Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:31619' (ECDSA) to the list of known hosts. 2025/04/29 14:43:57 fuzzer started 2025/04/29 14:43:58 dialing manager at localhost:36753 syzkaller login: [ 104.130842] cgroup: Unknown subsys name 'net' [ 104.304109] cgroup: Unknown subsys name 'cpuset' [ 104.333763] cgroup: Unknown subsys name 'rlimit' 2025/04/29 14:44:18 syscalls: 2214 2025/04/29 14:44:18 code coverage: enabled 2025/04/29 14:44:18 comparison tracing: enabled 2025/04/29 14:44:18 extra coverage: enabled 2025/04/29 14:44:18 setuid sandbox: enabled 2025/04/29 14:44:18 namespace sandbox: enabled 2025/04/29 14:44:18 Android sandbox: enabled 2025/04/29 14:44:18 fault injection: enabled 2025/04/29 14:44:18 leak checking: enabled 2025/04/29 14:44:18 net packet injection: enabled 2025/04/29 14:44:18 net device setup: enabled 2025/04/29 14:44:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/29 14:44:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/29 14:44:18 USB emulation: enabled 2025/04/29 14:44:18 hci packet injection: enabled 2025/04/29 14:44:18 wifi device emulation: enabled 2025/04/29 14:44:18 802.15.4 emulation: enabled 2025/04/29 14:44:18 fetching corpus: 0, signal 0/0 (executing program) 2025/04/29 14:44:19 starting 8 fuzzer processes 14:44:19 executing program 0: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x2430000000) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1463]}, 0x8) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) r1 = dup3(r0, r0, 0x80000) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x8) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000180)={0x2, 0x1, 0x200, 0x5, 0x7, 0x7ccb}) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f00000001c0)={0x10000, {{0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc9}}}, 0x88) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@cache_none}, {@version_9p2000}], [{@euid_gt={'euid>', r5}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs2/binder-control\x00'}}, {@audit}, {@context={'context', 0x3d, 'sysadm_u'}}, {@measure}]}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0xef4c}}, './file0\x00'}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) fspick(r8, &(0x7f0000000580)='./file0\x00', 0x1) dup2(r1, r8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x4) getsockname$inet(r7, &(0x7f00000005c0)={0x2, 0x0, @loopback}, &(0x7f0000000600)=0x10) fchownat(r6, &(0x7f0000000640)='./file0\x00', 0x0, r2, 0x100) 14:44:19 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', r0, 0x29, 0xc7, 0x80, 0x7fff, 0x90, @remote, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x40, 0x8b0, 0x401}}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x2, 0x8000, 0x5a, @mcast1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8, 0x700, 0x80000000, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', r5, 0x4, 0x6, 0x1, 0x7, 0x5a, @loopback, @loopback, 0x700, 0x80, 0x2, 0x1ff}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000580)={0x0, 0x3, 0x2, 0x28e, 0xa, [{0x9, 0x8000, 0xbc, '\x00', 0x50e}, {0x1, 0x1, 0x7fffffff, '\x00', 0x200}, {0x1, 0xa628, 0xffffffffffffffff, '\x00', 0x202}, {0x3180000000, 0xffff, 0x1, '\x00', 0x2804}, {0x3f, 0x100000000, 0x8, '\x00', 0x880}, {0xfffffffffffffffb, 0xbe55, 0x4, '\x00', 0x107}, {0x0, 0x7, 0x3, '\x00', 0x1589}, {0x31, 0x8, 0xa8d1, '\x00', 0x800}, {0x2, 0x0, 0x1f, '\x00', 0x100}, {0xac, 0x3, 0x1000, '\x00', 0x200}]}) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000800)='ip6tnl0\x00', 0x0, r2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'virt_wifi0\x00'}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$addseals(r7, 0x409, 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3, {0x8000}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000008c0)={0x0, 'veth1_to_batadv\x00'}, 0x18) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000900)={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xe}, 0x9, 0xfffd, 0xc030, 0x400, 0xfffffffffffffffc, 0x2400000, r1}) sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000089}, 0x4800) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x78, 0x0, 0x602, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x84) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000dc0)={'sit0\x00', &(0x7f0000000d40)={'sit0\x00', 0x0, 0x2f, 0x5, 0x9, 0x9a73, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x700, 0x10, 0xe195, 0xdd29}}) 14:44:20 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x7f, 0x9, 0x20, 0x8000, "0f69095500268f0804df95e1cc36a7875702340a39bb366d7e3d603bca9e5006"}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff82e7, 0x18}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c1}, 0x4000) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000140)={0x1, 0x0, @status={[0xfffffffffffffff8, 0xfff, 0x7, 0x7, 0x400, 0x7]}, [0x7, 0x0, 0x400, 0x2, 0x80, 0x48d, 0x0, 0x4, 0x4, 0xfffffffffffffffd, 0x1ff, 0x101, 0x4, 0x7, 0xf7, 0xc7, 0x1, 0x4, 0xaa, 0xb3dc, 0x100000001, 0x0, 0x7, 0x3ff, 0x20, 0x8, 0x7, 0x100000001, 0x3ff, 0xe95a, 0x100000001, 0x9, 0x1f, 0xffffffff, 0x9, 0x0, 0x40, 0x7ff, 0x4, 0x1, 0x4, 0x15325b3c, 0x92, 0x6, 0xbe4f, 0x9, 0x3, 0x4, 0x20, 0x4, 0x200, 0x4, 0x400, 0x80, 0x3, 0x4, 0x2, 0xffffffffffffff3d, 0x8, 0xd8f1, 0x3, 0x4, 0xfff, 0x3c4b]}) r1 = timerfd_create(0x5, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000b80)={0xed2, 