Warning: Permanently added '[localhost]:13784' (ECDSA) to the list of known hosts. 2025/05/26 03:59:55 fuzzer started 2025/05/26 03:59:55 dialing manager at localhost:46087 syzkaller login: [ 93.330941] cgroup: Unknown subsys name 'net' [ 93.460596] cgroup: Unknown subsys name 'cpuset' [ 93.500244] cgroup: Unknown subsys name 'rlimit' 2025/05/26 04:00:13 syscalls: 2214 2025/05/26 04:00:13 code coverage: enabled 2025/05/26 04:00:13 comparison tracing: enabled 2025/05/26 04:00:13 extra coverage: enabled 2025/05/26 04:00:13 setuid sandbox: enabled 2025/05/26 04:00:13 namespace sandbox: enabled 2025/05/26 04:00:13 Android sandbox: enabled 2025/05/26 04:00:13 fault injection: enabled 2025/05/26 04:00:13 leak checking: enabled 2025/05/26 04:00:13 net packet injection: enabled 2025/05/26 04:00:13 net device setup: enabled 2025/05/26 04:00:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/26 04:00:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/26 04:00:13 USB emulation: enabled 2025/05/26 04:00:13 hci packet injection: enabled 2025/05/26 04:00:13 wifi device emulation: enabled 2025/05/26 04:00:13 802.15.4 emulation: enabled 2025/05/26 04:00:13 fetching corpus: 0, signal 0/0 (executing program) 2025/05/26 04:00:16 starting 8 fuzzer processes 04:00:16 executing program 0: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1010}, 0x40041) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='statm\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4801) r2 = open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x1) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000002c0)=""/242) write$cgroup_type(r2, &(0x7f00000003c0), 0x9) r3 = memfd_secret(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000400)={{0x2, 0x4e24, @local}, {0x306}, 0x0, {0x2, 0x4e21, @multicast2}, 'rose0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x1, 0x2, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x40080) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfe}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffffb, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000000) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xec, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x678f4c25d8854448}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000a80)={0x0, 0x3, 0x7fff, 0x80, 0x80000000, 0x9}) 04:00:16 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x66, 0xeb, 0x7, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}, @loopback, 0x700, 0x80, 0x7, 0x73d0}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x1, 0x8, 0x0, @remote, @mcast1, 0x80, 0x10, 0x885, 0x8034}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0}, &(0x7f0000000b40)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c80)={0x0, @multicast1, @private}, &(0x7f0000000cc0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000d00)={0x39c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x2004000}, 0x800) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001380)={0x16, 0x6, 0x1, 0x1f, 0x0, [@loopback, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x38) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000001400)) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000001440)=@ccm_128={{0x303}, "bc1a34969ce14895", "b0de5d3aa3fca16ee41629b4813d30b6", "0e2246a2", "0bd4438c95e66e05"}, 0x28) r7 = accept$packet(r0, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000014c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'ip6gre0\x00', r8, 0x29, 0x4, 0x20, 0x1000, 0x54, @local, @rand_addr=' \x01\x00', 0x7806, 0x700, 0x10000, 0x3}}) r9 = dup(r7) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f00000015c0)={0x0, @private}, &(0x7f0000001600)=0xc) ioctl$KDENABIO(r0, 0x4b36) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f0000001640)={0x9, 0x5, 0x9}) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000016c0), 0x880, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xfc, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80000}, 0x2004060) 04:00:16 executing program 2: read$hidraw(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x38}}, 0x20000080) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x3fa, 0x100, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040041) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r2, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x5b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x40}}, 0x80) recvmmsg(r0, &(0x7f0000003680)=[{{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/73, 0x49}, {&(0x7f00000017c0)=""/36, 0x24}, {&(0x7f0000001800)=""/163, 0xa3}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002940)=""/24, 0x18}, 0x5}, {{&(0x7f0000002980)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a00)=""/1, 0x1}, {&(0x7f0000002a40)=""/170, 0xaa}, {&(0x7f0000002b00)=""/147, 0x93}, {&(0x7f0000002bc0)=""/183, 0xb7}], 0x4, &(0x7f0000002cc0)=""/81, 0x51}, 0x6}, {{&(0x7f0000002d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002dc0)=""/182, 0xb6}], 0x1, &(0x7f0000002ec0)=""/160, 0xa0}, 