Warning: Permanently added '[localhost]:49352' (ECDSA) to the list of known hosts. 2025/06/06 06:30:42 fuzzer started 2025/06/06 06:30:42 dialing manager at localhost:39689 syzkaller login: [ 93.890147] cgroup: Unknown subsys name 'net' [ 94.025931] cgroup: Unknown subsys name 'cpuset' [ 94.067700] cgroup: Unknown subsys name 'rlimit' 2025/06/06 06:30:58 syscalls: 2214 2025/06/06 06:30:58 code coverage: enabled 2025/06/06 06:30:58 comparison tracing: enabled 2025/06/06 06:30:58 extra coverage: enabled 2025/06/06 06:30:58 setuid sandbox: enabled 2025/06/06 06:30:58 namespace sandbox: enabled 2025/06/06 06:30:58 Android sandbox: enabled 2025/06/06 06:30:58 fault injection: enabled 2025/06/06 06:30:58 leak checking: enabled 2025/06/06 06:30:58 net packet injection: enabled 2025/06/06 06:30:58 net device setup: enabled 2025/06/06 06:30:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/06 06:30:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/06 06:30:58 USB emulation: enabled 2025/06/06 06:30:58 hci packet injection: enabled 2025/06/06 06:30:58 wifi device emulation: enabled 2025/06/06 06:30:58 802.15.4 emulation: enabled 2025/06/06 06:30:58 fetching corpus: 0, signal 0/0 (executing program) 2025/06/06 06:31:00 starting 8 fuzzer processes 06:31:00 executing program 0: setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0xfa3e) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x101) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000080)={0x81, 0x9}) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x131, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x58}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x51db}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x694}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000280)=0x8000, 0x4) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f00000002c0)={0x2, 0x3, 0xfffffb5c, 0x5, 0x3, 0x6774, 0x9, 0x20, 0xcb, 0xfffffffa, 0x7, 0x75661f7, 0x2b, 0x5}) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xff) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) tee(r4, r1, 0xffffffff, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) mknodat$loop(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x400, 0x1) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000003c0)) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000400)={0x3, 0x2, 0x6, 0x1, 0x2}) r5 = openat$incfs(r0, &(0x7f0000000440)='.log\x00', 0x40042, 0xaa) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000480)={0x57, 0x6dc, 0x5, {0x2, 0x400}, {0x6, 0x8}, @const={0x9, {0x40, 0xff, 0x3, 0x400}}}) 06:31:00 executing program 1: ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0x101]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000140)={{r0}, 0x6, &(0x7f0000000100)=[0xfffffffffffffff7, 0x8, 0x6, 0x6, 0x1, 0x80000001], 0x9, 0x3, [0x1, 0x7, 0x4, 0xdb]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ptype\x00') r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000240)={0x0, 'wg1\x00', {0x2}, 0xb07}) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x2, 0x8000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$incfs(r7, &(0x7f0000000300)='.pending_reads\x00', 0x200, 0x80) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x2, r1, r4) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000340)=""/196) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000440)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000880)={0x1, 0xa9, @start={r8, 0x1, "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", "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"}, [0x5, 0xc7, 0x5, 0x1000, 0x5, 0x5, 0x5, 0x200, 0xc2, 0x40, 0x8, 0x70, 0x401, 0x10c, 0x2, 0x9, 0x1, 0xfffffffffffffffa, 0x6, 0x1000, 0xffff, 0x5, 0x1, 0x0, 0x7, 0x9, 0x101, 0x7, 0xff, 0x0, 0x1, 0x9, 0x2, 0x8, 0x80, 0xe4a6, 0xb10c, 0x1ff, 0xfffffffffffffffa, 0x3a0, 0x8, 0x9, 0x10000000000, 0x5f4d, 0x4, 0x8b, 0x2, 0xfd4, 0x0, 0x18b40000000000, 0x101, 0x9, 0x1a3e, 0x7fffffff, 0x80000001, 0x2, 0x1ff, 0x5, 0x700, 0x4934, 0x8001, 0x6, 0x1, 0x3ff]}) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000001300)) 06:31:00 executing program 2: sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x67}, @void, @val={0xc, 0x99, {0x361, 0x5e}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x4) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x20040000) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x128, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x13}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @private2, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7589, @rand_addr=' \x01\x00', 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xcbf, @mcast2, 0x4}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x10c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8001}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xcb18}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x54114}, 0x4004010) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r1, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x3, 0x0, {0x1f, 0x1cac, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x0, 0x2}}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x1, 0x0, {0x8001, 0xd7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x1000100, 0xfb}}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3800000, {0x5, 