0x0, 0x2, 0x0, 0x0, [{{}, 0x1ff}, {{r0}, 0x2}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa4, r3, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x79}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a1de5b06cc61d5aee6cc2a3354a68a17"}, @NL80211_ATTR_PMK={0x14, 0xfe, "8ca06edb1158fd276f5853cb596808ce"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a84721821a93a6a216228dd776ba2dca"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b19fc2741702626307bcc3b61e681481"}, @NL80211_ATTR_PMK={0x14, 0xfe, "26244c138db8f72b497555aef0e25bd0"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "348f318d93caaa2bdbcae83e4cc58d6c"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c850}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000e00)) pipe(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = inotify_add_watch(r2, &(0x7f0000000e80)='./file0\x00', 0x40000801) inotify_rm_watch(r4, r5) r6 = accept4(r0, &(0x7f0000000ec0)=@can, &(0x7f0000000f40)=0x80, 0x80c00) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000010c0)={&(0x7f0000000f80), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xa0, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x52}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8}, 0x15) r7 = syz_io_uring_complete(0x0) r8 = accept(r6, 0x0, &(0x7f0000001100)) r9 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001140)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), 0x10, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x9}}, {@fscache}, {@posixacl}, {@loose}, {@noextend}, {@cache_loose}, {@version_L}, {@debug={'debug', 0x3d, 0x8}}], [{@audit}, {@uid_eq={'uid', 0x3d, r10}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, ')[\'\'!$'}}, {@obj_role={'obj_role', 0x3d, 'nl80211\x00'}}]}}) 14:44:20 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xcc000, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xfff, 0xff00, 0xfff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/snd_hda_intel', 0x400000, 0x94) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)={0x6c, "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"}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000340)) r2 = syz_open_dev$vcsn(&(0x7f0000000740), 0xfffffffffffffff9, 0x840) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000780)=""/113) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000800)=""/161) r3 = accept4$inet(r2, &(0x7f00000008c0)={0x2, 0x0, @private}, &(0x7f0000000900)=0x10, 0x800) r4 = accept4(r3, &(0x7f0000000940)=@x25, &(0x7f00000009c0)=0x80, 0x100000) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x3, 0x0) recvmsg$unix(r5, &(0x7f0000000c80)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/228, 0xe4}], 0x1, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x1) ioctl$TIOCGPTLCK(r9, 0x80045439, &(0x7f0000000cc0)) ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000000d00)) r10 = accept(r4, &(0x7f0000000d40)=@isdn, &(0x7f0000000dc0)=0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8042010}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x17, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xf2fbd3d77d71b6de}, 0x40800) newfstatat(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fsetxattr$system_posix_acl(r8, &(0x7f0000000f40)='system.posix_acl_access\x00', &(0x7f00000012c0)={{}, {}, [{0x2, 0x2, r6}, {0x2, 0x6, r11}, {0x2, 0x4, r6}], {}, [{0x8, 0x1}, {0x8, 0x7}, {0x8, 0x1}, {0x8, 0x2, r7}, {0x8, 0x2, 0xee00}, {0x8, 0x2, r7}, {0x8, 0x2}, {0x8, 0x6, r7}], {0x10, 0x4}, {0x20, 0x5}}, 0x7c, 0x1) [ 125.591970] audit: type=1400 audit(1745937860.048:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:44:20 executing program 4: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff}}, './file0\x00'}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = signalfd4(r1, &(0x7f00000000c0)={[0x8]}, 0x8, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400}, 0x40000) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000240)=0x1c1a, &(0x7f0000000280)=0x2) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, 0x1, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8abc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa563}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xab}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x41) getsockname$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001600)={r2, 0x9, 0x81, 0x690}) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000001640)={0x81, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) inotify_add_watch(r1, &(0x7f0000001780)='./file0\x00', 0x200) readv(r3, &(0x7f0000001ac0)=[{&(0x7f00000017c0)=""/201, 0xc9}, {&(0x7f00000018c0)=""/19, 0x13}, {&(0x7f0000001900)=""/43, 0x2b}, {&(0x7f0000001940)=""/128, 0x80}, {&(0x7f00000019c0)=""/168, 0xa8}, {&(0x7f0000001a80)=""/33, 0x21}], 0x6) r4 = syz_open_dev$vcsa(&(0x7f0000001b40), 0x9, 0x200300) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000001b80)={0x21, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x3, 'lc\x00', 0x3e, 0x499, 0x4f}, 0x2c) getsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000001bc0), &(0x7f0000001c00)=0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001c40)={0x0, 0x1, 0x0, 0x5}) write$P9_RSTAT(r2, &(0x7f0000001c80)={0x5e, 0x7d, 0x1, {0x0, 0x57, 0x1f, 0x1, {0xf0, 0x0, 0x4}, 0x40900000, 0x1000, 0x7fffffff, 