0x400}, {{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003000)=""/228, 0xe4}, {&(0x7f0000003100)=""/79, 0x4f}], 0x2, &(0x7f00000031c0)=""/187, 0xbb}, 0x710}, {{&(0x7f0000003280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003300)=""/165, 0xa5}, {&(0x7f00000033c0)=""/185, 0xb9}, {&(0x7f0000003480)=""/96, 0x60}, {&(0x7f0000003500)=""/11, 0xb}], 0x4, &(0x7f0000003580)=""/249, 0xf9}, 0x9}], 0x5, 0x2000, &(0x7f00000037c0)={0x0, 0x3938700}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x30, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x9}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x30}}, 0x20000810) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000003900)={{r3}, {@val, @max}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003980), r3) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000003a40)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x880220}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c014) sendmsg$nl_generic(r3, &(0x7f0000003cc0)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003c80)={&(0x7f0000003ac0)={0x1b4, 0x33, 0x100, 0x70bd2b, 0x25dfdbff, {0x1c}, [@typed={0x8, 0x53, 0x0, 0x0, @fd=r3}, @generic="07d57b52804c8e8aae4eaf40f6cc4cf0f11602d0f10ee2e87b60e9777d4cd38010fa4e831d152f1718baa58b746c8c6da6170511035fb13ce1a12b977f3dc8030e794b9d3a72bf9f2aa21f80c911b45d5da092de930ddb8b54d29ba85a3a739d36c5014162271fff025b15a5e38a49b60d046e2cfa24", @generic="8251ac3e29acd4e28ed2d8cdd70b809f2509f0e803645f7410d8758ce8853fddf93b04997faef0e264787a5829edb867eb941cf281572ed99100af4fadd762a77fcd88074c78394339783e2fa8a13bb510", @nested={0xcd, 0x96, 0x0, 0x1, [@generic="9111d0c757280c85a7da2fdabd0fa3d78506d20f88d9a4f9acf867b3f2e6f43c4e2feb", @generic="c6ad5086f2137d2623456b26a67f6f56e5f3b7f3e5feac6c1e0cd6f2eed23059a438ddc5ac5700882f300db39e1e6f7a3791f2923300760dfe1c5178160d80977da975950dd4c6915c6c97ee3d882b5cec3f8567bd8ea630a1f556b66101a78861ae49501e91545c2d8cd7f152059ffa16fbf5e4333d32ee2cf61701f3e3b1bf1043bc59a46906a0b5c800b013675e671e2f3833965cfdec30be808ce1a763576194945e8143"]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000003dc0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x34, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40004) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000003e00)={'batadv_slave_0\x00'}) r5 = accept4(r3, 0x0, &(0x7f0000003e40), 0x80800) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003f80)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x10) [ 113.829782] audit: type=1400 audit(1748232016.512:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:00:16 executing program 3: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x2, 0x8, 0x1f}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) fstat(r0, &(0x7f0000000040)) fstat(r0, &(0x7f00000000c0)) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000140)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x200}, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x4c000, 0x1, 0xe}, 0x18) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000280)={{0x3, 0x1, 0xfffffe01, 0x1, 0x5}, 0x7fffffff, 0x4, 0xffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xfffffffb}}, './file0\x00'}) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x78}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x80014) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6, 0x2}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=@v1={0x2, "ab49"}, 0x3, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000640)={'bond_slave_0\x00', {0x2, 0x0, @empty}}) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000680)) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x7ff, 0x101, 0x895, 0x3f, 0x9, 0x5}) 04:00:16 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4014) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000300)={0x0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000340)={0x0, 0x2, r0, 0x2, 0x80000}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000380)=0x3ff, 0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x181200, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x230, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000680)=0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x88640, 0x98) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) ppoll(&(0x7f0000000780)=[{r3}, {r4, 0x2}, {r6, 0x200}, {r7, 0x4033}, {r8, 0x2}, {r3, 0xc480}, {r3, 0xc100}, {r9, 0x431c}], 0x8, &(0x7f00000007c0)={0x0, 0x989680}, &(0x7f0000000800)={[0x9]}, 0x8) r10 = creat(&(0x7f00000009c0)='./file0\x00', 0x1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x4000) 04:00:16 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_EXP={0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CT={0x54, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x9}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x800, 0x3, 0x8, 0x80, 0x6, 0x3, 0x3, 0xfffff6b3, 0xfff]}, @CTA_ID={0x8}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x99}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xffff}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_EXP={0xb8, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @NFQA_EXP={0x2c, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_PAYLOAD={0x49, 