Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:59609' (ECDSA) to the list of known hosts. 2025/05/27 07:32:08 fuzzer started 2025/05/27 07:32:08 dialing manager at localhost:33805 syzkaller login: [ 84.969972] cgroup: Unknown subsys name 'net' [ 85.193270] cgroup: Unknown subsys name 'cpuset' [ 85.253911] cgroup: Unknown subsys name 'rlimit' 2025/05/27 07:32:25 syscalls: 2214 2025/05/27 07:32:25 code coverage: enabled 2025/05/27 07:32:25 comparison tracing: enabled 2025/05/27 07:32:25 extra coverage: enabled 2025/05/27 07:32:25 setuid sandbox: enabled 2025/05/27 07:32:25 namespace sandbox: enabled 2025/05/27 07:32:25 Android sandbox: enabled 2025/05/27 07:32:25 fault injection: enabled 2025/05/27 07:32:25 leak checking: enabled 2025/05/27 07:32:25 net packet injection: enabled 2025/05/27 07:32:25 net device setup: enabled 2025/05/27 07:32:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/27 07:32:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/27 07:32:25 USB emulation: enabled 2025/05/27 07:32:25 hci packet injection: enabled 2025/05/27 07:32:25 wifi device emulation: enabled 2025/05/27 07:32:25 802.15.4 emulation: enabled 2025/05/27 07:32:25 fetching corpus: 0, signal 0/0 (executing program) 2025/05/27 07:32:28 starting 8 fuzzer processes 07:32:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x840) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xa}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x41}, 0x3d, 0x60, @broadcast, 0x1f, 0x4, 0x100}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_IE={0xc8, 0x2a, [@ht={0x2d, 0x1a, {0x2000, 0x2, 0x1, 0x0, {0x6, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x2}, 0x6a340833ddb97383, 0x10000}}, @random={0x2, 0xa6, "bb1a262e301351834806a60340b84d2c9e0c7068b3aabc1263badedcbe87008efa24c59170d7d98bc47632d8863b18a06d2aa4046460d7c91e0acab5d8149ca2d2b0e894906f81c224b58c740100a3f08bfce6fb891cbd62c9e669d2d135aad013191a9de6c2afe11c8f9d6182a6542b366bcdf32b911d99897c49b5ab3b5e8f527306010d3ef1f11d399e20a5ee9b83d327eea0c75b663ad46ea9407fd66c77372a54f2da21"}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x56}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xbf8b}}, './file0\x00'}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x81) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) move_mount(r3, &(0x7f0000000480)='./file0\x00', r5, &(0x7f0000000500)='./file0\x00', 0x40) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xad, 0x3f, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7800, 0x80, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl1\x00', r8, 0x2f, 0x71, 0x7, 0x7, 0x0, @local, @mcast1, 0x700, 0x8000, 0x1000, 0x7fffffff}}) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000b00), &(0x7f0000000b40)=0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), &(0x7f0000000c00)={'L-', 0x2}, 0x16, 0x1) pwritev(r6, &(0x7f0000000e40)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)="e8cf556143bd73af9c72f34da79b71cc9708b9cfad3cfa2f2ed8fc344fa80553defe955c1a6a2b8c9a0a11f94f36099f1fbdb9d72901f6e0cf429b6bc689b0521cfbca74b0742a8832bc28fe1b4a42fa6d1c84f8a4f03c4b6a25e5ce3d695bbe0e597ba5f28cbb1298f35cc7a8e1a9ac64a6dbb441ee8e3b12d60407e743f8bc3f28654fc05ca95b62943e5ae06eb0d71e7ad6cca6c9a7287060bf28e642c76100e3dbac3832bd6e2dc229dfef606c393c8f5b3b2dbab727ec26", 0xba}, {&(0x7f0000000d40)="709e3f8de766ab21ade06f353cde59bc9aa796aa0b37d6c4510d6a0d649219d3505d5affe6dfdd253049807fb45da5e494143989e313ed6582d623685e89ae55542dd75c08af454a792572da2a118ddc5c28b005e27c7983367b", 0x5a}, {&(0x7f0000000dc0)="ba86ba5abe798ac9d84d086ce375eae891064d7b95cbf9b60ab9cac8ec1e77d75d330b6353e80f0daefbf6315326881ef62cc33beee823b82cff4c750cb447da91599e863651cd3f620d277033c8ed8ef07a1876222b24572262887780c2e3d8f565323b91feb39013ca4767e0f518f69d00bd159b6215dcff", 0x79}], 0x4, 0x7fffffff, 0x6) ppoll(&(0x7f0000000e80)=[{r4, 0x200}, {r6, 0x2060}, {0xffffffffffffffff, 0x1080}, {r3, 0x5420}, {r7, 0x8103}], 0x5, &(0x7f0000000ec0)={0x77359400}, &(0x7f0000000f00)={[0x400]}, 0x8) syz_mount_image$vfat(&(0x7f0000000f40), &(0x7f0000000f80)='./file0\x00', 0xb9a, 0x4, &(0x7f0000001180)=[{&(0x7f0000000fc0)="33099a4963e0c587496880cdd9e07c30431c339973198a85b4110ee8721b0c926ba0d6f640b2ebc1bb4dd1873e1a91d4677c7ff6d7b7791a6fbcbf25a9273a2738f40f52cd5a870f0f4a22a061a1e9c340231dca002abab43cccb3041accf4d2459c3cdbb1bc6c683dcc3d48b038b36263896e68b85edf50afc3e05a8d", 0x7d, 0x5}, {&(0x7f0000001040)="a6e57bafebed2633d43d1af83ff00cb476e6c7dc4632ffa7d73025bc6ffda64c42be668754d78fbe749260c54cb8beb9d552246ab83de248d6a76a44a89084ff0aa817b13a329b98e9193d22d38856234a22041b66523bc8eead2e50f69aab2f1e9328a4d84e8847b1e4a653a7f2b5aa1a09c99245e298e389cdc9d2602bcf5e82fcad74326edacc88f89429508366f54949bfa2ad79b2004d8d3d2115d8316d22562c78ea37e83151d1a4", 0xab, 0xb25}, {&(0x7f0000001100)="34734362682b1fb1c4a52f", 0xb, 0xffffffff}, {&(0x7f0000001140)="22e1c1e193b389dd9632d4187b2e978a4a32f010bbb9e9c4b634747e05b8d17bf12a28dda8ef24eabf6b685f6e1f64d0ce2fe0259f", 0x35, 0x81}], 0x88000, &(0x7f0000001200)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@numtail}, {@rodir}, {@shortname_mixed}, {@utf8no}, {@uni_xlateno}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/vcsa\x00'}}]}) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000001280)={0x0, 0x8, 0x7ff}) 07:32:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa6}}, './file0\x00'}) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x80101) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x9338, 0x2, 0x1, 0x3, 0x18, "74bb4b3fd8312f9ea4620d7c8cee543bd40f30"}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x30, 0x2) ioctl$TIOCCONS(r0, 0x541d) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000200)={@multicast1, @initdev}, &(0x7f0000000240)=0xc) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)={0xd0002001}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e21, @multicast2}, 0x80, 0x0, 0x0, 0x0, 0x42, &(0x7f00000002c0)='wg1\x00', 0xffffffff, 0x3, 0x9}) fsetxattr$security_evm(r3, &(0x7f0000000380), &(0x7f00000003c0)=@v2={0x5, 0x2, 0x4, 0x3, 0xaf, "73a6957a89d0e65e1f3911ec6951aae1e5c625db028d216a1a3e5c4af9b4b0f3f0d9e7131ef1337f1e6e7cf1a56bfcfa134456a543a78dcbdb770ec7285697f4f728116bd8196d9031e220753e55c4421c88f88cb52890dd7b9b0a7d069b24216f24bbba54b189f94b8f8b890df296dba888be9eb1bb959fee6f1b460380737e885e17f647193401185e0e974715e48a361c039fd3d6ecf39d17b0cbba3b118c231fc4ec15749f2b774423c0c274be"}, 