Warning: Permanently added '[localhost]:42194' (ECDSA) to the list of known hosts. 2025/06/06 02:51:21 fuzzer started 2025/06/06 02:51:21 dialing manager at localhost:39689 syzkaller login: [ 105.455930] cgroup: Unknown subsys name 'net' [ 105.579293] cgroup: Unknown subsys name 'cpuset' [ 105.617966] cgroup: Unknown subsys name 'rlimit' 2025/06/06 02:51:44 syscalls: 2214 2025/06/06 02:51:44 code coverage: enabled 2025/06/06 02:51:44 comparison tracing: enabled 2025/06/06 02:51:44 extra coverage: enabled 2025/06/06 02:51:44 setuid sandbox: enabled 2025/06/06 02:51:44 namespace sandbox: enabled 2025/06/06 02:51:44 Android sandbox: enabled 2025/06/06 02:51:44 fault injection: enabled 2025/06/06 02:51:44 leak checking: enabled 2025/06/06 02:51:44 net packet injection: enabled 2025/06/06 02:51:44 net device setup: enabled 2025/06/06 02:51:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/06 02:51:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/06 02:51:44 USB emulation: enabled 2025/06/06 02:51:44 hci packet injection: enabled 2025/06/06 02:51:44 wifi device emulation: enabled 2025/06/06 02:51:44 802.15.4 emulation: enabled 2025/06/06 02:51:44 fetching corpus: 0, signal 0/0 (executing program) 2025/06/06 02:51:46 starting 8 fuzzer processes 02:51:46 executing program 0: sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8009412ea3b7495e69ea4fb9ffbedba839905351059acf8e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b8123dd4c2fef8dbdba1d14c71d7b843"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="46aeb52ceb3c64bb24743acb29df24cd68aeb05655577262e078a0456a1b9f3a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d6cebaded0ba85e0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x79e}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4fc3c7001375def74bf59b7cf0b1d60d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7c26a6859d068089296a93e20b075592a19e9b19ba1d5f69"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "20c51e80b3b5ee91"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x3, 0xfffffff7, 0x40, @local, @remote, 0x7800, 0x40, 0xfffffffd, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x1d, 0x5, 0x68, @rand_addr=' \x01\x00', @private0, 0x8000, 0x10, 0x100, 0x7}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x200000d1}, 0xc1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe783}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x51) r3 = open(&(0x7f0000000600)='./file0\x00', 0xb0000, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r4, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1ff, 0x56}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa4, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x101}, @NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x1b, 0x0, @random="e339711ec760ebd220768a4a12ecc522bb2a7fcb74e2e4"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1a, 0x0, @random="c2cc88a6c334d73f0448283df9ebca48108eab7b1db5"}, {0x11, 0x0, @random="d8c9a4fcc8892a6f28500a5e8e"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) mknodat(r3, &(0x7f0000000b40)='./file0\x00', 0x800, 0x101) r6 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/ip_tables_names\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x20008095) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r6, {0xee00}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x2202080, &(0x7f0000001100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r8}}]}}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 02:51:46 executing program 3: mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000010, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) futimesat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0x4, 0x101002) name_to_handle_at(r1, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x3, 0x200000000000000, 0x3, 0xffffffe0, 0x2}}, &(0x7f00000002c0), 0x3000) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000300)='pipefs\x00', &(0x7f0000000340)='./file0\x00', r1) mknod$loop(&(0x7f0000000380)='./file0\x00', 0x100, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r4 = syz_mount_image$nfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x5, 0x8, &(0x7f0000000a80)=[{&(0x7f0000000440)="21d537b8fc0425904ce47b303834abf038706fc74d34cc62f03566a7dcb293794f172e33d4a7ff11f4d62dfa433937602fe3db9b4faf99a33df61cd0984302d21dbe58f4162b5683b6866d486799155bcf8f36fc6502ee88140be85eb1f2e68f6b0295fe93e0a18154137bea668863a7c90f863f442fd8438e7042b27c03a937a884124cb30b6610ef1bdd97511b134c211bb63ceff0ad9fa67e45a16b24faf500f401fe8eea2135bbb5aaeab6d8290416eebafab59a81675d7161444aab6541c839de4752", 0xc5, 0x6fa9}, {&(0x7f0000000540)="168ad6eaf36b7dc10ea98bf53a47115a95df2beff888cd362ebe0fc369c962e44bc37f4dd220e130cf6ecf18e3d9a85d6a0f71b3e7eb5be0b24e5399dfeb56e1207823b44b4de58b076e41aa552e97754eb67424dca719eb4d6ca32a3c23ec1935eddf68408fb94bd7528d9af1b4684f5dceb00c9ca01060870669837ac4de0f1edf7d74bdaaa51e73cd2c41cdf8784c00ca07b06fd91a7712444023fd83654aadd62c21396e192aa5b8b78c3cba6469731937259e7fb0edc0323a60cd8f712e9eb2477a0db67d22eece11dbc935", 0xce, 0x8}, {&(0x7f0000000640)="f71bdd46cbd70ff6d8a5e3e83d9468796877f0fbba56a3c720d7242a7e838a7c9de03ae84f391580f40afb1642e659accf2580ea5016815ffd84114b0cc56ef35e0c3edea5211d4446ba793acf697f8104414e8e4abefb919a263ee386b7eedc885c64071a166064967b7583636bc912c9dc46bad004e3b2261e8586b53a2ea0835303ff8f0b16d834f2181893656595bcb392d0aedd348a70b3e24baae8db1eb90f594a5a96409b09b73e2e1dc4d5ac3d01e2c521d79d2f698900e456987979e23af103eefd647579e8b1bd709155e53b3c0bac", 