Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 92.315831] hrtimer: interrupt took 2463730 ns Warning: Permanently added '[localhost]:18602' (ECDSA) to the list of known hosts. 2025/05/29 09:52:50 fuzzer started 2025/05/29 09:52:50 dialing manager at localhost:36815 [ 94.287069] cgroup: Unknown subsys name 'net' [ 94.456929] cgroup: Unknown subsys name 'cpuset' [ 94.504065] cgroup: Unknown subsys name 'rlimit' 2025/05/29 09:53:05 syscalls: 2214 2025/05/29 09:53:05 code coverage: enabled 2025/05/29 09:53:05 comparison tracing: enabled 2025/05/29 09:53:05 extra coverage: enabled 2025/05/29 09:53:05 setuid sandbox: enabled 2025/05/29 09:53:05 namespace sandbox: enabled 2025/05/29 09:53:05 Android sandbox: enabled 2025/05/29 09:53:05 fault injection: enabled 2025/05/29 09:53:05 leak checking: enabled 2025/05/29 09:53:05 net packet injection: enabled 2025/05/29 09:53:05 net device setup: enabled 2025/05/29 09:53:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/29 09:53:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/29 09:53:05 USB emulation: enabled 2025/05/29 09:53:05 hci packet injection: enabled 2025/05/29 09:53:05 wifi device emulation: enabled 2025/05/29 09:53:05 802.15.4 emulation: enabled 2025/05/29 09:53:05 fetching corpus: 0, signal 0/0 (executing program) 2025/05/29 09:53:07 starting 8 fuzzer processes 09:53:07 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080000) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f2, 0x100, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0xc0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xb7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000841) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x5d) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x130, r6, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x62, 0x45, "58b7a0985d84fe4e191a509693ae6755b84516d3be6dac76aae2ff1221b622e6047d5f3437d0ae70d687d5b7c3be3aad5cf048c33824277ed5de10189596d8581afb5fb838179ed6f696eadf3202433f3e1d2dcac132bf1b66433cc94001"}, @NL80211_ATTR_TESTDATA={0x4b, 0x45, "dc202053cd2d79fa908e1ef17694ce1d928fa62d77ef9aca2e84459286bcd3d7616eede51e8e715c25f8ffbb782d36b111215758e26c209c941541dc33a938153835b0afdbb195"}, @NL80211_ATTR_TESTDATA={0x6a, 0x45, "0ab554410a031bf4e8d60c1f3dc8a63e1f0aa191976eefc5f1a188cd488e8b0e9be3d2ffb6b94659b972009aeca272f0d789434018efc35895d58d8001d39c54b4284ebdf708dff25a96cc1da3eca37a41923e5f44cbb5030ab48a96de2680f2e9f849678655"}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000850}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x880) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x440d0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}]}]}, 0x20}}, 0xc000884) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x80, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x6b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}]}, 0x80}, 0x1, 0x0, 0x0, 0x80000}, 0x8051) 09:53:07 executing program 0: ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000040)) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000000c0)={0x0, 0x8, 0x7, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xfffffeff, 0x2}}, './file0\x00'}) r2 = openat$cgroup_type(r1, &(0x7f0000000500), 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000540), 0x4, 0x20000) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2fc, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1}, [@NFQA_PAYLOAD={0xe5, 0xa, "e6f572b6bc27f3955795e40c4c9b9e87125b8fe35b50150fcb414d9595e8cbfd6738f2ec30ce9ca189812b394b19bee70daf131eed05d9021ec139b14745ac9bec286f641fb431cf1360b0193493e09ec7674206c84bc3cde1fe4d2954d3c3cae45aec8589d4790b99d1ede27641daf1b156d4936b54dea6e502cb7d47d322627379a613260bbb27ed6fbde06bf8eaef17acab05b7204fbfbf35695e0108f3d8d0cbe18fb9089028c2572ce482f0c7b1cfa4089fe3a795eb516932eb9045ec4363268135204397d4c13d8901314b0dca798e9e6dcc9e74edc55f5bbad07d69719b"}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CT={0xe0, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0xc, 0x17, [0x3, 0x7]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0xfffffffb, 0x0, 0x4974, 0x5f3a3ef2, 0x7fff, 0x5, 0x3b]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9b5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff7}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_PAYLOAD={0x85, 0xa, "1b1221c7ea980eaf382d082ad456561b3d7f8bafa37996a61e64be06faafdc7abbd74724acfa17190e6a20059ca60c6dfe05679d429e1f87de745f87dd1c641427e09b1c00b9cd3ff9925412dbe2e45f6706f2fab50aef718153e4a0ffd7819cec30edf5c9fccf37593fe13de03b4d48bc33ef12cbf1213b24400fab862358648b"}, @NFQA_EXP={0x4}, @NFQA_CT={0x60, 0xb, 0x0, 0x1, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x8064}, 0x4004044) pwrite64(r2, &(0x7f0000000940)="cb75f672ca43e19dda468021e30841caa5523011575b469f911f1f0d2f286aeace047237078a3c9ac15eb87de4244277b7d152387f3892858ec62d8954883ef20f70d39db8e2e647e59fbe268ad6b90a7b5a847729b244131f703809dfc77abe11e81a74579350a5af9b6608356c388d3aae6882a371e1a7640b751c7d4b1efe7e2053a759e0b0b406149b8a68e5d1387b37cb2e2e42db44bdeaf4586bf23b86a32c1500c304fc54cfcfa1c3f77124de74d92c8a2c22fbf9e411133c07e77cd90460054d685f49", 0xc7, 0x9) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000a40), &(0x7f0000000a80)={0x0, 0xfb, 0x103, 0x1, 0x80, "9ff01b9eb806e73af6386f646d099a08", "630019a33ca40653fd4f5470448193ef178a14d76bb07b646b5624fef449c6dc0c7d9730098c688758d05759341892bf954321f80bf7873cbff759a5f3ca53637c008b19f74cb4bd6ae9aa7e1b4ab99a4bb44d785e3b388db5471ce3c629b9f56272f6891954cda93a7810750960f1e58a8c38cb6a5023ed319ac3ad8f26e15598b743f23a859014e0981517cbcd96cb517dc465c5425b76de721059023807c0e7a3aebb1e8afce938b6d87a0e4cca1b73c83986e7c490c4321cc3836862498038eb669ac1c3ff1bb2338afafc85eeb8bad423a27cc179a947e23be2a973f02efceef3896a237f637ac817e70b17"}, 