0xa, "aa7d7bc310f02ec4caad9bdc290b3a47b65565af1d8a2451678233d09b1bdb0faf9e623072fa794eefa24fbeba9ef17d160d364a694c7a1d14bf55d11b028f407ed6a5f756"}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) r1 = fsmount(r0, 0x1, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000480), &(0x7f00000004c0)=0x8) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x42, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000500)='dummy0\x00', 0x0, 0x1, 0x81}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000005c0)={r0, 0x4, 0x3ce31805, 0x3}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x81, 0x7, 0x10, @rand_addr=' \x01\x00', @mcast1, 0x8000, 0x20, 0x4c, 0x6f4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000cc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000900)={0x348, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x85}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x800, 0x2, 0x20, 0x7fffffff}, {0x8, 0x1, 0x0, 0x80}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1000, 0x20, 0xc6, 0x20}, {0x3, 0x7, 0x32, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6984ef28}}}]}}]}, 0x348}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, 0x1, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004880}, 0x8000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000e80)={'syztnl1\x00', &(0x7f0000000e00)={'sit0\x00', r5, 0x2f, 0x7, 0x2, 0xfffffffc, 0x10, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x8000, 0x3d, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'sit0\x00', r7, 0x4, 0x1f, 0x2, 0x3, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x1, 0x400, 0x1}}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000f80), 0x2, 0x0) r8 = openat2(r0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x968446ff53738595, 0xef, 0x8}, 0x18) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r9, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x10, 0x3f8, 0x800, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) 04:00:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffb}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x200400c5) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000180)={0x718, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x13, 0x3, "722f932530d219e993c315a90ed57c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "427ec8d413c836e7ed8007ca97955e9a6d865f9cb5bc62b246"}}, @TIPC_NLA_NODE_ID={0xef, 0x3, "c6fc0d6e2290ac5b8ff42478a7020d5ff55438d26475792c3355b2ba027cdd2f4b185265c3c1176b887f7e1cc336580420943456536bae0ba6d9939bebeac17ee7fde9fb5e127b9859f495f03f8f042a42f99fad6e7724a5fa020a5f6c39d60b4abfc722fb46e8b7c65a775fa716e9b82515850c5c207894b2b8047ad99e1969b203f3672e74d245394e3cdc97d3fd2fec611ba124d7bac32404ac1d579b7e49f7e6dd64e35980c7a198c896fcf1e716ff459e1ad6d5012415e07ea99a1212ce3703fd3a071ee3f8039df215b8c454c81e51d7e6dc52cbffc5c5979a2ee26ba992a1b35c450953b1cfa6da"}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "9089a96d34ddaba59bad1d25cd8078338b8ac473fc68518d1e6d1f"}}]}, @TIPC_NLA_NODE={0x1f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "f186709d460fe39c6a6da7222050748a3ed4d136029d27969fbebb6c5fda26c55a2079a0de36d5a3e066343a24a17ec60c756ce3e8d3e192e825239f80477bb7fa91adff01602b46015f147a88620c2e02e90779054c57aa179fa923d59b1beb6dc7b7fd93486200c8a5b04c7093e0602c53784af8260b1f4daa732ee9852ef87d595b5a3b448dd45dfa974970f6c6c4c938e4acd954794e93cb391c4483ddd410a2b52b34a9be721cdb0f72c1436a2aa1bf5f2ba08cf4d024"}, @TIPC_NLA_NODE_ID={0xd5, 0x3, "d076de87006332dde3c02eb828cba1b5404ca77b1c5533f86bf92886b2042b778be7394706985341039278192cfb4ad3e23033beecbc55b6f6e82f4d9a8d90b0f4fbb1ab860a53a41f350cc6e21224ff9ae524db2257498bc1ccb686fa87e4128bf5c6534f52c6d4809bc053f0c2b245d5d101fa0d3cca209622c7641d3683b4fa5e656a02d32863e6bc2b1fc34ceebe9f5cf494b75e6e9901524c1edb9d84a8f5e5c9437fd8ac6240633db42f3031bb94801f7fbc786de67b6a7aa8a4b49f07b2a666a1b4278ffa084e390c8ecf0d5de8"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "1e55e174ad534f468b6ad1ac43d54661649210d7361a59dff9258334d5cfbbd04053"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc24}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x224, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "52cf6c8410aa08f11b4d56ccb167c71135450cf1d54a3bebe1661b9782344a6b5a2aea"}}, @TIPC_NLA_NODE_ID={0x46, 0x3, "e9b71d78d0c5a66f9652d7d8ce39f7566e776f8f86261fd63cfddaf491a65d1d23587f8054120500f2dd5e4a9463e67c57dcf9c0fab22c415b000de880c64e048d84"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "bff716a4e5fe7a57666be04d6da7af25cd91dbc6420a046ffa6e3f2b110ee6c9b700461d004302ff1ea9140956f616b4f9bf5ef24d11c6e29eb5cc463265132812498a880821e22e71d88cd54ac5577968a05f68a3d9e26b32cf6ad6ba82522f93e3d6f89b7f5e000eb5e5725206c6a6b123167c37cf8476f1a04fa08e298da19bf055784d779df30c7157e217af59f72b95df6329667344239c3f634ad47341d6c826ab45fffb924b518a90cfaa5adda00d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x66a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x75, 