Warning: Permanently added '[localhost]:10619' (ECDSA) to the list of known hosts. 2025/06/17 11:10:44 fuzzer started 2025/06/17 11:10:44 dialing manager at localhost:32817 syzkaller login: [ 101.604362] cgroup: Unknown subsys name 'net' [ 101.777152] cgroup: Unknown subsys name 'cpuset' [ 101.834865] cgroup: Unknown subsys name 'rlimit' 2025/06/17 11:10:59 syscalls: 2214 2025/06/17 11:10:59 code coverage: enabled 2025/06/17 11:10:59 comparison tracing: enabled 2025/06/17 11:10:59 extra coverage: enabled 2025/06/17 11:10:59 setuid sandbox: enabled 2025/06/17 11:10:59 namespace sandbox: enabled 2025/06/17 11:10:59 Android sandbox: enabled 2025/06/17 11:10:59 fault injection: enabled 2025/06/17 11:10:59 leak checking: enabled 2025/06/17 11:10:59 net packet injection: enabled 2025/06/17 11:10:59 net device setup: enabled 2025/06/17 11:10:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/17 11:10:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/17 11:10:59 USB emulation: enabled 2025/06/17 11:10:59 hci packet injection: enabled 2025/06/17 11:10:59 wifi device emulation: enabled 2025/06/17 11:10:59 802.15.4 emulation: enabled 2025/06/17 11:10:59 fetching corpus: 0, signal 0/0 (executing program) 2025/06/17 11:11:01 starting 8 fuzzer processes 11:11:01 executing program 0: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x200, 0x70bd2d, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4048850}, 0x4040) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000180)=""/29, 0x1d}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000000300), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000600)=""/171, 0xab}], 0x6, &(0x7f0000000740)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000d40)=[{&(0x7f00000008c0)=""/202, 0xca}, {&(0x7f00000009c0)=""/121, 0x79}, {&(0x7f0000000a40)=""/8, 0x8}, {&(0x7f0000000a80)=""/156, 0x9c}, {&(0x7f0000000b40)=""/81, 0x51}, {&(0x7f0000000bc0)=""/11, 0xb}, {&(0x7f0000000c00)=""/87, 0x57}, {&(0x7f0000000c80)=""/139, 0x8b}], 0x8}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000e40)=""/96, 0x60}, {&(0x7f0000000ec0)=""/246, 0xf6}, {&(0x7f0000000fc0)=""/157, 0x9d}, {&(0x7f0000001080)=""/36, 0x24}], 0x4, &(0x7f0000001100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f00000011c0)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001240)=""/176, 0xb0}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000001400)=""/155, 0x9b}], 0x3, &(0x7f0000001500)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000015c0)=""/56, 0x38}], 0x1}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000016c0)=""/216, 0xd8}, {&(0x7f00000017c0)=""/182, 0xb6}, {&(0x7f0000001880)=""/16, 0x10}, {&(0x7f00000018c0)=""/195, 0xc3}], 0x4, &(0x7f0000001a00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000002180)=[{&(0x7f0000001ac0)=""/106, 0x6a}, {&(0x7f0000001b40)=""/146, 0x92}, {&(0x7f0000001c00)=""/247, 0xf7}, {&(0x7f0000001d00)=""/3, 0x3}, {&(0x7f0000001d40)=""/125, 0x7d}, {&(0x7f0000001dc0)=""/28, 0x1c}, {&(0x7f0000001e00)=""/220, 0xdc}, {&(0x7f0000001f00)=""/244, 0xf4}, {&(0x7f0000002000)=""/172, 0xac}, {&(0x7f00000020c0)=""/189, 0xbd}], 0xa, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x9, 0x1, &(0x7f0000002500)={0x0, 0x3938700}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000025c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x6c, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_open_dev$evdev(&(0x7f0000002700), 0x0, 0x690200) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002740)='/sys/module/snd_timer', 0x101000, 0x40) fsync(r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000027c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x30, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) r8 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH(r8, 0x3, &(0x7f00000028c0)='syzkaller1\x00', &(0x7f0000002900)='./file0\x00', r1) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002980), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000029c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000002b40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a00)={0xe0, r9, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0xac, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x5555555555550381}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x37}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000002b80)=0x5b02, 0x4) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x24, r11, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000002d00), 0xc880, 0x0) 11:11:01 executing program 1: readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/148, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0xfffffc01, './file0\x00'}}) r0 = socket$inet_icmp(0x2, 0x2, 0x1) fallocate(r0, 0x0, 0x0, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x9, 0x1ff}}, './file0\x00'}) move_mount(r1, &(0x7f0000000280)='\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x41) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x406, r1) r4 = syz_open_dev$mouse(&(0x7f0000000300), 0x2, 0x80) ioctl$sock_ifreq(r4, 0x8915, &(0x7f0000000340)={'wg0\x00', @ifru_addrs=@tipc}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000380)) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0xfffffffffffffff9) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000580)={0x3, 