Warning: Permanently added '[localhost]:21787' (ECDSA) to the list of known hosts. 2025/04/26 17:52:55 fuzzer started 2025/04/26 17:52:55 dialing manager at localhost:46629 syzkaller login: [ 98.624337] cgroup: Unknown subsys name 'net' [ 98.755955] cgroup: Unknown subsys name 'cpuset' [ 98.805332] cgroup: Unknown subsys name 'rlimit' 2025/04/26 17:53:11 syscalls: 204 2025/04/26 17:53:11 code coverage: enabled 2025/04/26 17:53:11 comparison tracing: enabled 2025/04/26 17:53:11 extra coverage: enabled 2025/04/26 17:53:11 setuid sandbox: enabled 2025/04/26 17:53:11 namespace sandbox: enabled 2025/04/26 17:53:11 Android sandbox: enabled 2025/04/26 17:53:11 fault injection: enabled 2025/04/26 17:53:11 leak checking: enabled 2025/04/26 17:53:11 net packet injection: enabled 2025/04/26 17:53:11 net device setup: enabled 2025/04/26 17:53:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/26 17:53:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/26 17:53:11 USB emulation: enabled 2025/04/26 17:53:11 hci packet injection: enabled 2025/04/26 17:53:11 wifi device emulation: enabled 2025/04/26 17:53:11 802.15.4 emulation: enabled 2025/04/26 17:53:11 fetching corpus: 0, signal 0/0 (executing program) 2025/04/26 17:53:12 starting 8 fuzzer processes 17:53:12 executing program 0: clock_getres(0x0, &(0x7f0000000000)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) clock_gettime(0x6, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffff7c9, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x6}, &(0x7f0000000100)={0x3fa6, 0x0, 0x50d82b53, 0x7fff, 0x0, 0x10000, 0x7ff}, &(0x7f0000000140)={0x3, 0x0, 0x9, 0x1, 0x1f, 0xfff, 0x7f, 0x8}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x2]}, 0x8}) r0 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x7, 0x10001, 0x8, @dev={0xfe, 0x80, '\x00', 0x23}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0x3, 0x80000001}}) syz_usb_disconnect(0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x44, 0x45, "bb37865057ed5c703079bb59f2d45ebf9ffa3363e21099ca624d3dd5e347e0880d4d36c671e99227094703a0358466947901eca11fadbb6bd62d7dd4a992f90c"}]}, 0x60}}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xf0, r3, 0x8, 0x3f, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x44}], @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5ae00ac1fc"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8d9c8b27b9"}, @NL80211_KEY_SEQ={0x10, 0x4, "42408f4e4b40121802522925"}, @NL80211_KEY_MODE={0x5, 0x9, 0x80}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5c0b0257bd2bd98cf3ab821d67"}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r4 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc227, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc1, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xea3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x7, 0x1f}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x110, 0x5, 0x9, 0xf, 0x20, 0x6}, 0x17, &(0x7f0000000780)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x7, 0x9, 0x7804}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x80, 0x1, 0x46e5, 0x90}]}, 0x5, [{0x69, &(0x7f00000007c0)=@string={0x69, 0x3, "c9a2c654f1ad4fc915a6f9615b3a2971de179e2289a94d1241dc23f56e592f986087e5229bb3e909c3a2346fc0940794fb7d882f69a0c2f087f57e627c69a4c33f9dea1cf2a895cfcb78e74f827c94bbd6c9f7d67d89cad7d84724abce8b3a31620155346e4e9a"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x420}}, {0xc1, &(0x7f0000000880)=@string={0xc1, 0x3, "62be9f1f565c48a9d157e8ae5d214c88b024346eacee6b4ffec76dd8968088878466fa9345394166c3f53079441c1cc257a4d49c639c0edd0aea223fe63bb9ae3b57c6abea9b02457636e8909ee304f2c8ab8798a808b3b20cd9b9c467f3c793a701bf3761435a65665fdaef5c48267e37f8de7db916ea5ddcac493a20fac67e57ad0f2481d470741af669e8b7496398bb5bbbf59daef1d81fd004ee151ba4821286373514dc4957e789b0a67b3b8ae16ac74814fccb4919c902acdb23fcbe"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x45, &(0x7f00000009c0)=@string={0x45, 0x3, "565bb496f11297523bb308f6936d72a55deb54dcd0fd3b86a5a2fb2bc60f6112e381a204dc24745215150ee54119efe9d2e868f84e72ff957d8cfbbd81fee87701827a"}}]}) syz_usb_control_io(r4, &(0x7f0000000d80)={0x2c, &(0x7f0000000ac0)={0x20, 0x1, 0xd9, {0xd9, 0x5, "2d4efa1bbb3957a6757e949603b657d96641270241897932da7390543b76bfdac7286c51adeb91d1377e2b2006a5b0500f8650c7f291c0f4b1a93fbdeee3e5305cdeaffca256ed2c77d1b6afdb1487f02250acd9d7dfd6ea766d2a35dc64fdbc1360381784bf37fecb7d78c4b52c6ccc04bf4ba81655e914f0c2cedef0fd39722fbc35b6809881d5d81199a0d7b513b339f82428dfb64af336c3bc6d87d89eebefb185f456bcd0ed8d1e6437976a7296249055faa0d6a896fe0d8fc37016726e3abfb958b34ab8af04ed9e55be64e5589aa002db96504a"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "3ebbcc76ba3b12749fbe5cf782f513de41419790aef9e4b81840e4c645a01de7c1178136af05fb58f3cb53bcf4065bf36037ede73fcb38160d64cf2671ed66e4187f4b12af3038fd80ca53510b22983b22c7b0f13cc97ea1bffb85752fe25a45ca47b94f777ce80f6711e81d3c5b7a97a59d40067ce58ed330"}}, &(0x7f0000000c80)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "0878a9d513d46a25102bdc301f6655a9"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d40da98763e7f413a885b2fba36ec13f"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "1c772284e03e18408a898a1e735a9b1d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x2, 0x1, 0xfffe}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x60, 0x3f, 