0x103, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000fc0)={0x1, 0x0, 0x8, 0x3, 0x108, &(0x7f0000000bc0)}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r4, 0x220, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000001140)={{r0}, {@void, @max}}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x68, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa90}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5996}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x8004) fchdir(r1) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000013c0), 0x10001, 0x0) ioctl$sock_ifreq(r5, 0x8934, &(0x7f0000001400)={'veth0_to_batadv\x00', @ifru_map}) 09:53:07 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2e9, 0x20}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4f}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x6}]}, @NL80211_ATTR_SCAN_SSIDS={0x58, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xb, 0x0, @random="fa52e90a5091c9"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8845}, 0x8080) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x80) shmget(0x3, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000300)=0x5, 0x4) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040040}, 0xc1) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000887) ioctl$TIOCNXCL(r0, 0x540d) getsockname$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x700, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) write$bt_hci(r0, &(0x7f0000000900)={0x1, @le_read_iso_tx_sync={{0x2061, 0x2}, {0xc9}}}, 0x6) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@private0, 0x4e21, 0xe5, 0x4e23, 0x1, 0xa, 0x180, 0x0, 0x2, r3, 0xffffffffffffffff}, {0x1f, 0x7ff, 0x2, 0x1, 0x6, 0x0, 0x80, 0x5}, {0x4, 0x5e0, 0x7fff, 0xf1}, 0xfffffffb, 0x0, 0x2, 0x1, 0x3}, {{@in=@loopback, 0x9, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3505, 0x1, 0x3, 0xfb, 0x8, 0x8, 0x6d}}, 0xe8) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000a80)={0x710, 0x0, 0x5, 0xf04, 0x0, 0x0, {0x0, 0x0, 0x3}, [{{0x254, 0x1, {{0x2}, 0x2, 0xa5, 0x80, 0x101, 0x13, 'syz0\x00', "aac5d13e4a15c8061ca0b9625eb2e405f5cf7adaa7e4319c50e8791810e95f18", "a48d0581d8ceadd8f94ac7bf882bf52cd5f93e15c94731ae7129c7b09531bedc", [{0xe, 0x6, {0x1, 0x8}}, {0x2, 0x6, {0x1, 0x7}}, {0x800, 0x3, {0x3, 0x7}}, {0x1000, 0x20, {0x453625c2ed5365da, 0x2}}, {0x6, 0xde9, {0x1, 0x5}}, {0x7ff, 0x7, {0x0, 0x8}}, {0x7ff, 0x0, {0x0, 0x6}}, {0xffff, 0x7, {0x2, 0x2103}}, {0x3, 0x6, {0x1, 0x7f}}, {0x7, 0x1}, {0x9, 0x5e55, {0x3, 0x6}}, {0x4, 0xb05c}, {0xffff, 0x1ff, {0x1, 0x1}}, {0x7, 0x0, {0x2, 0xffff0001}}, {0x9, 0x8000, {0x2, 0x3}}, {0x9, 0x3ff, {0x0, 0xffffff80}}, {0x800, 0x950, {0x1}}, {0x8001, 0xda, {0x2, 0x4}}, {0xfff, 0xff51, {0x2, 0x7}}, {0x400, 0x81, {0x0, 0x7fffffff}}, {0x2, 0x2, {0x3, 0x9}}, {0x200, 0x200, {0x1, 0x3f}}, {0x1, 0x2, {0x0, 0x10001}}, {0xc9a, 0x6, {0x1, 0xba7}}, {0x0, 0x1000, {0x3, 0x6}}, {0x5, 0x5, {0x1, 0x9}}, {0x8, 0xaf8b, {0x1, 0x8001}}, {0x200, 0x20, {0x0, 0x9}}, {0x0, 0x0, {0x2, 0x4}}, {0x0, 0x3, {0x3, 0x5}}, {0x81, 0x7ff, {0x2, 0x100}}, {0x9c04, 0x745, {0x3, 0x7}}, {0x3, 0x200, {0x1}}, {0x1, 0x5, {0x2, 0x401}}, {0x9, 0xffe1, {0x3, 0x8}}, {0x8, 0x1, {0x0, 0xfffffffd}}, {0x5, 0xb1, {0x3, 0x2}}, {0x55d3, 0xb4, {0x1, 0xffffff81}}, {0xce4, 0x0, {0x1, 0x8}}, {0x7, 0x4, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x1, 0x4, 0xd67c, 0xfe00, 0xd, 'syz0\x00', "90f39c6145ce2fbb7c04c8f9dae1c9a52d72250355838cda550e493edf527386", "95be67c129aaaa05f1413eb5e039eb898345368b705bafa4b6716a5aa721f409", [{0x0, 0xffff, {0x1, 0x4}}, {0x1, 0x4}, {0x4, 0xf170, {0x0, 0x9}}, {0x6, 0x6, {0x3, 0x400}}, {0x9, 0x3, {0x3, 0x100}}, {0xfffa, 0xfff, {0x0, 0xf74}}, {0x2, 0x5329, {0x1, 0x3f}}, {0x112, 0x4000, {0x1, 0x6}}, {0x757, 0xf1c, {0x3, 0x7}}, {0x1, 0x72, {0x3, 0x1}}, {0x7, 0xa0f, {0x3, 0xffff}}, {0x1, 0x1, {0x2, 0x12}}, {0x0, 0xff, {0x3, 0x4}}, {0x9, 0xfff, {0x2, 0x1}}, {0x9, 0x20, {0x0, 0x81}}, {0x5, 0x1, {0x0, 0x9}}, {0x9ad, 0x3}, {0xd49, 0x6, {0x2, 0x278000}}, {0x30d, 0x6, {0x2, 0xd087}}, {0x3, 0x9, {0x0, 0x9}}, {0x3, 0x1, {0x2, 0x9}}, {0x800, 0x8, {0x3, 0x515}}, {0x7, 0x80, {0x3, 0x5}}, {0xfff, 0x8001, {0x1, 0x200}}, {0x0, 0x1, {0x0, 0x7}}, {0x800, 0x81, {0x3, 0x100}}, {0xce, 0x1, {0x3, 0x251}}, {0x81, 0x8, {0x1, 0x9}}, {0x340, 0x5, {0x2, 0x3}}, {0x90d, 0x7, {0x3, 0x6}}, {0x8, 0x2, {0x2, 0xeab8}}, {0x800, 0x0, {0x0, 0xfffffffb}}, {0x0, 0x1, {0x3, 0x8000}}, {0x1, 0x2, {0x3, 0x8}}, {0xc, 0x2, {0x0, 0xc317}}, {0x1f, 0x20, {0x0, 0x9}}, {0x6, 0x4, {0x1, 0x7f}}, {0xe3fe, 0x7f, {0x1}}, {0x7, 0x63, {0x3, 0x3ff}}, {0x5, 0x1, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x1000}, 0x6, 0x1d, 0x9296, 0x7, 0x1e, 'syz0\x00', "041255b83bcba6f897ed068e53d6ecea919efb8eac8aaeff38380f34a38ebb45", "6e66d375c767078bec0e6a76ed89e7c677be812b07b9548e63d07f37a1fb70aa", [{0x6, 0xffff, {0x3, 0x40}}, {0xdd3, 0x0, {0x3, 0x80}}, {0x5, 0x2, {0x2, 0x2}}, {0xeeb1, 0x8, {0x2, 0x5}}, {0x20, 0x6}, {0x7ff, 0x20, {0x0, 0x7}}, {0x20, 0x3, {0x3, 0x4}}, {0x5, 0x0, {0x1, 0x3f}}, {0x4, 0x8, {0x1, 0x7}}, {0x40, 0x80, {0x1, 0x3511}}, {0x7c95, 0x19, {0x1, 0x7}}, {0x5, 0x101, {0x0, 0xda8f}}, {0x7, 0x200, {0x2, 0x6}}, {0xff80, 0x7, {0x2, 0x88b1}}, {0x86, 0x1000}, {0xfffe, 0xfffa, {0x3, 0x8}}, {0x1, 0x7, {0x0, 0x9c9d}}, {0xfff7, 0x9, {0x2, 0xf9}}, {0x200, 0x6, {0x0, 0xe6}}, {0x4890, 0x4, {0x2}}, {0xff, 0x6, {0x1, 0x4}}, {0x40, 0x3, {0x2, 0x6}}, {0x200, 0x8001, {0x2, 0x7}}, {0x7, 0xffda, {0x2, 0x1}}, {0xd5, 0x0, {0x2, 0x1}}, {0x81, 0x6, {0x0, 0x8001}}, {0xade5, 