0xc1f, 0x100, 0x40}}}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c844}, 0x890) r2 = socket(0x6, 0x2, 0x3) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r1, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000004}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x3000c055) r3 = timerfd_create(0x8, 0x80000) dup2(r2, r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x8, 0x80, 0x7, 0x0, {{0xc, 0x4, 0x2, 0x9, 0x30, 0x65, 0x0, 0x3, 0x2f, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0xb, 0x37, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @end, @end, @generic={0x0, 0xd, "cf88fa8d273806b053a585"}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x60}}, 0x40000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000c00), 0x10000, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000c40)='veth1_vlan\x00') r6 = socket$inet6(0xa, 0x4, 0xfa4) r7 = socket$unix(0x1, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000012c0)={0x6, 0x0, &(0x7f0000001280)=[r0, r6, r3, r7, 0xffffffffffffffff, r2, r0, r3, 0xffffffffffffffff]}, 0x9) 06:31:00 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4a}}}}, [@NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x6000090) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) faccessat(r2, &(0x7f00000002c0)='./file0\x00', 0x1a) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{&(0x7f0000000940), 0x6e, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/12, 0xc}], 0x1}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000ac0)=""/199, 0xc7}, {&(0x7f0000000bc0)=""/3, 0x3}, {&(0x7f0000000c00)=""/51, 0x33}, {&(0x7f0000000c40)=""/167, 0xa7}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000d40)=""/218, 0xda}], 0x6, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001000), 0x6e, &(0x7f0000001140)=[{&(0x7f0000001080)=""/114, 0x72}, {&(0x7f0000001100)=""/24, 0x18}], 0x2, &(0x7f0000001180)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000001200)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001280)=""/47, 0x2f}], 0x1, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0x4, 0x22, &(0x7f00000014c0)) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x1, 0x8, &(0x7f0000000880)=[{&(0x7f0000000380)="e3a5b2c78dcadacc377d634d41faff1e595cdd1f458b8dca471fe586b244498d14994758bef69ead34b43759a8289d613465b03e99f28f30e08a0ca30075a11e6a1f053780c39905ccc79771d101d79c66f4506d1bbe3c97d0bf2565daee76c393a4f87dc9cdf8f2462d0f4209d47985ad477a4ea3d472a9319540734a4dcad52f7b4c744efabda33b63ccc411248e26191b67b0d917eb7de600f7d920a10bc21e67a42a99733268fdd1a68c4549eb", 0xaf, 0x3}, {&(0x7f0000000440)="3eb4d97c12da4f920b4f2c0d96e8ba90c364b9bfe490bcda4090cadfe2585403d5eb8ba0f96cf84e4739c49b0b3ef665b39d5069b28be56eee56005b4ff13b2c2bebc43f0519488ed27d7171e7f336", 0x4f, 0x1000}, {&(0x7f00000004c0)="ccaec2d1c139f40cb452e4e49fb5d75dc032b2d4fa1e5a093e2c42b236c71488db338dbe39738815613f7579839e2abc52de00154f834517d02acd7f1ac9b22a1b51f59575de11729c0cdeeca745bf8599b6e52a158cb1e2442d5d91ed2501667bb8709e7ba28d1560307bf8c71694", 0x6f, 0x3}, {&(0x7f0000000540)="726f752a526066c8e4face2da7dd640d9be78d3919003d0f7ad4acbf3b44d92bf46b91285100e7e206e6c701fd8bd26fbbe8115f1157c0c07ae24ca4c56a5796705d264b0d92198cbf5c976886dc25b91da2a05a15c3cf5b4196b071a12407fbcdf75fde7ad5041b405d1008fa0ebcecd4fdd1d2a6f1be4a74dc18eac87b5f36e2f37918add3be396cddd803015e967f7445ed4fcb4909e19d15eab09cd6a3ea38ca423dc2ed1e1871af3946b5964920884e2b9f23a9415751130ed921ac328fbeb74171e45600c00df7f103dbbf", 0xce, 0xbf}, {&(0x7f0000000640)="3575ebd9fff6a75d02a8eb3fd38a413ae940bea4f313c3495b183eac8b4d42179f694af49051b8f63a992cc394e5b252703e31b83ea892ddf6c001a055b45f03663d8519384cad15e5d134ec5a01b1720f11527113b38cb2f5e9310261e87765c1d17ca95aa5f6089b3db3da578d209ac995f368faeb40b9fb6ae20757e14e0563d98932c7e3d35074b4da45dbbee188e080d0bdca8c08d5e113b97446de71ae24bd4b202f709e3956600765cea4", 0xae, 0xfa6}, {&(0x7f0000000700)="be8620a85394bfae0ecb772d05109746510f37aaa70eb0d9c5bcdea5b48f7e2ef8ed0eb6ceddbb591666b9e9fde2c1d53f863ceb7b08d63527c53f6a0f34719d6dbce9a306b1ea70494ee0756374c2b36612913bd7d3770a7fa5", 0x5a, 0x6}, {&(0x7f0000000780)="0f5d3e24b82af7114601f157c70ee2a464566bee3d83092c27457e824e8a2b7f50fa6b380e68507c2d910fb854f815230d902c6dd5cf29b59159d70ecec28b26586d41ca47a9f63294ab08563dc91963d7", 0x51, 0x7ff}, {&(0x7f0000000800)="341af8219895b19de4554f54362e20a0364999480f2b6be00d59b74716ea5ea8b6daa448e1ec5b41145fdcfcf103b52d8ff80f6534c94ca5e2c547c554b40b844d1dba420ef43e71667726650d", 0x4d, 0x100000001}], 0x100000, &(0x7f0000001500)={[{@sbsector={'sbsector', 0x3d, 0x4}}, {@check_strict}, {@nocompress}, {@cruft}, {@sbsector={'sbsector', 0x3d, 0x8eaf}}, {@gid={'gid', 0x3d, r7}}, {@mode={'mode', 0x3d, 0x80000000}}, {@sbsector}, {@block={'block', 0x3d, 0xa00}}], [{@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) r8 = syz_open_dev$vcsn(&(0x7f0000001600), 0x9, 0x20080) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x41) openat$cgroup(r5, &(0x7f0000001740)='syz0\x00', 0x200002, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x10001, @bearer=@l2={'ib', 0x3a, 'virt_wifi0\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c080) syz_genetlink_get_family_id$smc(&(0x7f0000001880), r4) recvmsg$unix(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000018c0)=""/233, 0xe9}, {&(0x7f00000019c0)=""/174, 0xae}, {&(0x7f0000001a80)=""/148, 0x94}, {&(0x7f0000001b40)=""/230, 0xe6}, {&(0x7f0000001c40)=""/158, 0x9e}, {&(0x7f0000001d00)=""/223, 0xdf}], 0x6, &(0x7f0000001e80)=[@cred={{0x1c}}], 0x20}, 0x62) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r9, 0x4, &(0x7f0000001f40)='.