0x3f, "14a8e866", "6f59ac7a"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0xc, 0xa3, 0x9, 0xff, 0xf7, 0x8}}}, &(0x7f0000001200)={0x84, &(0x7f0000000dc0)={0x0, 0xf, 0x40, "60e95ec02e996347483c08eb23c570db11392adf8783d1e7861d5b6f8601464e0b650b6c41f4f480a41b1522f0d2460b9c7d7d835ea7e3dcc06cfc41c3a00613"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0xd1}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000f00)={0x20, 0x0, 0x8, {0x20, 0x20, [0xf00f]}}, &(0x7f0000000f40)={0x40, 0x7, 0x2, 0x59}, &(0x7f0000000f80)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "8ffb"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000001040)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001080)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000010c0)={0x40, 0x19, 0x2, "afb0"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x5}}) r5 = accept4(r0, &(0x7f00000012c0)=@generic, &(0x7f0000001340)=0x80, 0x800) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40048a5}, 0x44) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20801022}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x11c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x38}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe1, 0xbe, "dee0eaecb297a54f962441274cb9c09879f07e78d918981f82431ffde7c714ee1f074b96aed7804174da809a462ea758ec0d361417e99cf1a9e295a20363d00b74783340b45529096a102b0ea8ed2addbf2908c40d36c15ccb9714cf9d6e9ce27f393fba3c47ce262e92bf3daeb3d38f826b3934c61bf5da5b94b251723399c78f9d2a226a5e5227d0fbace08423ece3103c091bf32afcfcd671ad876e59e23db41f0b619e08db89b8d4a1aa689e47d8bc35ac38a79793adf00d3e89d1aa92ec5ce19d179d9c6f4969074081cb8463ded252c81f893d01d202aa5ca52a"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x57d}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3d}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001700), r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x5c, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048004}, 0x800) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000001840)) [ 114.851094] audit: type=1400 audit(1745689992.297:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:53:12 executing program 1: getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x80, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "2bc41ae8c6"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9ddb0ac6e1"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "3e1fdd5dc2923fbbab"}], @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x343}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "1e"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "a3b7049d892125331f3d88067bd6"}]]}, 0x10c}, 0x1, 0x0, 0x0, 0x4040800}, 0x80) clock_gettime(0x6, &(0x7f0000000340)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = accept4(r0, 0x0, &(0x7f0000000440), 0xc00) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x17f3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x4, 0x5, 0x6, 0x9, 0x0, @mcast1, @loopback, 0x10, 0x8, 0x5, 0x4}}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000008c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1a8, 0x0, 0x7, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, r5, 0x4, 0x7, 0xfffffffffffffff9) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000980)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r6, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40841}, 0x40000c0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r6, 0x411, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}}, 0x80) r8 = accept4(r1, &(0x7f0000000c80)=@isdn, &(0x7f0000000d00)=0x80, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x98, r6, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x6f, 0x2a, [@measure_req={0x26, 0x69, {0x9, 0x82, 0x8b, "dd733a5194ed435f0741c9ee023ccf2ded06a1f0c40fe81c95d4814297ee16aa18674714149bbbee2025090268f04fa8b327a6ef03c95a7746ae1216fcfbbd8a29be6c1f403406ff7b011cd74d968d8c65a6180599efbce2ff58e13abc14a344c7dde9a3aa92"}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x1) 17:53:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x4800000000, 0x400) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x400001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x63, 0x8, 0x4, @mcast2, @remote, 0x7, 0x8000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', r2, 0x0, 0x81, 0x6, 0x81, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0xf, 0x1, 0x2, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', r3, 0x2f, 0x81, 0x41, 0x6, 0x25, @private2, @mcast2, 0x700, 0x80, 0x583, 0x4}}) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000440), 0x5, 0x2) clock_gettime(0x3, &(0x7f0000000480)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', r2, 0x4, 0x4, 0x4, 0x6, 0x8, @mcast1, @loopback, 0x80, 0x1, 0x7f, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl0\x00', r5, 0x4, 0x3f, 0x81, 0x3, 0x18, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x700, 0x7, 0x2, 0x8}}) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_dev$sg(&(0x7f0000000640), 0x4, 0x8443) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', r5, 0x4, 0x3, 0x8, 0x5, 0x6, @remote, @loopback, 0x80, 0x40, 0x1000, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6_vti0\x00', r7, 0x2f, 0x20, 0xdc, 0x1, 0x36, @mcast2, @dev={0xfe, 0x80, '\x00', 0x11}, 0x1, 0x10, 0x1403}}) 17:53:12 executing program 