Warning: Permanently added '[localhost]:30073' (ECDSA) to the list of known hosts. 2025/05/24 17:10:34 fuzzer started 2025/05/24 17:10:35 dialing manager at localhost:46087 syzkaller login: [ 101.083373] cgroup: Unknown subsys name 'net' [ 101.235857] cgroup: Unknown subsys name 'cpuset' [ 101.279805] cgroup: Unknown subsys name 'rlimit' 2025/05/24 17:10:57 syscalls: 2214 2025/05/24 17:10:57 code coverage: enabled 2025/05/24 17:10:57 comparison tracing: enabled 2025/05/24 17:10:57 extra coverage: enabled 2025/05/24 17:10:57 setuid sandbox: enabled 2025/05/24 17:10:57 namespace sandbox: enabled 2025/05/24 17:10:57 Android sandbox: enabled 2025/05/24 17:10:57 fault injection: enabled 2025/05/24 17:10:57 leak checking: enabled 2025/05/24 17:10:57 net packet injection: enabled 2025/05/24 17:10:57 net device setup: enabled 2025/05/24 17:10:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 17:10:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 17:10:57 USB emulation: enabled 2025/05/24 17:10:57 hci packet injection: enabled 2025/05/24 17:10:57 wifi device emulation: enabled 2025/05/24 17:10:57 802.15.4 emulation: enabled 2025/05/24 17:10:57 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 17:10:59 starting 8 fuzzer processes 17:10:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81048002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xeb}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x8c1}, 0x4040) r2 = socket(0x2f, 0x80000, 0x400) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x2, 0x4) r3 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x4000, 0xa4) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000300)="166d3d5e9f836b877078dad3c924cdc40a630ed77a60e7683a58c64f89915c965442fed91f860453cc44d08f33d2d684b8124ca4a3bf0b1c45b91ddca704bceb16fa7beb4bc42578b29232e164802500939e5658a8c7b80f4fa173f52805e266cfef68922e4e385b631f5ae2e973e5499d72d10979c1cb8f65bd60b4747a77d1f94f0b7b0ea8de41751684e898532cc1e7d403deb6daf13c440174911af0") ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000003c0)={0x0, r3, 0x6, 0x1, 0x8001, 0xdd9}) r4 = socket(0x28, 0xa, 0x7) connect$bt_sco(r4, &(0x7f0000000400), 0x8) r5 = openat$cgroup_ro(r0, &(0x7f0000000440)='freezer.state\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/nf_conntrack_expect\x00') setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f00000004c0)={0x83218e34, 0x8, 0x10000, 0x7fffffff}, 0x10) r7 = pidfd_getfd(r0, r6, 0x0) ioctl$PTP_ENABLE_PPS(r7, 0x40043d04, 0x0) r8 = accept4(r7, &(0x7f0000000500)=@generic, &(0x7f0000000580)=0x80, 0x80000) setsockopt$inet_mreq(r8, 0x0, 0x20, &(0x7f00000005c0)={@remote, @broadcast}, 0x8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 17:10:59 executing program 1: setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x10000}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth1\x00', {0x2}, 0x980}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x501903, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2410000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = dup(r0) getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f00000001c0)=""/34, &(0x7f0000000200)=0x22) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000240)={0x80, 0x4}, 0x2) socketpair(0x18, 0x80000, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008041}, 0x4008010) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x100) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000a40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000540)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0xffffffff}, 0x4, 0x1, 0x8, 0x0, 0x8, 'syz1\x00', "442b423a35ff9f71a50587d2f8421e7b272995653de383f0be43a03fffa40e1b", "db3ea30571ef97104859f3bced6859ad972fc76f9a1c97ca5981e967736849ba", [{0x9, 0xbc, {0x1, 0x9}}, {0x1, 0x5, {0x2, 0x1}}, {0x6, 0xa3a8, {0x3, 0x3f}}, {0x9740, 0x1, {0x1}}, {0x2, 0xfff7, {0x0, 0x225fb281}}, {0xfff, 0x100, {0x2, 0xa16}}, {0x8, 0x8, {0x0, 0x80}}, {0x6, 0xfff, {0x3, 0x1000}}, {0x2, 0x0, {0x1, 0x2}}, {0x1, 0xfffb, {0x1, 0x4}}, {0x85b8, 0x1, {0x2, 0xddda}}, {0x9e4a, 0x8001, {0x1, 0xde}}, {0x5, 0x29, {0x0, 0x624000}}, {0x101, 0x9, {0x0, 0x8001}}, {0x3, 0x54, {0x2, 0xff90}}, {0x1, 0x7f, {0x2, 0x20}}, {0x2, 0x1000, {0x1, 0x1dc2000}}, {0xf3c, 0x83, {0x3, 0x101}}, {0x1c8, 0x401, {0x9f0e951251aea2de, 0x773f}}, {0xfff, 0x1, {0x2, 0x2}}, {0xfbff, 0x20, {0x3, 0x3a9}}, {0x4, 0x2e8, {0x3, 0xe1a2}}, {0x4, 0x5, {0x0, 0x4a}}, {0xfc00, 0x8092, {0x2, 0x7}}, {0x6, 0x1, {0x3, 0x10001}}, {0x3, 0x4, {0x1}}, {0x3ff, 0x2, {0x0, 0x7}}, {0x9, 0x7ff, {0x1, 0x5}}, {0x4, 0x8, {0x2}}, {0xe057, 0x4, {0x2, 0x7}}, {0x1, 0x7, {0x2}}, {0x5, 0x1, {0x3, 0x3}}, {0x7f, 0x9, {0x1, 0x9}}, {0x1c, 0x3, {0x3}}, {0x5, 0x3f, {0x3, 0x3}}, {0x9, 0x5, {0x1, 0x7}}, {0x7e, 0x7, {0x3, 0x10000}}, {0x40, 0x1089, {0x1, 0xffff73f3}}, {0x3, 0x0, {0x2, 0x7f}}, {0x4, 0x200, {0x0, 