#\x00', &(0x7f0000001f80)='./file0\x00', 0xffffffffffffffff) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001fc0), 0x101242, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r10, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x48, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0xffff}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x24c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x48}}, 0x8080) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x3c, r11, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 111.426525] audit: type=1400 audit(1749191460.670:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:31:00 executing program 4: r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2120000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="e06b9d5fbc3583669cea5e68d57be879827ca3519f4869ac43e89a0d05845758f1c370a54eaa861af1a21b72aa290d0fbd6671229f08f14ba8d17d1e84dd55570fedf851de78d07b9b6ad629f6ba868aa4b0954a7a9fb9ed647a21e7137246bcfb8f524e7ab8465ce10544363b2cdcf6956838f64a334c0bd8eca4a963ad116fe38b828cf749cafbd3a4f087d43e09557c2f722ec16171b109dae5efc3a09b87352838d1eabc20309d9c8199", 0xac}, {&(0x7f00000001c0)="20857eb75d7bd4c97b80849d7d6434730e040fd1c8177378027bddad103683a343559a6913207deffaf249b83b28687ddb50b68ccce4d3c61aabfb504e4ac87512a402f22fd77ffe395c5268bc7ea4aae706eccb0d504d21bf662d5ec376d603d6c7fbf1e63c1ecf7fab2c2466cf1cfe8eeea5e1", 0x74}], 0x2, 0x9) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x24000, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x378, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x32}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2625}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1b}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x15}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffaaa4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa77}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc2f2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1fc00000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfc}]}]}, @TIPC_NLA_NODE={0x190, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xed, 0x3, "c32eac302883f94d241de37d035934b9ef18614648e0f50d81d4a5cbb7ec3afb6a53ad067fd5fcc07fefc3cf47695a4021aeedc2943bc94eedaa7f5165f2c0564e12d4cba0f387ba920e54b8692bb7f213167a5ff20d1d5ede242d0da22bb2fb4c2cd3cef220555e09f2e9df9e10c3ff2b3f6cb818d23e84257ab90805f29f0470f1b0a5fa50d097aeabddcd3745fcc7aa2fa059754b6e51d5e5172d8c188c552ad87204dda486400cab3bf26e6ad9d9d0cbae68414508d1c55830054af519b9d188ec34fa1908bd87c888b16f0c6fafcd798344c88f02317fca3fa8d87cbbb05e6a18e53ae401a373"}, @TIPC_NLA_NODE_ID={0x41, 0x3, "ba55795c4c8e12d7dedb7f3c6ddc1d069ad77218c00bc63e4071a7ddba7e6b3a9455e9a4b764cafff5912899f61171e61cabad8805e3f549fdf6c5ff71"}, @TIPC_NLA_NODE_ID={0x49, 0x3, "8e7b6d730844ab4a44c00641765058192ad47d3b7d56624e38e63b3dc750614d9d6de075c008f51903de3ab5c2fd9a1a1ac7c8ffc448b43509fea749670ec387c67b071f2d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, r2, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x24040040) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xf397e5e0312e8197}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x10, 0x3f6, 0x1, 0x70bd2a, 0x9, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x850) r3 = open(&(0x7f0000000ac0)='./file0\x00', 0x200, 0x14c) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}}, 0x40440d0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r3) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000040}, 0x40c0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x18d60058}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000e80)=0xffff) r5 = openat$incfs(r1, &(0x7f0000000ec0)='.pending_reads\x00', 0x80441, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f40), r1) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x4c, r6, 0xe02, 0x70bd2a, 0x5dc1, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4) r7 = syz_open_dev$mouse(&(0x7f0000001080), 0xec7f, 0x10000) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f00000010c0)={0x1, 0x8, 0x5, 0x6, 0x9, "d9802312fd7059981317ae20c2c34a620b1931", 0xffff, 0x9}) 06:31:00 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x0, 0x1ff, 0x1, 'queue0\x00', 0x5d}) r0 = epoll_create1(0x80000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000000c0)={{r0}, 0x0, 0x4, @unused=[0x6, 0x27, 0x2, 0x76], @subvolid=0x9}) r1 = signalfd(r0, &(0x7f00000010c0)={[0x7]}, 0x8) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001140)={0x0, @nfc={0x27, 0x1, 0x2, 0x2}, @l2={0x1f, 0x58, @none, 0x100, 0x2}, @isdn={0x22, 0x7f, 0x6, 0x8, 0xd5}, 0x8001, 0x0, 0x0, 0x0, 0xfffb, &(0x7f0000001100)='netpci0\x00', 0x100, 0x1f, 0x62a4}) r2 = syz_open_dev$vcsa(&(0x7f00000011c0), 0x9, 0x200) preadv(r2, &(0x7f00000013c0)=[{&(0x7f0000001200)=""/185, 0xb9}, {&(0x7f00000012c0)=""/198, 0xc6}], 0x2, 0x939, 