Warning: Permanently added '[localhost]:17328' (ECDSA) to the list of known hosts. 2025/06/09 21:10:28 fuzzer started 2025/06/09 21:10:28 dialing manager at localhost:40003 syzkaller login: [ 93.764709] cgroup: Unknown subsys name 'net' [ 93.912178] cgroup: Unknown subsys name 'cpuset' [ 93.967822] cgroup: Unknown subsys name 'rlimit' 2025/06/09 21:10:45 syscalls: 2214 2025/06/09 21:10:45 code coverage: enabled 2025/06/09 21:10:45 comparison tracing: enabled 2025/06/09 21:10:45 extra coverage: enabled 2025/06/09 21:10:45 setuid sandbox: enabled 2025/06/09 21:10:45 namespace sandbox: enabled 2025/06/09 21:10:45 Android sandbox: enabled 2025/06/09 21:10:45 fault injection: enabled 2025/06/09 21:10:45 leak checking: enabled 2025/06/09 21:10:45 net packet injection: enabled 2025/06/09 21:10:45 net device setup: enabled 2025/06/09 21:10:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/09 21:10:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/09 21:10:45 USB emulation: enabled 2025/06/09 21:10:45 hci packet injection: enabled 2025/06/09 21:10:45 wifi device emulation: enabled 2025/06/09 21:10:45 802.15.4 emulation: enabled 2025/06/09 21:10:45 fetching corpus: 0, signal 0/0 (executing program) 2025/06/09 21:10:48 starting 8 fuzzer processes 21:10:48 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x98) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x96, 0x3, 0xfffff001}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x7fffffff, 0x4, 0x0, 'queue0\x00', 0x80000001}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x400) r2 = dup3(r0, r1, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x800, 0x1, 0x80000, 0x1, 0x5}, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0xf, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000041) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000540)={0xd44, 0x10000, 0x2, 0x7fff, 0x101}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x8001, 0x0) r5 = pidfd_getfd(r4, r2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f00000005c0)={'\x00', 0x500, 0x3, 0x5}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0x42000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r8 = syz_open_dev$vcsn(&(0x7f0000000980), 0x5, 0x101800) io_submit(0x0, 0x4, &(0x7f0000000b80)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x40, r4, &(0x7f0000000780)="12301fb34924e905e8b509786de9aacbbbef4d583ea5de12ee855f729c0c8f70497e68d74ebd43549154be2ddd8103268993762d5fe8c106872954a9bfc82cd59b17763e524266e140be4ea38455b175bf5de5e962f62cdfa2dce7431b14f538ef8d5d2ecb11666f2a5fded9184bc3345977ffb886a531170f2a8cb7706ccbc87f65707de7e9b28106cfbde10c51caf331aeb847b4762b077041d4ed635cf3044ba776534a8f1b5a5a535958ce5d07385317c10d664c2e533447c906969f1f03a1ea15455983fdf01af837d7f07a28f95860197889d6699196450f9a6d8a00137c6e9eef13e6ef5a41dc604037f19f59a5b4444663f6a0eecc2fcdf8", 0xfc, 0x7, 0x0, 0x2, r7}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0xf6, r5, &(0x7f0000000900)="dcf4dec1b4d103bbda93debd4f72764d7d9a5d3c2ad735d26068cf405641f0411c2e5c75667163e3a4e558a5781207df04abb6020cd0faa97d5f4543a14c13f072f0b017af8af329c40a6221bc754d06b817fe73d90560a1f770881da4a44505f868188d3cf503", 0x67, 0x1, 0x0, 0x2, r8}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f0000000a00)="1f4b61e3413c4b980ccdd13f7a97b3325d90c27381f9ada9184d7b701129c1d96d2530f29f8677486d84330034ef77c0aef0a572473b25e8c3c1a981dfe30129b86bbf62f02f08a2a4b215debf8ed8fbdb", 0x51, 0x2, 0x0, 0x2}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x8, 0x6, r2, &(0x7f0000000ac0)="c40a981a3c75b06a341f0bae9f2681a3619a2d9399679d8cd69c32e5908883897a2bf629d137d5e24f1c2f9f9432b1e41ef119cd890a289f18606bf3fbc81d925e8f6782c6aedef4318e1ab257809080a437538ee16ca833a132363c0fe7c670e60a2645b7b6bc1292a67949cc82f6eb81ae207da0ad9fe6e4245ed9", 0x7c, 0x2, 0x0, 0x2, r0}]) 21:10:48 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) read$hiddev(0xffffffffffffffff, &(0x7f0000000100)=""/133, 0x85) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x54, 0x12) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000240)=0x32f, 0x4) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x1, 0x4, 0x0, 0x0, 0x0, {0x9, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200480c4}, 0x4050) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000380)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000003c0)=0x28) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000400)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000580)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0x0, 0xac, 0x2bb, 0x29, @local, @private2, 0x7826, 0x700, 0xf9, 0x786972c}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6a}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) read$ptp(r2, &(0x7f0000000900)=""/4096, 0x1000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:10:48 executing program 2: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'hugetlb'}, {0x2b, 'net'}, {0x2d, 'net'}, {0x2d, 'freezer'}, {0x2b, 'cpuacct'}, {0x6, 'io'}, {0x2b, 'hugetlb'}, {0x2d, 'rlimit'}, {0x2d, 'memory'}]}, 0x42) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xa800, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='cpuacct', 0x0, r2) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000180)) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x6, 0x301c03) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) r4 = fsmount(r1, 0x0, 0x74) fcntl$setlease(r4, 0x400, 0x0) accept$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0x1c) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0xe24, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) write$cgroup_int(r5, &(0x7f0000000440)=0x800, 0x12) r6 = syz_open_dev$vcsa(&(0x7f0000000480), 0x1, 