0xd4, 0x5}, {&(0x7f0000000740)="62db0900c938800e00d3b2fbc5731a944d4eb587d43723ede3dc03d3a4d0628fecf6a65ea6643934a95c177975df9152e0e95b3489c27f30e92e298801dd6811e57d3b27481aeacb0376a5bd2c2ac8a133b0bec7b955e06eaa2a02b5192a2cb27f288e9a6413e0149bc8e7679c7349a62c0149b45fa1fdb2bd23468c413f3cbb6d3ccef76aa339fc03393474d4bb9e3c2c9e816d885ef0b9d5685f600bc9d844af62abbeda3424ceda832c7fc2a0f435105ca02e", 0xb4, 0x2}, {&(0x7f0000000800)="455dea8f88f743835eed63f3e250e07247fded55ffa5caf8bafc00e9dfc819727a1a4467224da0d0acc1081db43018bab688854aaa79080be3c75e6e4160449852920dee366731956efcfe27897850a22740c2aa31a141434990838458608e6da4b02dc37862fe5a5127e598aaf34c607d9783df806f696b64084b83ad01d59de471ee2b", 0x84, 0x400}, {&(0x7f00000008c0)="742952260c662815e7119e759662448f84bb02e27790943cbb6bd55c476943a0a1e58bcf448b58ca64c7a39c50e235cee3ada4b09d1ec4fd05fc881dab7a7e447d94333d65e62224f802a54860e19335b75addfb95acdfc9bbb028fe0a6998d8090f7edf5515c5ee8695bb578dffb40f1ff0048c7c47b24041d5cb938ca65c2307cea8c98c1863ca5860c304622fb1812c", 0x91, 0x1}, {&(0x7f0000000980)="865db9d4435864f0fade79d71095baea86b969e3759d4ed88435fc6ddda60bd160b337ab671b626ed16c5a7187852607c9cd972a2ab091f738", 0x39, 0x81}, {&(0x7f00000009c0)="1d61039fdccfb2f7cf09ad676bf29527d3078f29c75dcbcbea8fe62183c4d608e3e546423d869bfe3a135e599fe802af3d7f064aafe60a604628b8081b8af0f11268ad1670456336b7c8569225e18a71f3aa946a57267da4b8309fa61b44c10b2549008916de2bfb2619902e70a4e6603012df2bab6773a71d341bcdf808a13429ed624aad97ab5c1709", 0x8a, 0x80000001}], 0x4000, &(0x7f0000000c00)={[{}, {'[ %%'}, {'.%:[},,{@'}, {'pipefs\x00'}, {','}], [{@euid_gt={'euid>', r2}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x65, 0x5a, 0x64, 0x62, 0x32, 0x64, 0x33], 0x2d, [0x39, 0x34, 0x61, 0x38], 0x2d, [0x66, 0x36, 0x64, 0x62], 0x2d, [0x61, 0x31, 0x61, 0x65], 0x2d, [0x64, 0x33, 0x0, 0x332b9a34276941e8, 0x65, 0x62, 0x61, 0x33]}}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}, {@obj_type={'obj_type', 0x3d, '-'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000cc0)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000d40)={&(0x7f0000000d00)=""/26, 0x1a}) mknod$loop(&(0x7f0000000d80)='./file0\x00', 0x800, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000e40)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000f40)=0xe8) recvmmsg$unix(r0, &(0x7f0000005f40)=[{{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1, &(0x7f0000002040)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002080), 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/131, 0x83}], 0x2}}, {{&(0x7f0000003200)=@abs, 0x6e, &(0x7f0000003380)=[{&(0x7f0000003280)=""/252, 0xfc}], 0x1, &(0x7f00000033c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003400)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000003480)=""/2, 0x2}, {&(0x7f00000034c0)=""/4, 0x4}, {&(0x7f0000003500)=""/198, 0xc6}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/165, 0xa5}], 0x5, &(0x7f0000004740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000004880)=@abs, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/62, 0x3e}, {&(0x7f0000005940)=""/1, 0x1}, {&(0x7f0000005980)=""/163, 0xa3}, {&(0x7f0000005a40)=""/207, 0xcf}, {&(0x7f0000005b40)=""/160, 0xa0}, {&(0x7f0000005c00)=""/236, 0xec}, {&(0x7f0000005d00)=""/87, 0x57}, {&(0x7f0000005d80)=""/22, 0x16}], 0x9, &(0x7f0000005e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x5, 0x0, &(0x7f0000006080)={0x0, 0x989680}) newfstatat(0xffffffffffffff9c, &(0x7f0000006140)='./file1/file0\x00', &(0x7f0000006180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) recvmsg$unix(r1, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000006200)=""/226, 0xe2}, {&(0x7f0000006300)=""/49, 0x31}], 0x2, &(0x7f0000006380)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x140}, 0x10000) lsetxattr$system_posix_acl(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00)='system.posix_acl_default\x00', &(0x7f0000006500)={{}, {}, [{0x2, 0x1, r5}, {0x2, 0x0, r2}, {0x2, 0x2, r2}, {0x2, 0x2, r6}, {0x2, 0x2, r2}, {0x2, 0x4, r8}], {0x4, 0x1}, [{0x8, 0x0, r3}, {0x8, 0x2, r3}, {0x8, 0x4, r3}, {0x8, 0x5, r9}, {0x8, 0x3, r3}, {0x8, 0x6, r3}, {0x8, 0x1, r3}], {0x10, 0x7}, {0x20, 0x2}}, 0x8c, 0x1) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x100010, r7, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000006680)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x7, 0x9, &(0x7f00000065c0)="4f1afe4a65c101bce6791d51b1ca7dc7a9ee935ef95c54f3706493fb904b35fcc204f47c91c00e4921a7ff884867a8c9a04b0d0b56820444ba7055cbee822d8f2aa0424f1437c143132e2bc1004f7cd0c794bfcafaaec0d0c6e4adf78dea90063be4b2669ae13a36e98395951575be073bef4d43be0d319d6a8c9b4fce7a5b85827c735af8e9a33c68e5156cd303fc904a79f9ac410d44dfda81701ea2ed8e84680cf14e29da684384b9839d4b125b", 0xaf}, 0x9) 02:51:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/connector\x00') ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, 0x0, 0x3, 0x5, 0x70bd2c, 0x25dfdbfe, {0x2, 0x0, 0x5}, [@generic="c5f5a363abc5e2030875156fd8ab8f8628e000e67daad748c58d9b8e43f963a5c685bf751626a0813d6e9343180016df0eba7f5ba49a93e1b3cac5705c6acbde8fbe9ecd045d69fb8daa00b05a3c7f50909a03345a6da920032876ed908c00dc86c944b8bd51cfb0d83c1ae1af403cd2426b3dda03ac0391048e1f150a4213d5946feb0ca8694335", @generic="18a82a2ee2d05d3d75fef4b48d3be94945726134d45f", @typed={0x8, 