006080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000006180)=@abs, 0x6e, &(0x7f0000007600)=[{&(0x7f0000006200)=""/98, 0x62}, {&(0x7f0000006280)=""/107, 0x6b}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/255, 0xff}, {&(0x7f0000007400)=""/220, 0xdc}, {&(0x7f0000007500)=""/138, 0x8a}, {&(0x7f00000075c0)=""/3, 0x3}], 0x7}}, {{&(0x7f0000007680), 0x6e, &(0x7f0000007a80)=[{&(0x7f0000007700)=""/237, 0xed}, {&(0x7f0000007800)=""/31, 0x1f}, {&(0x7f0000007840)=""/213, 0xd5}, {&(0x7f0000007940)=""/99, 0x63}, {&(0x7f00000079c0)=""/33, 0x21}, {&(0x7f0000007a00)=""/113, 0x71}], 0x6, &(0x7f0000007b00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000007c40), 0x6e, &(0x7f0000007e00)=[{&(0x7f0000007cc0)=""/140, 0x8c}, {&(0x7f0000007d80)=""/65, 0x41}], 0x2, &(0x7f0000007e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000007f40)=@abs, 0x6e, &(0x7f0000008300)=[{&(0x7f0000007fc0)=""/216, 0xd8}, {&(0x7f00000080c0)=""/157, 0x9d}, {&(0x7f0000008180)=""/36, 0x24}, {&(0x7f00000081c0)=""/53, 0x35}, {&(0x7f0000008200)=""/218, 0xda}], 0x5, &(0x7f0000008380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}], 0x5, 0x2020, &(0x7f0000008580)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r7, 0x330f, 0x9) [ 111.461496] audit: type=1400 audit(1745653323.273:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:42:03 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7b8c89e496aa"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x90e8af4ae4ce4bb9}, 0xd0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x0, 0x70bd2d, 0x25dfdbfc, "", [""]}, 0x10}}, 0x10) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x48001, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x30, r1, 0xffffffff7fffffff) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x3f9, 0x310, 0x70bd29, 0x25dfdbfd, {0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4041) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf4, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x64}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1962}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00008e7000/0x1000)=nil, &(0x7f0000a61000/0x4000)=nil, &(0x7f00009ab000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000d4f000/0x4000)=nil, &(0x7f00000005c0)="653a7ec18ba0d4e2cb29c423c6dd548b089e16300a7340010b3a307c1c5347ba63e2e6ca5fbfaa017ca78f726e12e3a0cd28e4ac83334f80534e867d4d74d0c677c7a5db35c02b92de729a977aab30f36d361f6b851d062a004d4f79d894b4bc247984766a5b2b642d3061a3e77038b0027b0b79f94a9c5a5ae05f24822c1ca96d8a3177dba3fd5323155129e32c2a601359a008acda44c1682817e013d176", 0x9f, r4}, 0x68) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x244, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c326d0f09ccf498f014a37509c2f3b2e39b20064cae6468a59b40a567526ff19f4fb"}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd752}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf22}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b2e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9a0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x680c8298}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53dc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x211}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000a80)={0x101}, 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x194, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x28000, 0x5d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "343c229d70810bb95144fe9414"}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7a70119c49"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x13, 0x4, "fa693fef1b51620e98865d4a28a15d"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "de994bc0ad"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d97d51f868"}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38f}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000001100)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000d80)={0x31c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7be}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x893}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf44c}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x18b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8684}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd8b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d7}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x809f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r2) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000015c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000011c0)={0x390, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x59, 0x3, "89ae0b1ea8b4d3f198e5ff32c873b29e9113932efcf8d3e81bbc5175122e759b94430d7dcec5c635406deb3726fe2f8538ad3606fedf312f347a64c332b48525a6bfb2a315932ea235ef2b3c5b9c2c72dfed852b84"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x681a}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ID={0x93, 0x3, "4713330f1cba80105c2c6758c98035219b97fff8b68ded287f668fb32884c91158b5d3b46dd183f753db496188ba45852fdea4bf094c6db7a7b2ff2ad4aafea6074cf3ae54b5fb701c8bbe2b6b0c117ac3a3ba7da869838853f64740cd24f57cd981213707c63b748501a19206711ee7ac60fcca76f4a2bce40d7942f54bada66b8172c60daffc6a1b41af2bab77c7"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e04512913387e5c892153040e3e101b7d19c9da118e84f2feccf6db839"}}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "2b1e6f6a22b3cf7960a33f79e9500911560b60ebed80eaf0d41079927577d37120e28d5a72bccf7691bde8738a9f5b7ba302e92bc6012e7e206ce700368ac67ed0208535726031b3a4"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bad7f3b55c13db8a7ce74c1b8a4a6e290b970cf2"}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd75a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x41}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x24}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @loopback, 0xaed}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @empty, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd0}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}]}]}, 0x390}, 0x1, 0x0, 0x0, 0xc000}, 0x44) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0xa04}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, 0x3f7, 0x2, 0x70bd25, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x51) munlock(&(0x7f0000ada000/0x1000)=nil, 