0xb8, 0x2) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000480), &(0x7f00000004c0)=0x40) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x29a000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0xffff, r4, &(0x7f0000000540)="682fb4ce1f0b777576b8ba8c9abf8b2c0530f563acbb4540d945e45128667a5bf503dfb9c21005897bebb38605e65b65989ab1f74b2e5f94c6815c9b6d334addd7cd900633ff444faac4d36dad7cd4e99053f8338079ee9472317a02ce255ae59bb374db1c1b7b1e26adb1f70e0535bf01ef58efb9f4b57098dcba6394eb83502d5b590c1877622d6aead919e784aa4d8eeb9060fef1a072f4f0187f6f3c364cfcf569be9a3f5bee82f36d781f8005afd5", 0xb1, 0xfffffffffffffffb, 0x0, 0x1, r5}]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4, {0x6f0}}, './file0\x00'}) openat$cgroup_devices(r6, &(0x7f0000000700)='devices.deny\x00', 0x2, 0x0) 07:32:28 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9707}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}, @NL80211_ATTR_IE={0x61, 0x2a, [@cf={0x4, 0x6, {0x1f, 0x4, 0x1, 0xa000}}, @link_id={0x65, 0x12, {@random="e6195c88225f"}}, @tim={0x5, 0x3c, {0x33, 0x4b, 0x4, "8a8e5b0c467f40b32472903f43ec7746466ac12e8dc2f15067b7d14b188ef6e97e34a17a5ee4262e28e28fa01ae6128b4a8fc864079ae71616"}}, @erp={0x2a, 0x1, {0x0, 0x1}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000180)={0x5, 0x5, 0x20, 0x0, 0x9}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xe) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x14, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x34004481}, 0x20008000) ioctl$KDSETLED(r1, 0x4b32, 0x1) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x188, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfd57}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x88f, 0x4f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4080) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x24008085) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000980)={0x7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0xfdc}) r7 = openat$incfs(r2, &(0x7f00000009c0)='.log\x00', 0x181000, 0x19) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f0000000a00)=0x6, 0x4) 07:32:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.advise\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x141081) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$802154_dgram(r3, &(0x7f0000000100)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) fadvise64(r4, 0x5, 0x0, 0x5) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @local}, 0x200, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000180)='ip6gre0\x00', 0x1f, 0xffffffffffffffbc, 0xd2}) close(r1) ioctl$sock_bt_hci(r1, 0x800448de, &(0x7f0000000240)="94e673f84baffcdb6e88cc451ac028146a72812fed540cdf9d40adb0b75c7be988c8ecc3d3aa7348ec06062164c1e19395ec560c3a142f74ec769576bd15159a3190f6635d201e2b5fe879059da787d0322ff77eb00b8cb77b29afba33233164ed0eedcc8b437ca98f53f8ef02bea6a04a82e9b1cc7c1de5ba1bbe83897a9282d006a7520138fa2e9f3def4c07c12aeca3b70762bb9aa1c1a359f2c7faf4b8a5393a882b") ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000300)={0x0, 0x0, 0x3, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000700)={r5, 0x5, 0x3}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000b00)=0x10000000) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = accept(r0, &(0x7f0000000d80)=@x25, &(0x7f0000000e00)=0x80) r7 = perf_event_open$cgroup(&(0x7f0000001040)={0x2, 0x80, 0x3, 0xd7, 0x3, 0x1, 0x0, 0x7fffffff, 0xa8020, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x7fffffff, 0x2}, 0x4a84, 0x4, 0x4, 0x7, 0xe35, 0xbc22, 0x1000, 0x0, 0x71fddc40, 0x0, 0x1}, 0xffffffffffffffff, 0x16, r1, 0x2) stat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r6, &(0x7f0000001200)={&(0x7f0000000e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000ec0)="4f4cc0773aed98028105142638caea63c34283562c98e401522878840ec146eb3afe801200972c7ebca032e877047c71ae943a0d3eb8fc005cdbb2f18c9e764290d22138ede640a604361c4b1f8e1ed17ce222920c19828d8fa5c366e918fda0fd2b81fb2e1cc655c196fdc69d09c7c960284288d86f90b7042cc805221590c0fa1a3664ff2a268c9a43f1b70a3938b258e208cfee85147f97e15447d99e650fd320b7afa70443585034fec339380957891b571b54f512ca8cdf5838d3b47ed1bf11de8dddffebb38be8893e6a4b8712d48775abfc7a8530097fea563c5c8d7c4a", 0xe1}, {&(0x7f0000000fc0)="b23a032ad0afb6c75fceae31a60d6ff3b7f2286d769e1fbd37ceaaa5f1c43467a531c518775f41f189d7ea3f16e8508c3ed06045c576444728274e69", 0x3c}], 0x2, &(0x7f0000001180)=[@rights={{0x30, 0x1, 0x1, [r0, r2, r2, r0, r4, r3, r4, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, 0xffffffffffffffff}}}], 0x50, 0x10}, 0x4000040) [ 103.930354] audit: type=1400 audit(1748331148.194:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:32:28 executing program 4: set_mempolicy(0x0, &(0x7f0000000000)=0x8000, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x5, 0x4, 0x0, 0x4, 0x4, 0x1000}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @private=0xa010101}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xf8, 0x800, 0x8}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x4040, 0x130) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000002c0)={0x15, 0xe9, &(0x7f00000001c0)="0905b74a17e81d1ed89cd77913fca3e58b6a9bf8396efd1a84a341f1ae5ca781f5980162f9171f6d8d49d5c75fb7d02f0fc530d1e4c6539a738be6ec66748d6c4ab6f0976265589d4cb1aed2dbe94cca744a641a6ac3a437924bbbf8919988dd309d89c9c7d139857b0dffb5f7a9d2bdfff2ac31efeacf1272619b5abf4317c85c25cd6a70dac1725c53c4f136276fcacb3756c9712a3c3a58b062549993c502e55d5d69ceb039d012b0a5a9d1aa0405c1e54582cc6ef2b63118a6b33a8f1f3493b4cff0f2944a3eaf927205ecc7c41e344a378ca693951715abdf467f6240485620b2b5901f0244c5"}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x81) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2a}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x40) fremovexattr(r1, &(0x7f00000005c0)=@known='trusted.overlay.nlink\x00') ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000600)={r1, 0xfffffffffffffffa, 0x20, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000640)={0x10000006}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f00000006c0)={0x8, 'syz_tun\x00', {'veth1_to_team\x00'}, 