Warning: Permanently added '[localhost]:57366' (ECDSA) to the list of known hosts. 2025/06/17 14:49:44 fuzzer started 2025/06/17 14:49:45 dialing manager at localhost:32817 syzkaller login: [ 112.017493] cgroup: Unknown subsys name 'net' [ 112.167266] cgroup: Unknown subsys name 'cpuset' [ 112.233653] cgroup: Unknown subsys name 'rlimit' 2025/06/17 14:50:02 syscalls: 2214 2025/06/17 14:50:02 code coverage: enabled 2025/06/17 14:50:02 comparison tracing: enabled 2025/06/17 14:50:02 extra coverage: enabled 2025/06/17 14:50:02 setuid sandbox: enabled 2025/06/17 14:50:02 namespace sandbox: enabled 2025/06/17 14:50:02 Android sandbox: enabled 2025/06/17 14:50:02 fault injection: enabled 2025/06/17 14:50:02 leak checking: enabled 2025/06/17 14:50:02 net packet injection: enabled 2025/06/17 14:50:02 net device setup: enabled 2025/06/17 14:50:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/17 14:50:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/17 14:50:02 USB emulation: enabled 2025/06/17 14:50:02 hci packet injection: enabled 2025/06/17 14:50:02 wifi device emulation: enabled 2025/06/17 14:50:02 802.15.4 emulation: enabled 2025/06/17 14:50:02 fetching corpus: 0, signal 0/0 (executing program) 2025/06/17 14:50:04 starting 8 fuzzer processes 14:50:04 executing program 0: sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7f}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c8, r0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x6}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb4c5}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7ff}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x3c0}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x24048804}, 0x40800) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)={0x1, 'lo\x00'}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x3d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x200240d0}, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x108, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xff7c}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc98}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfe01}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x851}, 0x5) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r4, 0x309, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6e}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb94}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c4) pidfd_send_signal(r1, 0x28, &(0x7f00000009c0)={0x38, 0x1000, 0x3e}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000a40)={'veth1_to_team\x00'}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80), r5) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ac0), 0x880, 0x0) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000000b00)) r7 = syz_open_dev$evdev(&(0x7f0000000b40), 0x100000001, 0x1052c0) ppoll(&(0x7f0000000b80)=[{r7, 0x4008}], 0x1, &(0x7f0000000bc0)={0x0, 0x3938700}, &(0x7f0000000c00)={[0x7fff]}, 0x8) 14:50:04 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x9}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x9) ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f00000000c0)) close(r0) r1 = io_uring_setup(0x359b, &(0x7f0000000b40)={0x0, 0xa4b8, 0x8, 0x2, 0x37f}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x629, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40806) fcntl$addseals(r1, 0x409, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/block/loop1', 0x101100, 0x38) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000d00)=""/4096) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000001f40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d80)={0x148, 0x0, 0x600, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x88, 0xa8, @random="59a3fd9bc74b769793884776f9c15fa2d1891d2542de5ad48cc88e146f1d60347037eefd158389bea8450fc330319e31b744e05daef24f8b2043dbc00ea39fbe4ee87e4f82375a691a0501bd7c7934be9d02d35e0b1496d96d6cb296211dfe1d42b2c59c6cde604df21bfe82aa511166a412d7c6e24269126cc6b8329ebca6eb6dbd6462"}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c044}, 0xc010) getpeername$netlink(r3, &(0x7f00000020c0), &(0x7f0000002100)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000002140)=0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000002180)={r5, 0x1, 0x2}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x0, 0x0, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000002340)={{r4}, 0x0, 0xc, @inherit={0x58, &(0x7f00000022c0)={0x1, 0x2, 0x7ff, 0x401, {0x0, 0x100, 0x7, 0x9, 0x80000000}, [0x1000, 0x8]}}, @devid}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000041) 14:50:04 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x30000001}) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x56, 0x28, 0x9, 0x2, 0x2, 0x3e, 0x7e8, 0x3bb, 