0x21, 0x0, 0x0, @fd=r1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x240200, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = socket$inet(0x2, 0xc, 0xff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) fcntl$setownex(r3, 0xf, &(0x7f00000002c0)={0x2, r4}) preadv2(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x3, 0x8, 0x1f, 0x12) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000002500)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000002540), &(0x7f0000002580)=0xc) ioctl$TCSETSW(r5, 0x5403, &(0x7f00000025c0)={0xaf65, 0x9, 0x3, 0x3, 0x18, "83697534021870f4034df88155dbfc869ee1cd"}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002600), 0xc0302, 0x0) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000002640)={0x101, 0x58}) mknodat$null(r5, &(0x7f0000002680)='./file0\x00', 0x800, 0x103) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000026c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000002700)={0x57, 0xd21d, 0x80, {0x3, 0xdf85}, {0x3, 0xffff}, @rumble={0x354, 0x5}}) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002740), 0x101800, 0x0) ioctl$TIOCSCTTY(r8, 0x540e, 0xfffffffffffff74e) [ 130.098650] audit: type=1400 audit(1749178306.641:7): avc: denied { execmem } for pid=278 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:51:46 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000000)={0x11, 0x9, 0x7}) r0 = getpgid(0x0) prlimit64(r0, 0x0, &(0x7f0000000080)={0x1, 0x3}, &(0x7f00000000c0)) ptrace$setopts(0x4200, r0, 0x7, 0x100042) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100)) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000140)={0x4, 0x6, 0x2, 0x3, 0x0, [@mcast2, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}]}, 0x38) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000180)=""/127, 0x7f}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x5, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000480)={@local, @empty, 0x1, 0x6, [@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101, @empty, @local, @broadcast, @empty]}, 0x28) ptrace$getregs(0xe, r0, 0x7ff, &(0x7f00000004c0)=""/248) ioprio_get$pid(0x1, r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x20}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004804}, 0x4048080) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x3fa, 0x800, 0x70bd2a, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040051}, 0x8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000007c0)=0x1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x280, 0x0) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf8, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x45}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf9fa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf288}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040080) sched_getattr(r0, &(0x7f0000000a40)={0x38}, 0x38, 0x0) 02:51:46 executing program 4: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0xab, 0x75, 0x2, {0xa0, "73909d59f9495edf6b12e90436aaeb7c37ac62a6950b53e300af97ddc456d90490ba6c6613357668cb9f44a3adfae2882b35719c2540657820e34e873eb408e3b8cae782d27bf273adf583cb853690e800b7637d92c2fde2ef30cc02560630ade993deaaa81fdec31cd6aa22af2f5a3e37ebf47383f4e137a7a421823dfa7c4e3476febf8c1183dcae1f3899a773da948b6efa4979009214054a18d48d731ba2"}}, 0xab) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x15c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x18}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @remote, 0x924}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc4c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5e6f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4040804}, 0x4048825) r1 = syz_open_dev$hidraw(&(0x7f0000000380), 0xfff, 0x2000) ioctl$FIBMAP(r1, 0x1, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x8, 0xb908, 0x1, @local, @empty, 0x80, 0x8000, 0x80000000, 0x1000}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000004c0)={0x0, 0x3, 0x3}) r2 = epoll_create1(0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x14000800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x1) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x80120, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000800)={'syz1', "4a40cd450416458ec329c0e27308282d8a08517517d9e6bbba6ab4ce6a1fce29eda0cded8112137669ba205d2f3cf91af8b329c18553d32dde485a2decc6c0282c0b9e5af212f121d94fc6cdc5750f20e2d14c030d3046465c8576f153724467463ffece07014f965d13f11723ad36328d48e77357503ac369ff17271434b00ee4786c64da7168e3f995bd47ceea671749d9ac0024744d0f568d877f95b71456a413c9e5aa0010121fdbc6a9738470acc5ca721dbc23eef50f9c"}, 0xbe) openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x80000, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x4300, 0x0) fstat(r6, &(0x7f0000000940)) 02:51:46 executing program 5: sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8f1}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x20048040) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x188, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8000040}, 0x8084) r0 = accept(0xffffffffffffffff, &(0x7f00000004c0)=@phonet, &(0x7f0000000540)=0x80) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000680)=""/200) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb8, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "188889b6540f7395d2c2cfab45924ce35ee17beeb96dbe26d73edb01374843"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2d65}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff3f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0xd4) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000940)) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c8d5}, 0x24044011) r2 = syz_open_dev$vcsa(&(0x7f0000000a80), 0x40, 0x689180) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000ac0)="36b36d9cff1e013a9e6aea6dca1350a74391d4e61c17ecf29c3cf70d82fc0234a4b2e3cb46d5eb0973346ad3c83e1186e22316b8ce70eda9057f6add4156f025458bb8f1cd8ff1a1efb5d312f6", 0x4d) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000b40)={'filter\x00', 0xc3, "c1a22a667ea477759d034c0fcd4027b07b5122801c5c40b376f6ab16f1e09574a9be67fca1f64d2c2293ccdfa419f473127c2ddacc4685f8d074352a71f5190ad610f44700436fded196796ddd6b31d33c650f32a30071a3d6c54efa41fd459d45af7c9848f1753f04f91e47aea4fba898d2ad12e5982ac5608bd1879998172c7fe129f9c10952aa6bfc793b11a11034a610aaaa17661bddf59251b641fc5ac77682bb500e1b1501ded00a35f5dac1e4a0fbbfda37b4740ef1499d3767445d79f3a04b"}, &(0x7f0000000c40)=0xe7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000cc0)=0x33, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf4, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x20000844) r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000f00)={0x1, 'ip6gre0\x00', {}, 0x10}) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000f40)={'veth1_to_bridge\x00', {0x2, 0x0, @broadcast}}) 02:51:46 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x40, 0x7fffffff, 0x4, 0x3e, 0x9, "179a7acde4100213abbf83e72cc7fdfa30d9c1", 0x3, 0x80000001}) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffff7e0}, {0xa, 0x4e22, 0x3, @mcast1, 0x3}, 0x5, [0x9, 0xfff, 0x8, 0xa4fe, 0x2, 0x81, 0x0, 0x1]}, 0x5c) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x3ff, 0xe) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x68}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88080}, 0xc0002) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)=':^+^\x00', &(0x7f0000000300)='\xff\xff\xff\xff\xff\xff', 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x1, 0x9, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1000}}]}, 0x3c}}, 0x20044080) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x1a1000, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) prctl$PR_SVE_SET_VL(0x32, 0x11340) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000004c0)=0x1) r2 = memfd_secret(0x80000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xce, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf8b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x96}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xda}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x1, 0x3f, 0xfa, 0x7, 0x2, 0x3, 0x10001, 0x14, 0x40, 0x203, 0xffffffff, 0x92, 0x38, 0x2, 0x0, 0xd0, 0x9}, [{0x5, 0xb112, 0x3, 0x400, 0x9, 0x0, 0x9, 0x8}, {0x6474e551, 0x800, 0x100000001, 0x80000000, 0x3, 0x0, 0x9fdc, 0xfffffffffffffffa}], "a0be88a95ad7e5bb52b7", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5ba) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000c00)={'TPROXY\x00'}, &(0x7f0000000c40)=0x1e) r3 = fsmount(r2, 0x1, 0x70) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000c80)=0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz0\x00', 0x1ff) 02:51:46 executing program 7: sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008010}, 0x40000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x18c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x64, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5a, 0x4, "56a4a94cba400739d5512c3815fb93d10ae93c6384747ad907469900cc954c60cedd9b2f5814a519dcba91718ba85dac49611e1b2d5bca9a691e454a7668d6e0d67b3a1c1c333af09c7c314207e78b3975d6deef083e"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xed}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@/\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']#)\':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1957}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*+$@$#%\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',\xf5/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$@%\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x804}, 0x24008010) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000400)={0x1, 0x38, [0xfffffffffffffffe, 0x1f, 0xfffffffffffffffd, 0x20], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x70}}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbaa, 0x2f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40400c0}, 0x18) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x2, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) r5 = socket$netlink(0x10, 0x3, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x220562f3, 0x76}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000bc0), 0x4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r1, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88a2}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x3}, @device_b}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20048881) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x7d9655391568cd88}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}}, 