0x9}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x20000010) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000840)) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x4b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x48485) 07:32:28 executing program 5: r0 = semget$private(0x0, 0x3, 0xc3) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xaa, 0x800}, {0x1, 0x3, 0x1800}, {0x1, 0xdd, 0x1800}, {0xc, 0x1, 0x1800}, {0x1, 0x8, 0x1000}, {0x0, 0x0, 0x1800}, {0x4, 0x862d, 0x1000}], 0x7, &(0x7f0000000040)={0x77359400}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='veth1_to_bridge\x00') sched_rr_get_interval(0x0, &(0x7f0000000140)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)={0xb321442022fec050, 0x17, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x8001}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x1f, 0x22, "f2d76a0c12f8613469af8115b478005178b187b3b3345969d037467e261d379b669c"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x5c, "9058d1a0124796b7ecf302a33416f4aa25f1889c7422997219a714c92b1db57de607668f63ef6e7859a238961c5c5746ba7d2c704f779de27702cae05f3c920a481e7983e75c7620ccadc22db56934a106b6129f076fa52b195be4b7"}, @generic={0x80, 0x20, "d846228cc5510a9267334952ee9fd9e74a6f78072930f755cf30acaf9b8e9d51"}]}, 0xc8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000002c0), 0x2, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ppoll(&(0x7f0000000340)=[{r4, 0x84aa}, {r5, 0x201}], 0x2, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0xa8]}, 0x8) r6 = open(&(0x7f0000000400)='./file0\x00', 0x244b00, 0x4c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000440)={0x7fffffff, 0x7, 0x400, 0xabf9, 0xffffffff}, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0xffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mq_timedreceive(r1, &(0x7f0000000500)=""/202, 0xca, 0x96, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r8) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xec, r9, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x697}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "8397b54b235d8477c73c2e51bd1fae2f958067fc289d26c4ea807e149ba8a41d0470d5"}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24004081}, 0x4000080) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000800)) 07:32:28 executing program 6: r0 = semget(0x3, 0x4, 0x622) semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000000)=""/221) semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=""/90) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000180)) r2 = semget$private(0x0, 0x2, 0x400) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x1, 0x1]}, @CTA_LABELS_MASK={0x14, 0x17, [0xfffffff9, 0x0, 0x8, 0x6]}, @CTA_LABELS_MASK={0x18, 0x17, [0xdbd, 0xffff, 0x8001, 0xe0ef, 0xcc20]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x36}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_PROTOINFO={0x58, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x54, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa0}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x2}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x9}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x6}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x20, 0x6}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xe0, 0x6c}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x8, 0x8}}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) syz_io_uring_setup(0xb18, &(0x7f00000003c0)={0x0, 0xd7c7, 0x0, 0x2, 0x1cb, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) syz_io_uring_setup(0x3ea7, &(0x7f00000004c0)={0x0, 0x3a5d, 0x8, 0x0, 0x251, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000005c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x9) r7 = syz_open_dev$evdev(&(0x7f0000000600), 0x9, 0x2000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000640)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000680)=""/198) r9 = accept4(r1, 0x0, &(0x7f0000000780), 0x80400) setsockopt$inet6_opts(r9, 0x29, 0x3b, &(0x7f00000007c0)=@srh={0x3c, 0x4, 0x4, 0x2, 0x7, 0x60, 0x1, [@private2, @mcast1]}, 0x28) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000000800)={0x2, 0x3, 0x6a8, 0x0, 0x3, 0x3b30}) 07:32:28 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x105000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/14, 0xe, 0x0, &(0x7f0000000080)=""/136, 0x88}, &(0x7f0000000180)=0x40) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000001c0)) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000300)=0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x580a}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = openat2(r0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x1}, 0x18) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000000880)={0x14e0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x533, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xff}, @device_a, @broadcast, @from_mac=@broadcast, {0xb, 0x719}}, 0x4761, @default, 0x8000, @void, @void, @void, @val={0x4, 0x6, {0x1, 0xb8, 0x5, 0x81}}, @val={0x6, 0x2, 0xa6}, @val={0x5, 0x90, {0xfd, 0xe4, 0x88, "3a520a73b88df61011b9340b46914d07a486765105f735ff3cd3282833d7c4eeffc454d538c551a5c7d70c22f075b9979a976a44bd50d1c091935eeeb9c3571df1dc20cfa09c0e9ec726acf243ead74cfc7dbc4a97dd336098b7ddc8019c42ab0019ff7ee62fab2c602b8421555dfdc0b4a9cface0d223e4e9a7775ab83613d3e98b24c47920ac3061d40513fa"}}, @val={0x25, 0x3, {0x1, 0xe, 0x7}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x1, 0xa9, 0x20}}, @val={0x2d, 0x1a, {0x40, 0x3, 0x1, 0x0, {0x2, 0x7, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x55a, 0x5}}, @void, @void, @val={0x76, 0x6, {0x4, 0xf0, 0x19, 0x3}}, [{0xdd, 0xa9, "5cb3de007bac0e31b111bdff6018930c3f6cca03d48db73cb8579a163142d6e4c4315978913e574b8ce9076571aefd1c49f89d86b2ca0c4cd2b3d6aa2f5ec7b48c383c319e1716050966e99b0525814ed3e34118697cb74865cb387a6fa9f4258cabf4637092efe0e5c1a935c2475a4c61e7cc9e8fd22ce1c0219fe902fed8e34432ddc21fc253fd1f821b2623e097bafbac93a258311a2c581392a511c6635abb5405ec70cd56b44e"}, {0xdd, 0x19, "c12c3749e8fc3b948f6359f566c32067e27e72ed29d009569d"}, {0xdd, 0x7c, "0fa2f3863d955e22eb4a07946b8c4d57f8a5390a7751403f76adac54862aebfc528c627ee43244ae15cddda228d90dddc012cfb87b1bc43e19b953de7b94e549b1cb30dc54f61d202cf36463721d0cf0c239b5b4bc925166b2140bbd79fd6d5c3aa8ce5867a716270eff8364ec49cb4e5b9da23b71b7404b23ed7f14"}, {0xdd, 