0x7ff, {0x1, 0x5f3c}}, {0x3, 0x6, {0x1, 0x3}}, {0x6, 0x3, {0x3, 0x1}}, {0xb19a, 0xff, {0x2, 0x6}}, {0x2, 0x1490, {0x3, 0xb352}}, {0x80, 0x0, {0x0, 0x4}}, {0xe594, 0xae, {0x3, 0x5}}, {0x9, 0x6, {0x2, 0x3}}, {0x3, 0x200, {0x3}}, {0xfff, 0x0, {0x2, 0x5}}, {0x0, 0x4, {0x2, 0x12}}, {0x8001, 0xf800, {0x3, 0x1000}}, {0x2, 0x1f, {0x2, 0x5}}, {0x80, 0x1, {0x1, 0x6}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x1404c080}, 0x24000010) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1bb5bd588d950022}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x35}}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c817}, 0x804) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001340), 0x103100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000013c0)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f00000014c0)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000001700)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0xbc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x84) [ 110.452822] audit: type=1400 audit(1748512387.116:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:53:07 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000040)={{0x10b, 0x4, 0x6, 0x121, 0x311, 0x4, 0x148, 0x7de4}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x61c) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000680)={0x1, 0x6, 0x3, 0x40fe, 0xf, "87abe0fe7b12cd482fafadb904ab112f1a9d4d"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) syz_extract_tcp_res$synack(&(0x7f0000000700), 0x1, 0x0) recvmsg$unix(r2, &(0x7f00000009c0)={&(0x7f0000000740), 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/176, 0xb0}], 0x1, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x103) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000a00)={0x9, 0x0, '\x00', 0x0, 0x0}) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000a40)) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000a80), &(0x7f0000000b00)=0x6e) fchmod(r8, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000b40)={0x73622a85, 0xb, 0x3}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000040) r9 = syz_open_dev$hidraw(&(0x7f0000000c80), 0x3, 0x202000) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000cc0)={0x56c, 0x8, 0x76, 0xfffffffffffffe01, 0x1, 0x19ed}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8, @out_args}, './file0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r10, 0x4004f506, &(0x7f0000000d40)=0x1) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0xfec0e4de5fd1fc6c) bind$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x6, 0x0, 0x1, 0xff, 0x6, @multicast}, 0x14) 09:53:07 executing program 4: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000040)={0xc, [{}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "9b724d4a6c3d5d"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001040)={r2, 0x6}) connect$unix(r0, &(0x7f0000002040)=@file={0x1, './file0\x00'}, 0x6e) r3 = creat(&(0x7f00000020c0)='./file0\x00', 0x19) write$P9_RREADLINK(r3, &(0x7f0000002100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000002140)={{0x7, 0x3c2}, 0x100, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002280)={{r1, 0xffffffffffff91bc, 0x3f, 0x142, 0x3, 0x7fffffff, 0x4, 0x80, 0x5c95, 0x5af06012, 0x14fd, 0x40400000, 0x69c, 0x101, 0x401}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000003280)={{r0}, 0x0, 0x0, @unused=[0x81, 0x7fff, 0x73c2ce96, 0x1b3], @subvolid=0x5}) lchown(&(0x7f0000004280)='./file0\x00', 0xee00, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000042c0)={{0x1, 0x1, 0x18, r4, {0x7, 0xfe000}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000043c0)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000044c0)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000002}, 0x4000080) r6 = syz_open_dev$mouse(&(0x7f0000004500), 0x9, 0x105100) ioctl$BLKRRPART(r6, 0x125f, 0x0) setxattr$incfs_id(&(0x7f0000004540)='./file0\x00', &(0x7f0000004580), &(0x7f00000045c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x3) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000004600)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x40, 0x9, 0x6, 0x7, 0x2, 0x3, 0x80, 0x254, 0x38, 0x22a, 0x5, 0x68, 0x20, 0x2, 0x2, 0x7, 0x4}, [{0x6474e552, 0x8, 0x1, 0x3, 0x9, 0x9, 0x9, 0x8}], "8af8066bac8b550df110c1c59f1a083752dac4ec55dc82733158968be89ba9119420daea938b6b5cfd7d5eff00e870147d19ab2584a2643d3a0b3012036ccb10ab7ad33345cf5777876c0cbd32a23a5fae14414085f2d4981412f55bdcfd16690472f27884c3c4b3fcb2636545624c0351a548ddf3374e6baca17a31d162460ae7207d6ad65382d741011e426c57bc5b8cd6d882e8ef923881d5b2f99c169862843e59a775dd57c0366114bf8c3b87652e39bb9e28aa0c2eeb9106217d095545d922e8c43f0d47fc730c44c4394c3b341da0", ['\x00', '\x00', '\x00', '\x00']}, 0x52a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004b80)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000004b40)={0x77359400}, 0x1, 0x0, 0x1}, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000004bc0)) 09:53:07 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'rose0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', r0, 0x29, 0x3, 0xfc, 0xfe, 0x10, @empty, @private1, 0x7, 0x700, 0x6, 0xe3b}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xf9, 0x86, 0x8, 0x71, @loopback, @private0, 0x700, 0x780, 0x0, 0x101}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', r0, 0x700, 0x7800, 0x0, 0x1ff, {{0x22, 0x4, 0x3, 0x2, 0x88, 0x68, 0x0, 0xf8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x9, "8d4fcd9a2e4015"}, {0x0, 0xb, "19c1aeae518f4191e9"}]}, @cipso={0x86, 0x17, 0x3, [{0x6, 0x11, "88e819572dfe7eb8cda62340620b1c"}]}, @rr={0x7, 0xf, 