0x8, 0xf, '/proc/consoles\x00', 0xf, '/proc/consoles\x00', 0x3, 'lc\x00', 0x3, 'lc\x00'}}, 0x5e) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044005}, 0x44) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000001e40)=""/3) 14:44:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048890}, 0x20040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008800}, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x5c}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x100000c4}, 0x80) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c094) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40) r6 = open(&(0x7f0000000740)='./file0\x00', 0x20000, 0x100) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) bind(0xffffffffffffffff, &(0x7f0000000900)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r3) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x19c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xe4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}]}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4042}, 0x9a71783efcd7cb0) 14:44:20 executing program 6: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x13, 0x44}}}}, [@NL80211_ATTR_STA_FLAGS={0x2c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x40) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0x10001, 0xc5, 0x4, 0x1}, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x19}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80000000}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x88}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) write(r0, &(0x7f0000000380)="1b0eeefb18c87929839774752236026e33c4ecc5caa8b4fcf0e912594b0ed2f8246e7912f86cd9f6fb4e2ad9458038ce87918652fa1e2ed4b55c15a501500fb6a790ece9d5348f7323a47efb57cf23ca5431a53fa515f7d3caadf33f444a7d3428108506e9f6061a74400494884a031171924d2dcde2b710e1692947e9db35e474cb5d660364ddf90c30af4f2a70d7d6351f7b551d027ab002a27aad7e8a0492d4636777", 0xa4) setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x4, r1}, {0x2, 0x2, r1}, {0x2, 0xc, r1}, {0x2, 0x1, r1}, {0x2, 0x3, r1}], {0x4, 0x4}, [{0x8, 0x7, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x6}}, 0x54, 0x1) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWALK(r2, &(0x7f0000000580)={0x16, 0x6f, 0x1, {0x1, [{0x10, 0x2, 0x5}]}}, 0x16) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000600)={0x4, &(0x7f00000005c0)=[{}, {}, {}, {}]}) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc810}, 0x81) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000740)={0xffffffffffffffff, 0x100000001, 0x0, 0x9}) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/180, 0xb4}, {&(0x7f0000000940)=""/159, 0x9f}, {&(0x7f0000000a00)=""/200, 0xc8}, {&(0x7f0000000b00)=""/46, 0x2e}, {&(0x7f0000000b40)=""/120, 0x78}], 0x6, &(0x7f0000000c40)=""/38, 0x26}, 0x42) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000cc0), &(0x7f0000000d00)=0x40) r5 = openat2(r0, &(0x7f0000000d40)='./file1\x00', &(0x7f0000000d80)={0x482600, 0x105, 0x10}, 0x18) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x70, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040000}, 0x1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000001040)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000001080)={0xffab, 0x8, 0x5}) stat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001100)) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14:44:20 executing program 7: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0xff) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x1, 0xc000, 0x5}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000080)) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x6, 0x7, {{0x28, 0x4, 0x0, 0x3, 0xa0, 0x68, 0x0, 0x7, 0x29, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x5d, 0x3, 0x9, [{@empty, 0x101}, {@rand_addr=0x64010100, 0xfffffff9}, {@private=0xa010101, 0x10000}, {@broadcast, 0xfffffff7}, {@rand_addr=0x64010102, 0x5}]}, @lsrr={0x83, 0x17, 0xda, [@loopback, @rand_addr=0x64010100, @empty, @multicast1, @remote]}, @generic={0x94, 0x12, "26e07e31c185286fb2a1e696c108236f"}, @rr={0x7, 0x13, 0x62, [@loopback, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @remote]}, @timestamp={0x44, 0x24, 0xe7, 0x0, 0x4, [0xffff, 0x1000, 0xfed3, 0x0, 0x2, 0x4a8, 0x0, 0x57]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x8, 0x5, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000580), 0x8000, 0x8000) write$P9_RGETATTR(r1, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x3b80, {0x8, 0x1, 0x4}, 0x80, 0xee00, 0xee01, 0x0, 0x6, 0x6, 0xb31, 0x9, 0x68, 0x7, 0x2, 0xfffffffffffffffe, 0xbb61, 0x1, 0xa5, 0xfffffffffffffbff, 0x8000, 0x2}}, 0xa0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = accept4(r1, 0x0, &(0x7f0000000680), 0x80800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x13}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc810) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000840)='vlan0\x00') r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000880), 0x4600, 0x0) fcntl$setflags(r5, 0x2, 0x0) r6 = signalfd4(r1, &(0x7f00000008c0), 0x8, 0x80800) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xe4, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x180}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8758}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80000}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3b}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) [ 