0xb0c}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x1, 0x3, 0x1, 0x1, 0x1e, 'syz1\x00', "8f3862693516cb5617fbc51af22f322ce9e1d1b39a345833b5316174f8bbfb2c", "32c811b9fe4c4eb63b3de0313aa47a5775a01a86b854a66db26341501621c90f", [{0x0, 0x200, {0x1, 0x1f}}, {0x1, 0x1, {0x1, 0x2}}, {0x81, 0x7, {0x1, 0x1}}, {0x120, 0x0, {0x0, 0x7}}, {0x2, 0x0, {0x3, 0x46}}, {0x7, 0x24f, {0x1, 0x1000}}, {0x1000, 0x9, {0x0, 0x9}}, {0x7fe, 0x3f, {0x1, 0x400}}, {0x1, 0x20, {0x1}}, {0x2, 0x8000, {0x1, 0x7}}, {0xa00, 0x1, {0x3, 0x591}}, {0x400, 0xfff7, {0x2, 0x401}}, {0xe3e, 0xf6, {0x0, 0x9}}, {0x5, 0x5d, {0x2, 0x8}}, {0x7, 0xfffd, {0x2, 0x35}}, {0x1ff, 0x0, {0x0, 0xfffffffc}}, {0x3f, 0x3ff, {0x0, 0x1}}, {0x3, 0xcd8, {0x2, 0x9}}, {0x28b7, 0x7, {0x0, 0x7}}, {0x81, 0x400, {0x2, 0x2}}, {0x9, 0x200, {0x0, 0x3}}, {0x40, 0x17f5, {0x2, 0x2}}, {0x7, 0xfbff, {0x1, 0x2}}, {0x7, 0x1, {0x3, 0x7}}, {0xfff7, 0x1000, {0x2, 0x15}}, {0x9, 0x9, {0x3, 0x7}}, {0x40, 0x3, {0x3, 0xff}}, {0x4, 0x6, {0x1, 0x2}}, {0x1, 0x5, {0x2, 0x80}}, {0x8, 0x81, {0x3, 0x1f}}, {0xb375, 0xdc5, {0x0, 0x20}}, {0x9, 0x7ff, {0x0, 0x3}}, {0x80, 0x8194, {0x3, 0x7}}, {0x5, 0x2, {0x0, 0x20}}, {0x5, 0xfff, {0x1, 0x8000}}, {0x1610, 0x20, {0x0, 0xa7}}, {0x40, 0xfffa, {0x3}}, {0x8000, 0x7, {0x6e942d7e83a29985, 0xec8}}, {0x7, 0x101, {0x3, 0xec}}, {0x8, 0x6, {0x2, 0x400}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4880}, 0x40041) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x94, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4085) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000c40)) move_mount(r0, &(0x7f0000001040)='./file1\x00', r1, &(0x7f0000001080)='./file0/file0\x00', 0x16) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000010c0)=0x1, 0x4) statx(r6, &(0x7f0000001100)='./file0/file0\x00', 0x6000, 0x4, &(0x7f0000001140)) 17:10:59 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xfffffffffffffff9, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000000c0)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000100)={'virt_wifi0\x00', @ifru_ivalue}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r0, 0x90e, 0x6, 0x2}) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000180)={0x80000000, 0x4}) r3 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x30000, 0xc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xfffffffb}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x844) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000380)={0x0, 0x2}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000003c0)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000400)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000640)={'binder1\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x2, 0x2, 0xd02, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x800) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880), 0x8040, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r3, {r1, r6}}, './file0\x00'}) [ 124.901957] audit: type=1400 audit(1748106659.387:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:10:59 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r1, 0x215, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x1, 0x3f]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0xd6f, 0x0]}]}]}, 0x88}}, 0x4) r2 = dup(r0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0x44000) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x10c, 0x453, 0x100, 0x70bd28, 0x25dfdbfc, "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", ["", "", ""]}, 0x10c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x63}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x363}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040045) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x69, 0x66}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffc5e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x422f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8075}, 0x50) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000900)=""/32, &(0x7f0000000940)=0x20) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000}, 0x941) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x8, 0x400, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7, 0x1, 0x9, 0xfffffffa}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xa8, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3f}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa8}}, 0x4008044) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000dc0)={0x2, 0xfffffffffffffffa, 0x1f, &(0x7f0000000d80)=""/31}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa0b, 0x6}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c040}, 0x40) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000f80)='system.posix_acl_default\x00', &(0x7f0000005b40)={{}, {0x1, 0x1}, [{0x2, 0x2, r7}, {0x2, 0x5}, {0x2, 0x6}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x7, 