0xb, [@loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}]}, @timestamp={0x44, 0xc, 0x6d, 0x0, 0xb, [0xff, 0x6]}, @lsrr={0x83, 0x27, 0x5f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @broadcast, @empty, @broadcast, @rand_addr=0x64010101]}]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f00000001c0)=""/149, 0x95, 0x42, &(0x7f0000000380)={0x11, 0x6, r1, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r2 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x801) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000400)={0x1, 'dummy0\x00', {}, 0x6}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x502, 0x0) getpeername$unix(r3, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f2, 0x800, 0x70bd29, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044000}, 0x40000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x12000, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000680)={0x0, 0x0, {0x3c, 0x32, 0x16, 0x12, 0xb, 0x3ff, 0x0, 0xa6, 0x1}}) r5 = accept$inet6(r2, &(0x7f00000006c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000700)=0x1c) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000740)={0x0, @private, @remote}, &(0x7f0000000780)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r6, 0x4, 0x7f, 0x1, 0x100, 0x2, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8, 0x9, 0x6}}) r7 = openat$cgroup_ro(r3, &(0x7f0000000880)='blkio.bfq.sectors\x00', 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x8c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x1c}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20004}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_MAC={0xa}, @chandef_params, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xba}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004}, 0x19694722db44c238) r8 = syz_open_dev$mouse(&(0x7f0000000a40), 0x100, 0x129000) bind(r8, &(0x7f0000000a80)=@caif=@dgm={0x25, 0x6, 0x5}, 0x80) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044844) 09:53:07 executing program 6: write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x3, 0x6, 0x20, 0x7, 0x0, 0x5, 0x3, 0xffffffffffffe1e9, 0x200}}, 0x43) r0 = semget(0x1, 0x3, 0x61) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000080)=""/149) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000140)={0x22, 0x8, 0xb, 0x10, 0x4, 0x1, 0x5, 0x50, 0x1}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000001c0)=0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000002c0)) r3 = semget$private(0x0, 0x2, 0x216) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000300)=""/187) recvmsg(r2, &(0x7f00000006c0)={&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/110, 0x6e}], 0x2, &(0x7f00000005c0)=""/196, 0xc4}, 0x40) r4 = semget(0x2, 0x6, 0x80) semop(r4, &(0x7f0000000700)=[{0x1, 0x1000}, {0x4, 0x7, 0x800}, {0x1, 0x3, 0x800}, {0x2, 0x9}, {0x0, 0x97, 0x1800}, {0x1, 0x1ff, 0x800}, {0x4, 0x1, 0x800}], 0x7) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0xa0c0) r6 = memfd_secret(0x80000) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f0000000880)={0x1, 0x103, 0x7fffffff, 0x800, 0x101, 0x1, 0x54, 0x8, 0x9, 0x4, 0x7fffffff, 0x6, 0x0, 0x4}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000008c0)=[0x6]) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000900)={0xdc, 0x200, 0x3, 0x1, 0xc, "76141daea219d60b2100d21cb473fdffb92629"}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x81) 09:53:07 executing program 7: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0xc9a4, 0x80000}, {0x9, 0x6}, 0x792, 0x1}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) ftruncate(0xffffffffffffffff, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.stat\x00', 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000800), 0x210000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000140)="2852b3c7322fa437531a460ec763b3e1e58c9a49378402dabdb6ea4a06e67f486d414aadfceeb52f4ff9490e3d3d71bdc2e8fab80a29a431320e850e12244d84b94e77871f97b17189c371088a78da87382fd2f4fce95b6ff1d887775c3cd0c050f2d217d625ef3a39c3b041349852956bf009c68e6259f92866f2b57c3a75637d635e5ec2872fd688b7e55970139527b3", 0x91}, {&(0x7f0000000200)="8232f76c808b899b671458d76908106082edfc5bd40e8f912604fb7fd4fbab57f3ccfbef0a0dac019e73e0ed21621d57725f015f1a90ffe6731ddc4fe140e2cfb4a7765606d1503160b75a267045b9a8d8e38e0e941ea0ad8bfa896d76bcb5b6aa15ef60da4b26059cc033668c38532f8b8bec30b3e5", 0x76}, {&(0x7f0000000280)="85e7c5ca80576012280c1abbde2cadf943206846f5470ea88796755a77e74d2dbf51c18a59f378ebe773ab9022aef228c846f1e0c780bd4b3cf1d09989022a12dde0362218050272e2e8b35c1fac9da378ac26b399d162c9af578405ef422fbd732e61c5b331d4962fbc3242d5054d3a478052df8d718f947bbf91eb768b24bd02354e9980563c79244d36dc287190b3dea1d3561f64fab50b7d71ef4d00d4b9db37caf10d81bacf2041d33e2e2025e8f572c35d5865c05f13e0523ce0ee81324acb476ef450b4f1b8b652e1afab75a5be390d3b9b7213f845186e2c26a343db08bdafb85a666d", 0xe7}, {&(0x7f0000000380)="3b66bace4832456c3976045c58c62f932018642cf5336966c88b9c30a872b3e25b5f8caa352c71de391ba9317c47c843a0f417ae15d7fcf48e86503487bc233fa81a9521ca6b260fef59b38b09375cdbeb5bedd9ec003a0c4d299ab6e276af25887a952a71e8a76e0988d6df3731161a3ccda32e7300565a91b34ee309e6cc89153bf03a49153dbb9ca210602ec34b5e0c2b8ce3438aab05433ad9457bb839adf2a070859d480a86ee9c100776d32b95d6f9", 0xb2}, {&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000540)="987a2841a906a2137a59bcdef1f6a5ebd375b4b51973d48bdd103b96805f8ca782d13fea623bef98bb869cf19d4f9b3ba99c3f8e6a6b25f6b36fe14af97f4453536df1f647c90108cc3689576b667c57bdf92a0e3d0c778ac8ffc362a2e5fb8a7ae68fffd13438838a099bf003b5691b34e9bff122989be1bb6304145b7e1d479915345bc47c7b5de55bbdc6f4ab97d417dd8c16fc5ceb11712c3b", 