0x2) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000001400)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000002580)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000002a80)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x39352dcc9465b252}, 0xc, &(0x7f0000002a40)={&(0x7f0000002600)={0x42c, 0x3f4, 0x10, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x36, [0x0, 0x0, 0x9a, 0x1, 0x64a, 0x30, 0x7ff, 0x1, 0x8, 0x0, 0x2, 0xea, 0x2, 0x8, 0x1000, 0x80, 0x4, 0x1ff, 0x9, 0x7f, 0x40, 0x6, 0x8, 0xffffff7f, 0x40, 0x0, 0x1ff, 0x47a, 0x400, 0x9, 0x1, 0x6, 0x7fffffff, 0xb63, 0x6, 0x8, 0x9, 0xffffffff, 0x7ff, 0x0, 0xe2e, 0x59, 0xfffff7a0, 0x6, 0x2, 0xfffffffe, 0x6c70, 0x3, 0x3, 0x3, 0x6d, 0xfffffbff, 0x4e, 0x6, 0x3, 0x400, 0x20, 0x2, 0x2, 0x8, 0x400, 0xffffff7d, 0x80, 0x3], [0x9, 0x8, 0xffffffff, 0x3f, 0x80000000, 0x7, 0x7, 0x1, 0x3, 0x7ff, 0x7, 0x35fc, 0x8bcf, 0x2, 0x4, 0x8, 0x1, 0x4, 0x2, 0x80000001, 0x1ff, 0x101, 0x58, 0x1, 0x5, 0x6, 0x0, 0x5, 0x5521, 0x3f, 0x1, 0xe3b, 0x37, 0x3, 0x95d8, 0x6084, 0x6, 0xd67f, 0x2, 0x9, 0x0, 0x5, 0x1, 0x6, 0x3f, 0x6, 0x10, 0x81, 0x9, 0xffffffff, 0x9b07, 0x1, 0x1, 0x401, 0xaf, 0x80000000, 0x2b6, 0x5, 0x2, 0xfffffffb, 0xf3, 0xff, 0x5, 0x400], [0x1, 0x0, 0x9, 0x7ff, 0x7ff, 0x6, 0x6, 0x3, 0x400000, 0xff, 0x80000000, 0x7fffffff, 0x1, 0xd304, 0x1000, 0x80, 0x0, 0x3f, 0xe1cf, 0x6, 0x4, 0x68, 0x8, 0x4, 0xffffffff, 0x101, 0x4, 0x3ff, 0x9, 0x3, 0x40, 0x400, 0x84, 0x0, 0x401, 0x400, 0x0, 0x1, 0x9, 0x1, 0x2, 0x5, 0x6, 0x2, 0x81, 0x80000000, 0x200000, 0x9, 0x8, 0x3ff, 0x7a, 0x4, 0x7, 0x7, 0x1, 0x8, 0x6, 0xd7, 0x9, 0x9, 0x2, 0x7, 0x101, 0x1f], [0x238, 0x2, 0x7, 0x5, 0x9, 0x1, 0xfffffffe, 0x2, 0x1, 0x648b0a01, 0x0, 0x40, 0x0, 0x9, 0x10000, 0x7fff, 0x3, 0x0, 0x0, 0x92a, 0xfffffffd, 0x10001, 0x0, 0x40, 0x1ff, 0x4, 0x1, 0x9, 0x8, 0x5bf6, 0xffffffff, 0x3, 0x7c, 0x5, 0x6, 0x0, 0xff, 0x9, 0xffff, 0xfffff403, 0x9, 0x10000, 0x4, 0x2, 0x84c, 0x1, 0x4, 0x98, 0x1, 0x0, 0x4, 0xc5, 0x1000, 0x2, 0x0, 0x7, 0x9, 0x3, 0x1, 0xff, 0x80, 0xffff, 0x20, 0x6], 0xa, ['@{\x00', '+}/[){\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x10}, 0x91) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000002ac0), &(0x7f0000002b00), 0x2, 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000002b40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x40, 0x0, 0x3, 0x5, 0x2, 0x6, 0x81, 0x38e, 0x38, 0x9, 0x8000, 0x3ff, 0x20, 0x2, 0x5, 0x6, 0x1}, [{0x6, 0x61, 0x7, 0x3, 0x4, 0x20, 0x9, 0xaa22}, {0x2, 0x9, 0x1df2, 0x10, 0x6, 0x3, 0x20, 0x1200}], "73821e1753bbd6cff3cb72c8aaf96afc52dafc6ee6d7de0cbb8e786941f7513f9b552e15f9adadcbca866e73abef5f486d7047bb34a46f642c7d625fc9ed5ff123172cdd", ['\x00', '\x00', '\x00']}, 0x3bc) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000002f00)) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000003040)) r5 = memfd_secret(0x80000) r6 = pidfd_getfd(r4, r4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000030c0)={r2, 0x0, 0x4, 0x6}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) 06:31:00 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ip6gretap0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0xfffc, 0x2) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x5) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000140)={0x5, 0x4}) r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x401, 0x41) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000001c0)={0x1ff, 0x4, 0x800, 0x6, 0x4, "8ae626d3fc202f4eadbff1db4ac88fd1aeb56b", 0x6, 0x1}) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000200)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000280)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000002c0)) r4 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x20400, 0x0) ioctl$VT_RELDISP(r4, 0x5605) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000340)={0xf3}, 0x4) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x800) ioctl$TCSETSW(r5, 0x5403, &(0x7f00000003c0)={0x2, 0x3, 0x4, 0x5, 0x1b, "65e635dd322fbb6c6ba3186392e287152e550a"}) 06:31:00 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e8a0799b55b6c1f4842713757cb2e977e1170111f54f6bb0eade3d125b118fec"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5e73d768d5396d2318e34fc94a289434"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "19e606f3fd31162d86037a2fdacb2009"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48800}, 0x2040084) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x108, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4533d84c21bda2ce) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)={0x2c0, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x178, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0x124, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40800}, 0x8043) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x824efd69739c9665}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x34}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x27}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4048080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x20008000) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000c40)=""/125) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x22008000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x4040000) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x44080}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048010}, 0x20000000) [ 