3: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x10}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) socketpair(0x0, 0x4, 0x7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4e22044}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1010}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xd080500}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x178, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r3, &(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x80, 0x0) socketpair(0xf, 0x5, 0x1, &(0x7f0000000600)={0xffffffffffffffff}) socketpair(0x1e, 0xa, 0xffffffff, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x9291f16f6a64e090) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xec, r8, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x78a}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7, 0x65a5, 0x9, 0xfff]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x8, 0x2d, 0x1f]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5b8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) times(&(0x7f0000000c00)) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000c40)=0x1, 0x4) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x4881}, 0x10) 17:53:12 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x7, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) r1 = syz_open_dev$rtc(&(0x7f00000000c0), 0x7f, 0x20000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$RTC_AIE_OFF(r0, 0x7002) r3 = syz_open_dev$rtc(&(0x7f0000000180), 0x70, 0xa0000) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000001c0)={0x0, 0x1, {0x2b, 0x3b, 0xf, 0x18, 0x8, 0x7, 0x2, 0xc2}}) getpgrp(0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000200)={0x1, 0x1, {0x38, 0x32, 0xd, 0x1e, 0xa, 0x3, 0x4, 0x6a, 0x1}}) ioctl$RTC_PIE_OFF(r3, 0x7006) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x101200, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) ioctl$RTC_PIE_OFF(r4, 0x7006) 17:53:12 executing program 4: clock_gettime(0x3, &(0x7f0000000000)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x0, 0x1, {0x21, 0x10, 0xc, 0x17, 0x3, 0x1, 0x2, 0x21, 0xffffffffffffffff}}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000080)) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r1 = eventfd(0x2) read$eventfd(r1, &(0x7f0000000100), 0x8) r2 = accept4(r0, &(0x7f0000000140)=@nfc, &(0x7f00000001c0)=0x80, 0x800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xda0}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7f}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x19}}}}, [@NL80211_ATTR_IE={0x41, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @prep={0x83, 0x1f, @not_ext={{}, 0x3, 0x66, @broadcast, 0x0, "", 0x80000001, 0x7ff, @device_a, 0x5}}, @link_id={0x65, 0x12, {@random="1953b719d7f1"}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x4054) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x34}}, 0x48000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x488080) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000640)={{0x1, 0x8}, 'port1\x00', 0x0, 0x100001, 0x0, 0x9, 0x400, 0x7, 0x0, 0x0, 0x3, 0x4}) 17:53:12 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x4e8, 0x80400) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x36, 0x2, 0x16, 0x1b, 0x6, 0xe64, 0x5, 0xc}}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = syz_open_dev$rtc(&(0x7f0000000100), 0x8, 0x900) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000140)={0x1, 0x1, {0x23, 0x10, 0x7, 0xd, 0x1, 0x1, 0x2, 0xba, 0xffffffffffffffff}}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000180)={0x80000000, 0x4, 0xff, 0x6, 0x9, 0x0, 0x4}) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000001c0)={0x2dd5, 0x1, 0x1288, 0x81, 0xa6e, 0xfffffffe, 0x3}) ioctl$RTC_PIE_OFF(r1, 0x7006) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffff3212}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x20}]}, 0x58}, 0x1, 0x0, 0x0, 0x48}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x6000000}, 0x4000800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r5) ioctl$RTC_AIE_OFF(r2, 0x7002) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x48}, @val={0x8}, @val={0xc, 0x99, {0x40, 0x5f}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004080}, 0x20000840) 17:53:12 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair(0x1f, 0x5, 0x20, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x5c}}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4(r3, &(0x7f0000000280)=@qipcrtr, &(0x7f0000000300)=0x80, 0x0) socketpair(0x21, 0x4, 0x8, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0xa04d63e3c2387aed}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc27}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r7}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4000051) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0xb83875df54476fc8, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xfd1056e329e2f5a2}, 0x24000010) r9 = accept4(r6, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000680)=0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x28, 0xa, 0xcd, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x0, 0x1704, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r11}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20c3}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x800) accept4(r11, 