0x9b}, {&(0x7f0000000600)="148824168ae2dbbf3aad1a761c85988e940476f2312f098a08673065b247d61b637826de13fc2b35b6253cf54fbe3f6518237084d50888e2bb5c7ebaa3de26edc80f2824acae45f1bb8118aed0245c79aeeda88e175757f9819fbfa8f02253dc08c77f46171fc780c19d0d40de3284dc", 0x70}, {&(0x7f0000000680)="3fe831ca7fe6d9459173f8ac952419eb2ad046686756de71a99950d17099d6bdbf8ddb8d729b1d5b07e5a81d2933dec654a282c943b1a0aeec1dd3ea6a05e19c5ef4e09358d077dcf7cc6050b99679604b5f03116620d86ed97a33ac1aaa599b038317bd9559906349641686f224bed970749da589b68f0474700dcd8b14890341c37d", 0x83}], 0x8, &(0x7f0000000880)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x58, 0x20040010}, 0x40840) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x12, @mcast2, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10b512eb}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000ac0)={0x3, 0x3}) write$P9_RRENAMEAT(r0, &(0x7f0000000b00)={0x7, 0x4b, 0x1}, 0x7) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000c00)={&(0x7f0000000b40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x2004c8c0) read$ptp(r0, &(0x7f0000000c40)=""/93, 0x5d) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, r4, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x70}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000051) openat$incfs(r2, &(0x7f0000000e40)='.log\x00', 0x2, 0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40) [ 111.854153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.857170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.859442] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.863430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.866946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.907167] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.916130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.918338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.923961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.925576] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.929801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.931928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.938367] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.939839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.942961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.945227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.947156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.948264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.958902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.971845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.007684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.009268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.010579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.026010] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.028093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.037169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.044065] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.049045] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.061146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.069080] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.076450] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.086181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.093916] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.101026] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.110609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.119303] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.133854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.148547] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.152243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 112.164752] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.941582] Bluetooth: hci0: command tx timeout [ 114.006531] Bluetooth: hci1: command tx timeout [ 114.007246] Bluetooth: hci2: command tx timeout [ 114.068860] Bluetooth: hci5: command tx timeout [ 114.069563] Bluetooth: hci3: command tx timeout [ 114.132826] Bluetooth: hci4: command tx timeout [ 114.260833] Bluetooth: hci7: command tx timeout [ 114.261648] Bluetooth: hci6: command tx timeout [ 115.989383] Bluetooth: hci0: command tx timeout [ 116.052881] Bluetooth: hci2: command tx timeout [ 116.052915] Bluetooth: hci1: command tx timeout [ 116.116807] Bluetooth: hci3: command tx timeout [ 116.116833] Bluetooth: hci5: command tx timeout [ 116.180784] Bluetooth: hci4: command tx timeout [ 116.308981] Bluetooth: hci6: command tx timeout [ 116.309013] Bluetooth: hci7: command tx timeout [ 118.037595] Bluetooth: hci0: command tx timeout [ 118.100859] Bluetooth: hci1: command tx timeout [ 118.101372] Bluetooth: hci2: command tx timeout [ 118.165228] Bluetooth: hci3: command tx timeout [ 118.165267] Bluetooth: hci5: command tx timeout [ 118.229124] Bluetooth: hci4: command tx timeout [ 118.356848] Bluetooth: hci7: command tx timeout [ 118.357380] Bluetooth: hci6: command tx timeout [ 120.085099] Bluetooth: hci0: command tx timeout [ 120.148837] Bluetooth: hci1: command tx timeout [ 120.149206] Bluetooth: hci2: command tx timeout [ 120.212830] Bluetooth: hci3: command tx timeout [ 120.213356] Bluetooth: hci5: command tx timeout [ 120.276789] Bluetooth: hci4: command tx timeout [ 120.404911] Bluetooth: hci6: command tx timeout [ 120.405851] Bluetooth: hci7: command tx timeout [ 