0x2400) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x72}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x400, 0x20) ioctl$HIDIOCGFLAG(r8, 0x8004480e, &(0x7f0000000640)) [ 113.390787] audit: type=1400 audit(1749503448.663:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:10:48 executing program 3: ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/174) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x5) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000100)=""/23) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8900) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000180)={0x100, 0x1ff}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000200)={0x15, 0x25, &(0x7f00000001c0)="22fa876224a5a9a7f8d39354976f2e4414cfff15a0cbd3f90bae230c42260ea10e4e09d406"}) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x400, 0x103) sendto$unix(r0, &(0x7f0000000280)="e0437a66ea835a8db77f78c350eaf4f5a5303eabbdd76f2cbe747fa62c04b52bbe9f2d308a6e570c5b74b09628e629f76d765358355d7dd5a5399153e40c51e024a069f61b62e20b3e77de17f586e42ce0344bb2e685027b82f3643eb0e8e3188ca4b263def39b96a889e642d3abccb7af934a9923ee39c5a1fa1894bdc06fcfdba86914753a13049699362e2793b5f91a87acc75d5218129a34fc5e6175319511842e8b9e332fc3780ccb6a6164ea1461fe", 0xb2, 0x4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000003c0)={0x800, 0x9, 0x8, 0x1, 0xffffffff, 0x101}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) socketpair(0x1e, 0x5, 0x5, &(0x7f0000000400)={0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000440), &(0x7f00000004c0)=0x6e, 0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) setsockopt$inet_mreqsrc(r0, 0x0, 0xc, &(0x7f0000000500)={@multicast1, @private=0xa010101, @empty}, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xc3) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x10000, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x17}}}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x60f, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x33bd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, 'nq\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x2c}}, 0x40001) 21:10:48 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x1c800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7, 0x8}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x781}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2b02}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001044) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000600)={0xd176, 0x7}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000680)=0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r5 = dup2(r3, r4) pipe2(&(0x7f0000000700)={0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x47}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000840)) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe0, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7ff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x79}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x11, 0x1a, '802.15.4 MAC\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffeab}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_COMMENT={0xa, 0x1a, '\xff\xff\xff\xff\xff\xff'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040}, 0x41) r7 = openat$cgroup_ro(r5, &(0x7f0000000a40)='memory.numa_stat\x00', 0x0, 0x0) syncfs(r7) ioctl$RTC_WIE_ON(r6, 0x700f) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000a80)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000ac0)=0x2c) 21:10:48 executing program 5: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x9, 0x201, 0x0, 0x0, {0xf, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x93a}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x400}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x9}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x300, 0x2, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x148dc8508405cf67}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x24004881) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000081) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xb4, 0x3, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x20, 0x800, 0xef5}}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000a40)={0x0, @isdn={0x22, 0x1, 0x1, 0xf9, 0x3}, @xdp={0x2c, 0xf, 0x0, 0xb}, @phonet={0x23, 0x1, 0x87, 0x6}, 0xeb, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000a00)='wlan1\x00', 0x1, 0x7, 0x9}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x50000800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x873}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x44044) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x404c0c1) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000cc0)=0xd49) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4044840) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x5a059ba2943936f7}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc804) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:10:48 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x5, 0x3, 0x1, 0x9, "3aaba2f0fd07a0f25319fce6a0c0b3e2e758ca548ad511bc70de9a6319db1057"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000880) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x138, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x10c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ecd3dead6de93275e13f64fe090671d9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "688b2e2af030b215e567da5ba4adc8afd0ff045adcaeca96abca10306cf9298b"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "46c4f5f979d7d48228828c00643bbdec"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x138}, 0x1, 0x0, 0x0, 0x24084001}, 0x850) r4 = dup3(r0, r0, 0x80000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x170, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000801}, 0x4004000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081}, 0x40010) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f00000007c0)={0xca38, 0xb97, 0x2, 0xfff, 0x0, [0xfff, 0x9, 0x0, 0x7]}) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x20008004) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) r8 = syz_open_dev$vcsa(&(0x7f0000000a40), 0xe0, 0x0) write$9p(r8, &(0x7f0000000a80)="ed9151d885f9f172305581a210384b", 0xf) 21:10:48 executing program 7: prctl$PR_GET_TIMERSLACK(0x1e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0xffffffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"41d12087dd70eba98e738e026d3130d2", 0x0, 0x0, {0x3, 0x7f}, {0x4, 0x40}, 0x2, [0x80, 0x8, 0xfffffffffffffff7, 0x6, 0x3, 0x6, 0x4, 0x0, 0x47, 0xbb9, 0x1ff, 0x9, 0xff, 0x1, 0x45e, 0x7]}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0xa) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000180)={0x40, 0x6, 0xe, 0x2, @msf={0x8, 0x4, 0x3}, 0x6}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x2) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2f22}, {0x8, 0xb, 0x9}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004005}, 0x8808) r4 = dup2(r1, r0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa6, 0x54}}}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_triestat\x00') sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0xc800) [ 114.800759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.806442] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.810257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.820074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.828238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.917041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.922042] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.929096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.940105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.944923] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.959973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.979354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.988244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.991873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.993008] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.995438] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.003210] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.005665] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.007759] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.011719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.019157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.020237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.021273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.030843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.032853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.034660] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.035943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.051671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.060770] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.069791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.074522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.076138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.081257] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.093072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.099337] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.104163] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.127940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.133754] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.139765] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.142118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.884948] Bluetooth: hci0: command tx timeout [ 117.012811] Bluetooth: hci1: command tx timeout [ 117.076074] Bluetooth: hci5: command tx timeout [ 117.076093] Bluetooth: hci2: command tx timeout [ 117.139696] Bluetooth: hci6: command tx timeout [ 117.139744] Bluetooth: hci3: command tx timeout [ 117.203646] Bluetooth: hci7: command tx timeout [ 117.204626] Bluetooth: hci4: command tx timeout [ 118.932607] Bluetooth: hci0: command tx timeout [ 119.060644] Bluetooth: hci1: command tx timeout [ 119.123823] Bluetooth: hci2: command tx timeout [ 119.126580] Bluetooth: hci5: command tx timeout [ 119.187739] Bluetooth: hci6: command tx timeout [ 119.189745] Bluetooth: hci3: command tx timeout [ 119.253676] Bluetooth: hci4: command tx timeout [ 119.253944] Bluetooth: hci7: command tx timeout [ 120.981826] Bluetooth: hci0: command tx timeout [ 121.108667] Bluetooth: hci1: command tx timeout [ 121.173669] Bluetooth: hci5: command tx timeout [ 121.173693] Bluetooth: hci2: command tx timeout [ 121.236651] Bluetooth: hci3: command tx timeout [ 121.236732] Bluetooth: hci6: command tx timeout [ 121.299972] Bluetooth: hci4: command tx timeout [ 121.300448] Bluetooth: hci7: command tx timeout [ 123.028628] Bluetooth: hci0: command tx timeout [ 123.156014] Bluetooth: hci1: command tx timeout [ 123.219719] Bluetooth: hci5: command tx timeout [ 123.223408] Bluetooth: hci2: command tx timeout [ 123.283975] Bluetooth: hci6: command tx timeout [ 123.284876] Bluetooth: hci3: command tx timeout [ 123.347965] Bluetooth: hci7: command tx timeout [ 123.348092] Bluetooth: hci4: command tx timeout [ 