0xee01}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x5}], {0x4, 0x6}, [{0x8, 0x2, 0xee00}, {0x8, 0x4, 0xffffffffffffffff}, {}, {0x8, 0x1}, {0x8, 0x1, 0xee01}, {0x8, 0x2}, {0x8, 0x5}, {}, {0x8, 0x2}], {0x10, 0x4}, {0x20, 0x1}}, 0xac, 0x3) 17:10:59 executing program 4: ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @empty, 0x8000, 0x7, 0x4, 0x400, 0x6, 0x400a0}) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6e85}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x480c0}, 0x20000000) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="04ad0a1d7715d32cb1d82d0bb6bf6eea9cfd7b23615ea39dc0716d420f71a18d832af57dc2088dcb819650a9373217cbd6d01e80b76bf9b80024e923d3a4f08f1abac3dfd9164e66a5e32a866a0ecebd992c449fef2df143f069111a1818de232bc47f1f8003e9484e0da317") getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cgroups\x00', 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xe2, 0x2a, [@gcr_ga={0xbd, 0x6}, @dsss={0x3, 0x1, 0x34}, @ssid={0x0, 0x6, @default_ibss_ssid}, @tim={0x5, 0x60, {0x9, 0xf, 0xff, "695e538c5c9ec277b1fe2b2166e5bee334da662c5b656a3b6bb5322ee530fc1415b5dab19142f913cce3730c760f5b68f41158cfa5675d30245590ce70538d9d5ebcb98896f878cfbf8615b0c21d5232a948090afe167ed32185e742f4"}}, @measure_req={0x26, 0xa, {0xff, 0x46, 0xff, "57db7ed3b2c82e"}}, @rann={0x7e, 0x15, {{}, 0xff, 0x40, @broadcast, 0x0, 0x1, 0x8}}, @measure_req={0x26, 0x38, {0xf0, 0x7f, 0x1f, "a6ea8260ab01eb041975364ed5dcd18c014ddd760422c6178c86761cb3011c5298ef34fb5e446ac10a5be76e78258c8e03bfe877d7"}}, @measure_req={0x26, 0xa, {0x6, 0x7, 0x81, "bf917687e87ddf"}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4008}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x687b82c2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7c77}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbf44}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0c9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40801) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x40}}, 0x8040) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0x7fff}}, './file0\x00'}) sendmsg$nl_netfilter(r3, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000900)={0x27c, 0x9, 0x1, 0x201, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x5}, [@generic="0daed03c020ba8000ca48c7f01b52707ff67fdfc4bc6897fa38a2e77da9ad3cb7b3b726123bc69ab57d15dd652ddaf1839867c50954670eb1d84671e2f4180c1a5886e4acc6df8b27b480da5675b49b2f7a579c2c6a1107604ecaa0482b40dac3360fff63d4e57289a67bb95196828558a48d4f1313ac484c8e62d1371117ef4aac9ece80e0f208240398cbd2a3275115c0534d67f060f9450e0ec72f518efe5d7dbb37e25551b9dda9d45e4eb65cafb97300c7d4288e11a8de23d9e04", @nested={0x1a8, 0x88, 0x0, 0x1, [@generic="9e7064df4dba8e89c070396ace6e445e440e3a3b0a5a97cb96773f5730db0fd35935224d721ea3a32992bf9d53901d53b85bc8e17035f4da8a974834f9105fe1377ae4bac97ebe6769e8cfc2e106be986f9861ff5afefa446548e917adf87dfce3cc783ead2f21c6784ad99dc76330635643e34010b3ae9a271144e315ffd6109b839c02624b29cd0e2723c37f834d3f6ebd0fee1d53229e37d2c7b3cd60deb52213f2", @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@loopback}, @generic="43469c945ca38f44854bcb479f099f6a716c9f7adc7d79a6dfa337d1a0b2a48ac27269102e365e5dc1697df97f6ceac9555b50110747673e0b72d9f8e99e51aaedf5e8533d11db5ec4e8f8762c55ad8808a6b00606a1c917e675adfc9ff7c61682ef2391acc4f1eb3e48f0192adfc8c25dbd56c81b7a6381c1f85bab32ba1bef09dfde1c1206eefa70138fd78fbd22f48a80bb6ee8008262fcfcf43b0b2623606896206cd23416235ecf147c86f3a4f194bae182566968203cb333c66541b44b76598ab3b437eec4cf847e2330b2f824894c1be866f1c42aef64411f4867058fc32108367cdf6325cf278359e3"]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x80c0}, 0x85) r4 = pidfd_getfd(r3, r3, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000c00)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000c40)=0x1, 0x4) fallocate(0xffffffffffffffff, 0x0, 0x5, 0xfffffffffffffffd) r5 = signalfd(r3, &(0x7f0000000c80)={[0x6]}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000cc0), &(0x7f0000000d40)=0x68) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000d80)={{0x2, 0x4e20, @multicast1}, {0x6, @remote}, 0x8, {0x2, 0x4e24, @multicast2}, 'veth0_macvtap\x00'}) 17:10:59 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x2, 0x80002) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x4, 0x2, 0x8}}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) fcntl$setstatus(r1, 0x4, 0x4000) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400840, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) statfs(&(0x7f0000000200)='\x00', &(0x7f0000000240)=""/166) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x8000) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000340)) r5 = accept4$bt_l2cap(r0, &(0x7f0000000380), &(0x7f00000003c0)=0xe, 0x0) write$binfmt_elf32(r5, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x2, 0x7, 0x3f, 0x1, 0x3, 0x3e, 0x9, 0x3b2, 0x38, 0x312, 0x0, 0x8001, 