0x27, "424c0e87ffd363358ca28bfd9106d6dd68abd13ef6bdf69a3be66e7bac5d26cd8808f75e976928"}, {0xdd, 0xbd, "7e871432112efd7eace75628063132985d6588e927af5f4158d97db2049b1b8f444cdc4006f1ff2a80ad9f48783d957baf56624f39043e1141ba0affcafc762da5e029b1e9ee02e4af0f921dbbb069dc49aba1a56af9e340e86336931f810bab9978be0d87ef3dd8035404d8f76daa1df4e755e5a4f1e0daa764939f0d202b94bab5fc52ebd3b6357903f06182bd6fb704e864e3200cfb23e845ffbafec843909fb7ec491a06adb40bcf2994c23de9f1c714cf88fabd9f76b5d1666590"}, {0xdd, 0xa1, "0b42aa811ed00f4369f5acf7e79010434e3517e6265b2c5ba914cef018a84b84cb5d858da4531902c247cfa1df98923f808c783e15078e7968d09e0e5002daa7b0725039146385dfa30e90d93f0d317d9cf718528a5dbbe68612580426227a2b36e31853f6738213180309db7ab82753cb76eaf4570bfb65141bb3c4c9c71179bcc7c0df068169094abc2ab3f4ef8921210851bca0cad3c48ee4d2d978071251a9"}, {0xdd, 0xb7, "d14cb905e0d265356b03c63e895b988061850fbff32977e46fb16957b096408600d14af46d4d765a0267dc8099a726c9a8a021f1c282c51c99cba56cf39978c73d1573be4450287e2cecf11399f5553998411550a7920cbff3e42833f85c805bd551b544b0bf48b7a6d0d2d00a60c8d46d1b239ba5e8dadf3c95a6dd20f15df0f3041c3e2b6290e9b457c205d8a9d91a72ed04e4339f9bc6bfffc485a4e4fe954a05c9c82f1d8d315fb7b5eeb26eec4da7709e2daefb75"}, {0xdd, 0xb1, "1b300000e3611ed9b95989c2841045714668aa4abbd01539bf919a18d66c11065ab3505d7cc1d1bfb6cca30ad9a95f05ad7ff46925e7ac8e8a6168e1265321403208a8353b62ea9d4880abe40dd80baaa070b731d16223308e12de5e846ad087920a8a669c9e7160af906d9372f022052d19ad12e5798a3ee28baf774d415778948260c3580fb8aa85d100549f80cd02a8ee17943ee2c020565b227be347ff38988a8c5703dc29d61918a5ac6a042d9d02"}]}}, @NL80211_ATTR_BEACON_TAIL={0xac, 0xf, [@mic={0x8c, 0x18, {0x6a8, "8c8506b2b4a8", @long="95495c9cac4cabc684d47dfdee270483"}}, @fast_bss_trans={0x37, 0x87, {0x80, 0x2, "f42020a210b45c335e03a8f08c9a736c", "7c7f9995831e8c8115c1305cf00a1eb7b407235af35cc800aa6a6618e60abd4a", "57b29cb991f611c630d75f242e3c82d869bab604a345db3fc99b92c960391f9d", [{0x4, 0x1f, "394a316e2d6ff9bb666052bdceffc188c6c0a684cf9204e934fb86d5d653cf"}, {0x3, 0x12, "f8da5e80755bf3aa6cc6c3ac20583bb7337e"}]}}, @supported_rates={0x1, 0x3, [{0x6, 0x1}, {0x9}, {0x12, 0x1}]}]}, @NL80211_ATTR_PROBE_RESP={0x3f4, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xd3, 0xf, [@sec_chan_ofs={0x3e, 0x1}, @fast_bss_trans={0x37, 0x92, {0x40, 0x3, "788f54ac140078dd924361050c3ea678", "205789fb7007496bfb424a7ab37df7ebd32118f10cd6b7ba090c002b7d8ec668", "3a64c81922406eaf3a15ac9d32990a00e913d14edfaf9e1750c7a389ac65a01e", [{0x2, 0x6, "adec26fc25a9"}, {0x4, 0x17, "c90c3b8e31955220ae1fc5d75671b649885d5e97105992"}, {0x1, 0x1d, "0621252a236c7516f5bab714432e5c42e9da4f4dd0655332d592a7cd91"}]}}, @ht={0x2d, 0x1a, {0x1, 0x3, 0x5, 0x0, {0x100000000, 0x4, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x8, 0x4}}, @cf={0x4, 0x6, {0xa6, 0xc0, 0x3, 0x274a}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0x0, 0x0, 0x32, 0x2}}, @ibss={0x6, 0x2, 0x5}]}, @NL80211_ATTR_BEACON_TAIL={0x7c, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0x7c, 0x8}}, @mic={0x8c, 0x10, {0xaa5, "c45cde2e4b5c", @short="8bbb2435013e258b"}}, @peer_mgmt={0x75, 0x8, {0x1, 0xe5, @val=0x401, @val=0x25, @void}}, @fast_bss_trans={0x37, 0x54, {0x3, 0x1, "3d49b5059b5291e6deb995458aa313ef", "e124b438bea007dba10fa36930bbf64abad3cc15496231281c8de4ffdd9a0842", "4e8eb235b5a629562d3f2f821bffe3354562422b99ebe640550891a5146b41e2", [{0x1}]}}]}, @NL80211_ATTR_IE={0x15, 0x2a, [@cf={0x4, 0x6, {0x5, 0xf7, 0xe88f, 0x1}}, @dsss={0x3, 0x1, 0x38}, @supported_rates={0x1, 0x4, [{0x9, 0x1}, {0x6c}, {0x1, 0x1}, {0x1b, 0x1}]}]}, @NL80211_ATTR_IE={0x13a, 0x2a, [@supported_rates={0x1, 0x8, [{0x18, 0x1}, {0x5, 0x1}, {0xc}, {0x60}, {0x5}, {0x16}, {0x6}, {0x60, 0x1}]}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @perr={0x84, 0x11c, {0x1, 0x12, [@not_ext={{}, @broadcast, 0x3, "", 0x34}, @ext={{}, @device_b, 0x9, @device_b, 0x7}, @ext={{}, @broadcast, 0x3f, @device_a, 0x31}, @ext={{}, @device_a, 0xfffffffd, @device_a, 0x3d}, @not_ext={{}, @device_a, 0x80, "", 0x22}, @not_ext={{}, @broadcast, 0x1, "", 0x6}, @not_ext={{}, @device_b, 0xfffffffc, "", 0x1d}, @not_ext={{}, @device_a, 0x0, "", 0x1a}, @ext={{}, @broadcast, 0x8000, @broadcast, 0x17}, @not_ext={{}, @device_a, 0x80, "", 0x1f}, @not_ext={{}, @device_b, 0x8, "", 0x10}, @ext={{}, @device_b, 0x5, @device_a, 0x3c}, @not_ext={{}, @device_a, 0x3, "", 0x3f}, @not_ext={{}, @device_a, 0x7, "", 0x3b}, @ext={{}, @device_b, 0xff, @broadcast, 0x29}, @not_ext={{}, @device_a, 0x0, "", 0x2e}, @ext={{}, @broadcast, 0x2, @broadcast, 0x1b}, @ext={{}, @broadcast, 0xfffffffb, @device_b, 0x41}]}}, @gcr_ga={0xbd, 0x6, @device_b}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x715, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@peer_mgmt={0x75, 0x4, {0x0, 0x4, @void, @void, @void}}]}, @NL80211_ATTR_IE={0x125, 0x2a, [@cf={0x4, 0x6, {0x3, 0x5, 0x7, 0x4}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x7f, 0x1, @broadcast, 0x3, 0x8, 0x80000001}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x7, @broadcast, 0x5, "", 0x0, 0x7ff, @device_a, 0x3}}, @ssid={0x0, 0x4, @random='\\`q\b'}, @chsw_timing={0x68, 0x4, {0x2, 0x4}}, @link_id={0x65, 0x12, {@random="4e74deb253e5", @device_b, @device_b}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x0, 0xff, 0x54, 0xa89}}, @fast_bss_trans={0x37, 0xa7, {0x4, 0x4, "03467273943131953464d620a9efb94e", "fb909ea9a57599c986903365a0326d0186f8d1131393d8bfc47608bdb23f8a76", "872a9a694184352200d6e82342191aaddea9191d8af9983286091cdc4afc2f75", [{0x4, 0x19, "2e214a6284fe8918fcd4f7788752fcb654ed680e20355808a8"}, {0x2, 0xf, "6c3838e5fb851866199eceb39990b7"}, {0x4, 0x3, "53f44b"}, {0x2, 0x22, "1e8789729ad55aefc4b240135941bd664920673bb27698010f2cade9b7437c2e54b4"}]}}]}]}, 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x11) fsetxattr(r0, &(0x7f0000001e00)=@random={'trusted.', '-\x05]\x00'}, &(0x7f0000001e40)='}:-\x00', 0x4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x3c, r5, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24024010}, 