'ip6tnl0\x00', {0x1000}, 0x7}) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000005c0)='nr0\x00') ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$RTC_VL_CLR(r1, 0x7014) move_mount(r1, &(0x7f0000000600)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) 11:11:01 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0x8, 0x1}, {0x9, 0x8}, 0x7fffffff, 0x1}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'team0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x600, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x80) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x880) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xf0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3ca3570ce7c6720ef6723e461f14126f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2b8b26eff747eb1720e44989780b1516"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "746c629437c301ca1a5359c9cbac1ee3d6ec429a9e25de9ed58bec7d8f011623"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7a15259b13014bb1ad222fa5ec89b243"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x4800) bind$bt_hci(r2, &(0x7f0000000600)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {r1}}, './file1\x00'}) mq_timedsend(r3, &(0x7f0000000680)="2bb997788be47529bd127876115b9d6c72f7b192f63f28fd8369603ddf0fe953f68fa2142e748dcb13842f2fb0ee7c5c01befb6fbaa6bd64e2207d1168d2427fe377b04232411e9eff5c61c8835e43514ff04f1bbd2ec2b1565e811b6dbf750352a20098ad7c0a59ed52124aaf1b9b8541d7316ed6b1a765fdd351e4ab7615a35fc8a5bf174cdc09", 0x88, 0x3, &(0x7f0000000740)={0x77359400}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004008}, 0x40000) bind$unix(r2, &(0x7f0000000880)=@file={0x0, './file0/file0\x00'}, 0x6e) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x880) r5 = accept$unix(r0, &(0x7f0000000a80), &(0x7f0000000b00)=0x6e) recvfrom$unix(r5, &(0x7f0000000b40)=""/59, 0x3b, 0x2043, &(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x68, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x17}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa02f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) 11:11:01 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x9c&-[!\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, '&,\xfa&[{-\\+x#%[\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x41000}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}]}, 0x1c}}, 0x90) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x44080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24000004) r6 = syz_open_dev$vcsa(&(0x7f0000000540), 0x8, 0x48100) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x85) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000680)={0x5, 0xf1, 0x7, 0x3, 0x7, 0x20}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10c7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000800)={0x0, 'bond_slave_1\x00', 0x3}, 0x18) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r9, 0x8, 0x70bd2b, 0x4dc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x48011) [ 118.012233] audit: type=1400 audit(1750158661.565:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:11:01 executing program 4: r0 = memfd_secret(0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x4e21, 0x2, 'lc\x00', 0x21, 0x9, 0x70}, 0x2c) ioctl$RTC_UIE_OFF(r0, 0x7004) close(r0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@loopback, @empty}, &(0x7f0000000080)=0xc) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "585116e4bc067a15", "0e4c13387e6e4d40a4f19d1fa0a10f2e", "6be65523", "9c7aaf205c788fe9"}, 0x28) r1 = signalfd4(r0, &(0x7f0000000140)={[0x5]}, 0x8, 0x81800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180)={0x3, 'veth1_to_team\x00', {0x6}, 0x7}) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{0x304}, "1b0b999f2e274860", "dcdaf01f8f89ba36d20ad7261acfc75c", "e791ba55", "dd8fccd3e2e14c01"}, 0x28) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) r3 = socket(0x2a, 0x80000, 0x101) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r3) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x50000, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340)) r5 = pidfd_getfd(r0, r2, 0x0) dup2(r1, r5) 11:11:01 executing program 5: write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000040)={0x8, 0x216, 0x1, 'queue1\x00', 0x63}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)={0x5, 0x8, 0x10000, 0x1000, 0x9, "1b8c9faf228a3e6bfe0c683704b5f30445fbb8"}) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/98, 0x62}], 0x1, &(0x7f0000000280)=""/49, 0x31}, 0x10102) fcntl$setsig(0xffffffffffffffff, 0xa, 0x18) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x22) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000300)={0xd, 0x7fff}) fchdir(0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0xc1) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000440)={0x9, 0x4}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000480)) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0x7f]}, 0x8, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000500)="d3a82bc19637fde4e928aa460cfabe5973de5f40f4de93440f9d45ec3c3c9d78a2b0df2b6a0460240e66735913facda593db4f72dbca94ebf568bb015beb486ace") r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x8654, 