0x0, &(0x7f0000000840), 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000880)=0x3, 0x4) [ 116.104033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.108621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.116257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.125785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.133840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.475793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.479918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.488529] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.496249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.501210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.568087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.572760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.579750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.582223] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.584575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.588030] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.594214] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.600210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.605099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.609772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.614411] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.633326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.639100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.641904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.679987] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.720381] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.724953] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.748263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.750121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.753136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.766245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.768358] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.787706] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.806157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.811615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.817973] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.833244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.834118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.854036] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.859994] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.182131] Bluetooth: hci0: command tx timeout [ 118.566092] Bluetooth: hci1: command tx timeout [ 118.692821] Bluetooth: hci2: command tx timeout [ 118.756947] Bluetooth: hci4: command tx timeout [ 118.820855] Bluetooth: hci3: command tx timeout [ 118.950577] Bluetooth: hci5: command tx timeout [ 118.950596] Bluetooth: hci7: command tx timeout [ 118.950777] Bluetooth: hci6: command tx timeout [ 120.228629] Bluetooth: hci0: command tx timeout [ 120.614491] Bluetooth: hci1: command tx timeout [ 120.740784] Bluetooth: hci2: command tx timeout [ 120.804504] Bluetooth: hci4: command tx timeout [ 120.868505] Bluetooth: hci3: command tx timeout [ 120.997984] Bluetooth: hci6: command tx timeout [ 120.998531] Bluetooth: hci5: command tx timeout [ 120.998997] Bluetooth: hci7: command tx timeout [ 122.277500] Bluetooth: hci0: command tx timeout [ 122.661498] Bluetooth: hci1: command tx timeout [ 122.789559] Bluetooth: hci2: command tx timeout [ 122.853700] Bluetooth: hci4: command tx timeout [ 122.917529] Bluetooth: hci3: command tx timeout [ 123.044662] Bluetooth: hci6: command tx timeout [ 123.047483] Bluetooth: hci7: command tx timeout [ 123.047935] Bluetooth: hci5: command tx timeout [ 124.324544] Bluetooth: hci0: command tx timeout [ 124.708712] Bluetooth: hci1: command tx timeout [ 124.837377] Bluetooth: hci2: command tx timeout [ 124.901690] Bluetooth: hci4: command tx timeout [ 124.964550] Bluetooth: hci3: command tx timeout [ 125.092715] Bluetooth: hci5: command tx timeout [ 125.093207] Bluetooth: hci7: command tx timeout [ 125.093875] Bluetooth: hci6: command tx timeout [ 176.269811] syz-executor.1 (283) used greatest stack depth: 24200 bytes left [ 179.127331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.130221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.132194] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.137960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.143266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.210069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.219194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.220791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.224782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.227308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.265049] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.267231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.272296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.273363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.277952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.280132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.281918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.283337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.290295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.295726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.394808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.425392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.437884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.484240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.529707] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.535089] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 