174.701600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.707045] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.716958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.719840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.723013] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.726022] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.738310] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.740599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.744349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.746392] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.878961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.895348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.920098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.927452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.930320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.934450] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.940925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.941409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.946233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.949242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.954185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.958447] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.962822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.968514] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.975895] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.978097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.988469] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.990924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.999053] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.001778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.004520] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.007576] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.010428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.017096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.037244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.058344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.060204] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.090497] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.105325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.118049] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.789098] Bluetooth: hci1: command tx timeout [ 176.790192] Bluetooth: hci0: command tx timeout [ 177.045054] Bluetooth: hci2: command tx timeout [ 177.109780] Bluetooth: hci5: command tx timeout [ 177.110429] Bluetooth: hci3: command tx timeout [ 177.172874] Bluetooth: hci4: command tx timeout [ 177.173256] Bluetooth: hci7: command tx timeout [ 177.237759] Bluetooth: hci6: command tx timeout [ 178.838766] Bluetooth: hci0: command tx timeout [ 178.839093] Bluetooth: hci1: command tx timeout [ 179.092797] Bluetooth: hci2: command tx timeout [ 179.158741] Bluetooth: hci5: command tx timeout [ 179.158762] Bluetooth: hci3: command tx timeout [ 179.220786] Bluetooth: hci7: command tx timeout [ 179.220853] Bluetooth: hci4: command tx timeout [ 179.284949] Bluetooth: hci6: command tx timeout [ 180.885108] Bluetooth: hci0: command tx timeout [ 180.885182] Bluetooth: hci1: command tx timeout [ 181.140790] Bluetooth: hci2: command tx timeout [ 181.206735] Bluetooth: hci5: command tx timeout [ 181.206790] Bluetooth: hci3: command tx timeout [ 181.268813] Bluetooth: hci7: command tx timeout [ 181.268898] Bluetooth: hci4: command tx timeout [ 181.333865] Bluetooth: hci6: command tx timeout [ 182.932883] Bluetooth: hci0: command tx timeout [ 182.933995] Bluetooth: hci1: command tx timeout [ 183.188860] Bluetooth: hci2: command tx timeout [ 183.255067] Bluetooth: hci3: command tx timeout [ 183.255172] Bluetooth: hci5: command tx timeout [ 183.318899] Bluetooth: hci4: command tx timeout [ 183.318916] Bluetooth: hci7: command tx timeout [ 183.380812] Bluetooth: hci6: command tx timeout [ 237.101550] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.107029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.109004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.112582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.116402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.270775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.273012] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.278526] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.285109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.288583] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.360028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.372087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.378085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.383533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.390388] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.438301] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.455209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.459074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.484045] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.491043] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.498745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.504144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.513942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.538405] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.555278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.640602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.652926] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.658539] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.663646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.675086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.000290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.013346] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.017597] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.029284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.038037] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.067357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.087182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.120682] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.127074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.131278] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.188879] Bluetooth: hci0: command tx timeout [ 239.316808] Bluetooth: hci1: command tx timeout [ 239.444942] Bluetooth: hci2: command tx timeout [ 239.643971] Bluetooth: hci4: command tx timeout [ 239.644879] Bluetooth: hci3: command tx timeout [ 239.828797] Bluetooth: hci6: command tx timeout [ 240.213110] Bluetooth: hci7: command tx timeout [ 240.276803] Bluetooth: hci5: command tx timeout [ 241.238641] Bluetooth: hci0: command tx timeout [ 241.365799] Bluetooth: hci1: command tx timeout [ 241.493095] Bluetooth: hci2: command tx timeout [ 241.684801] Bluetooth: hci3: command tx timeout [ 241.685366] Bluetooth: hci4: command tx timeout [ 241.878755] Bluetooth: hci6: command tx timeout [ 242.261908] Bluetooth: hci7: command tx timeout [ 242.324813] Bluetooth: hci5: command tx timeout [ 243.285778] Bluetooth: hci0: command tx timeout [ 243.413814] Bluetooth: hci1: command tx timeout [ 243.541016] Bluetooth: hci2: command tx timeout [ 243.733067] Bluetooth: hci3: command tx timeout [ 243.734551] Bluetooth: hci4: command tx timeout [ 243.927008] Bluetooth: hci6: command tx timeout [ 244.310141] Bluetooth: hci7: command tx timeout [ 244.374145] Bluetooth: hci5: command tx timeout [ 245.332783] Bluetooth: hci0: command tx timeout [ 245.463757] Bluetooth: hci1: command tx timeout [ 245.590601] Bluetooth: hci2: command tx timeout [ 245.780874] Bluetooth: hci3: command tx timeout [ 245.782321] Bluetooth: hci4: command tx timeout [ 245.972799] Bluetooth: hci6: command tx timeout [ 246.356980] Bluetooth: hci7: command tx timeout [ 246.421049] Bluetooth: hci5: command tx timeout [ 299.945398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.950058] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.952412] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.960353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.968283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.017205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.022128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.027336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.042362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.048055] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.132314] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.137047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.138665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.142295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.144640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.151394] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.158129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.167680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.198014] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.201762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.270760] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.273187] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.276511] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.286459] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.292888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.297078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.297512] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.307378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.322079] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.361836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.379421] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.384557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.390539] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.394925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.397298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.399444] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.418867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.437114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.445080] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.463368] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.037084] Bluetooth: hci0: command tx timeout [ 302.101789] Bluetooth: hci1: command tx timeout [ 302.165072] Bluetooth: hci3: command tx timeout [ 302.228789] Bluetooth: hci2: command tx timeout [ 302.420971] Bluetooth: hci4: command tx timeout [ 302.485010] Bluetooth: hci5: command tx timeout [ 302.487054] Bluetooth: hci6: command tx timeout [ 302.614017] Bluetooth: hci7: command tx timeout [ 304.084849] Bluetooth: hci0: command tx timeout [ 304.148789] Bluetooth: hci1: command tx timeout [ 304.212828] Bluetooth: hci3: command tx timeout [ 304.277655] Bluetooth: hci2: command tx timeout [ 304.469851] Bluetooth: hci4: command tx timeout [ 304.534085] Bluetooth: hci6: command tx timeout [ 304.535646] Bluetooth: hci5: command tx timeout [ 304.662042] Bluetooth: hci7: command tx timeout [ 306.134051] Bluetooth: hci0: command tx timeout [ 306.197057] Bluetooth: hci1: command tx timeout [ 306.261739] Bluetooth: hci3: command tx timeout [ 306.324909] Bluetooth: hci2: command tx timeout [ 