0x4000001) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x58, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x400}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa3}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x80}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7fff}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1f}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8f4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8084}, 0x80) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x50, r5, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r2) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000002900)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000028c0)={&(0x7f00000022c0)={0x600, r6, 0xe68c49d23a27c601, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10, 0x7a}}}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "d52852217191"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x20}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xd0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xb4, 0xe, 0x0, 0x1, [{0x6d, 0x0, "f5bc514406868897131c0db85cca2294435b097760eb07038f91e1331bf6375dd6dc92d0242de70e554b9ecac39a19abc96ee3582c0050da9fc5ce52d33ee93571c76cea31213bc3f844cbd21f0801fbd0b654e6e2e535e68f9b2313f7078b248e3fcbf99cb985b699"}, {0x3e, 0x0, "ae4fdde7544a1280911308174f87d4fbfcb7ac14fd4ea952782295ddd27744899c427c7618aa57e827557d425aae9bcad3b796d36c1aff878199"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x424, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x37c, 0xe, 0x0, 0x1, [{0x8c, 0x0, "dfaa5e05eb359b1136bd6fc7788d6cda055370a5dbd141702e5f0c1ad31688ec022621c0975ef698a8eb589183a3bbfc8a6b0b05a7220875c12770708b7bff867f5cab7487ee9a26619224284046e64b3e3851d283642ba7f7b6b03e85a9c0fc015b830d3fab0de1dbb6ec38aa34721c8154c71b2043e5290a71c582cc9da11eac1b141bf8988303"}, {0x64, 0x0, "d88e6a2bf5c996a0a7ecd54819de0a729e1c002abecdfc791279fa0f96079f4f888b87b8579f568f89494e24610e747c6b9c7bceb9c5ba405eea1aa47ffacc664e0cf0d9d59a520292599d34ff6535287664785be067b95ec4edf184e0c8ffd5"}, {0xcc, 0x0, "4618b8e0241deeaa9f02085eedcef1292a761fbdbd25628718e671e765a9ef00c490b552cb882c7d26f218e756bbbfc2fbe9e3fb280f68064b548b257aaf095e16940c226fc95a226330060a428a19e6f53ceced57bdd3318ebbb25f781b294253eba9a77958545cd20b450c78b586bf0e7924a4d5bcf699d195265e6cd4f572974713555edc55aaca1b493846905b2be2d6b8991aa4d85125175d28e15988a1d8655fff1f0b9a9634ca0fbca2b1fe6e51d20d0093f4d9d8aabf3d8d94545e019a60cc9e3f600864"}, {0x26, 0x0, "a43382c582aebb899a29c426ddc750aa85b13f8032a4717f26dd9dc4c69e86560deb"}, {0xe9, 0x0, "788f84c49a88481f7def9dea1f32b3fa7e72a81e73bc3d0357d72947af9a63ca60b531f6c2ee8adc5ae9859e3e28c5c9103648f864eb5eb57102eb6b77dd3a0d3bf3ddaabf81a0b4b1297355956803e282a9a979cc7b14d5dc90f824eb3611ec0c91b5589f0679f5768c50e2601ecb69b8eb38973f7b8f49e757c587473f2045b8b016c3234b98b1e67d08f665e94b6614041c03b4a5acaf4b6ffa17332fa60aed06c7ae3c4dbf0434d1fb673189f9c10fdccb49c2b0925daf61b534155f54f925809ebfbe7410f508e1ea5041d43638a78aaa8a172f68fe8a96afe20ed90bda7f1b17f59d"}, {0xa8, 0x0, "f8fa9ee6c593e5940bee46f37a696f56a1c55a79ca2775023d9af4249f2df08203b4402c9725bac1a862ce0d26651fa7ad6ae699442cf58d08afbdc245c88b102ec99d3f23ac198516406b3e5a265728a34b587e86afe4b5b643c4cb396aa54ad786be7a6f94ab6ff243e0e7f7042c0d09da0ff32cf0d407897178a1983daf46593f3ca3163609fa3c555ba86466c468b67b5980db898e1b73517db063f5f3d6588a18fd"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_SRF={0x74, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "206d8acfdad1"}]}, @NL80211_ATTR_NAN_FUNC={0xc8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1f}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x9f, 0xb, "bbb97ea948cbb237848cfdf2ea5528d4686dbe92f44c4bfbad4642493d1d338f04ac0868237dfcf006d5c1527a096351907891f46376f75fe8232f338dcb280775f4c9f7280cc2edab637d25fc2eb6a5f014d98d09d99f6e76ec3bf1fe44e584be504a06f4a31e49ecbfd613d73cdc66d4f7df42d067520accdfab90ecbe56f0e318dffcd66ce32c671c1ff6d6e36c15a7b75779b948be2b5ea788"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}]}, 0x600}, 0x1, 0x0, 0x0, 0x20000040}, 0x8041) [ 105.491072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.493376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.498875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.501182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.504909] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.509888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.515012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.525185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.531799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.536974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.594429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.601108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.606057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.611841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.617426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.622085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.627418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.635668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.640273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.643031] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.669080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 105.694356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.699953] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 105.705314] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 105.715763] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 105.733674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.741297] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.750127] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 105.762673] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.765324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.775022] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.777798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.782001] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 105.795034] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.805015] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 105.860890] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 105.882245] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 105.885126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 