126.992641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.994869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.999624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.002021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.005617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.007055] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.018928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.021691] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.024469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.027539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.121918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.136497] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.143687] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.149714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.156777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.170610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.178771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.195979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.211728] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.213796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.217126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.219710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.221268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.230449] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.232564] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.236661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.239810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.243705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.250528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.252519] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.256451] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.258900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.262086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.267480] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.280230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.286872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.294035] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.302475] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 127.313743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.320642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.078585] Bluetooth: hci0: command tx timeout [ 129.080561] Bluetooth: hci1: command tx timeout [ 129.269822] Bluetooth: hci2: command tx timeout [ 129.333657] Bluetooth: hci5: command tx timeout [ 129.335558] Bluetooth: hci6: command tx timeout [ 129.398797] Bluetooth: hci4: command tx timeout [ 129.400703] Bluetooth: hci7: command tx timeout [ 129.402540] Bluetooth: hci3: command tx timeout [ 131.126446] Bluetooth: hci1: command tx timeout [ 131.127882] Bluetooth: hci0: command tx timeout [ 131.318450] Bluetooth: hci2: command tx timeout [ 131.383436] Bluetooth: hci5: command tx timeout [ 131.385163] Bluetooth: hci6: command tx timeout [ 131.446936] Bluetooth: hci4: command tx timeout [ 131.448637] Bluetooth: hci7: command tx timeout [ 131.450115] Bluetooth: hci3: command tx timeout [ 133.173999] Bluetooth: hci1: command tx timeout [ 133.175977] Bluetooth: hci0: command tx timeout [ 133.368499] Bluetooth: hci2: command tx timeout [ 133.430444] Bluetooth: hci6: command tx timeout [ 133.431980] Bluetooth: hci5: command tx timeout [ 133.494528] Bluetooth: hci4: command tx timeout [ 133.496036] Bluetooth: hci3: command tx timeout [ 133.498484] Bluetooth: hci7: command tx timeout [ 135.223049] Bluetooth: hci0: command tx timeout [ 135.224549] Bluetooth: hci1: command tx timeout [ 135.413831] Bluetooth: hci2: command tx timeout [ 135.477474] Bluetooth: hci6: command tx timeout [ 135.478823] Bluetooth: hci5: command tx timeout [ 135.541683] Bluetooth: hci7: command tx timeout [ 135.543143] Bluetooth: hci3: command tx timeout [ 135.544024] Bluetooth: hci4: command tx timeout [ 189.913974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.920522] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.922957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.927248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.929000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.932758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.936946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.939632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.947572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.949501] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.952112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.956182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.958130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.970674] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.984738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.989945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.993002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.995462] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.999871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.002072] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.004081