0x20, 0x2, 0xd, 0x3ff, 0x4}, [{0x6, 0x5, 0x8, 0x7, 0x1000, 0x10000, 0xa7, 0x1a02124a}, {0x60000000, 0x4, 0x80000001, 0x9, 0x4, 0x1, 0x2, 0xfffffe00}], "b972852e8eebdb689b510b05b6e0c5c98e24e9c668fcbfc7676b3e1b615a499144ca3070c7270fcb8f6496d5d4bc5662ea018fd0b0b2b4b907752976136694def4ebb59437e96ce8c613aae85e6f6485b504e2569e6d943bde2cdf6b147c24e3ed879ddc50bdd5124613e33ed3fe4418ba99f785f68fe95594f803afe624ecf94375262f92d0785726f89f8bac1a66612b3d0e6703d3f24eadb0", ['\x00']}, 0x212) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r6 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffff) ioctl$KDADDIO(r6, 0x4b34, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3e8, 0x100, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 17:10:59 executing program 6: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'veth1_macvtap\x00', {0x2, 0x0, @loopback}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000140)=0x20) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000180)) semctl$GETVAL(0xffffffffffffffff, 0x4, 0xc, &(0x7f00000001c0)=""/4096) close_range(r1, r1, 0x2) socketpair(0x23, 0x1, 0x1, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001200)={{{@in6, @in=@multicast1}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000001300)=0xe8) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), 0xffffffffffffffff) epoll_pwait(r1, &(0x7f0000001380)=[{}, {}, {}, {}, {}, {}], 0x6, 0x2, &(0x7f0000001400)={[0x21]}, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001440)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000001480)={0x2, 'dummy0\x00', 0x4}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x888}, 0x8014) bind$802154_dgram(r2, &(0x7f00000015c0)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) ioctl$FIOCLEX(r2, 0x5451) fchdir(r2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001600)) 17:10:59 executing program 7: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101081, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x4040052) ioctl$sock_bt_hci(r1, 0xfe44159e2ab4e6d9, &(0x7f0000000180)="66864c618e43fdc9d613f4ef905c0825b3581075f07e231f741e22e74a2371ca135e07437df625f828d0746f01bbfcc738941e7c5cdc648133292b57ca2bb04bd99b8fa6b237931e63b6bc9a13070a3d7bf58181d3f467e3311c242ec255acd7cea9dc407ee95b8c611483dae99be12e4de0d094839025550bc8e69ee120171ee6007de52463e26fd52d908569834d1302752e0869d0d6d59e4b148a116de9f40874456bf6e14dcb7a27ed0bdbe9cc067d96c71dc66b7f161019a8e7b894771361d4") r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r5, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r4) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x14) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PLL_SET(r7, 0x40207012, &(0x7f0000000600)={0xad9e, 0x17, 0x3, 0x3f, 0x7486, 0x7fff, 0x1000000000000}) write$P9_RSTATu(r4, &(0x7f0000000640)={0x72, 0x7d, 0x2, {{0x0, 0x4f, 0x246b, 0x7d1b, {0x20, 0x1, 0x1}, 0x2010000, 0x10000, 0x0, 0x1000, 0x5, 'IPVS\x00', 0x5, 'IPVS\x00', 0x4, '\'l[-', 0xe, './cgroup/syz0\x00'}, 0xe, './cgroup/syz0\x00', 0xffffffffffffffff, 0xffffffffffffffff}}, 0x72) r8 = memfd_secret(0x80000) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000006c0)={0x4, 0xff, "b7d61f", 0x81, 0x61}) r9 = syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}}, 0x44040) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 126.332935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.336231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.339238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.347244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.353002] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.526104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.533002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.535553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.549846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.557226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.600671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.608995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.611868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.622707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.627091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.651316] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.663091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.672975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.688033] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.694522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.711894] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.717914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.740908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.758955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.771946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.783997] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.802291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.812545] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 