112.961282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.964213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.966613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.969032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.971780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.973668] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.987742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.990173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.996022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.998182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.013990] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.018941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.021903] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.042955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.048293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.078004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.108775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.113317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.116711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.118962] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.122628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.125038] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.128329] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.129692] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.133243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.135944] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.141782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.142753] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.151788] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.151812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.157812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.160044] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.164617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.170615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.171845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.176254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.181118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.192155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.193819] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.198539] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.042024] Bluetooth: hci0: command tx timeout [ 115.043195] Bluetooth: hci1: command tx timeout [ 115.105578] Bluetooth: hci2: command tx timeout [ 115.233822] Bluetooth: hci4: command tx timeout [ 115.298604] Bluetooth: hci6: command tx timeout [ 115.299299] Bluetooth: hci5: command tx timeout [ 115.300488] Bluetooth: hci7: command tx timeout [ 115.300986] Bluetooth: hci3: command tx timeout [ 117.090499] Bluetooth: hci1: command tx timeout [ 117.090972] Bluetooth: hci0: command tx timeout [ 117.153551] Bluetooth: hci2: command tx timeout [ 117.282507] Bluetooth: hci4: command tx timeout [ 117.345551] Bluetooth: hci6: command tx timeout [ 117.345996] Bluetooth: hci5: command tx timeout [ 117.346465] Bluetooth: hci3: command tx timeout [ 117.346891] Bluetooth: hci7: command tx timeout [ 119.140587] Bluetooth: hci1: command tx timeout [ 119.141076] Bluetooth: hci0: command tx timeout [ 119.201692] Bluetooth: hci2: command tx timeout [ 119.329705] Bluetooth: hci4: command tx timeout [ 119.393516] Bluetooth: hci6: command tx timeout [ 119.393962] Bluetooth: hci7: command tx timeout [ 119.394832] Bluetooth: hci3: command tx timeout [ 119.395248] Bluetooth: hci5: command tx timeout [ 121.185493] Bluetooth: hci0: command tx timeout [ 121.186002] Bluetooth: hci1: command tx timeout [ 121.249493] Bluetooth: hci2: command tx timeout [ 121.378751] Bluetooth: hci4: command tx timeout [ 121.442470] Bluetooth: hci5: command tx timeout [ 121.442910] Bluetooth: hci3: command tx timeout [ 121.443331] Bluetooth: hci7: command tx timeout [ 121.444435] Bluetooth: hci6: command tx timeout [ 172.772473] syz-executor.6 (287) used greatest stack depth: 24608 bytes left [ 175.211757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.215721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.218796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.226569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.231283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.413862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.420527] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.426060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.442758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.449570] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.486158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.493905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.496876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.504845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.517011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.546542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.549003] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.551640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.555231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.556220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.558254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