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.004083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.010187] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.013580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.028791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.030765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.032908] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.034979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.038993] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.042202] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.051845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.056210] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.060421] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.066118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.074650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.101052] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.108736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.112234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.134866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.139425] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.054474] Bluetooth: hci0: command tx timeout [ 192.119362] Bluetooth: hci3: command tx timeout [ 192.121131] Bluetooth: hci1: command tx timeout [ 192.181531] Bluetooth: hci7: command tx timeout [ 192.196833] Bluetooth: hci2: command tx timeout [ 192.247602] Bluetooth: hci5: command tx timeout [ 192.247626] Bluetooth: hci4: command tx timeout [ 192.309438] Bluetooth: hci6: command tx timeout [ 194.104447] Bluetooth: hci0: command tx timeout [ 194.166640] Bluetooth: hci3: command tx timeout [ 194.166894] Bluetooth: hci1: command tx timeout [ 194.230444] Bluetooth: hci2: command tx timeout [ 194.230940] Bluetooth: hci7: command tx timeout [ 194.295612] Bluetooth: hci5: command tx timeout [ 194.295653] Bluetooth: hci4: command tx timeout [ 194.357430] Bluetooth: hci6: command tx timeout [ 196.149475] Bluetooth: hci0: command tx timeout [ 196.215371] Bluetooth: hci1: command tx timeout [ 196.215422] Bluetooth: hci3: command tx timeout [ 196.277612] Bluetooth: hci7: command tx timeout [ 196.277964] Bluetooth: hci2: command tx timeout [ 196.341500] Bluetooth: hci4: command tx timeout [ 196.343403] Bluetooth: hci5: command tx timeout [ 196.405676] Bluetooth: hci6: command tx timeout [ 198.197460] Bluetooth: hci0: command tx timeout [ 198.261858] Bluetooth: hci3: command tx timeout [ 198.262199] Bluetooth: hci1: command tx timeout [ 198.325778] Bluetooth: hci2: command tx timeout [ 198.325894] Bluetooth: hci7: command tx timeout [ 198.389444] Bluetooth: hci5: command tx timeout [ 198.389461] Bluetooth: hci4: command tx timeout [ 198.453444] Bluetooth: hci6: command tx timeout [ 252.321391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.360951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.364954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.384283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.394942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.417119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.421203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.430921] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.442610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.446655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.449644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.452274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.456852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.466146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.479895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.559918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.567631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.573268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.575792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.579289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.582632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.587230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.589531] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.591902] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.595236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.601702] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.605049] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.608110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.621752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.629598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.633591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.634428] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.654122] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.657727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.661116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.662767] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.670738] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.673255] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.681830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 252.687599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.453476] Bluetooth: hci0: command tx timeout [ 254.517492] Bluetooth: hci1: command tx timeout [ 254.517521] Bluetooth: hci2: command tx