0x1000) 07:42:03 executing program 3: setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x95, @local, 0x4e22, 0x0, 'sh\x00', 0x25, 0xffffffff, 0x9}, 0x2c) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/94, 0x5e) r1 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80400) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x8, "ecd66f6dc7cc8b6d"}, &(0x7f00000005c0)=0x2c) r3 = accept4$inet(r2, &(0x7f0000001fc0)={0x2, 0x0, @multicast1}, &(0x7f0000002000)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000002040)={0x2, 'veth0_vlan\x00', 0x2}, 0x18) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002080), 0x4000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000020c0)={0x22, 0x401, 0xfffffff8, "a7a00b51dd180655acb3dae50ebf308b22c91826a2c190ba4aefd9f45e3e9e6100eb"}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000002100)={0x88, @remote, 0x4e21, 0x3, 'ovf\x00', 0x9, 0x6, 0x70}, 0x2c) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000002140)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000002240)={'filter\x00', 0x0, [0x2, 0x59d0f43a, 0x1ff]}, &(0x7f00000022c0)=0x44) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002300)='freezer.state\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000002340)={0x10001, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000002400)={0x1, @local, 0x4e23, 0x0, 'fo\x00', 0x4, 0x200, 0x80}, 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000002440)={0x2}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000002540)={0x2, 'team0\x00', 0x4}, 0x18) 07:42:03 executing program 2: sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0xc52, 0xe0, 0x64, 0x7}, {0x6, 0x3b, 0x3, 0x7f}, {0x101, 0x7, 0x0, 0x9}, {0x2, 0x6, 0x5, 0xfffffffe}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)="e5d82eb9c458bbd21efad04048782a638ae6a3da8dccc5e942e169bdfa059cc512614723ac4395466d03a23ff2a85ca88b186e93af459247d0d27cc45fa99d771cd715ed1fa395132ca4adda03b55de4a415df6cf18b5473066223c1a6b6a509750b184a311dcbd4a93e7fce18dbe238df2103f9e647652e68a2bc0f", 0x7c, r0}, 0x68) shmget(0x3, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x2000)=nil) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{0x101, 0x1, 0x17, 0x8001}, {0x7, 0x2, 0x3f, 0x5}, {0x3, 0x9, 0x6, 0x3}, {0x200, 0x7, 0xc8, 0x2}, {0x2, 0x7, 0x1, 0x5}, {0x400, 0x3f, 0x4, 0x20}, {0xffff, 0x81, 0x8, 0x3ff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000002c0)={r2, 0x1fc00000, 0x5}) syz_io_uring_setup(0xb62, &(0x7f0000000300)={0x0, 0x55b8, 0x0, 0x2, 0x129}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001980)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f00000018c0)="553c333caa412b2b2f29becdd9badb2551ea303b37438329fce4f5ee2cdf8e6b021bb40d8262faf2838b8fc8c38e7cfa659b409c0527ffad7d537c59e1fcb8beed70df3a300e5fbfedddba3439cc89a5685e15305439e8306f706a38c6e54600670c2304ab608635dfc8dcda45a3bd581661f4180533403c9a7fd94e4df361ba9150c5b66ec39c0bee3f705cde6f6456ea0d5ff2adeb670c312a99a4235e3ff3ded8fc3e089dc5f05516ba9bf451b686c140c9d02496ccc3a1a1", 0xba, 0x1, 0x1}, 0x7f) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000001a00)=0xc6fa) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000001a40)=0x9) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x24000014}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xe0, 0x14, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "ab887fad353d7e9de1eb42d4a183fe52cecdaca47e371d6619b530da2c95cc3a0717fb5c1d75d24430b1e9d9c19c291ee4d825aae255c3c724d694960b7dc44663fdab2d2d0120df811c9bf60aeedfa39560f5e230ea600fdf247e3ef38ce93e8530c32bd9654b010e1726e5ba2ba2f5ef50ce2d609eae30801ed0bb827758fde2743811e106fe0e96fa2eb2659a138516ae6f7feae8687b9cea457f0677b289c251b14aca5ec18e88fd183cbf6daef8f70208ff5a2bec4e6038a88f83aa5cccbe657e239ab3"}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc001}, 0x10) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007b40)=[{{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/255, 0xff}], 0x1}}, {{&(0x7f0000001e00), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001e80)=""/174, 0xae}, {&(0x7f0000001f40)=""/34, 0x22}], 0x2, &(0x7f0000001fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002080), 0x6e, &(0x7f0000004580)=[{&(0x7f0000002100)=""/127, 0x7f}, {&(0x7f0000002180)=""/46, 0x2e}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/98, 0x62}, {&(0x7f0000003240)=""/215, 0xd7}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/103, 0x67}, {&(0x7f00000043c0)=""/190, 0xbe}, {&(0x7f0000004480)=""/223, 0xdf}], 0x9}}, {{&(0x7f0000004640), 0x6e, &(0x7f00000046c0), 0x0, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000004800), 0x6e, &(0x7f0000005d40)=[{&(0x7f0000004880)=""/167, 0xa7}, {&(0x7f0000004940)=""/70, 0x46}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/227, 0xe3}, {&(0x7f0000005ac0)=""/63, 0x3f}, {&(0x7f0000005b00)=""/214, 0xd6}, {&(0x7f0000005c00)=""/238, 0xee}, {&(0x7f0000005d00)}], 0x8, &(0x7f0000005dc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000005e80)=@abs, 0x6e, &(0x7f0000006080)=[{&(0x7f0000005f00)=""/149, 0x95}, {&(0x7f0000005fc0)=""/49, 0x31}, {&(0x7f0000006000)=""/126, 0x7e}], 0x3}}, {{&(0x7f00000060c0), 0x6e, &(0x7f0000006400)=[{&(0x7f0000006140)=""/151, 0x97}, {&(0x7f0000006200)=""/227, 0xe3}, {&(0x7f0000006300)=""/216, 0xd8}], 0x3, &(0x7f0000006440)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000007880)=[{&(0x7f00000064c0)=""/83, 0x53}, {&(0x7f0000006540)=""/80, 0x50}, {&(0x7f00000065c0)=""/119, 0x77}, {&(0x7f0000006640)=""/215, 0xd7}, {&(0x7f0000006740)=""/156, 0x9c}, {&(0x7f0000006800)=""/70, 0x46}, {&(0x7f0000006880)=""/4096, 0x1000}], 0x7, &(0x7f0000007900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000007a00)=@abs, 0x6e, &(0x7f0000007ac0)=[{&(0x7f0000007a80)=""/56, 0x38}], 0x1, &(0x7f0000007b00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x9, 0x18002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000007d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000007e00)=r8) 07:42:03 executing program 4: setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000000)={{0x3c, @private=0xa010101, 0x4e24, 0x2, 'lc\x00', 0x34, 0x80000000, 0x15}, {@private=0xa010100, 0x4e20, 0x3, 0x5, 0x7000}}, 0x44) socketpair(0x27, 