.558682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.559368] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.562443] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.566829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.570693] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.573333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.575052] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.578293] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.581535] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.583857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.585771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.588388] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.617103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.617654] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.630525] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.639644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.640850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.643534] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.672274] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.314742] Bluetooth: hci0: command tx timeout [ 177.505489] Bluetooth: hci1: command tx timeout [ 177.633641] Bluetooth: hci5: command tx timeout [ 177.697426] Bluetooth: hci4: command tx timeout [ 177.699122] Bluetooth: hci6: command tx timeout [ 177.699672] Bluetooth: hci2: command tx timeout [ 177.761528] Bluetooth: hci7: command tx timeout [ 177.762098] Bluetooth: hci3: command tx timeout [ 179.362646] Bluetooth: hci0: command tx timeout [ 179.553795] Bluetooth: hci1: command tx timeout [ 179.681558] Bluetooth: hci5: command tx timeout [ 179.746306] Bluetooth: hci2: command tx timeout [ 179.746931] Bluetooth: hci6: command tx timeout [ 179.747705] Bluetooth: hci4: command tx timeout [ 179.809530] Bluetooth: hci3: command tx timeout [ 179.809893] Bluetooth: hci7: command tx timeout [ 181.410949] Bluetooth: hci0: command tx timeout [ 181.603428] Bluetooth: hci1: command tx timeout [ 181.729620] Bluetooth: hci5: command tx timeout [ 181.793761] Bluetooth: hci4: command tx timeout [ 181.795424] Bluetooth: hci6: command tx timeout [ 181.795485] Bluetooth: hci2: command tx timeout [ 181.857490] Bluetooth: hci3: command tx timeout [ 181.857996] Bluetooth: hci7: command tx timeout [ 183.458534] Bluetooth: hci0: command tx timeout [ 183.649444] Bluetooth: hci1: command tx timeout [ 183.777427] Bluetooth: hci5: command tx timeout [ 183.841473] Bluetooth: hci4: command tx timeout [ 183.842721] Bluetooth: hci6: command tx timeout [ 183.843150] Bluetooth: hci2: command tx timeout [ 183.905619] Bluetooth: hci3: command tx timeout [ 183.906055] Bluetooth: hci7: command tx timeout [ 237.626188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.629609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.634027] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.642093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.644985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.648052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.650688] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.656682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.662191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.672645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.755128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.767827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.771134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.782797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.795750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.813720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.834162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.838896] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.849786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.876712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.884990] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.896955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.902660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.946477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.960758] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.964856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.965400] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.967660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.997174] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.028522] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.091633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.107330] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.113772] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.120425] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.131853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.155689] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.156043] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.174153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.215556] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.227574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.714491] Bluetooth: hci0: command tx timeout [ 239.715248] Bluetooth: hci1: command tx timeout [ 