timeout [ 254.645452] Bluetooth: hci4: command tx timeout [ 254.773670] Bluetooth: hci7: command tx timeout [ 254.773834] Bluetooth: hci5: command tx timeout [ 254.775631] Bluetooth: hci3: command tx timeout [ 254.777928] Bluetooth: hci6: command tx timeout [ 256.503556] Bluetooth: hci0: command tx timeout [ 256.565418] Bluetooth: hci1: command tx timeout [ 256.566967] Bluetooth: hci2: command tx timeout [ 256.694401] Bluetooth: hci4: command tx timeout [ 256.823098] Bluetooth: hci5: command tx timeout [ 256.825464] Bluetooth: hci7: command tx timeout [ 256.826394] Bluetooth: hci3: command tx timeout [ 256.827240] Bluetooth: hci6: command tx timeout [ 258.550491] Bluetooth: hci0: command tx timeout [ 258.614637] Bluetooth: hci2: command tx timeout [ 258.615167] Bluetooth: hci1: command tx timeout [ 258.743417] Bluetooth: hci4: command tx timeout [ 258.869663] Bluetooth: hci6: command tx timeout [ 258.869706] Bluetooth: hci7: command tx timeout [ 258.870686] Bluetooth: hci5: command tx timeout [ 258.871172] Bluetooth: hci3: command tx timeout [ 260.598385] Bluetooth: hci0: command tx timeout [ 260.662406] Bluetooth: hci1: command tx timeout [ 260.662458] Bluetooth: hci2: command tx timeout [ 260.790409] Bluetooth: hci4: command tx timeout [ 260.917784] Bluetooth: hci7: command tx timeout [ 260.918256] Bluetooth: hci3: command tx timeout [ 260.918782] Bluetooth: hci6: command tx timeout [ 260.918837] Bluetooth: hci5: command tx timeout [ 314.769629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.771777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.775704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.780903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.782998] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.819516] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.822974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.830675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.838012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.843694] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.968032] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.971188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.972492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.975641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.977715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.100523] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.118074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.121292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.129704] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.133756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.208959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.217668] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.224602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.240270] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.243472] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.245072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.248767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.256690] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.259171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.262856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.265180] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.271197] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.273663] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.282119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.284195] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.291737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.296617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 315.320283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.382983] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.419850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.853451] Bluetooth: hci0: command tx timeout [ 316.917478] Bluetooth: hci1: command tx timeout [ 317.045470] Bluetooth: hci2: command tx timeout [ 317.237685] Bluetooth: hci3: command tx timeout [ 317.365509] Bluetooth: hci6: command tx timeout [ 317.366200] Bluetooth: hci7: command tx timeout [ 317.367187] Bluetooth: hci4: command tx timeout [ 317.558711] Bluetooth: hci5: command tx timeout [ 318.903386] Bluetooth: hci0: command tx timeout [ 318.965421] Bluetooth: hci1: command tx timeout [ 319.093614] Bluetooth: hci2: command tx timeout [ 319.285776] Bluetooth: hci3: command tx timeout [ 319.413557] Bluetooth: hci4: command tx timeout [ 319.414030] Bluetooth: hci7: command tx timeout [ 319.415403] Bluetooth: hci6: command tx timeout [ 319.605813] Bluetooth: hci5: command tx timeout [ 320.951389] Bluetooth: hci0: command tx timeout [ 321.013624] Bluetooth: hci1: command tx timeout [ 321.141414] Bluetooth: hci2: command tx timeout [ 321.333633] Bluetooth: hci3: command tx timeout [ 321.461554] Bluetooth: hci6: command tx timeout [ 321.469554] Bluetooth: hci4: command tx timeout [ 321.470013] Bluetooth: hci7: command tx timeout [ 321.653805] Bluetooth: hci5: command tx timeout [ 322.998401] Bluetooth: hci0: command tx timeout [ 323.061454] Bluetooth: hci1: command tx timeout [ 323.189500] Bluetooth: hci2: command tx timeout [ 323.381399] Bluetooth: hci3: command tx timeout [ 323.509659] Bluetooth: hci6: command tx timeout [ 