0x4c81) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000005c0)=0x9) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000640)={0x7, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}]}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0xffff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xddc}, {0x6}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd09}, {0x6}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x7ff}, {0x5, 0x14, 0x1}}]}, 0x14c}}, 0x4004040) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48084}, 0x40041) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000a00)={0x200, 0x4, 0x5}) 11:11:01 executing program 6: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x14) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x4800) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xf103, 0x76}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{}, {0x1, 0x7}, {0x7, 0x2}, {0x3, 0x4}, {0x50, 0x1}, {0xff}, {0x7, 0x3}, {0xfa, 0x5}], "5b712d7ac72aa85a"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xe2}, {}, {0x8e, 0x1}, {0x20, 0x2}], "efe72744edafafae"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{}, {0x9, 0x2}, {0x3f}, {0xda, 0x4}, {0x2, 0x5}, {0x1, 0x5}, {0x80, 0x2}, {0x1f, 0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x7}, {0x0, 0x7}, {0xfa}, {0x3f, 0x7}, {0x8, 0x7}, {0xd4, 0x2}, {0x3, 0x7}, {0x1, 0x7}], "d3cd1d32b7e38cad"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x6}, {0x1, 0x1}, {0xf8}, {0x5, 0x1}], "7e8826edae692de1"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ca2700734b561336"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x2, 0x5}, {}, {0xa1, 0x5}, {0x1, 0x5}, {0x51, 0x4}, {0x6}, {0x0, 0x1}, {0x7f, 0x2}, {0x7f, 0x3}, {0x7}, {0xfe, 0x3}], "fde71a658780d64c"}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000580)={'rose0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1cc, r3, 0x1fbb7ed30c25167e, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x37}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x25, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @cf={0x4, 0x6, {0xbb, 0x3, 0xf00e, 0x7d49}}, @channel_switch={0x25, 0x3, {0x1, 0x30, 0x1f}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x148, 0x2a, [@dsss={0x3, 0x1, 0xc}, @channel_switch={0x25, 0x3, {0x0, 0x8, 0xb6}}, @random_vendor={0xdd, 0xad, "b6c079db84a20471b3de972b1ec92dd5638743284d5d8d240c2d41372ad7dcd08b217e305f862079e8784252b5dcc308482b6cccccc6bfe6172bc3f5dff128313a79d0f9960b502ad83ca8496eacbdc0af83d3a4937dc50d529f2098645785e2e62f5e01d3c41d90be071de9440ca25be18dd326936f9607ddbade140da9e4b88ddda6d201a08dbb26c9c80d2b8066fb68da83289ccb12dbace2bc2f1c2b37e60852055642c9f7c867d76f3b86"}, @rann={0x7e, 0x15, {{0x0, 0x40}, 0x7f, 0x83, @broadcast, 0x2000, 0x10000, 0xfce1}}, @random_vendor={0xdd, 0x4f, "9b73213ac60e52c089673736a4347f0e4a5aaaf9f95f253b728ae1c160754b3eeb3a5954c48ccc86fb5f80bfd0c0a0892e44066f754951855c2076975bd9e990fd34975129421d1c106ffe6cf3603b"}, @challenge={0x10, 0x1, 0xc5}, @ibss={0x6, 0x2, 0x3}, @peer_mgmt={0x75, 0x18, {0x0, 0x2, @val=0x7f, @val=0x9, @val="01678ead0693452ad23eb5fa8849515c"}}, @ibss={0x6, 0x2, 0x2}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = syz_open_dev$vcsa(&(0x7f00000008c0), 0x0, 0x402800) accept4$packet(r0, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000980)=0x14, 0x800) accept4$packet(r0, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a00)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000b40)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000b80)={@private, @private, 0x0}, &(0x7f0000000bc0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000010c0)={'syztnl2\x00', &(0x7f0000001040)={'ip6_vti0\x00', 0x0, 0x3ff08c3530b8c0a, 0x3f, 0x0, 0xffffffff, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8000, 0x8, 0x3, 0xaafc}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000002540)={'ip6gre0\x00', &(0x7f00000024c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x6, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x1, 0x2, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002640)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000002840)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002800)={&(0x7f0000002680)={0x16c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24004003}, 0x20000004) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r3, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2b, 0x70}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) 11:11:01 executing program 7: r0 = eventfd2(0x200, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x1267, 0x7}) r1 = socket$netlink(0x10, 0x3, 0xe) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000040)={0xf2, 0xf4}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xe0, 0x81}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r2) r3 = memfd_secret(0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f00000001c0)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040050) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff8000, 0x24}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x81, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000480)) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000680)={'wg0\x00', {0x2, 0x0, @multicast2}}) ioctl$CDROMVOLREAD(r6, 0x5313, &(0x7f00000006c0)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000700)) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) [ 