0x3, "71dca9a944187e57d1a94d724654d7fe079f8f34dd4dd93a788b77ec4d3b8bb2f609d6d57b9d2d82ef303ac38d2a456d574ae1cab0f90cf14ad988a5afb9354a7362ee721e885d450169490534861d497d044d078dd401efe9245203d6baf5f4f5233e9d04ad1c06520cf181dec3520e6c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "4ffb2dc47992151cb2ebefde0d4e34257b94ea214c0e20ffce01a42b"}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3fe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5ac}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff041}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x718}, 0x1, 0x0, 0x0, 0x810}, 0x40e0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x101002, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r2) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, r3, 0x202, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8848}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0xb1}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x5}, @device_b, @from_mac}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4810) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r2) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x15c, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4008884}, 0x40) r6 = openat2(r2, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x400, 0x48, 0x5}, 0x18) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x48}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x44061}, 0x4800) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f00000012c0)={0x18c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x18c}}, 0x10) r7 = syz_mount_image$tmpfs(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x1, 0x6, &(0x7f0000001800)=[{&(0x7f0000001580)="fe8151e72e831c649f96119ce68d3bb42467229c2b47aa9304be367461901c6b4d6a563c0381919ecf9dabb3f80d4672c1eae5e62128b69373b30fc619", 0x3d, 0x6}, {&(0x7f00000015c0)="1575075bf6361eab5248cf534297f1563e51149802539a1b5bdeb73916655672d42d25351e92f25fe0735dbd19e82c660004381d48fc06050951a3da60bce745729432c756056b0cb03a2b3d6fe23df4b1282f5e2c3c203d9c31725091373f3f6854c03586ad8e8198103b7bb220e73a6a3e3f902d106c52df3104d6a9d6", 0x7e}, {&(0x7f0000001640), 0x0, 0x6a}, {&(0x7f0000001680)="7b5233438b8b0d101c81bf1cf811d8060a0c1e5e96524c457610417340de561572766728f661b7fe437acf4a39844279f0529d4453f151a3e10bbb4160e78c84900a4786e5b043f34c31c60a5cf5208557ac5ec982122ddcd1a8ee45cf213db4850ef36698a85b88", 0x68}, {&(0x7f0000001700)="64fa42341a072c37f03cb805d227ea6bf9d68d4e5dea6617d43a22c935f97e769def37aba7d9e5ac7d8d328f7ae9a00ca6d91bd1e7e0e322d55eccf98531242df97a2ad9f9391193141b41dc252fa99629186d2b39bf09f008d2a8c98530a1f5ff2de6ddca50ad75676821b68ad760d4ad06c61c", 0x74, 0x1f}, {&(0x7f0000001780)="5fa34d90069682aa070a95b096984f62e9f4d2d80e923533c3862e6bcda965da7068b163eb5aac28a7f07277ec8caba99a5b62b7fe8908c3b5617ec61a6d0f572d09a5ba46833201812083a3bb8029e163f0a70c7af922ea5160e261f78b02cb83d628065268e4c46745aa6300328516a2d8b3f9edd0027a21", 0x79, 0xdaa}], 0x1000, &(0x7f00000018c0)={[], [{@obj_user={'obj_user', 0x3d, 'pci\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x80000001}}, {@obj_type={'obj_type', 0x3d, '*+'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':{!'}}, {@smackfshat={'smackfshat', 0x3d, 'sit0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x20}}]}) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}]}, 0x5c}}, 0x40000) 04:00:16 executing program 7: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20c5) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x4c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x24008001) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4c}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4068040}, 0x24040880) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000006c0)) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), 0xffffffffffffffff) r3 = dup2(r2, r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x14008010) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0xc4) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x80000000) [ 115.101825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.108326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.111676] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.118809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.124717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.202602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.207630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.213640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.232405] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.240636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.345257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.351676] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.363582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.365013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.373553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.378250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.378886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