0x2, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000000c0)={0x2c, @remote, 0x4e22, 0x1, 'sed\x00', 0x8226789b2518d1b7, 0xffff, 0x28}, 0x2c) r2 = accept4$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x15, 0x800, 0x70bd2a, 0x25dfdbfc, {0x1a, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "100538e8d618f63ba0039052f80d8b6eb89150122010f49137fefe8b9a18203b6aa163331d351e4a4d78abe34513732eeb9d282da894d2318671827fc6c7a429"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4804}, 0x40040c0) accept(r1, &(0x7f0000000340)=@xdp, &(0x7f00000003c0)=0x80) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x343000) sendto$inet(r3, &(0x7f0000000440)="774599d859fbc5e47f8299b061eb4736abeff25005fe2a941a7f4bb9783f24f3a7ea7903d8bfa83ae34ca08c447c4ddcc9fce3eb2039b65cb15b7fee030ded9dc55e3a734b3bbf3029f5b950df9d1e09f67cea4d06418265f8b7b0e24f457141dc867e2aca3bfb3234f60ed2bd0d42e5ede3c785b303da28630da89b69754f7a97ad281890fc03d5777f312a62bd497c9616132fe93d14390e2706a76cb355ea114b0fe3d526d7607660c46915ca6b22e19b2c044192f90efdaa40058de4a908a3ffe139a60368f87e992c3c38ec9161f7f69d5ecc6cb82946c4b44cc5aaaf40d5681e619817f5aa", 0xe8, 0x48840, &(0x7f0000000540)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000001600)={'filter\x00', 0x0, 0x4, 0x1000, [0x9, 0x10000, 0xfffffffffffffffe, 0x0, 0x100000000, 0xfff], 0x8, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000600)=""/4096}, &(0x7f0000001680)=0x78) r4 = socket$inet(0x2, 0x3, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001780)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000016c0)="7eee01ce62649a062ef504d0175c5be81dae3788e9f0ab9f82081eddb330abd85f5da3d3d987111fb08263c779768b1d761f2e776db0166ffe302aa0c75ec0df0cba7024b90edce7b8529d3f08fc0fec254ac45b49f34709bd6ec1fdef2745504e64e6e619e1399b3b97b76143237ee2660e07ec093823e748f16867a704f2f3e90824a7d17454b2a25b72f0227127acf4", 0x91, r4}, 0x68) r5 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r5, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001800)=""/7, 0x7}, {&(0x7f0000001840)=""/53, 0x35}], 0x2, &(0x7f00000018c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/209, 0xd1}], 0x1, &(0x7f0000001b40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001c00)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/137, 0x89}, {&(0x7f0000001d40)=""/87, 0x57}, {&(0x7f0000001dc0)=""/51, 0x33}, {&(0x7f0000001e00)=""/124, 0x7c}], 0x4, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}], 0x3, 0x12032, &(0x7f0000002040)={0x0, 0x3938700}) r7 = openat$cgroup_ro(r6, &(0x7f0000002080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r7, 0x330b) clock_gettime(0x0, &(0x7f00000040c0)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000004000)=[{{&(0x7f0000002180)=@abs, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002200)=""/112, 0x70}, {&(0x7f0000002280)=""/218, 0xda}, {&(0x7f0000002380)=""/19, 0x13}, {&(0x7f00000023c0)=""/120, 0x78}, {&(0x7f0000002440)=""/2, 0x2}, {&(0x7f0000002480)=""/3, 0x3}], 0x6, &(0x7f0000002540)}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000002580)=""/102, 0x66}, {&(0x7f0000002600)=""/119, 0x77}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/46, 0x2e}, {&(0x7f0000002740)=""/226, 0xe2}, {&(0x7f0000002840)=""/241, 0xf1}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/131, 0x83}, {&(0x7f0000003a00)=""/23, 0x17}, {&(0x7f0000003a40)=""/188, 0xbc}], 0xa, &(0x7f0000003bc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003c00), 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003c80)=""/216, 0xd8}, {&(0x7f0000003d80)=""/232, 0xe8}, {&(0x7f0000003e80)=""/121, 0x79}], 0x3, &(0x7f0000003f40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x3, 0x12040, &(0x7f0000004100)={r8, r9+10000000}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000004640)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004600)={&(0x7f0000004180)={0x454, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x1}, {0x0, 0x1}, {0x4, 0x4}, {0x4}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x3, 0x6}, {0x7, 0x5}, {0x1, 0x1}, {0x2}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x5}, {0x5, 0x9}, {0x1, 0xa}, {0x2, 0x1}, {0x1, 0x4}, {0x3}, {0x6, 0xa}, {0x5, 0x5}, {0x2, 0x9}, {0x3, 0x5}, {0x5}, {0x4, 0x6}, {0x4}, {0x7, 0x9}, {0x2, 0xa}, {0x5, 0xa}, {0x7}, {0x7, 0x7}, {0x6, 0x2}, {}, {0x3, 0x3}, {0x5, 0xa}, {0x3}, {0x7, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x6}, {0x5, 0x8}, {0x5}, {0x4, 0x2}, {0x6, 0x8}, {0x2, 0x2}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0xa}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x36, 0x1b, 0x6, 0x24, 0x20, 0x9, 0x24, 0x36, 0x6c, 0x5, 0x48, 0x16, 0xa9aeed5fe5cc8372, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8000, 0xff, 0x40, 0x4, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x4}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x6}, {0x5, 0x7}, {0x3, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0x3}, {0x6, 0xa}, {0x3}, {0x1, 0xa}, {0x5, 0x2}, {0x4}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x6}, {0x7, 0x8}, {0x6, 0xa}, {0x7, 0x5}, {0x7, 0x8}, {0x7, 0x9}, {0x2, 0x4}, {0x4, 0x9}, {0x5, 0x2}, {0x3, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x6, 0x7}, {0x1}, {0x2, 0x2}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1, 0x0, 0x3ff, 0x3, 0x2, 0x4]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0xb, 0x2, 0x60, 0x30, 0x2, 0x9, 0x1b, 0x18, 0x6, 0x1b, 0x18, 0x1b, 0x3, 0x1b, 0x2, 0x18, 0xb, 0x9, 0x4, 0x48, 0x6c, 0x1b, 0x5, 0x12, 0x1b, 0x1, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x7f, 0x7, 0x3, 0x6, 0x36a1, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x5}, {0x4, 0xa}, {0x6, 0xa}, {0x0, 0x5}, {0x4}, {0x5, 0x5}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x3}, {0x1, 0x3}, {0x0, 0x4}, {0x7}, {0x5}, {0x1, 0x2}, {0x6, 0x9}, {}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0xa}, {0x3}, {0x7, 0x9}, {0x1, 0xa}, {0x3, 0xa}, {0x7, 0x7}, {0x2}, {0x3, 0x4}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0xa}, {0x5, 0x9}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0x6}, {0x2}, {0x0, 0x1}, {0x2, 0x6}, {0x4, 0xa}, {0x3, 0x6}, {0x3, 0x4}, {0x1, 0xa}, {0x7, 0x5}, {0x7, 0xa}, {0x3, 0xa}, {0x1, 0xa}, {}, {0x3, 0x8}, {0x7, 0x5}, {0x2, 0x1}, {0x2, 0x2}, {0x7, 0x8}, {0x7, 0x5}, {}, {0x5}, {0x6, 0x8}, {0x5, 0x9}, {0x5, 0x2}, {0x2, 0x6}, {0x2, 