0x20000000) [ 131.533771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.545417] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.548463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.551221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.553643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.555999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.565165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.568280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.577244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.587227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.590973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.593463] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.598407] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.601875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.607140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.699903] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.702888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.713372] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.728378] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.737318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.764226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.770761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.776368] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.801692] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.805264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.807689] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.807877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.811001] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.813642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.819738] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.834990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.838320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.876648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.879309] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.883198] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.883285] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.886579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.892612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.901165] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.906567] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 133.674122] Bluetooth: hci2: command tx timeout [ 133.674142] Bluetooth: hci0: command tx timeout [ 133.674565] Bluetooth: hci1: command tx timeout [ 133.803691] Bluetooth: hci3: command tx timeout [ 133.930152] Bluetooth: hci4: command tx timeout [ 133.993681] Bluetooth: hci6: command tx timeout [ 133.994439] Bluetooth: hci5: command tx timeout [ 133.995196] Bluetooth: hci7: command tx timeout [ 135.721859] Bluetooth: hci0: command tx timeout [ 135.722407] Bluetooth: hci2: command tx timeout [ 135.723054] Bluetooth: hci1: command tx timeout [ 135.850026] Bluetooth: hci3: command tx timeout [ 135.979546] Bluetooth: hci4: command tx timeout [ 136.041856] Bluetooth: hci5: command tx timeout [ 136.041879] Bluetooth: hci6: command tx timeout [ 136.042910] Bluetooth: hci7: command tx timeout [ 137.770627] Bluetooth: hci1: command tx timeout [ 137.770665] Bluetooth: hci2: command tx timeout [ 137.771628] Bluetooth: hci0: command tx timeout [ 137.897650] Bluetooth: hci3: command tx timeout [ 138.026055] Bluetooth: hci4: command tx timeout [ 138.089666] Bluetooth: hci7: command tx timeout [ 138.090599] Bluetooth: hci5: command tx timeout [ 138.090636] Bluetooth: hci6: command tx timeout [ 139.817691] Bluetooth: hci0: command tx timeout [ 139.818614] Bluetooth: hci2: command tx timeout [ 139.818636] Bluetooth: hci1: command tx timeout [ 139.945690] Bluetooth: hci3: command tx timeout [ 140.073637] Bluetooth: hci4: command tx timeout [ 140.138681] Bluetooth: hci5: command tx timeout [ 140.139189] Bluetooth: hci7: command tx timeout [ 140.140624] Bluetooth: hci6: command tx timeout [ 194.560205] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.562859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.574123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.586842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.595007] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.713712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.721329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.724584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.738729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.744987] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.754947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.757972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.774252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.776981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.785278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.804964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.809415] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.818035] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.828711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.834700] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.989411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 