179.542858] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 179.558344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 179.564242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 179.567187] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.602795] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 179.638117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.649003] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 179.730510] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.744185] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 179.789690] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.796604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 179.803902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.806795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.822894] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.220549] Bluetooth: hci0: command tx timeout [ 181.284522] Bluetooth: hci1: command tx timeout [ 181.348798] Bluetooth: hci3: command tx timeout [ 181.350387] Bluetooth: hci2: command tx timeout [ 181.604620] Bluetooth: hci4: command tx timeout [ 181.604630] Bluetooth: hci7: command tx timeout [ 181.924834] Bluetooth: hci5: command tx timeout [ 181.989594] Bluetooth: hci6: command tx timeout [ 183.269586] Bluetooth: hci0: command tx timeout [ 183.333066] Bluetooth: hci1: command tx timeout [ 183.397691] Bluetooth: hci2: command tx timeout [ 183.398070] Bluetooth: hci3: command tx timeout [ 183.653111] Bluetooth: hci4: command tx timeout [ 183.654166] Bluetooth: hci7: command tx timeout [ 183.973272] Bluetooth: hci5: command tx timeout [ 184.036635] Bluetooth: hci6: command tx timeout [ 185.316518] Bluetooth: hci0: command tx timeout [ 185.380516] Bluetooth: hci1: command tx timeout [ 185.444550] Bluetooth: hci2: command tx timeout [ 185.447051] Bluetooth: hci3: command tx timeout [ 185.700530] Bluetooth: hci7: command tx timeout [ 185.700543] Bluetooth: hci4: command tx timeout [ 186.020918] Bluetooth: hci5: command tx timeout [ 186.085476] Bluetooth: hci6: command tx timeout [ 187.364507] Bluetooth: hci0: command tx timeout [ 187.428504] Bluetooth: hci1: command tx timeout [ 187.493128] Bluetooth: hci3: command tx timeout [ 187.493634] Bluetooth: hci2: command tx timeout [ 187.749473] Bluetooth: hci7: command tx timeout [ 187.749628] Bluetooth: hci4: command tx timeout [ 188.068521] Bluetooth: hci5: command tx timeout [ 188.132503] Bluetooth: hci6: command tx timeout [ 241.082836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.086155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.087400] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.092271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.095865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.150661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.158866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.164847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.170101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.174319] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.270172] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.274502] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.281606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.287356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.302315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.318519] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.322038] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.328980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.336844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.341464] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.451335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.462949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.478691] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.523715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.535333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.660281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.665155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.684587] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.700344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.718048] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.724011] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.725400] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.732118] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.740676] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.742230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.750741] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.766186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.778709] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.835631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.869816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.173590] Bluetooth: hci0: command tx timeout [ 243.239962] Bluetooth: hci1: command tx timeout [ 243.428679] Bluetooth: hci3: command tx timeout [ 243.429559] Bluetooth: hci2: command tx timeout [ 243.622703] Bluetooth: hci4: command tx timeout [ 243.876535] Bluetooth: hci7: command tx timeout [ 243.877274] Bluetooth: hci6: command tx timeout [ 244.005823] Bluetooth: hci5: command tx timeout [ 245.220510] Bluetooth: hci0: command tx timeout [ 245.284489] Bluetooth: hci1: command tx timeout [ 245.476535] Bluetooth: hci2: command tx timeout [ 245.476980] Bluetooth: hci3: command tx timeout [ 245.669491] Bluetooth: hci4: command tx timeout [ 245.926494] Bluetooth: hci6: command tx timeout [ 245.926952] Bluetooth: hci7: command tx timeout [ 246.052692] Bluetooth: hci5: command tx timeout [ 247.269475] Bluetooth: hci0: command tx timeout [ 247.334446] Bluetooth: hci1: command tx timeout [ 247.525511] Bluetooth: hci3: command tx timeout [ 247.525951] Bluetooth: hci2: command tx timeout [ 247.716609] Bluetooth: hci4: command tx timeout [ 247.973740] Bluetooth: hci7: command tx timeout [ 247.974193] Bluetooth: hci6: command tx timeout [ 248.102464] Bluetooth: hci5: command tx timeout [ 249.316502] Bluetooth: hci0: command tx timeout [ 249.380543] Bluetooth: hci1: command tx timeout [ 249.572802] Bluetooth: hci2: command tx timeout [ 249.573546] Bluetooth: hci3: command tx timeout [ 249.765792] Bluetooth: hci4: command tx timeout [ 250.020508] Bluetooth: hci7: command tx timeout [ 250.020987] Bluetooth: hci6: command tx timeout [ 250.149857] Bluetooth: hci5: command tx timeout [ 303.679777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.686033] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.691988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.706880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.714164] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.719343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.723323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.730971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.756621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.761225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.819149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.823039] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.825736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.836341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.845908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.957065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.981321] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.990015] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.000945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.007103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.021282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.037971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.054159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.058129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.061616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.065907] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.071348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.077697] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.121726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.130721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.278494] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.281031] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.284277] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.287905] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.290124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.293823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.356104] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.402105] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.404982] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.419359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.828551] Bluetooth: hci0: command tx timeout [ 305.828581] Bluetooth: hci1: command tx timeout [ 305.892675] Bluetooth: hci2: command tx timeout [ 306.149684] Bluetooth: hci3: command tx timeout [ 306.149747] Bluetooth: hci4: command tx timeout [ 306.277615] Bluetooth: hci5: command tx timeout [ 306.468541] Bluetooth: hci7: command tx timeout [ 306.532547] Bluetooth: hci6: command tx timeout [ 307.876662] Bluetooth: hci0: command tx timeout [ 307.876742] Bluetooth: hci1: command tx timeout [ 307.940524] Bluetooth: hci2: command tx timeout [ 308.196554] Bluetooth: hci3: command tx timeout [ 308.196594] Bluetooth: hci4: command tx timeout [ 308.324570] Bluetooth: hci5: command tx timeout [ 308.517079] Bluetooth: hci7: command tx timeout [ 308.580536] Bluetooth: hci6: command tx timeout [ 309.924598] Bluetooth: hci0: command tx timeout [ 309.924793] Bluetooth: hci1: command tx timeout [ 309.989493] Bluetooth: hci2: command tx timeout [ 310.244720] Bluetooth: hci3: command tx timeout [ 310.244857] Bluetooth: hci4: command tx timeout [ 310.374642] Bluetooth: hci5: command tx timeout [ 310.565691] Bluetooth: hci7: command tx timeout [ 310.629766] Bluetooth: hci6: command tx timeout [ 311.973539] Bluetooth: hci1: command tx timeout [ 311.974039] Bluetooth: hci0: command tx timeout [ 312.038006] Bluetooth: hci2: command tx timeout [ 