0x2}, {0x1, 0x6}, {0x1}, {0x6, 0x7}, {0x1}, {0x2, 0x7}, {0x4, 0x2}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x12, 0x48, 0x60, 0x6c, 0x1b, 0x2, 0x1d0376eb19cef350, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x5, 0x1b, 0x1b, 0x24, 0x12, 0x36, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x63, 0x80, 0x2, 0x7f, 0x96, 0x2, 0x0, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1, 0x3, 0x3f, 0x4, 0xa, 0x3ff, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x0, 0x0, 0x200, 0x6e2b, 0x80, 0x200, 0x876b]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x4}, {0x3, 0x6}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x1, 0x8001, 0x3, 0x8, 0x8, 0x1, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x2, 0x7fff, 0x3, 0x5, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f97, 0x8000, 0x3f, 0x3, 0x2, 0x800, 0x250, 0x4]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x18, 0xc, 0x5, 0x18, 0x60, 0x18]}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x48, 0xb, 0x2, 0x60, 0x2, 0x2, 0x24, 0x2, 0x3a, 0x2, 0x60, 0x6c, 0x5, 0x6c, 0x24, 0x48, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x1}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x4}, {0x1, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x4, 0x6, 0x18, 0x24, 0x12]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x36, 0x21, 0x48, 0x48, 0x9, 0xb, 0x48, 0x9, 0x0, 0x1e, 0x16, 0x36, 0x9, 0x18, 0x4, 0x3, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x7}, {0x1, 0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x4}, {0x3, 0x8}, {0x6}, {0x0, 0x4}, {0x5, 0x1d}, {0x3, 0x8}, {0x7, 0x4}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x1}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0xc, 0x6c, 0x24, 0x4, 0x9, 0x6c, 0x3, 0x2f, 0x3, 0x1, 0x18, 0x18, 0x2, 0x60, 0x36]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x6, 0x30, 0x16, 0x4, 0x16, 0x48, 0x30, 0xc98bfdfb127c64b4, 0x24, 0x3, 0xb, 0x0, 0x24, 0x48, 0x30, 0x30, 0x6c, 0xb]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x7}, {0x6, 0xa}, {0x3, 0x4}, {0x5, 0x7}]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x8}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0x4}, {0x2}, {0x2, 0x6}, {0x5, 0xa}, {0x3, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x1}, {0x2, 0x7}, {0x7, 0x7}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x4, 0x9}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x5, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0xa}, {0x1, 0x2}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x7}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x5, 0x1}, {0x1}, {0x3, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x0, 0x4}, {0x5, 0x7}, {0x5, 0x2}, {0x4, 0x1}, {0x5, 0xa}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0x4}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x6, 0x9}, {0x5, 0x3}, {0x0, 0x1}, {0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x5, 0x8, 0xde, 0x5, 0x8, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x51, 0x0, 0xc, 0x30, 0x1b, 0x1b, 0xc, 0x24, 0x6, 0x36, 0x24, 0xb, 0xb, 0x69, 0x2c, 0x30, 0x5, 0x30, 0x36, 0x48, 0x36, 0x20, 0x6a, 0x6, 0x36, 0x12, 0x60]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x16, 0x16, 0x36, 0x6, 0x60, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x401, 0x817, 0x5, 0x7, 0xfbb, 0xb6]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x32, 0x5, 0x18, 0x1b, 0x48, 0x6c, 0x56, 0x5, 0x6, 0x60, 0x6, 0x5, 0x6, 0x1b, 0x6, 0x3d]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x7, 0x9}, {0x2, 0x9}, {0x6, 0x4}, {0x3, 0x6}, {0x0, 0x1}, {0x6}, {0x3, 0x7}, {0x1, 0x8}, {0x6}, {0x2, 0xa}, {0x2, 0x9}, {0x7, 0x1}, {0x1, 0x3}, {0x7, 0x5}, {0x2, 0x3}, {0x0, 0x2}, {0x3, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x5, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x12, 0x5, 0x6c, 0xc, 0x2, 0x36, 0x18, 0xc, 0xc, 0x18, 0x48, 0x6, 0x30, 0x2, 0x2, 0x1b, 0x9, 0x12, 0x30, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x7, 0x1, 0x16, 0x24, 0x60, 0x28, 0xc, 0x24, 0x7b, 0x12, 0x18, 0x6, 0x12, 0x30, 0x2, 0x5, 0x36, 0x16, 0x1, 0x6c, 0xc, 0xb, 0x30, 0x24, 0x4, 0x1, 0x4, 0x4, 0x60]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r10, 0x0, 0x484, &(0x7f0000004680)={0x2c, @multicast2, 0x4e21, 0x2, 'none\x00', 0x14, 0x7, 0xa}, 0x2c) 07:42:03 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x496000, 0x0) syz_io_uring_setup(0x49aa, &(0x7f0000000040)={0x0, 0x9625, 0x10, 0x1, 0xf3, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/4096) getsockname(r0, &(0x7f0000001140)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000011c0)=0x80) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000001200)={'filter\x00', 0x0, [0x8, 0x541f, 0x400]}, &(0x7f0000001280)=0x44) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x1010, r0, 0x80000001) move_pages(0xffffffffffffffff, 0x5, &(0x7f00000012c0)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001400)='blkio.bfq.io_queued\x00', 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, 0x3fa, 0x10, 0x70bd27, 0x25dfdbfc, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x24000800) shmget(0x0, 0x1000, 0x10, &(0x7f0000ffb000/0x1000)=nil) write$cgroup_pid(r1, &(0x7f0000001540), 0x12) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x74, r2, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="046b89d20c74"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001bc0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f0000001740)={0x424, 0x3f4, 0x1, 0x70bd29, 0x25dfdbfe, {0x1, 0x1, 0x2a, [0x2, 0x80, 0x20, 0xffffff00, 0x1, 0xffff8000, 0x79d, 0x20, 0xbb, 0xfffffffe, 0x1, 0x6, 0x2, 0x7, 0x9, 0x8, 0x10000, 0x821f0f7, 0x10000, 0x3, 0x0, 0x6, 0x4, 0x0, 0x400, 0x2, 0x1000, 0x7, 0x1000, 0x80, 0x8, 0x3, 0x4, 0xd3d, 0x80000001, 0x3, 0x0, 0x33c, 0x7ff, 0xcf, 0x1, 0xfa3c, 0x3, 0x99, 0x7f, 0x0, 0x7ff, 0x9, 0x0, 0x8, 0x7, 0x8, 0xfff, 0x7f, 0x1, 0x400, 0x15, 0x3, 0x3, 0x400, 0x20, 0x7, 0x5, 0x9], [0x4, 0x9, 0x80000001, 0x8, 0x9, 0x80000001, 0xfff, 0x9, 0x6, 0x7, 0xffff, 0xa9, 0xa64f, 0x200000, 0x0, 0x0, 0x1, 0x9, 0xb76be6e, 0x5, 0x5, 0x7, 0x80, 0x401, 0x6, 0x401, 0x80000001, 0x1000, 0x4, 0x0, 0x401, 0x0, 0x283, 0x100, 0x6629, 0x2, 0x2, 0x200, 0x1ff, 0x1, 0x8001, 0x1, 0xc4, 0x8, 0xd2, 0x9, 0x5, 0x800, 0x80000001, 0x101, 0x33, 0xffffffc0, 0x7f82, 0x7f, 0x2, 0x9, 0x7, 0x5, 0x8, 