239.905629] Bluetooth: hci2: command tx timeout [ 239.969517] Bluetooth: hci3: command tx timeout [ 240.161578] Bluetooth: hci5: command tx timeout [ 240.162499] Bluetooth: hci4: command tx timeout [ 240.290042] Bluetooth: hci6: command tx timeout [ 240.354729] Bluetooth: hci7: command tx timeout [ 241.762466] Bluetooth: hci1: command tx timeout [ 241.762497] Bluetooth: hci0: command tx timeout [ 241.953430] Bluetooth: hci2: command tx timeout [ 242.017417] Bluetooth: hci3: command tx timeout [ 242.210688] Bluetooth: hci4: command tx timeout [ 242.210714] Bluetooth: hci5: command tx timeout [ 242.338378] Bluetooth: hci6: command tx timeout [ 242.401409] Bluetooth: hci7: command tx timeout [ 243.809720] Bluetooth: hci0: command tx timeout [ 243.809788] Bluetooth: hci1: command tx timeout [ 244.002406] Bluetooth: hci2: command tx timeout [ 244.066605] Bluetooth: hci3: command tx timeout [ 244.259412] Bluetooth: hci5: command tx timeout [ 244.259903] Bluetooth: hci4: command tx timeout [ 244.385658] Bluetooth: hci6: command tx timeout [ 244.449526] Bluetooth: hci7: command tx timeout [ 245.857747] Bluetooth: hci0: command tx timeout [ 245.858496] Bluetooth: hci1: command tx timeout [ 246.050096] Bluetooth: hci2: command tx timeout [ 246.114744] Bluetooth: hci3: command tx timeout [ 246.305597] Bluetooth: hci4: command tx timeout [ 246.306531] Bluetooth: hci5: command tx timeout [ 246.433472] Bluetooth: hci6: command tx timeout [ 246.497586] Bluetooth: hci7: command tx timeout [ 300.022858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.027927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.031818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.042693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.055828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.097668] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.101881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.104512] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.113592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.121831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.181808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.186565] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.189832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.194799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.198318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.267584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.272024] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.286844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.335836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.379311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.422699] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.434109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.440070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.479708] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.481774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.502782] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.514154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.519856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.521222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.524008] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.530927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.535707] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.547284] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.595611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.597223] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.616828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.619533] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.659460] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.695679] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.711907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.113753] Bluetooth: hci0: command tx timeout [ 302.179415] Bluetooth: hci1: command tx timeout [ 302.305587] Bluetooth: hci2: command tx timeout [ 302.498673] Bluetooth: hci3: command tx timeout [ 302.625437] Bluetooth: hci4: command tx timeout [ 302.754451] Bluetooth: hci6: command tx timeout [ 302.755072] Bluetooth: hci7: command tx timeout [ 302.882154] Bluetooth: hci5: command tx timeout [ 304.162460] Bluetooth: hci0: command tx timeout [ 304.226413] Bluetooth: hci1: command tx timeout [ 304.354438] Bluetooth: hci2: command tx timeout [ 304.545501] Bluetooth: hci3: command tx timeout [ 304.674667] Bluetooth: hci4: command tx timeout [ 304.804534] Bluetooth: hci7: command tx timeout [ 304.805036] Bluetooth: hci6: command tx timeout [ 304.930639] Bluetooth: hci5: command tx timeout [ 306.210463] Bluetooth: hci0: command tx timeout [ 306.273481] Bluetooth: hci1: command tx timeout [ 306.402430] Bluetooth: hci2: command tx timeout [ 306.593425] Bluetooth: hci3: command tx timeout [ 306.724141] Bluetooth: hci4: command tx timeout [ 306.849634] Bluetooth: hci6: command tx timeout [ 306.850089] Bluetooth: hci7: command tx timeout [ 306.977592] Bluetooth: hci5: command tx timeout [ 308.257650] Bluetooth: hci0: command tx timeout [ 308.321440] Bluetooth: hci1: command tx timeout [ 308.450518] Bluetooth: hci2: command tx timeout [ 308.641634] Bluetooth: hci3: command