126.815974] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.816694] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 126.826793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 126.832795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.836633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 126.839243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.847795] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 126.854285] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 126.859477] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 126.864851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 126.879230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 126.926919] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.409559] Bluetooth: hci0: command tx timeout [ 128.599986] Bluetooth: hci1: command tx timeout [ 128.663633] Bluetooth: hci2: command tx timeout [ 128.728492] Bluetooth: hci3: command tx timeout [ 128.855899] Bluetooth: hci4: command tx timeout [ 128.920794] Bluetooth: hci5: command tx timeout [ 128.920941] Bluetooth: hci6: command tx timeout [ 128.983906] Bluetooth: hci7: command tx timeout [ 130.456474] Bluetooth: hci0: command tx timeout [ 130.648485] Bluetooth: hci1: command tx timeout [ 130.711478] Bluetooth: hci2: command tx timeout [ 130.775718] Bluetooth: hci3: command tx timeout [ 130.904476] Bluetooth: hci4: command tx timeout [ 130.967756] Bluetooth: hci6: command tx timeout [ 130.968643] Bluetooth: hci5: command tx timeout [ 131.031518] Bluetooth: hci7: command tx timeout [ 132.504894] Bluetooth: hci0: command tx timeout [ 132.698808] Bluetooth: hci1: command tx timeout [ 132.760716] Bluetooth: hci2: command tx timeout [ 132.824575] Bluetooth: hci3: command tx timeout [ 132.951631] Bluetooth: hci4: command tx timeout [ 133.016610] Bluetooth: hci5: command tx timeout [ 133.016856] Bluetooth: hci6: command tx timeout [ 133.079517] Bluetooth: hci7: command tx timeout [ 134.551680] Bluetooth: hci0: command tx timeout [ 134.743647] Bluetooth: hci1: command tx timeout [ 134.807666] Bluetooth: hci2: command tx timeout [ 134.871553] Bluetooth: hci3: command tx timeout [ 135.001424] Bluetooth: hci4: command tx timeout [ 135.065731] Bluetooth: hci5: command tx timeout [ 135.066064] Bluetooth: hci6: command tx timeout [ 135.128496] Bluetooth: hci7: command tx timeout [ 189.819793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.832782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.838550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.842228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.851090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.855334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.857827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.866223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.870007] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.922880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.954548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.957800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.973063] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.982183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.000738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.023625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.033129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.042654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.091829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.093899] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.097970] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.101706] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.103499] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.110202] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.114554] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.119027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.147026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.189314] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.193588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.197101] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.199812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.204369] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.218237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.218778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.224980] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.246237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.267991] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.312881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.344689] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.356296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.959666] Bluetooth: hci1: command tx timeout [ 191.960491] Bluetooth: hci0: command tx timeout [ 192.087589] Bluetooth: hci2: command tx timeout [ 192.151649] Bluetooth: hci7: command tx timeout [ 192.215514] Bluetooth: hci3: command tx timeout [ 192.279740] Bluetooth: hci5: command tx timeout [ 192.280687] Bluetooth: hci6: command tx timeout [ 192.471746] Bluetooth: hci4: command tx timeout [ 194.008435] Bluetooth: hci0: command tx timeout [ 194.008908] Bluetooth: hci1: command tx timeout [ 194.136580] Bluetooth: hci2: command tx timeout [ 194.201444] Bluetooth: hci7: command tx timeout [ 194.263781] Bluetooth: hci3: command tx timeout [ 194.328686] Bluetooth: hci5: command tx timeout [ 194.329173] Bluetooth: hci6: command tx timeout [ 194.521447] Bluetooth: hci4: command tx timeout [ 196.056663] Bluetooth: hci1: command tx timeout [ 196.057180] Bluetooth: hci0: command tx timeout [ 196.184701] Bluetooth: hci2: command tx timeout [ 196.248493] Bluetooth: hci7: command tx timeout [ 196.312509] Bluetooth: hci3: command tx timeout [ 196.376904] Bluetooth: hci6: command tx timeout [ 196.377665] Bluetooth: hci5: command tx timeout [ 196.568549] Bluetooth: hci4: command tx timeout [ 198.104508] Bluetooth: hci0: command tx timeout [ 198.104983] Bluetooth: hci1: command tx timeout [ 198.233152] Bluetooth: hci2: command tx timeout [ 198.295498] Bluetooth: hci7: command tx timeout [ 198.359501] Bluetooth: hci3: command tx timeout [ 198.426107] Bluetooth: hci6: command tx timeout [ 198.426794] Bluetooth: hci5: command tx timeout [ 198.618446] Bluetooth: hci4: command tx timeout [ 252.148017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.151269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.160027] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.176649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.184960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.276694] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.288818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.292163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.292841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.301373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.304225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.309801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.324664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.327331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.337277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.351134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.357020] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.361814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.375948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.385619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.543333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.553478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.555574] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.571125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.587067] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.600800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.628562] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.630980] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.641071] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.649253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.653335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.653342] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.662959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.685755] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.730021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.856092] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.859245] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.863057] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.869547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.874343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.231685] Bluetooth: hci0: command tx timeout [ 254.424781] Bluetooth: hci3: command tx timeout [ 254.424808] Bluetooth: hci2: command tx timeout [ 254.425094] Bluetooth: hci1: command tx timeout [ 254.744338] Bluetooth: hci4: command tx timeout [ 254.871560] Bluetooth: hci6: command tx timeout [ 254.872182] Bluetooth: hci5: command tx timeout [ 254.999513] Bluetooth: hci7: command tx timeout [ 256.279475] Bluetooth: hci0: command tx timeout [ 256.471531] Bluetooth: hci1: command tx timeout [ 256.472465] Bluetooth: hci3: command tx timeout [ 256.472953] Bluetooth: hci2: command tx timeout [ 256.792516] Bluetooth: hci4: command tx timeout [ 256.922541] Bluetooth: hci6: command tx timeout [ 256.922645] Bluetooth: hci5: command tx timeout [ 