0x400, 0x100, 0x3, 0x5, 0x400], [0x9, 0x7fff, 0x9, 0x7, 0x1, 0x6, 0x7fe, 0xffffffff, 0x101, 0x7, 0x3ff, 0x2, 0x3, 0x9, 0x9, 0xccf, 0x925, 0x3, 0x0, 0x1, 0xddc, 0x5, 0x9, 0xfffffff7, 0xcb, 0x7, 0x6, 0x80, 0xfffffff8, 0x3, 0x1, 0x40, 0x3, 0x80000001, 0xc4, 0x7, 0x5, 0x48d1, 0x0, 0xffff, 0x9, 0x7f, 0xfffff000, 0x2, 0x1, 0x0, 0x57, 0x1, 0x1, 0x80000000, 0x3, 0x80000000, 0x7fff, 0xff, 0x1f, 0x2, 0x5, 0x81, 0x0, 0x59, 0x7, 0x51, 0x300, 0x101], [0x1, 0x8, 0x1, 0x1, 0x0, 0x1000000, 0x2, 0x7fff, 0x0, 0x1f, 0x2, 0x401, 0x3, 0x4, 0x7fff, 0x3aef, 0x8001, 0xdda, 0x3, 0x1, 0x151, 0x40, 0x8000, 0x7, 0x0, 0x7, 0x80010000, 0x32, 0x1, 0x0, 0x3ff, 0x8, 0x0, 0x3, 0x8, 0x1, 0x6, 0x5b, 0x8, 0x5, 0x3, 0xfffffffa, 0x8, 0x6, 0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x62f, 0x6, 0x0, 0x1000, 0x6, 0xa4, 0x2, 0xff, 0x9, 0x8, 0x65f, 0x6, 0x8, 0x2], 0x2, ['}\x00']}, ["", "", "", "", "", ""]}, 0x424}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001c00), 0x200, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000001c40)) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x20, 0x3fa, 0x300, 0x70bd28, 0x25dfdbfd, {0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 07:42:03 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) pidfd_open(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000080)={0x10001, 0x80000000, 0x88b, 0xc441, 0xfffffffffffffff9, 0x80000001, 0x1000, 0x5}, &(0x7f00000000c0)={0x68d681f, 0x3, 0x1, 0x9c5, 0x100, 0x200, 0x80000000, 0x2}, &(0x7f0000000100)={0xfffffffffffff001, 0x20, 0x9, 0x4, 0xffffffff, 0x1, 0xf3, 0x200}, &(0x7f0000000180)={r1, r2/1000+60000}) r3 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="7c94a4a6c1d037f248085329d4bccc42c99aca7406dff61eca66a815257508bba37f2eadd47982713ab14d571b8a0f4b998f23f9d1e0d783a8508d4a350e809a21bf83db7a7abd76facf63ca63fd3fba03a8f5cc2c983bc773fecc48d2598cb674cb81c3", 0x64, 0x0) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x800) r5 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r4, &(0x7f0000000340)={r5, r3, 0xffffffdc}) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000380)={0x6b, 0xfa, "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"}) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0xe8900, 0x0) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000500)) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000540)) r7 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000580), 0x2, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x2000, 0x0) ioctl$SG_SET_COMMAND_Q(r8, 0x2271, &(0x7f0000001900)) r9 = syz_open_dev$vcsa(&(0x7f0000001940), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000001980)={r9, r3, 0x8}) perf_event_open$cgroup(&(0x7f0000001a00)={0x3, 0x80, 0x2, 0x2, 0x0, 0x6, 0x0, 0x1194, 0x4000, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f00000019c0)}, 0x109, 0x9ce4, 0x77, 0x6, 0x9, 0x4, 0x4, 0x0, 0x317, 0x0, 0x2}, r7, 0x10, 0xffffffffffffffff, 0x8) 07:42:03 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000080)=0x3) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r2, 0x2, 0x0, 0x7ff, 0x2}, 0x200) r3 = syz_open_dev$sg(&(0x7f0000000580), 0x6, 0x400a00) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000005c0)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x101000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) openat$cgroup_int(r4, &(0x7f0000000640)='blkio.reset_stats\x00', 0x2, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) recvmsg(r0, &(0x7f0000001880)={&(0x7f0000000680)=@can, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/188, 0xbc}], 0x2, &(0x7f0000001800)=""/92, 0x5c}, 0x10080) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x20183, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, &(0x7f0000001900)) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000001940)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, r1, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000001980)) [ 112.829983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.833264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.837555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.842930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.848773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.975240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.980766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.982416] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.988483] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.992453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.995876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.998007] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.007478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.019815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.029186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.074996] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.077683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.079467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.081750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.088529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.088774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.092339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.110764] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.126871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.135499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.171884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.175398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.176694] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.178107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.179419] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.184312] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.185567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.187780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.193939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.217816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.269698] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.283286] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.284513] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.302781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.310643] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.880221] Bluetooth: hci0: command tx timeout [ 115.070785] Bluetooth: hci2: command tx timeout [ 115.133812] Bluetooth: hci3: command tx timeout [ 115.133923] Bluetooth: hci1: command tx timeout [ 115.198082] Bluetooth: hci4: command tx timeout [ 115.261224] Bluetooth: hci5: command tx timeout [ 115.261841] Bluetooth: hci6: command tx timeout [ 115.389335] Bluetooth: hci7: command tx timeout [ 116.925608] Bluetooth: hci0: command tx timeout [ 117.117196] Bluetooth: hci2: command tx timeout [ 117.181420] Bluetooth: hci1: command tx timeout [ 117.181492] Bluetooth: hci3: command tx timeout [ 117.245295] Bluetooth: hci4: command tx timeout [ 117.309125] Bluetooth: hci5: command tx timeout [ 117.309197] Bluetooth: hci6: command tx timeout [ 117.437248] Bluetooth: hci7: command tx timeout [ 118.973180] Bluetooth: hci0: command tx timeout [ 119.166235] Bluetooth: hci2: command tx timeout [ 119.229147] Bluetooth: hci3: command tx timeout [ 119.229608] Bluetooth: hci1: command tx timeout [ 119.294154] Bluetooth: hci4: command tx timeout [ 119.357351] Bluetooth: hci6: command tx timeout [ 119.358694] Bluetooth: hci5: command tx timeout [ 119.487069] Bluetooth: hci7: command tx timeout [ 121.022143] Bluetooth: hci0: command tx timeout [ 121.213112] Bluetooth: hci2: command tx timeout [ 121.277268] Bluetooth: hci1: command tx timeout [ 121.277772] Bluetooth: hci3: command tx timeout [ 121.341307] Bluetooth: hci4: command tx timeout [ 121.406123] Bluetooth: hci5: command tx timeout [ 121.406219] Bluetooth: hci6: command tx timeout [ 121.534532] Bluetooth: hci7: command tx timeout [ 175.507372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.510380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.511758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.525681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.530957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.590683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.592643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.595329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.597973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.600333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.604468] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.605446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.607669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.609416] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.611631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.612902] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.615640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.619668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.622689] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.623995] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.628811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.655640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.661945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.666416] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.677382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.806992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.809872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.813324] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.826138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.833641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.933099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.935771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.938601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.943854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.949707] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.977223] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.982986] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.994492] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.005818] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.013207] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.598187] Bluetooth: hci0: command tx timeout [ 177.725374] Bluetooth: hci3: command tx timeout [ 177.789188] Bluetooth: hci1: command tx timeout [ 177.789412] Bluetooth: hci4: command tx timeout [ 177.790164] Bluetooth: hci2: command tx timeout [ 177.918120] Bluetooth: hci5: command tx timeout [ 178.045262] Bluetooth: hci6: command tx timeout [ 178.110116] Bluetooth: hci7: command tx timeout [ 179.645100] Bluetooth: hci0: command tx timeout [ 179.773599] Bluetooth: hci3: command tx timeout [ 179.837324] Bluetooth: hci2: command tx timeout [ 179.837824] Bluetooth: hci4: command tx timeout [ 179.837968] Bluetooth: hci1: command tx timeout [ 179.967059] Bluetooth: hci5: command tx timeout [ 180.094348] Bluetooth: hci6: command tx timeout [ 180.158279] Bluetooth: hci7: command tx timeout [ 181.693218] Bluetooth: hci0: command tx timeout [ 181.823093] Bluetooth: hci3: command tx timeout [ 181.885131] Bluetooth: hci1: command tx timeout [ 181.885637] Bluetooth: hci4: command tx timeout [ 181.886190] Bluetooth: hci2: command tx timeout [ 182.013288] Bluetooth: hci5: command tx timeout [ 182.141241] Bluetooth: hci6: command tx timeout [ 182.205122] Bluetooth: hci7: command tx timeout [ 183.742100] Bluetooth: hci0: command tx timeout [ 183.869156] Bluetooth: hci3: command tx timeout [ 183.933373] Bluetooth: hci2: command tx timeout [ 183.933869] Bluetooth: hci4: command tx timeout [ 183.934601] Bluetooth: hci1: command tx timeout [ 184.061154] Bluetooth: hci5: command tx timeout [ 184.189139] Bluetooth: hci6: command tx timeout [ 184.253223] Bluetooth: hci7: command tx timeout [ 235.545803] syz-executor.6 (2995) used greatest stack depth: 24592 bytes left [ 