105.903255] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 105.908441] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 107.631055] Bluetooth: hci0: command tx timeout [ 107.631689] Bluetooth: hci1: command tx timeout [ 107.696584] Bluetooth: hci2: command tx timeout [ 107.758797] Bluetooth: hci3: command tx timeout [ 107.886786] Bluetooth: hci4: command tx timeout [ 107.887644] Bluetooth: hci6: command tx timeout [ 107.888151] Bluetooth: hci5: command tx timeout [ 108.015571] Bluetooth: hci7: command tx timeout [ 109.679533] Bluetooth: hci1: command tx timeout [ 109.680047] Bluetooth: hci0: command tx timeout [ 109.742892] Bluetooth: hci2: command tx timeout [ 109.806619] Bluetooth: hci3: command tx timeout [ 109.934965] Bluetooth: hci5: command tx timeout [ 109.935456] Bluetooth: hci6: command tx timeout [ 109.936604] Bluetooth: hci4: command tx timeout [ 110.063565] Bluetooth: hci7: command tx timeout [ 111.726730] Bluetooth: hci0: command tx timeout [ 111.727220] Bluetooth: hci1: command tx timeout [ 111.790791] Bluetooth: hci2: command tx timeout [ 111.854570] Bluetooth: hci3: command tx timeout [ 111.983196] Bluetooth: hci5: command tx timeout [ 111.983859] Bluetooth: hci6: command tx timeout [ 111.984289] Bluetooth: hci4: command tx timeout [ 112.111133] Bluetooth: hci7: command tx timeout [ 113.774756] Bluetooth: hci1: command tx timeout [ 113.775260] Bluetooth: hci0: command tx timeout [ 113.838579] Bluetooth: hci2: command tx timeout [ 113.902735] Bluetooth: hci3: command tx timeout [ 114.030811] Bluetooth: hci5: command tx timeout [ 114.031307] Bluetooth: hci4: command tx timeout [ 114.032002] Bluetooth: hci6: command tx timeout [ 114.158730] Bluetooth: hci7: command tx timeout [ 167.981243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.987834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.994937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.012111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.030566] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.036760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.040131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.046913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.049878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.051792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.053854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.059766] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.064399] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.070453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.072200] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.073222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.075939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.077869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.085059] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.087929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.092296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.106083] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 168.117252] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 168.119082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.120355] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 168.123665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.123947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.128578] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 168.133855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.135230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.141761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.166357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.177865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.192482] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.203052] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.295751] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 168.316301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 168.325049] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 168.410474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 168.416972] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 170.094596] Bluetooth: hci0: command tx timeout [ 170.158654] Bluetooth: hci3: command tx timeout [ 170.223574] Bluetooth: hci6: command tx timeout [ 170.223849] Bluetooth: hci4: command tx timeout [ 170.224165] Bluetooth: hci2: command tx timeout [ 170.225102] Bluetooth: hci1: command tx timeout [ 170.350640] Bluetooth: hci5: command tx timeout [ 170.542620] Bluetooth: hci7: command tx timeout [ 172.142737] Bluetooth: hci0: command tx timeout [ 172.206782] Bluetooth: hci3: command tx timeout [ 172.271712] Bluetooth: hci2: command tx timeout [ 172.271796] Bluetooth: hci4: command tx timeout [ 172.272136] Bluetooth: hci1: command tx timeout [ 172.272771] Bluetooth: hci6: command tx timeout [ 172.398747] Bluetooth: hci5: command tx timeout [ 172.591544] Bluetooth: hci7: command tx timeout [ 174.191523] Bluetooth: hci0: command tx timeout [ 174.254688] Bluetooth: hci3: command tx timeout [ 174.318846] Bluetooth: hci4: command tx timeout [ 174.319368] Bluetooth: hci6: command tx timeout [ 174.319408] Bluetooth: hci2: command tx timeout [ 174.320211] Bluetooth: hci1: command tx timeout [ 174.448849] Bluetooth: hci5: command tx timeout [ 174.638577] Bluetooth: hci7: command tx timeout [ 176.239198] Bluetooth: hci0: command tx timeout [ 176.302777] Bluetooth: hci3: command tx timeout [ 176.367632] Bluetooth: hci2: command tx timeout [ 176.368117] Bluetooth: hci1: command tx timeout [ 176.368583] Bluetooth: hci6: command tx timeout [ 176.368646] Bluetooth: hci4: command tx timeout [ 176.494836] Bluetooth: hci5: command tx timeout [ 176.686600] Bluetooth: hci7: command tx timeout [ 