tx timeout [ 308.770405] Bluetooth: hci4: command tx timeout [ 308.898465] Bluetooth: hci7: command tx timeout [ 308.898973] Bluetooth: hci6: command tx timeout [ 309.025959] Bluetooth: hci5: command tx timeout [ 362.292637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.294594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.297156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.303777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.306066] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.502934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.506562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.507274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.510441] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.511667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.512657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.517146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.518968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.521625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.522370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.751896] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.755054] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.756184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.759240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.760893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.764665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.765920] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.780112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.838306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.840677] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.920292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.002071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.011966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.050113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.054306] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.074801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.097797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.111820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.114866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.118735] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.122666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.133619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.137102] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.198751] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.242836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.321417] Bluetooth: hci0: command tx timeout [ 364.577468] Bluetooth: hci2: command tx timeout [ 364.578201] Bluetooth: hci1: command tx timeout [ 364.835658] Bluetooth: hci3: command tx timeout [ 364.897451] Bluetooth: hci4: command tx timeout [ 365.217495] Bluetooth: hci6: command tx timeout [ 365.282501] Bluetooth: hci5: command tx timeout [ 365.475628] Bluetooth: hci7: command tx timeout [ 366.369537] Bluetooth: hci0: command tx timeout [ 366.626985] Bluetooth: hci1: command tx timeout [ 366.628129] Bluetooth: hci2: command tx timeout [ 366.883714] Bluetooth: hci3: command tx timeout [ 366.945475] Bluetooth: hci4: command tx timeout [ 367.265657] Bluetooth: hci6: command tx timeout [ 367.329568] Bluetooth: hci5: command tx timeout [ 367.523368] Bluetooth: hci7: command tx timeout [ 368.417412] Bluetooth: hci0: command tx timeout [ 368.673526] Bluetooth: hci2: command tx timeout [ 368.674023] Bluetooth: hci1: command tx timeout [ 368.929581] Bluetooth: hci3: command tx timeout [ 368.993831] Bluetooth: hci4: command tx timeout [ 369.313520] Bluetooth: hci6: command tx timeout [ 369.377589] Bluetooth: hci5: command tx timeout [ 369.570049] Bluetooth: hci7: command tx timeout [ 370.465469] Bluetooth: hci0: command tx timeout [ 370.721698] Bluetooth: hci1: command tx timeout [ 370.722472] Bluetooth: hci2: command tx timeout [ 370.977423] Bluetooth: hci3: command tx timeout [ 371.041805] Bluetooth: hci4: command tx timeout [ 371.361418] Bluetooth: hci6: command tx timeout [ 371.425424] Bluetooth: hci5: command tx timeout [ 371.617571] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 06:36:01 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff81a4e997 RCX=ffff88803878ed04 RDX=1ffff110070f1dc1 RSI=ffffffff85c1cbc0 RDI=ffffffff81a4e997 RBP=ffffffff81a4e997 RSP=ffff88803878ed60 R8 =0000000000000001 R9 =ffff88803878edf0 R10=000000000003b6bd R11=00000000000c3b06 R12=0000000000000001 R13=0000000000000000 R14=ffff888026b09b80 R15=000000000000000f RIP=ffffffff8142fc02 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e8f84f04c8 CR3=0000000015de9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000202 RCX=ffff88803385fd3c RDX=0000000000000000 RSI=ffff88800ee8f830 RDI=ffff88800ee8f818 RBP=ffff88800ee8f818 RSP=ffff88803385fd70 R8 =0000000000000001 R9 =ffffed100670bfa0 R10=0000000000000003 R11=0000000000000001 R12=ffff88800941a500 R13=ffffea000055f700 R14=0000000000000000 R15=ffff8880157dd880 RIP=ffffffff8151f8d0 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f58907b6540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005637c58c44c8 CR3=0000000033003000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000