237.580867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.585339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.587000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.594342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.598163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.726940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.736316] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.744409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.754862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.757930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.806732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.822808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.826358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.843357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.862775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.970545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.975837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.977768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.987603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.990967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.076372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.083989] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.110559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.147269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.148639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.155971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.199997] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.208675] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.214459] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.216605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.225774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.231440] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.232343] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.239283] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.248445] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.260721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.264195] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.276430] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.290593] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.337194] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.679161] Bluetooth: hci0: command tx timeout [ 239.806212] Bluetooth: hci1: command tx timeout [ 239.934123] Bluetooth: hci2: command tx timeout [ 240.061315] Bluetooth: hci3: command tx timeout [ 240.317379] Bluetooth: hci5: command tx timeout [ 240.318594] Bluetooth: hci6: command tx timeout [ 240.382130] Bluetooth: hci4: command tx timeout [ 240.509601] Bluetooth: hci7: command tx timeout [ 241.726114] Bluetooth: hci0: command tx timeout [ 241.854277] Bluetooth: hci1: command tx timeout [ 241.981369] Bluetooth: hci2: command tx timeout [ 242.110135] Bluetooth: hci3: command tx timeout [ 242.366067] Bluetooth: hci6: command tx timeout [ 242.366096] Bluetooth: hci5: command tx timeout [ 242.430100] Bluetooth: hci4: command tx timeout [ 242.558263] Bluetooth: hci7: command tx timeout [ 243.773270] Bluetooth: hci0: command tx timeout [ 243.901181] Bluetooth: hci1: command tx timeout [ 244.029166] Bluetooth: hci2: command tx timeout [ 244.157507] Bluetooth: hci3: command tx timeout [ 244.414202] Bluetooth: hci6: command tx timeout [ 244.414684] Bluetooth: hci5: command tx timeout [ 244.477128] Bluetooth: hci4: command tx timeout [ 244.607494] Bluetooth: hci7: command tx timeout [ 245.821484] Bluetooth: hci0: command tx timeout [ 245.949125] Bluetooth: hci1: command tx timeout [ 246.077209] Bluetooth: hci2: command tx timeout [ 246.207144] Bluetooth: hci3: command tx timeout [ 246.461153] Bluetooth: hci5: command tx timeout [ 246.461198] Bluetooth: hci6: command tx timeout [ 246.525242] Bluetooth: hci4: command tx timeout [ 246.653244] Bluetooth: hci7: command tx timeout [ 300.179763] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.185563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.191750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.200996] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.209482] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.374987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.379334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.383765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.389595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.396386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.437916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.445772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.448633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.455082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.459648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.605562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.631916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.634693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.655562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.679923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.692771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.703714] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.715467] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.727481] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.745473] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.762741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.785243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.791977] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.798542] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.801513] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.803141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.815621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.825460] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.830733] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.837733] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.857523] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.907405] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.909802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.920335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.921942] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.270105] Bluetooth: hci0: command tx timeout [ 302.464090] Bluetooth: hci1: command tx timeout [ 302.526126] Bluetooth: hci2: command tx timeout [ 302.781175] Bluetooth: hci3: command tx timeout [ 302.909111] Bluetooth: hci4: command tx timeout [ 302.910109] Bluetooth: hci7: command tx timeout [ 303.037132] Bluetooth: hci5: command tx timeout [ 303.037931] Bluetooth: hci6: command