195.001085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.005081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.006399] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 195.009147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.011397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.015308] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 195.018097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.021537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.031903] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 195.036587] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.043403] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 195.047353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.050721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.054444] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.079311] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.086874] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.094135] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.115271] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.147159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.650655] Bluetooth: hci0: command tx timeout [ 196.906861] Bluetooth: hci1: command tx timeout [ 196.906916] Bluetooth: hci3: command tx timeout [ 196.970239] Bluetooth: hci2: command tx timeout [ 197.161759] Bluetooth: hci7: command tx timeout [ 197.161791] Bluetooth: hci5: command tx timeout [ 197.226872] Bluetooth: hci6: command tx timeout [ 197.226956] Bluetooth: hci4: command tx timeout [ 198.697619] Bluetooth: hci0: command tx timeout [ 198.954669] Bluetooth: hci3: command tx timeout [ 198.954694] Bluetooth: hci1: command tx timeout [ 199.019567] Bluetooth: hci2: command tx timeout [ 199.209710] Bluetooth: hci7: command tx timeout [ 199.210331] Bluetooth: hci5: command tx timeout [ 199.273610] Bluetooth: hci6: command tx timeout [ 199.276528] Bluetooth: hci4: command tx timeout [ 200.746632] Bluetooth: hci0: command tx timeout [ 201.001808] Bluetooth: hci3: command tx timeout [ 201.003538] Bluetooth: hci1: command tx timeout [ 201.065736] Bluetooth: hci2: command tx timeout [ 201.257676] Bluetooth: hci5: command tx timeout [ 201.258152] Bluetooth: hci7: command tx timeout [ 201.321981] Bluetooth: hci4: command tx timeout [ 201.322048] Bluetooth: hci6: command tx timeout [ 202.795547] Bluetooth: hci0: command tx timeout [ 203.049754] Bluetooth: hci1: command tx timeout [ 203.050235] Bluetooth: hci3: command tx timeout [ 203.113796] Bluetooth: hci2: command tx timeout [ 203.307587] Bluetooth: hci7: command tx timeout [ 203.307604] Bluetooth: hci5: command tx timeout [ 203.369708] Bluetooth: hci6: command tx timeout [ 203.371639] Bluetooth: hci4: command tx timeout [ 254.639958] syz-executor.5 (2718) used greatest stack depth: 24728 bytes left [ 256.512469] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.516740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.521413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.531172] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.544187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.702248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.707110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.709474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.717172] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.723905] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.799646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.817940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.827474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.839877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.843399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.847022] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.854425] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.861371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.866071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.880277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.289185] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.332025] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.337018] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.346742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.358069] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.360431] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.362839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.366218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.369406] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.372165] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.377434] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.379208] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.381365] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.384434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.401026] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.403440] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.406655] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.451948] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.464335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.468123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 