306.516806] Bluetooth: hci4: command tx timeout [ 306.582054] Bluetooth: hci6: command tx timeout [ 306.583757] Bluetooth: hci5: command tx timeout [ 306.710187] Bluetooth: hci7: command tx timeout [ 308.181070] Bluetooth: hci0: command tx timeout [ 308.245232] Bluetooth: hci1: command tx timeout [ 308.309737] Bluetooth: hci3: command tx timeout [ 308.372968] Bluetooth: hci2: command tx timeout [ 308.564826] Bluetooth: hci4: command tx timeout [ 308.629977] Bluetooth: hci6: command tx timeout [ 308.631580] Bluetooth: hci5: command tx timeout [ 308.758742] Bluetooth: hci7: command tx timeout [ 362.476529] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.479576] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.487323] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.499382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.515800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.662628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.667078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.670522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.675190] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.678447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.798921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.801458] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.802995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.809340] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.812484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.865522] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.872624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.875934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.879257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.880146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.885071] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.887740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.895903] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.901052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.906240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.915258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.931010] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.933929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.945360] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.948203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.949747] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.951073] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.955215] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.958647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.965221] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.967980] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.971941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.974504] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.017739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.068896] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.564785] Bluetooth: hci0: command tx timeout [ 364.757814] Bluetooth: hci1: command tx timeout [ 364.885204] Bluetooth: hci2: command tx timeout [ 365.014789] Bluetooth: hci5: command tx timeout [ 365.017203] Bluetooth: hci7: command tx timeout [ 365.077843] Bluetooth: hci6: command tx timeout [ 365.079614] Bluetooth: hci3: command tx timeout [ 365.396909] Bluetooth: hci4: command tx timeout [ 366.612834] Bluetooth: hci0: command tx timeout [ 366.807286] Bluetooth: hci1: command tx timeout [ 366.932795] Bluetooth: hci2: command tx timeout [ 367.060833] Bluetooth: hci5: command tx timeout [ 367.061432] Bluetooth: hci7: command tx timeout [ 367.126451] Bluetooth: hci3: command tx timeout [ 367.128906] Bluetooth: hci6: command tx timeout [ 367.445805] Bluetooth: hci4: command tx timeout [ 368.661973] Bluetooth: hci0: command tx timeout [ 368.853060] Bluetooth: hci1: command tx timeout [ 368.982419] Bluetooth: hci2: command tx timeout [ 369.109928] Bluetooth: hci7: command tx timeout [ 369.110413] Bluetooth: hci5: command tx timeout [ 369.173989] Bluetooth: hci3: command tx timeout [ 369.174462] Bluetooth: hci6: command tx timeout [ 369.494732] Bluetooth: hci4: command tx timeout [ 370.709782] Bluetooth: hci0: command tx timeout [ 370.902769] Bluetooth: hci1: command tx timeout [ 371.029979] Bluetooth: hci2: command tx timeout [ 371.156827] Bluetooth: hci7: command tx timeout [ 371.157371] Bluetooth: hci5: command tx timeout [ 371.221879] Bluetooth: hci3: command tx timeout [ 371.222398] Bluetooth: hci6: command tx timeout [ 371.542009] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 09:58:09 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffff88801572f2cc RDX=0000000000000002 RSI=ffffffff85c1d1c0 RDI=ffff8880308dc180 RBP=ffffffff85c1d1c0 RSP=ffff88801572f290 R8 =0000000000000001 R9 =ffff88801572f3b8 R10=000000000003b6ad R11=00000000000c4d10 R12=ffff8880308dc180 R13=ffff88801572f2cc R14=0000000000000002 R15=0000000000000002 RIP=ffffffff81513f5e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2f1fa1e8e0 CR3=0000000035e46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=f3726c09e9acbf00 RBX=ffffed1002d2cf42 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000040 RDI=ffff888016967aa0 RBP=ffff88800941a140 RSP=ffff888016967a10 R8 =ffff888016480000 R9 =0000000000000000 R10=ffff888016481000 R11=00000000ffffffff R12=0000000000000cc0 R13=0000000000000001 R14=0000000000001000 R15=0000000000000cc0 RIP=ffffffff81604ad8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f95f1973368 CR3=0000000035e62000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000