tx timeout [ 304.317109] Bluetooth: hci0: command tx timeout [ 304.509115] Bluetooth: hci1: command tx timeout [ 304.574120] Bluetooth: hci2: command tx timeout [ 304.829485] Bluetooth: hci3: command tx timeout [ 304.959055] Bluetooth: hci7: command tx timeout [ 304.959535] Bluetooth: hci4: command tx timeout [ 305.085255] Bluetooth: hci6: command tx timeout [ 305.085725] Bluetooth: hci5: command tx timeout [ 306.365090] Bluetooth: hci0: command tx timeout [ 306.559064] Bluetooth: hci1: command tx timeout [ 306.622103] Bluetooth: hci2: command tx timeout [ 306.877196] Bluetooth: hci3: command tx timeout [ 307.005395] Bluetooth: hci4: command tx timeout [ 307.005979] Bluetooth: hci7: command tx timeout [ 307.133133] Bluetooth: hci5: command tx timeout [ 307.133603] Bluetooth: hci6: command tx timeout [ 308.413152] Bluetooth: hci0: command tx timeout [ 308.605467] Bluetooth: hci1: command tx timeout [ 308.669113] Bluetooth: hci2: command tx timeout [ 308.926468] Bluetooth: hci3: command tx timeout [ 309.054726] Bluetooth: hci7: command tx timeout [ 309.056717] Bluetooth: hci4: command tx timeout [ 309.181439] Bluetooth: hci5: command tx timeout [ 309.182395] Bluetooth: hci6: command tx timeout [ 362.575335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.579475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.582831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.592714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.598374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.714404] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.726531] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.731130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.744946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.749803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.902307] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.911577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.919556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.935515] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.951275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.971198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.985944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.025376] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.042005] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.065453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.109711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.115821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.135082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.142957] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.143842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.163415] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.163578] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.174574] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.180989] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.184528] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.186892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.206531] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.208625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.218455] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.227630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.231911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.241746] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.248588] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.274695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.307724] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.669399] Bluetooth: hci0: command tx timeout [ 364.797123] Bluetooth: hci1: command tx timeout [ 365.053102] Bluetooth: hci2: command tx timeout [ 365.181258] Bluetooth: hci3: command tx timeout [ 365.309080] Bluetooth: hci4: command tx timeout [ 365.373148] Bluetooth: hci7: command tx timeout [ 365.437949] Bluetooth: hci5: command tx timeout [ 365.439255] Bluetooth: hci6: command tx timeout [ 366.717162] Bluetooth: hci0: command tx timeout [ 366.847097] Bluetooth: hci1: command tx timeout [ 367.101672] Bluetooth: hci2: command tx timeout [ 367.229593] Bluetooth: hci3: command tx timeout [ 367.359098] Bluetooth: hci4: command tx timeout [ 367.421610] Bluetooth: hci7: command tx timeout [ 367.486199] Bluetooth: hci5: command tx timeout [ 367.486766] Bluetooth: hci6: command tx timeout [ 368.765212] Bluetooth: hci0: command tx timeout [ 368.894244] Bluetooth: hci1: command tx timeout [ 369.150451] Bluetooth: hci2: command tx timeout [ 369.278270] Bluetooth: hci3: command tx timeout [ 369.406128] Bluetooth: hci4: command tx timeout [ 369.470082] Bluetooth: hci7: command tx timeout [ 369.533198] Bluetooth: hci6: command tx timeout [ 369.533627] Bluetooth: hci5: command tx timeout [ 370.814107] Bluetooth: hci0: command tx timeout [ 370.941084] Bluetooth: hci1: command tx timeout [ 371.197128] Bluetooth: hci2: command tx timeout [ 371.325359] Bluetooth: hci3: command tx timeout [ 371.455074] Bluetooth: hci4: command tx timeout [ 371.517082] Bluetooth: hci7: command tx timeout [ 371.581220] Bluetooth: hci5: command tx timeout [ 371.581664] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:47:13 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea0000ce5bc0 RCX=ffffffff81a0f078 RDX=ffff888023c1d340 RSI=0000000000000008 RDI=ffffea0000ce5bc0 RBP=0000000000000001 RSP=ffff8880254d7610 R8 =0000000000000000 R9 =fffff9400019cb78 R10=0000000000000000 R11=ffff888009bbf098 R12=ffffea0000ce5bc0 R13=00007f366da1e000 R14=ffff88800e9568c0 R15=ffff8880254d77b8 RIP=ffffffff81ae05e8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b147a99080 CR3=00000000281a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff817afdd6 RDX=fffffbfff0c81d83 RSI=0000000000000008 RDI=ffffffff8640ec10 RBP=ffff888031c47f58 RSP=ffff888031c47f00 R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=ffffffff8640ec17 R11=0000000000000000 R12=0000000000000014 R13=0000000000000000 R14=00007f37d0ce6000 R15=0000000000000000 RIP=ffffffff817afdde RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f37d0a72540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f37d0ce6000 CR3=000000000da08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000