323.510188] Bluetooth: hci7: command tx timeout [ 323.510460] Bluetooth: hci4: command tx timeout [ 323.701427] Bluetooth: hci5: command tx timeout [ 377.420482] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.454556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.455903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.476711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.480713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.482089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.484260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.487593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.495973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.509285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.630121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.633698] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.636903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.641706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.644631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.651820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.658721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.660666] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.673305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.684592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.750799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.790721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.796075] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.814249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 377.816952] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 377.820485] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 377.826954] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.838873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.840984] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 377.843688] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.845160] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.848882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.852786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.853968] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 377.871712] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.873761] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.887606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.892399] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.944899] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.948167] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.509624] Bluetooth: hci0: command tx timeout [ 379.573423] Bluetooth: hci1: command tx timeout [ 379.702146] Bluetooth: hci3: command tx timeout [ 379.765479] Bluetooth: hci2: command tx timeout [ 379.957471] Bluetooth: hci7: command tx timeout [ 379.958505] Bluetooth: hci4: command tx timeout [ 380.037407] Bluetooth: hci6: command tx timeout [ 380.104357] Bluetooth: hci5: command tx timeout [ 381.557675] Bluetooth: hci0: command tx timeout [ 381.622694] Bluetooth: hci1: command tx timeout [ 381.750362] Bluetooth: hci3: command tx timeout [ 381.813692] Bluetooth: hci2: command tx timeout [ 382.006514] Bluetooth: hci4: command tx timeout [ 382.007050] Bluetooth: hci7: command tx timeout [ 382.070430] Bluetooth: hci6: command tx timeout [ 382.134660] Bluetooth: hci5: command tx timeout [ 383.606413] Bluetooth: hci0: command tx timeout [ 383.669503] Bluetooth: hci1: command tx timeout [ 383.797872] Bluetooth: hci3: command tx timeout [ 383.861499] Bluetooth: hci2: command tx timeout [ 384.053739] Bluetooth: hci4: command tx timeout [ 384.054271] Bluetooth: hci7: command tx timeout [ 384.117415] Bluetooth: hci6: command tx timeout [ 384.182451] Bluetooth: hci5: command tx timeout [ 385.654393] Bluetooth: hci0: command tx timeout [ 385.718477] Bluetooth: hci1: command tx timeout [ 385.846429] Bluetooth: hci3: command tx timeout [ 385.909600] Bluetooth: hci2: command tx timeout [ 386.103334] Bluetooth: hci7: command tx timeout [ 386.103869] Bluetooth: hci4: command tx timeout [ 386.165419] Bluetooth: hci6: command tx timeout [ 386.229465] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 14:49:27 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=0000000000000001 RCX=ffff88806ce0897c RDX=0000000000000000 RSI=ffffffff81a3c083 RDI=ffff888016e883fc RBP=ffff88806ce08a80 RSP=ffff88806ce089b8 R8 =0000000000000001 R9 =ffff88806ce08a68 R10=000000000003b124 R11=00000000000224b1 R12=0000000000000000 R13=ffff88806ce08a70 R14=ffff888016e88000 R15=ffff88806ce08a28 RIP=ffffffff813508bc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd265f6e540 00000000 00000000 GS =0000 ffff8880e5648000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd266040910 CR3=0000000035a94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880155ab780 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff813508dd RDI=fffffbfff0b83758 RBP=ffffffff85c1bac0 RSP=ffff888016057380 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b124 R11=0000000000021638 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff888016057468 RIP=ffffffff81518677 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5748000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe0c663f6f4 CR3=000000002f46a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000