312.292519] Bluetooth: hci3: command tx timeout [ 312.294950] Bluetooth: hci4: command tx timeout [ 312.421721] Bluetooth: hci5: command tx timeout [ 312.612522] Bluetooth: hci7: command tx timeout [ 312.679470] Bluetooth: hci6: command tx timeout [ 366.211258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.214540] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.217213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.224837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.229068] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.239090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.257116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.260366] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.279245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.284091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.417796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.432738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.451727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.487386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.494900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.498233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.503647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.537958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.556179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.591871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.593904] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.596117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.596642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.598997] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.600691] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.604922] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.610116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.613313] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.615881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.624509] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.627362] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.631708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.662011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.692193] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.697101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.702733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.712166] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.724801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.758038] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.762903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.293522] Bluetooth: hci1: command tx timeout [ 368.357025] Bluetooth: hci0: command tx timeout [ 368.676577] Bluetooth: hci6: command tx timeout [ 368.676631] Bluetooth: hci2: command tx timeout [ 368.741140] Bluetooth: hci7: command tx timeout [ 368.804708] Bluetooth: hci5: command tx timeout [ 368.804801] Bluetooth: hci3: command tx timeout [ 368.870462] Bluetooth: hci4: command tx timeout [ 370.340631] Bluetooth: hci1: command tx timeout [ 370.404524] Bluetooth: hci0: command tx timeout [ 370.724749] Bluetooth: hci6: command tx timeout [ 370.727652] Bluetooth: hci2: command tx timeout [ 370.788793] Bluetooth: hci7: command tx timeout [ 370.852570] Bluetooth: hci3: command tx timeout [ 370.853668] Bluetooth: hci5: command tx timeout [ 370.916690] Bluetooth: hci4: command tx timeout [ 372.388616] Bluetooth: hci1: command tx timeout [ 372.454722] Bluetooth: hci0: command tx timeout [ 372.772700] Bluetooth: hci2: command tx timeout [ 372.772999] Bluetooth: hci6: command tx timeout [ 372.836536] Bluetooth: hci7: command tx timeout [ 372.900507] Bluetooth: hci5: command tx timeout [ 372.900530] Bluetooth: hci3: command tx timeout [ 372.965524] Bluetooth: hci4: command tx timeout [ 374.436728] Bluetooth: hci1: command tx timeout [ 374.500556] Bluetooth: hci0: command tx timeout [ 374.821480] Bluetooth: hci2: command tx timeout [ 374.821569] Bluetooth: hci6: command tx timeout [ 374.887084] Bluetooth: hci7: command tx timeout [ 374.949174] Bluetooth: hci3: command tx timeout [ 374.950176] Bluetooth: hci5: command tx timeout [ 375.012524] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 17:58:14 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=ffff8880274f7f28 RCX=0000000000000001 RDX=ffff8880274f8001 RSI=ffff8880274f7ef8 RDI=ffff88806ce08aa8 RBP=ffff8880274f0000 RSP=ffff88806ce08a20 R8 =0000000000000001 R9 =ffff88806ce08ad8 R10=000000000003b0c2 R11=0000000000006eb3 R12=ffff88806ce08a01 R13=ffff88806ce08ae0 R14=ffff8880274f7ef8 R15=ffff88806ce08a98 RIP=ffffffff84ae114a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f50da9f8540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f50dacddf00 CR3=000000002b820000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88803392ff58 RCX=ffff88803392f744 RDX=0000000000000001 RSI=ffffffff85c1bac0 RDI=ffff88802fbd8a80 RBP=ffff888033928000 RSP=ffff88803392f778 R8 =0000000000000001 R9 =ffff88803392f830 R10=000000000003b0c2 R11=00000000000c39fb R12=ffff88803392f801 R13=ffff88803392f838 R14=ffff88803392ff48 R15=ffff88803392f7f0 RIP=ffffffff8151826d RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556d504a84c8 CR3=0000000031eb4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000