177.384436] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.388030] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.390297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.391896] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.395409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.400931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.409418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.418976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.427198] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.431243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.441961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.452845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.456884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.470810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.484869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.526917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.534419] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.538594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.557683] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.563679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.590438] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.593291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.596692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.613083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.624750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.723068] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.731363] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.738999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.759372] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.774760] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.787119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.800829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.809911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.814072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.822328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.875364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.884697] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.915814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.927324] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.932315] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.539662] Bluetooth: hci0: command tx timeout [ 179.539687] Bluetooth: hci1: command tx timeout [ 179.603758] Bluetooth: hci2: command tx timeout [ 179.667978] Bluetooth: hci3: command tx timeout [ 179.731634] Bluetooth: hci4: command tx timeout [ 179.923665] Bluetooth: hci5: command tx timeout [ 179.988651] Bluetooth: hci7: command tx timeout [ 180.052843] Bluetooth: hci6: command tx timeout [ 181.587654] Bluetooth: hci1: command tx timeout [ 181.589677] Bluetooth: hci0: command tx timeout [ 181.651789] Bluetooth: hci2: command tx timeout [ 181.715660] Bluetooth: hci3: command tx timeout [ 181.779669] Bluetooth: hci4: command tx timeout [ 181.971607] Bluetooth: hci5: command tx timeout [ 182.035593] Bluetooth: hci7: command tx timeout [ 182.099649] Bluetooth: hci6: command tx timeout [ 183.635641] Bluetooth: hci0: command tx timeout [ 183.635669] Bluetooth: hci1: command tx timeout [ 183.700586] Bluetooth: hci2: command tx timeout [ 183.765588] Bluetooth: hci3: command tx timeout [ 183.827611] Bluetooth: hci4: command tx timeout [ 184.020079] Bluetooth: hci5: command tx timeout [ 184.084578] Bluetooth: hci7: command tx timeout [ 184.147933] Bluetooth: hci6: command tx timeout [ 185.683662] Bluetooth: hci0: command tx timeout [ 185.683690] Bluetooth: hci1: command tx timeout [ 185.747913] Bluetooth: hci2: command tx timeout [ 185.811793] Bluetooth: hci3: command tx timeout [ 185.878611] Bluetooth: hci4: command tx timeout [ 186.067767] Bluetooth: hci5: command tx timeout [ 186.131828] Bluetooth: hci7: command tx timeout [ 186.196817] Bluetooth: hci6: command tx timeout [ 239.528506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.536753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.540522] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.549883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.557348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.680521] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.685514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.691138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.716445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.724851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.731821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.736254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.739187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.761748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.767053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.780097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.784343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.787691] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.800874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.812047] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.876656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.884182] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.899270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.902122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.904246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.911201] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.914601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.935949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.972087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.983258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.993355] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.006093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.044031] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.075842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.116640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.223733] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.264733] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.285995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.342378] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.377357] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.619688] Bluetooth: hci0: command tx timeout [ 241.811804] Bluetooth: hci1: command tx timeout [ 241.875720] Bluetooth: hci3: command tx timeout [ 241.876436] Bluetooth: hci2: command tx timeout [ 241.940594] Bluetooth: hci5: command tx timeout [ 242.067726] Bluetooth: hci4: command tx timeout [ 242.323944] Bluetooth: hci6: command tx timeout [ 242.515623] Bluetooth: hci7: command tx timeout [ 243.667807] Bluetooth: hci0: command tx timeout [ 243.860617] Bluetooth: hci1: command tx timeout [ 243.923782] Bluetooth: hci2: command tx timeout [ 243.923996] Bluetooth: hci3: command tx timeout [ 243.988846] Bluetooth: hci5: command tx timeout [ 244.117144] Bluetooth: hci4: command tx timeout [ 244.372654] Bluetooth: hci6: command tx timeout [ 244.564805] Bluetooth: hci7: command tx timeout [ 245.715793] Bluetooth: hci0: command tx timeout [ 245.908580] Bluetooth: hci1: command tx timeout [ 245.971602] Bluetooth: hci3: command tx timeout [ 245.972653] Bluetooth: hci2: command tx timeout [ 246.036284] Bluetooth: hci5: command tx timeout [ 246.163995] Bluetooth: hci4: command tx timeout [ 246.420058] Bluetooth: hci6: command tx timeout [ 246.611770] Bluetooth: hci7: command tx timeout [ 247.763998] Bluetooth: hci0: command tx timeout [ 247.955670] Bluetooth: hci1: command tx timeout [ 248.019656] Bluetooth: hci2: command tx timeout [ 248.019869] Bluetooth: hci3: command tx timeout [ 248.083646] Bluetooth: hci5: command tx timeout [ 248.213569] Bluetooth: hci4: command tx timeout [ 248.467870] Bluetooth: hci6: command tx timeout [ 248.659887] Bluetooth: hci7: command tx timeout [ 302.502174] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.507209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.510940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.522016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.530440] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.823154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.827155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.831817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.849199] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.852130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.859105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.863889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.872021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.875865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.879820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.915173] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.930003] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.941279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.968453] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.981852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.991238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.994691] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.999299] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.003377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.008083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.011106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.014583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.027197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.052867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.068053] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.071095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.073912] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.075417] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.091009] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.097032] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.320138] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.328759] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.331377] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.374171] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.390137] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.596019] Bluetooth: hci0: command tx timeout [ 304.916792] Bluetooth: hci1: command tx timeout [ 304.916986] Bluetooth: hci2: command tx timeout [ 305.043635] Bluetooth: hci3: command tx timeout [ 305.171650] Bluetooth: hci5: command tx timeout [ 305.171676] Bluetooth: hci6: command tx timeout [ 305.363687] Bluetooth: hci4: command tx timeout [ 306.195658] Bluetooth: hci7: command tx timeout [ 306.643734] Bluetooth: hci0: command tx timeout [ 306.964967] Bluetooth: hci1: command tx timeout [ 306.965143] Bluetooth: hci2: command tx timeout [ 307.093677] Bluetooth: hci3: command tx timeout [ 307.221560] Bluetooth: hci6: command tx timeout [ 307.222005] Bluetooth: hci5: command tx timeout [ 307.411809] Bluetooth: hci4: command tx timeout [ 308.243873] Bluetooth: hci7: command tx timeout [ 308.691604] Bluetooth: hci0: command tx timeout [ 309.012568] Bluetooth: hci2: command tx timeout [ 309.012592] Bluetooth: hci1: command tx timeout [ 309.139897] Bluetooth: hci3: command tx timeout [ 309.267995] Bluetooth: hci5: command tx timeout [ 309.268610] Bluetooth: hci6: command tx timeout [ 