119.416669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.420477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.422903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.429100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.433450] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.478523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.481960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.484496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.494872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.498172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.505159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.521381] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.523877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.538109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.552536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.554856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.563484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.572209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.574307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.582581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.588620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.590760] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.595175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.602863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.606654] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.610445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.612845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.615232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.617676] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.631456] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.635406] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.639774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.642792] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.645704] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.649970] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.653843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.665764] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.669186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.682656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.688191] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.514564] Bluetooth: hci1: command tx timeout [ 121.515299] Bluetooth: hci0: command tx timeout [ 121.641696] Bluetooth: hci2: command tx timeout [ 121.705104] Bluetooth: hci4: command tx timeout [ 121.769342] Bluetooth: hci6: command tx timeout [ 121.769946] Bluetooth: hci5: command tx timeout [ 121.833899] Bluetooth: hci7: command tx timeout [ 121.834832] Bluetooth: hci3: command tx timeout [ 123.561502] Bluetooth: hci1: command tx timeout [ 123.563138] Bluetooth: hci0: command tx timeout [ 123.689188] Bluetooth: hci2: command tx timeout [ 123.753146] Bluetooth: hci4: command tx timeout [ 123.817469] Bluetooth: hci5: command tx timeout [ 123.817945] Bluetooth: hci6: command tx timeout [ 123.881114] Bluetooth: hci3: command tx timeout [ 123.881602] Bluetooth: hci7: command tx timeout [ 125.610047] Bluetooth: hci1: command tx timeout [ 125.610580] Bluetooth: hci0: command tx timeout [ 125.737294] Bluetooth: hci2: command tx timeout [ 125.801451] Bluetooth: hci4: command tx timeout [ 125.866208] Bluetooth: hci6: command tx timeout [ 125.866689] Bluetooth: hci5: command tx timeout [ 125.929132] Bluetooth: hci3: command tx timeout [ 125.929603] Bluetooth: hci7: command tx timeout [ 127.657123] Bluetooth: hci0: command tx timeout [ 127.657653] Bluetooth: hci1: command tx timeout [ 127.785257] Bluetooth: hci2: command tx timeout [ 127.849092] Bluetooth: hci4: command tx timeout [ 127.913098] Bluetooth: hci6: command tx timeout [ 127.913576] Bluetooth: hci5: command tx timeout [ 127.977345] Bluetooth: hci7: command tx timeout [ 127.977823] Bluetooth: hci3: command tx timeout [ 182.666604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.675016] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.677232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.679472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.681369] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.685018] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.688755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.690133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.693498] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.696684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.707820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.709526] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.713840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.724946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.726451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.727577] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.730379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.735340] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.736184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.739749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.741409] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.751595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.777905] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.781072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.785476] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.867835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.882076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.889299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.900659] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.927197] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.947613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.958500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.986732] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.997162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.018483] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.218098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.253319] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.256764] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.288385] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.302339] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.745319] Bluetooth: hci2: command tx timeout [ 184.809211] Bluetooth: hci1: command tx timeout [ 184.809817] Bluetooth: hci4: command tx timeout [ 184.873628] Bluetooth: hci3: command tx timeout [ 184.937181] Bluetooth: hci0: command tx timeout [ 185.193199] Bluetooth: hci6: command tx timeout [ 185.194218] Bluetooth: hci5: command tx timeout [ 185.385091] Bluetooth: hci7: command tx timeout [ 186.793415] Bluetooth: hci2: command tx timeout [ 186.859209] Bluetooth: hci1: command tx timeout [ 186.859689] Bluetooth: hci4: command tx timeout [ 186.921107] Bluetooth: hci3: command tx timeout [ 186.986111] Bluetooth: hci0: command tx timeout [ 187.241130] Bluetooth: hci5: command tx timeout [ 187.241661] Bluetooth: hci6: command tx timeout [ 187.433113] Bluetooth: hci7: command tx timeout [ 188.841302] Bluetooth: hci2: command tx timeout [ 188.905305] Bluetooth: hci4: command tx timeout [ 188.905800] Bluetooth: hci1: command tx timeout [ 188.970024] Bluetooth: hci3: command tx timeout [ 189.033318] Bluetooth: hci0: command tx timeout [ 189.290335] Bluetooth: hci6: command tx timeout [ 189.290854] Bluetooth: hci5: command tx timeout [ 189.481449] Bluetooth: hci7: command tx timeout [ 190.889150] Bluetooth: hci2: command tx timeout [ 190.953078] Bluetooth: hci4: command tx timeout [ 190.953572] Bluetooth: hci1: command tx timeout [ 191.017071] Bluetooth: hci3: command tx timeout [ 191.081054] Bluetooth: hci0: command tx timeout [ 191.338141] Bluetooth: hci5: command tx timeout [ 191.339840] Bluetooth: hci6: command tx timeout [ 191.530374] Bluetooth: hci7: command tx timeout [ 243.141010] syz-executor.0 (2422) used greatest stack depth: 24288 bytes left [ 245.118116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.121299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.124784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.129747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.132404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.183589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.190264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.200534] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.238477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.268630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.289144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.299524] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.300882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.310438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.314790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.318173] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.323889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.325252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.339505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.352142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.455644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.468378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.472386] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.513478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.554629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.555849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.571191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.573140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.577178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.579042] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.584181] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.587960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.628188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.665273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.685535] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.755173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 245.764041] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.844419] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.853350] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 245.872069] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.210077] Bluetooth: hci0: command tx timeout [ 247.337627] Bluetooth: hci1: command tx timeout [ 247.402043] Bluetooth: hci3: command tx timeout [ 247.402133] Bluetooth: hci2: command tx timeout [ 247.721098] Bluetooth: hci6: command tx timeout [ 247.785091] Bluetooth: hci5: command tx timeout [ 247.849104] Bluetooth: hci4: command tx timeout [ 248.042702] Bluetooth: hci7: command tx timeout [ 249.257347] Bluetooth: hci0: command tx timeout [ 249.385440] Bluetooth: hci1: command tx timeout [ 249.449101] Bluetooth: hci3: command tx timeout [ 249.449129] Bluetooth: hci2: command tx timeout [ 249.769424] Bluetooth: hci6: command tx timeout [ 249.833137] Bluetooth: hci5: command tx timeout [ 249.898008] Bluetooth: hci4: command tx timeout [ 250.090137] Bluetooth: hci7: command tx timeout [ 251.305059] Bluetooth: hci0: command tx timeout [ 251.434008] Bluetooth: hci1: command tx timeout [ 251.497296] Bluetooth: hci3: command tx timeout [ 251.497770] Bluetooth: hci2: command tx timeout [ 251.820057] Bluetooth: hci6: command tx timeout [ 251.881232] Bluetooth: hci5: command tx timeout [ 251.946209] Bluetooth: hci4: command tx timeout [ 252.138142] Bluetooth: hci7: command tx timeout [ 253.353212] Bluetooth: hci0: command tx timeout [ 253.481095] Bluetooth: hci1: command tx timeout [ 253.546080] Bluetooth: hci2: command tx timeout [ 253.546574] Bluetooth: hci3: command tx timeout [ 253.865522] Bluetooth: hci6: command tx timeout [ 253.929214] Bluetooth: hci5: command tx timeout [ 253.993277] Bluetooth: hci4: command tx timeout [ 254.185850] Bluetooth: hci7: command tx timeout [ 307.728676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.730415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.733658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.738418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.742448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.158700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.162346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.168695] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.169911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.175010] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.180796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.185339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.188231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.188289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.192892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.233295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.239691] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.242500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.259673] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.270306] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.291554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.293241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.295955] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.303458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.309329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.319624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.322659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.329275] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.331479] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.341604] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.346526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.349495] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.351766] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.356457] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.363293] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.369289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.374182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.393313] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.411043] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.455234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.801790] Bluetooth: hci0: command tx timeout [ 310.249082] Bluetooth: hci2: command tx timeout [ 310.251138] Bluetooth: hci1: command tx timeout [ 310.377076] Bluetooth: hci3: command tx timeout [ 310.442118] Bluetooth: hci7: command tx timeout [ 310.442449] Bluetooth: hci5: command tx timeout [ 310.569084] Bluetooth: hci6: command tx timeout [ 310.570785] Bluetooth: hci4: command tx timeout [ 311.850541] Bluetooth: hci0: command tx timeout [ 312.297182] Bluetooth: hci1: command tx timeout [ 312.297870] Bluetooth: hci2: command tx timeout [ 312.426174] Bluetooth: hci3: command tx timeout [ 312.490050] Bluetooth: hci5: command tx timeout [ 312.490409] Bluetooth: hci7: command tx timeout [ 312.617205] Bluetooth: hci6: command tx timeout [ 312.618646] Bluetooth: hci4: command tx timeout [ 313.898198] Bluetooth: hci0: command tx timeout [ 314.347194] Bluetooth: hci2: command tx timeout [ 314.347489] Bluetooth: hci1: command tx timeout [ 314.473404] Bluetooth: hci3: command tx timeout [ 314.537178] Bluetooth: hci5: command tx timeout [ 314.537458] Bluetooth: hci7: command tx timeout [ 314.665115] Bluetooth: hci4: command tx timeout [ 314.665179] Bluetooth: hci6: command tx timeout [ 315.947051] Bluetooth: hci0: command tx timeout [ 316.393299] Bluetooth: hci2: command tx timeout [ 316.393430] Bluetooth: hci1: command tx timeout [ 316.521056] Bluetooth: hci3: command tx timeout [ 316.585315] Bluetooth: hci5: command tx timeout [ 316.586071] Bluetooth: hci7: command tx timeout [ 316.713125] Bluetooth: hci6: command tx timeout [ 316.716290] Bluetooth: hci4: command tx timeout [ 370.754246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.758151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.760555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.768086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.771463] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.874695] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.887846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.898708] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.899847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.907819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.908182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.909290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.912419] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.939738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.941627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.001688] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.012358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.014648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.033729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.044929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.044952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.074826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.080708] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.090527] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.101375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.104163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.112336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.124925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.137860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.165885] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.211574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.225177] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.228465] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.274680] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.315675] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.364815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 371.380019] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.399383] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.470336] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.529455] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 372.842111] Bluetooth: hci0: command tx timeout [ 372.969384] Bluetooth: hci1: command tx timeout [ 372.969425] Bluetooth: hci2: command tx timeout [ 373.097123] Bluetooth: hci3: command tx timeout [ 373.162224] Bluetooth: hci4: command tx timeout [ 373.291673] Bluetooth: hci5: command tx timeout [ 373.482110] Bluetooth: hci6: command tx timeout [ 373.739062] Bluetooth: hci7: command tx timeout [ 374.890732] Bluetooth: hci0: command tx timeout [ 375.017094] Bluetooth: hci2: command tx timeout [ 375.019009] Bluetooth: hci1: command tx timeout [ 375.145156] Bluetooth: hci3: command tx timeout [ 375.209086] Bluetooth: hci4: command tx timeout [ 375.337059] Bluetooth: hci5: command tx timeout [ 375.529215] Bluetooth: hci6: command tx timeout [ 375.785097] Bluetooth: hci7: command tx timeout [ 376.937357] Bluetooth: hci0: command tx timeout [ 377.065086] Bluetooth: hci1: command tx timeout [ 377.065404] Bluetooth: hci2: command tx timeout [ 377.193253] Bluetooth: hci3: command tx timeout [ 377.257216] Bluetooth: hci4: command tx timeout [ 377.387056] Bluetooth: hci5: command tx timeout [ 377.577188] Bluetooth: hci6: command tx timeout [ 377.833418] Bluetooth: hci7: command tx timeout [ 378.985555] Bluetooth: hci0: command tx timeout [ 379.113141] Bluetooth: hci1: command tx timeout [ 379.114075] Bluetooth: hci2: command tx timeout [ 379.241060] Bluetooth: hci3: command tx timeout [ 379.305076] Bluetooth: hci4: command tx timeout [ 379.433056] Bluetooth: hci5: command tx timeout [ 379.626032] Bluetooth: hci6: command tx timeout [ 379.883046] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:16:03 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=00007f9db53c7b84 RCX=4b952e4da9267483 RDX=ffffffff815f9c9e RSI=000000005e406224 RDI=0000000000104185 RBP=00007f9db53c7b84 RSP=ffff888032677780 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff8880326778a0 R13=0000000000000000 R14=ffff88801a09d280 R15=0000000000000dc0 RIP=ffffffff815f9cb8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9db5376260 CR3=000000002ab0a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff8685a546 RDX=1ffff11005c54e5c RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88802e2a72f0 RSP=ffff88802e2a7228 R8 =ffffffff8685a54a R9 =0000000000000000 R10=000000000003b53d R11=0000000000022513 R12=ffff88802e2a72f8 R13=ffff88802e2a72e0 R14=0000000000000005 R15=ffff88802e2a7298 RIP=ffffffff8135417e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5a17f9f028 CR3=000000001cd67000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000