.381082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.393861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.395685] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.402936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.408817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.412459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.415961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.424416] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.466737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.472838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.480623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.487670] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.496735] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.527774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.539250] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.544849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.544979] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.550049] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.559443] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.595642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.607788] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.633751] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.640844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.169630] Bluetooth: hci0: command tx timeout [ 117.299273] Bluetooth: hci1: command tx timeout [ 117.425234] Bluetooth: hci3: command tx timeout [ 117.552789] Bluetooth: hci2: command tx timeout [ 117.553377] Bluetooth: hci4: command tx timeout [ 117.618232] Bluetooth: hci5: command tx timeout [ 117.680625] Bluetooth: hci7: command tx timeout [ 117.744247] Bluetooth: hci6: command tx timeout [ 119.216414] Bluetooth: hci0: command tx timeout [ 119.344254] Bluetooth: hci1: command tx timeout [ 119.472668] Bluetooth: hci3: command tx timeout [ 119.600447] Bluetooth: hci4: command tx timeout [ 119.600903] Bluetooth: hci2: command tx timeout [ 119.665190] Bluetooth: hci5: command tx timeout [ 119.728265] Bluetooth: hci7: command tx timeout [ 119.792227] Bluetooth: hci6: command tx timeout [ 121.264787] Bluetooth: hci0: command tx timeout [ 121.392219] Bluetooth: hci1: command tx timeout [ 121.521337] Bluetooth: hci3: command tx timeout [ 121.649217] Bluetooth: hci2: command tx timeout [ 121.649674] Bluetooth: hci4: command tx timeout [ 121.713026] Bluetooth: hci5: command tx timeout [ 121.776642] Bluetooth: hci7: command tx timeout [ 121.841319] Bluetooth: hci6: command tx timeout [ 123.312238] Bluetooth: hci0: command tx timeout [ 123.441181] Bluetooth: hci1: command tx timeout [ 123.569804] Bluetooth: hci3: command tx timeout [ 123.696512] Bluetooth: hci4: command tx timeout [ 123.696941] Bluetooth: hci2: command tx timeout [ 123.760225] Bluetooth: hci5: command tx timeout [ 123.824232] Bluetooth: hci7: command tx timeout [ 123.888790] Bluetooth: hci6: command tx timeout [ 175.730566] syz-executor.7 (289) used greatest stack depth: 25160 bytes left [ 175.789437] syz-executor.1 (284) used greatest stack depth: 25024 bytes left [ 178.048481] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.055104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.056794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.068662] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.087475] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.182671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.184980] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.187058] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.188561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.190054] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.193458] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.197973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.201303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.209677] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.211362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.253468] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.266679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.271732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.276494] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.287981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.319397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.326866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.351671] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.399861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.406000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.444028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.466541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.472687] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.476422] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.477742] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.485828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.487757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.517235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.530810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.633549] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.637930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.641931] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.646546] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.668641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.684049] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.144730] Bluetooth: hci0: command tx timeout [ 180.273566] Bluetooth: hci2: command tx timeout [ 180.274607] Bluetooth: hci1: command tx timeout [ 180.336591] Bluetooth: hci3: command tx timeout [ 180.529817] Bluetooth: hci6: command tx timeout [ 180.531526] Bluetooth: hci4: command tx timeout [ 180.784422] Bluetooth: hci5: command tx timeout [ 180.785605] Bluetooth: hci7: command tx timeout [ 182.192334] Bluetooth: hci0: command tx timeout [ 182.320279] Bluetooth: hci2: command tx timeout [ 182.320707] Bluetooth: hci1: command tx timeout [ 182.386196] Bluetooth: hci3: command tx timeout [ 182.576587] Bluetooth: hci4: command tx timeout [ 182.577067] Bluetooth: hci6: command tx timeout [ 182.832324] Bluetooth: hci7: command tx timeout [ 182.832817] Bluetooth: hci5: command tx timeout [ 184.240633] Bluetooth: hci0: command tx timeout [ 184.368239] Bluetooth: hci2: command tx timeout [ 184.368682] Bluetooth: hci1: command tx timeout [ 184.432304] Bluetooth: hci3: command tx timeout [ 184.624276] Bluetooth: hci4: command tx timeout [ 184.624733] Bluetooth: hci6: command tx timeout [ 184.882250] Bluetooth: hci7: command tx timeout [ 184.882723] Bluetooth: hci5: command tx timeout [ 186.288599] Bluetooth: hci0: command tx timeout [ 186.416247] Bluetooth: hci1: command tx timeout [ 186.416690] Bluetooth: hci2: command tx timeout [ 186.480390] Bluetooth: hci3: command tx timeout [ 186.672286] Bluetooth: hci6: command tx timeout [ 186.672735] Bluetooth: hci4: command tx timeout [ 186.928262] Bluetooth: hci7: command tx timeout [ 186.928724] Bluetooth: hci5: command tx timeout [ 240.193947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.198976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.208844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.215501] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.219836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.329951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.339678] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.344837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.367963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.377778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.409747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.419121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.444984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.469913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.479319] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.509979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.522777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.530968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.571022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.577779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.662092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.687775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.698094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.732959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.747987] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.935945] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.962095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.970752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.013268] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.031057] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.148394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.151582] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.156849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.162654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.169485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.262634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.296269] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.329686] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.362747] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.393799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.291266] Bluetooth: hci0: command tx timeout [ 242.480305] Bluetooth: hci1: command tx timeout [ 242.608437] Bluetooth: hci2: command tx timeout [ 242.672318] Bluetooth: hci3: command tx timeout [ 242.865303] Bluetooth: hci4: command tx timeout [ 243.249261] Bluetooth: hci5: command tx timeout [ 243.249287] Bluetooth: hci6: command tx timeout [ 243.504435] Bluetooth: hci7: command tx timeout [ 244.337189] Bluetooth: hci0: command tx timeout [ 244.529311] Bluetooth: hci1: command tx timeout [ 244.656383] Bluetooth: hci2: command tx timeout [ 244.720469] Bluetooth: hci3: command tx timeout [ 244.912232] Bluetooth: hci4: command tx timeout [ 245.296473] Bluetooth: hci5: command tx timeout [ 245.299175] Bluetooth: hci6: command tx timeout [ 245.553424] Bluetooth: hci7: command tx timeout [ 246.385768] Bluetooth: hci0: command tx timeout [ 246.576518] Bluetooth: hci1: command tx timeout [ 246.705245] Bluetooth: hci2: command tx timeout [ 246.769213] Bluetooth: hci3: command tx timeout [ 246.961272] Bluetooth: hci4: command tx timeout [ 247.345488] Bluetooth: hci6: command tx timeout [ 247.345638] Bluetooth: hci5: command tx timeout [ 247.601223] Bluetooth: hci7: command tx timeout [ 248.433425] Bluetooth: hci0: command tx timeout [ 248.624268] Bluetooth: hci1: command tx timeout [ 248.755515] Bluetooth: hci2: command tx timeout [ 248.817286] Bluetooth: hci3: command tx timeout [ 249.009245] Bluetooth: hci4: command tx timeout [ 249.392644] Bluetooth: hci6: command tx timeout [ 249.392678] Bluetooth: hci5: command tx timeout [ 249.648366] Bluetooth: hci7: command tx timeout [ 303.619113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.626470] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.629853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.642980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.656078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.694752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.703097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.705543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.711970] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.717647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.952100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.956743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.961627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.968639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.972634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.101503] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.109841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.117435] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.131645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.141782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.187546] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.207202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.226680] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.255081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.266594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.276781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.284131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.288723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.303346] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.326359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.386561] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.389840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.394313] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.400401] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.403770] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.956364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.979536] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 305.036783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 305.065554] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 305.088671] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.712461] Bluetooth: hci0: command tx timeout [ 305.776258] Bluetooth: hci1: command tx timeout [ 306.033376] Bluetooth: hci2: command tx timeout [ 306.289228] Bluetooth: hci3: command tx timeout [ 306.480533] Bluetooth: hci6: command tx timeout [ 306.480576] Bluetooth: hci5: command tx timeout [ 306.544212] Bluetooth: hci4: command tx timeout [ 307.248348] Bluetooth: hci7: command tx timeout [ 307.760336] Bluetooth: hci0: command tx timeout [ 307.824312] Bluetooth: hci1: command tx timeout [ 308.081305] Bluetooth: hci2: command tx timeout [ 308.336555] Bluetooth: hci3: command tx timeout [ 308.528432] Bluetooth: hci6: command tx timeout [ 308.529370] Bluetooth: hci5: command tx timeout [ 308.593849] Bluetooth: hci4: command tx timeout [ 309.298057] Bluetooth: hci7: command tx timeout [ 309.809631] Bluetooth: hci0: command tx timeout [ 309.874250] Bluetooth: hci1: command tx timeout [ 310.131230] Bluetooth: hci2: command tx timeout [ 310.386254] Bluetooth: hci3: command tx timeout [ 310.577637] Bluetooth: hci5: command tx timeout [ 310.577794] Bluetooth: hci6: command tx timeout [ 310.640287] Bluetooth: hci4: command tx timeout [ 311.346332] Bluetooth: hci7: command tx timeout [ 311.856334] Bluetooth: hci0: command tx timeout [ 311.920250] Bluetooth: hci1: command tx timeout [ 312.176222] Bluetooth: hci2: command tx timeout [ 312.434194] Bluetooth: hci3: command tx timeout [ 312.624228] Bluetooth: hci5: command tx timeout [ 312.625260] Bluetooth: hci6: command tx timeout [ 312.689228] Bluetooth: hci4: command tx timeout [ 