309.459966] Bluetooth: hci4: command tx timeout [ 310.291732] Bluetooth: hci7: command tx timeout [ 310.739591] Bluetooth: hci0: command tx timeout [ 311.059659] Bluetooth: hci1: command tx timeout [ 311.059700] Bluetooth: hci2: command tx timeout [ 311.188734] Bluetooth: hci3: command tx timeout [ 311.315632] Bluetooth: hci6: command tx timeout [ 311.315653] Bluetooth: hci5: command tx timeout [ 311.507604] Bluetooth: hci4: command tx timeout [ 312.340416] Bluetooth: hci7: command tx timeout [ 364.972074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.979665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.982295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.992268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.003160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.231051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.234046] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.243273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.253889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.260080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.323360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.333850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.336646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.345142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.347461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.351736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.355837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.357818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.385967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.391279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.394983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.398154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.413014] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.425165] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.450016] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.480090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.494931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.508913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.542687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.554436] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.665611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.674237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.685815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.710316] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.738883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.880023] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.886362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.901511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.936157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.950340] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.059644] Bluetooth: hci0: command tx timeout [ 367.379810] Bluetooth: hci1: command tx timeout [ 367.443944] Bluetooth: hci2: command tx timeout [ 367.508594] Bluetooth: hci3: command tx timeout [ 367.571972] Bluetooth: hci4: command tx timeout [ 367.827934] Bluetooth: hci6: command tx timeout [ 367.828909] Bluetooth: hci5: command tx timeout [ 368.084362] Bluetooth: hci7: command tx timeout [ 369.107890] Bluetooth: hci0: command tx timeout [ 369.427613] Bluetooth: hci1: command tx timeout [ 369.492563] Bluetooth: hci2: command tx timeout [ 369.555853] Bluetooth: hci3: command tx timeout [ 369.619761] Bluetooth: hci4: command tx timeout [ 369.875842] Bluetooth: hci6: command tx timeout [ 369.876299] Bluetooth: hci5: command tx timeout [ 370.131613] Bluetooth: hci7: command tx timeout [ 371.155632] Bluetooth: hci0: command tx timeout [ 371.475913] Bluetooth: hci1: command tx timeout [ 371.539607] Bluetooth: hci2: command tx timeout [ 371.603622] Bluetooth: hci3: command tx timeout [ 371.667589] Bluetooth: hci4: command tx timeout [ 371.923666] Bluetooth: hci5: command tx timeout [ 371.924140] Bluetooth: hci6: command tx timeout [ 372.180456] Bluetooth: hci7: command tx timeout [ 373.203699] Bluetooth: hci0: command tx timeout [ 373.523617] Bluetooth: hci1: command tx timeout [ 373.589805] Bluetooth: hci2: command tx timeout [ 373.651613] Bluetooth: hci3: command tx timeout [ 373.715593] Bluetooth: hci4: command tx timeout [ 373.971766] Bluetooth: hci6: command tx timeout [ 373.972206] Bluetooth: hci5: command tx timeout [ 374.227636] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 21:15:57 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880e561b000 RCX=eb8a3cfc2a4dc88f RDX=0000000000000000 RSI=00000000e1b8ee1a RDI=ffff88806ce31850 RBP=ffff88806ce08a70 RSP=ffff88806ce08998 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff88806ce08a60 R14=ffff8880172e3700 R15=ffff88806ce08a18 RIP=ffffffff815ab910 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4a4c138ec3 CR3=0000000029082000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007f947b7ae000 RCX=ffffffff81a1180c RDX=ffff888015561b80 RSI=ffffffff81a1181b RDI=0000000000000007 RBP=0000000000000043 RSP=ffff888033d2fc08 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000043 R11=0000000000000001 R12=0000000017073067 R13=000ffffffffff000 R14=ffff88802dbe9ed8 R15=00007f947b7ae000 RIP=ffffffff81738af8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f947b5c3540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f947b7ae620 CR3=000000002becc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000ff000000 XMM01=00000000000000000000000000ffffff XMM02=00362e322e325f4342494c4700352e32 XMM03=00000000000000000000004700352e32 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000