257.048463] Bluetooth: hci7: command tx timeout [ 258.327550] Bluetooth: hci0: command tx timeout [ 258.519622] Bluetooth: hci2: command tx timeout [ 258.519673] Bluetooth: hci3: command tx timeout [ 258.520509] Bluetooth: hci1: command tx timeout [ 258.840791] Bluetooth: hci4: command tx timeout [ 258.967999] Bluetooth: hci6: command tx timeout [ 258.968031] Bluetooth: hci5: command tx timeout [ 259.095799] Bluetooth: hci7: command tx timeout [ 260.377013] Bluetooth: hci0: command tx timeout [ 260.567766] Bluetooth: hci3: command tx timeout [ 260.567970] Bluetooth: hci2: command tx timeout [ 260.568777] Bluetooth: hci1: command tx timeout [ 260.888601] Bluetooth: hci4: command tx timeout [ 261.015576] Bluetooth: hci6: command tx timeout [ 261.018443] Bluetooth: hci5: command tx timeout [ 261.143483] Bluetooth: hci7: command tx timeout [ 314.672252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.679105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.683882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.695583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.703008] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.923591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.926345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.930923] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.937085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.952703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.958105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.961941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.965901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.974977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.984548] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.227672] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.280131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.284771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.285653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.292895] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.300374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.304872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.311007] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.320489] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.323812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.329931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.339914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.342638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.347977] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.350056] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.354308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.360253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.374162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.381887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.405920] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.412247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.419130] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.444065] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.488168] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.515746] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.760702] Bluetooth: hci0: command tx timeout [ 317.015495] Bluetooth: hci2: command tx timeout [ 317.016583] Bluetooth: hci1: command tx timeout [ 317.465454] Bluetooth: hci4: command tx timeout [ 317.466205] Bluetooth: hci3: command tx timeout [ 317.655485] Bluetooth: hci6: command tx timeout [ 317.656706] Bluetooth: hci7: command tx timeout [ 317.657228] Bluetooth: hci5: command tx timeout [ 318.808514] Bluetooth: hci0: command tx timeout [ 319.064693] Bluetooth: hci2: command tx timeout [ 319.065251] Bluetooth: hci1: command tx timeout [ 319.512491] Bluetooth: hci3: command tx timeout [ 319.512992] Bluetooth: hci4: command tx timeout [ 319.705220] Bluetooth: hci5: command tx timeout [ 319.705908] Bluetooth: hci7: command tx timeout [ 319.706334] Bluetooth: hci6: command tx timeout [ 320.855531] Bluetooth: hci0: command tx timeout [ 321.111846] Bluetooth: hci1: command tx timeout [ 321.112477] Bluetooth: hci2: command tx timeout [ 321.559531] Bluetooth: hci3: command tx timeout [ 321.559550] Bluetooth: hci4: command tx timeout [ 321.753478] Bluetooth: hci5: command tx timeout [ 321.753621] Bluetooth: hci6: command tx timeout [ 321.753937] Bluetooth: hci7: command tx timeout [ 322.903603] Bluetooth: hci0: command tx timeout [ 323.160500] Bluetooth: hci2: command tx timeout [ 323.161031] Bluetooth: hci1: command tx timeout [ 323.607503] Bluetooth: hci4: command tx timeout [ 323.608661] Bluetooth: hci3: command tx timeout [ 323.801447] Bluetooth: hci5: command tx timeout [ 323.801896] Bluetooth: hci7: command tx timeout [ 323.802313] Bluetooth: hci6: command tx