258.601696] Bluetooth: hci0: command tx timeout [ 258.794614] Bluetooth: hci1: command tx timeout [ 258.921601] Bluetooth: hci2: command tx timeout [ 258.922373] Bluetooth: hci3: command tx timeout [ 259.433577] Bluetooth: hci7: command tx timeout [ 259.497662] Bluetooth: hci5: command tx timeout [ 259.561594] Bluetooth: hci6: command tx timeout [ 259.625587] Bluetooth: hci4: command tx timeout [ 260.651149] Bluetooth: hci0: command tx timeout [ 260.841714] Bluetooth: hci1: command tx timeout [ 260.970222] Bluetooth: hci3: command tx timeout [ 260.971435] Bluetooth: hci2: command tx timeout [ 261.481925] Bluetooth: hci7: command tx timeout [ 261.546992] Bluetooth: hci5: command tx timeout [ 261.609702] Bluetooth: hci6: command tx timeout [ 261.673678] Bluetooth: hci4: command tx timeout [ 262.697566] Bluetooth: hci0: command tx timeout [ 262.889576] Bluetooth: hci1: command tx timeout [ 263.017749] Bluetooth: hci3: command tx timeout [ 263.018235] Bluetooth: hci2: command tx timeout [ 263.529604] Bluetooth: hci7: command tx timeout [ 263.594598] Bluetooth: hci5: command tx timeout [ 263.657694] Bluetooth: hci6: command tx timeout [ 263.721826] Bluetooth: hci4: command tx timeout [ 264.745870] Bluetooth: hci0: command tx timeout [ 264.937605] Bluetooth: hci1: command tx timeout [ 265.066719] Bluetooth: hci2: command tx timeout [ 265.067210] Bluetooth: hci3: command tx timeout [ 265.578581] Bluetooth: hci7: command tx timeout [ 265.641587] Bluetooth: hci5: command tx timeout [ 265.705773] Bluetooth: hci6: command tx timeout [ 265.769768] Bluetooth: hci4: command tx timeout [ 318.852295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.856355] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.868190] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.881852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.893071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.947650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.952030] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.958417] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.962140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.968327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.971085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.976027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.982102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.008305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.017095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.117449] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.124345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.127939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.132292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.135998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.138651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.144972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.157895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.174181] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.183101] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.185425] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.187177] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.191848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.193163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.201315] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.220321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.224316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.264133] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.271739] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.274386] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.276764] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.283942] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.308079] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.324986] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.338997] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.937871] Bluetooth: hci0: command tx timeout [ 321.001922] Bluetooth: hci1: command tx timeout [ 321.066558] Bluetooth: hci2: command tx timeout [ 321.321762] Bluetooth: hci5: command tx timeout [ 321.321960] Bluetooth: hci4: command tx timeout [ 321.322864] Bluetooth: hci3: command tx timeout [ 321.450666] Bluetooth: hci6: command tx timeout [ 321.450687] Bluetooth: hci7: command tx timeout [ 322.985667] Bluetooth: hci0: command tx timeout [ 323.051020] Bluetooth: hci1: command tx timeout [ 323.113901] Bluetooth: hci2: command tx timeout [ 323.370827] Bluetooth: hci4: command tx timeout [ 323.371060] Bluetooth: hci5: command tx timeout [ 323.371294] Bluetooth: hci3: command tx timeout [ 323.497565] Bluetooth: hci7: command tx timeout [ 323.500512] Bluetooth: hci6: command tx timeout [ 325.033643] Bluetooth: hci0: command tx timeout [ 325.098199] Bluetooth: hci1: command tx timeout [ 325.162067] Bluetooth: hci2: command tx timeout [ 325.418745] Bluetooth: hci3: command tx timeout [ 325.419618] Bluetooth: hci5: command tx timeout [ 325.420416] Bluetooth: hci4: command tx timeout [ 325.545716] Bluetooth: hci6: command tx timeout [ 325.546689] Bluetooth: hci7: command tx timeout [ 327.081664] Bluetooth: hci0: command tx timeout [ 327.145621] Bluetooth: hci1: command tx timeout [ 327.209808] Bluetooth: hci2: command tx timeout [ 327.467599] Bluetooth: hci5: command tx timeout [ 327.467717] Bluetooth: hci4: command tx timeout [ 327.468106] Bluetooth: hci3: command tx timeout [ 327.593706] Bluetooth: hci6: command tx timeout [ 327.594728] Bluetooth: hci7: command tx timeout [ 381.513124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.519616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.522160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.536527] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.541220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.638807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.658970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.664055] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.683388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.697053] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.699401] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.718058] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.721044] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.728357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.750343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.825155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.838250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.841817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.852178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.859084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.862304] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.875185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.886054] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.894123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.904766] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.906180] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.914190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.931928] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.936179] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.940192] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.951404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.978398] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.980941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.982558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.003435] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.015151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.019112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.023429] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.033958] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.051598] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 383.593727] Bluetooth: hci0: command tx timeout [ 383.788560] Bluetooth: hci2: command tx timeout [ 383.788668] Bluetooth: hci1: command tx timeout [ 383.978717] Bluetooth: hci4: command tx timeout [ 384.106599] Bluetooth: hci6: command tx timeout [ 384.169598] Bluetooth: hci5: command tx timeout [ 384.169715] Bluetooth: hci7: command tx timeout [ 384.170219] Bluetooth: hci3: command tx timeout [ 385.642642] Bluetooth: hci0: command tx timeout [ 385.833893] Bluetooth: hci1: command tx timeout [ 385.834565] Bluetooth: hci2: command tx timeout [ 386.025972] Bluetooth: hci4: command tx timeout [ 386.153879] Bluetooth: hci6: command tx timeout [ 386.217686] Bluetooth: hci7: command tx timeout [ 386.218116] Bluetooth: hci5: command tx timeout [ 386.219075] Bluetooth: hci3: command tx timeout [ 387.689582] Bluetooth: hci0: command tx timeout [ 387.881611] Bluetooth: hci2: command tx timeout [ 387.881632] Bluetooth: hci1: command tx timeout [ 388.074523] Bluetooth: hci4: command tx timeout [ 388.202585] Bluetooth: hci6: command tx timeout [ 388.265810] Bluetooth: hci3: command tx timeout [ 388.265922] Bluetooth: hci5: command tx timeout [ 388.266260] Bluetooth: hci7: command tx timeout [ 389.738946] Bluetooth: hci0: command tx timeout [ 389.929825] Bluetooth: hci2: command tx timeout [ 389.929962] Bluetooth: hci1: command tx timeout [ 390.123504] Bluetooth: hci4: command tx timeout [ 390.249784] Bluetooth: hci6: command tx timeout [ 390.313631] Bluetooth: hci7: command tx timeout [ 390.313679] Bluetooth: hci5: command tx timeout [ 390.314063] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 02:56:50 Registers: info registers vcpu 0 RAX=000000006ce08a01 RBX=ffffffff81604840 RCX=ffff88806ce089cc RDX=0000000000000000 RSI=ffffffff85c1cbc0 RDI=ffff8880372583fc RBP=ffff888033a50000 RSP=ffff88806ce08a48 R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b6bd R11=00000000000c3b17 R12=ffff88806ce08a01 R13=ffff88806ce08ac0 R14=ffff888033a57820 R15=ffff88806ce08a78 RIP=ffffffff81353d98 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0a4cbb3620 CR3=0000000030678000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000011b3538fe2c RBX=0000000000000000 RCX=00000000000006e0 RDX=000000000000011b RSI=ffff88806cf238c0 RDI=000000000004db03 RBP=ffff88806cf238c0 RSP=ffff88806cf08ed8 R8 =0000000000000001 R9 =0000000000000000 R10=00000000000de625 R11=0000000000000001 R12=000000000004db03 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf28080 RIP=ffffffff813276b5 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c333a28e0 CR3=0000000036ca4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000