230.094313] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.096798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.098212] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.107032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.110924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.422942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.424983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.427374] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.428473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.428825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.435943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.440252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.474058] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.494829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.504402] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.605636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.612661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.624175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.631313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.636704] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.658914] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.663230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.667138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.700194] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.710226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.816240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.855401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.863978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.902913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.909768] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.003362] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 231.065231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.067929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 231.085928] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 231.157013] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 231.157879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.168460] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.178253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.218671] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.243139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.175336] Bluetooth: hci0: command tx timeout [ 232.495590] Bluetooth: hci2: command tx timeout [ 232.559833] Bluetooth: hci1: command tx timeout [ 232.751568] Bluetooth: hci3: command tx timeout [ 232.815147] Bluetooth: hci4: command tx timeout [ 233.070594] Bluetooth: hci5: command tx timeout [ 233.327664] Bluetooth: hci7: command tx timeout [ 233.327691] Bluetooth: hci6: command tx timeout [ 234.224924] Bluetooth: hci0: command tx timeout [ 234.542769] Bluetooth: hci2: command tx timeout [ 234.608520] Bluetooth: hci1: command tx timeout [ 234.798765] Bluetooth: hci3: command tx timeout [ 234.862704] Bluetooth: hci4: command tx timeout [ 235.118799] Bluetooth: hci5: command tx timeout [ 235.374867] Bluetooth: hci7: command tx timeout [ 235.375315] Bluetooth: hci6: command tx timeout [ 236.271597] Bluetooth: hci0: command tx timeout [ 236.590771] Bluetooth: hci2: command tx timeout [ 236.655205] Bluetooth: hci1: command tx timeout [ 236.847524] Bluetooth: hci3: command tx timeout [ 236.910568] Bluetooth: hci4: command tx timeout [ 237.168522] Bluetooth: hci5: command tx timeout [ 237.422635] Bluetooth: hci6: command tx timeout [ 237.422731] Bluetooth: hci7: command tx timeout [ 238.320153] Bluetooth: hci0: command tx timeout [ 238.639789] Bluetooth: hci2: command tx timeout [ 238.702575] Bluetooth: hci1: command tx timeout [ 238.894553] Bluetooth: hci3: command tx timeout [ 238.959732] Bluetooth: hci4: command tx timeout [ 239.214570] Bluetooth: hci5: command tx timeout [ 239.470682] Bluetooth: hci7: command tx timeout [ 239.471766] Bluetooth: hci6: command tx timeout [ 292.487419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.492137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.499071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.509127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.514543] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.551167] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.555153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.562148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.568647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.571925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.753643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.768764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.773296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.792241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.814046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.817941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.825750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.843197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.858873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.866978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.898880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.918394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.920416] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.951394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.957443] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.329245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.331005] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.359991] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.373768] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 293.376455] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.399123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 293.404971] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 293.428411] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.470076] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.473917] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.480544] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 293.488875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.497415] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 293.539241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 293.633622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.574586] Bluetooth: hci0: command tx timeout [ 294.638568] Bluetooth: hci1: command tx timeout [ 294.894767] Bluetooth: hci3: command tx timeout [ 294.960554] Bluetooth: hci2: command tx timeout [ 295.022561] Bluetooth: hci4: command tx timeout [ 295.598591] Bluetooth: hci5: command tx timeout [ 295.664540] Bluetooth: hci6: command tx timeout [ 295.665123] Bluetooth: hci7: command tx timeout [ 296.623590] Bluetooth: hci0: command tx timeout [ 296.687660] Bluetooth: hci1: command tx timeout [ 296.944748] Bluetooth: hci3: command tx timeout [ 297.006583] Bluetooth: hci2: command tx timeout [ 297.071563] Bluetooth: hci4: command tx timeout [ 297.647887] Bluetooth: hci5: command tx timeout [ 297.712031] Bluetooth: hci7: command tx timeout [ 297.712905] Bluetooth: hci6: command tx timeout [ 298.672902] Bluetooth: hci0: command tx timeout [ 298.734533] Bluetooth: hci1: command tx timeout [ 298.991553] Bluetooth: hci3: command tx timeout [ 299.054556] Bluetooth: hci2: command tx timeout [ 299.119853] Bluetooth: hci4: command tx timeout [ 299.695669] Bluetooth: hci5: command tx timeout [ 299.759626] Bluetooth: hci7: command tx timeout [ 299.760068] Bluetooth: hci6: command tx timeout [ 300.720943] Bluetooth: hci0: command tx timeout [ 300.784529] Bluetooth: hci1: command tx timeout [ 301.039550] Bluetooth: hci3: command tx timeout [ 301.102974] Bluetooth: hci2: command tx timeout [ 301.166606] Bluetooth: hci4: command tx timeout [ 301.743567] Bluetooth: hci5: command tx timeout [ 301.808198] Bluetooth: hci7: command tx timeout [ 301.809005] Bluetooth: hci6: command tx timeout [ 354.890219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.896849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.900406] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.910162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.913866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.947629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.951087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.953876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.960908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.965059] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.151286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.162046] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.168644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.179195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.186283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.208798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.218705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.240830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.273762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.276799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.280969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.288001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.304926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.343988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.363831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.373001] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.388316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.404746] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.407981] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.412822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.420152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.422633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.431971] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.437453] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.443015] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 355.592700] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.604213] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.621243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.635992] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.640165] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 356.975586] Bluetooth: hci0: command tx timeout [ 357.038903] Bluetooth: hci1: command tx timeout [ 357.233564] Bluetooth: hci2: command tx timeout [ 357.359810] Bluetooth: hci3: command tx timeout [ 357.422588] Bluetooth: hci4: command tx timeout [ 357.550798] Bluetooth: hci6: command tx timeout [ 357.550851] Bluetooth: hci5: command tx timeout [ 357.742595] Bluetooth: hci7: command tx timeout [ 359.023580] Bluetooth: hci0: command tx timeout [ 359.087555] Bluetooth: hci1: command tx timeout [ 359.278741] Bluetooth: hci2: command tx timeout [ 359.407842] Bluetooth: hci3: command tx timeout [ 359.472625] Bluetooth: hci4: command tx timeout [ 359.598574] Bluetooth: hci6: command tx timeout [ 359.599014] Bluetooth: hci5: command tx timeout [ 359.790600] Bluetooth: hci7: command tx timeout [ 361.070561] Bluetooth: hci0: command tx timeout [ 361.134701] Bluetooth: hci1: command tx timeout [ 361.326791] Bluetooth: hci2: command tx timeout [ 361.454567] Bluetooth: hci3: command tx timeout [ 361.518589] Bluetooth: hci4: command tx timeout [ 361.647798] Bluetooth: hci5: command tx timeout [ 361.648232] Bluetooth: hci6: command tx timeout [ 361.838628] Bluetooth: hci7: command tx timeout [ 363.118775] Bluetooth: hci0: command tx timeout [ 363.182550] Bluetooth: hci1: command tx timeout [ 363.374540] Bluetooth: hci2: command tx timeout [ 363.502677] Bluetooth: hci3: command tx timeout [ 363.568507] Bluetooth: hci4: command tx timeout [ 363.694557] Bluetooth: hci6: command tx timeout [ 363.695022] Bluetooth: hci5: command tx timeout [ 363.886635] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 07:37:37 Registers: info registers vcpu 0 RAX=00000000ffffffff RBX=0000000000000000 RCX=dfb8078e475e76a4 RDX=0000000085cb9a3e RSI=000000008301a466 RDI=0000000081125d94 RBP=ffffffff85c1d1c0 RSP=ffff888009617740 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff8151b073 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff2699e0d5c CR3=000000001e13b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff88307f40 RBX=ffff888015e18000 RCX=0000000000000002 RDX=0000000000000001 RSI=0000000000000000 RDI=ffffffff85c1d1c0 RBP=ffffffff85c1d1c0 RSP=ffff88802b59f680 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000004421 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff81518c3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f80eab5e8e0 CR3=0000000028998000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000