timeout [ 377.407267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.411862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.415959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.418941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.427531] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.439575] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.444178] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.451090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.475091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.479140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.522141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.529858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.536026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.536184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.541986] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.558256] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.560199] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.565865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.573983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.576146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.600892] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.603300] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.606554] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.617689] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.642641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.644774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.651565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.658633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.684017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.729033] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.745791] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 377.754087] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 377.768240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.778342] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 377.812505] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.816977] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 377.818671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.832108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.838957] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 377.876889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.543667] Bluetooth: hci0: command tx timeout [ 379.544634] Bluetooth: hci1: command tx timeout [ 379.671722] Bluetooth: hci3: command tx timeout [ 379.735568] Bluetooth: hci4: command tx timeout [ 379.736291] Bluetooth: hci2: command tx timeout [ 379.800635] Bluetooth: hci6: command tx timeout [ 379.929792] Bluetooth: hci7: command tx timeout [ 379.991715] Bluetooth: hci5: command tx timeout [ 381.591651] Bluetooth: hci1: command tx timeout [ 381.592824] Bluetooth: hci0: command tx timeout [ 381.720833] Bluetooth: hci3: command tx timeout [ 381.783880] Bluetooth: hci2: command tx timeout [ 381.784839] Bluetooth: hci4: command tx timeout [ 381.848026] Bluetooth: hci6: command tx timeout [ 381.976632] Bluetooth: hci7: command tx timeout [ 382.040171] Bluetooth: hci5: command tx timeout [ 383.639547] Bluetooth: hci0: command tx timeout [ 383.640154] Bluetooth: hci1: command tx timeout [ 383.767474] Bluetooth: hci3: command tx timeout [ 383.833470] Bluetooth: hci4: command tx timeout [ 383.834050] Bluetooth: hci2: command tx timeout [ 383.897272] Bluetooth: hci6: command tx timeout [ 384.024490] Bluetooth: hci7: command tx timeout [ 384.088816] Bluetooth: hci5: command tx timeout [ 385.687465] Bluetooth: hci0: command tx timeout [ 385.687959] Bluetooth: hci1: command tx timeout [ 385.816827] Bluetooth: hci3: command tx timeout [ 385.879694] Bluetooth: hci2: command tx timeout [ 385.880188] Bluetooth: hci4: command tx timeout [ 385.944467] Bluetooth: hci6: command tx timeout [ 386.072468] Bluetooth: hci7: command tx timeout [ 386.136459] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 17:16:03 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806ce31850 RBP=ffffffff85c1d1c0 RSP=ffff888038a8fa60 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=00007f46838dc000 RIP=ffffffff8151b09e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4683401540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f46838dc870 CR3=0000000034190000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81353c4d RDI=fffffbfff0b83a38 RBP=ffffffff85c1d1c0 RSP=ffff888017387650 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b67d R11=000000000002334b R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff888017387738 RIP=ffffffff8151affc RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f07f6a2a820 CR3=00000000304bd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000