313.392261] Bluetooth: hci7: command tx timeout [ 366.085698] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.090543] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.096084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.110024] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.113882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.367729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.371673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.374255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.383729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.394704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.420368] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.426376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.428359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.434552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.439736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.444640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.456937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.459611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.474116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.479671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.677798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.683701] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.693781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.719089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.729125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.927055] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.940459] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.947128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.951063] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.960061] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.967094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.983470] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.986526] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.996524] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.007733] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.008995] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.079907] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.117087] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.129126] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.148949] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.177632] Bluetooth: hci0: command tx timeout [ 368.496422] Bluetooth: hci2: command tx timeout [ 368.496981] Bluetooth: hci1: command tx timeout [ 368.560341] Bluetooth: hci3: command tx timeout [ 368.816230] Bluetooth: hci4: command tx timeout [ 369.200568] Bluetooth: hci6: command tx timeout [ 369.265218] Bluetooth: hci7: command tx timeout [ 369.393384] Bluetooth: hci5: command tx timeout [ 370.224365] Bluetooth: hci0: command tx timeout [ 370.545235] Bluetooth: hci1: command tx timeout [ 370.545735] Bluetooth: hci2: command tx timeout [ 370.608399] Bluetooth: hci3: command tx timeout [ 370.864370] Bluetooth: hci4: command tx timeout [ 371.248251] Bluetooth: hci6: command tx timeout [ 371.314190] Bluetooth: hci7: command tx timeout [ 371.440235] Bluetooth: hci5: command tx timeout [ 372.272470] Bluetooth: hci0: command tx timeout [ 372.593205] Bluetooth: hci1: command tx timeout [ 372.593701] Bluetooth: hci2: command tx timeout [ 372.656202] Bluetooth: hci3: command tx timeout [ 372.912212] Bluetooth: hci4: command tx timeout [ 373.296414] Bluetooth: hci6: command tx timeout [ 373.361529] Bluetooth: hci7: command tx timeout [ 373.488224] Bluetooth: hci5: command tx timeout [ 374.320489] Bluetooth: hci0: command tx timeout [ 374.640659] Bluetooth: hci1: command tx timeout [ 374.641271] Bluetooth: hci2: command tx timeout [ 374.704216] Bluetooth: hci3: command tx timeout [ 374.960388] Bluetooth: hci4: command tx timeout [ 375.344853] Bluetooth: hci6: command tx timeout [ 375.408455] Bluetooth: hci7: command tx timeout [ 375.537214] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 04:05:24 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888009111068 RCX=ffffffff81be36e1 RDX=ffff888018189b80 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff888027dff960 R8 =0000000000000000 R9 =ffffed100d9b57b1 R10=0000000000000000 R11=0000000000000001 R12=ffff88806cdabd88 R13=ffff888027dffc70 R14=ffff888027dffc48 R15=ffff888009110a48 RIP=ffffffff81be36e1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4b9a3fb8e0 CR3=0000000035e94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=1578f24118351aac RDX=0000000087a2e602 RSI=000000006f569269 RDI=000000000008f59a RBP=ffff88800e01ea80 RSP=ffff88803579fda0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88800e01ea00 R13=ffff88800e01ea88 R14=00007fc84f3a1000 R15=00007fc84f26bf00 RIP=ffffffff815badc0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc84ef86540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc84f26bf00 CR3=0000000037e21000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000