0x38, 0x380, 0x80000000, 0x9, 0x20, 0x1, 0x9, 0x8, 0x8}, [{0x2, 0x4a3, 0x8, 0x1, 0x80000000, 0x0, 0xd815, 0xf}, {0x1, 0x4a, 0xa4, 0x5, 0x38db, 0x4, 0x800, 0x8282}], "bded74d14d7c6e64df5dc762529b77b20e6cf61a4535351446726a1e59a216f36d5133f1f56ddd87bc163d076eb243083b559417244b115712fcea8a1eb858b01b337bf03fc4b244a19b50a69fb0bfc57ef060e276d1908b984cc157998dcd60817b11ee62edc7db641bacae80a1b0b42fddd22c1200e5d826e68e7f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6f4) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000780)) pread64(r0, &(0x7f00000007c0)=""/210, 0xd2, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000008c0)={0x8, 0x1, 0x3, 0x800, 0x3, [{0xf6, 0x4, 0x5, '\x00', 0x4002}, {0x7, 0x10000, 0x200, '\x00', 0x800}, {0x85db, 0x354, 0x5725cfeb, '\x00', 0x500}]}) r1 = open(&(0x7f00000009c0)='./file0\x00', 0x80000, 0xb) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000a00)=0xfffffffffffff801) r2 = dup(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffb1b8, 0x14}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "596de3a2e9"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "06"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000bc0)={0x3, 0x8f3, 0x7fff, 0x3, 0x18, "dfd0837db3b0c7f0"}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000c40)={0x1}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000c80), 0xa0082, 0x0) r6 = signalfd(r5, &(0x7f0000000cc0)={[0x5]}, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000d00)={0x8, 0x1ff, 0xfffffffeffffffff, 0x400, 0x101}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGISO7816(r7, 0x80285442, &(0x7f0000000d40)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000e00)={&(0x7f0000000d80)=""/125, 0x7d, 0x4, 0x1eb5}) [ 131.527539] audit: type=1400 audit(1750171804.706:7): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:50:04 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x9c106701adf88d72) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x838}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) exit(0x6) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) utimes(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{0x77359400}, {r2, r3/1000+10000}}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000003c0)='@\x00', 0x0, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000500)={&(0x7f0000000400), &(0x7f0000000440)=""/191, 0xbf}) read$hidraw(r1, &(0x7f0000000540)=""/79, 0x4f) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x20201, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x168, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x168}, 0x1, 0x0, 0x0, 0x14}, 0x40080) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xac, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x79}}}}, [@NL80211_ATTR_SSID={0x4}, @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "12f8"}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "45147af88c"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, '@L7'}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xac}}, 0x4004000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f00000009c0)={0x6, 0xfff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x40040c0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r1) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x94}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x890}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "48cc6663c644f26290d93c8b5b8f687365ed1e904e3edebac7be7fcd582dee"}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x24004811) 14:50:04 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3f, 0x4, 0x3}) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x31, "630d87236bdd99f61b2cfa33d0abed12518c1e39a27a710d51ee8c15f1da74027dd8fd718eb8e321a271d7ee0a1ff14e8cef59d5c9f342b604a4b15ce8cb2fda"}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0xfffd, 0x2, 0x3}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000200)={0x20, 0x5, 0x6, 0x0, 0x4, 0x3}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000240)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x2000a085) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000440)={0x40, @time={0xdd, 0xfffe0000}, 0xc8, {0x5, 0x8}, 0xff, 0x0, 0x28}) r6 = signalfd4(r2, &(0x7f0000000480)={[0x100000001]}, 0x8, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) r8 = syz_mount_image$nfs4(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x73b5, 0x6, &(0x7f0000000a80)=[{&(0x7f0000000680)="693b0a295990138a72ba99ebca7bf98afc764c64c98b200d849d4c2c661d2e19d55598564bd282fbc81fe398db42c1553c5b8923dfcbf7d128c352b6e1db2b55f52fbfdebb397fc355f375c56c85f2e6435b", 0x52}, {&(0x7f0000000700)="6eba68cef1dc3f0a8dcd03036e45ce2bc72dcb8ed52ee6742a44fc4fe4534e193d37bb4830aab31459dd7b4284ecd372c782688ef4f041229acbd27e7e52881ac8bff98f5aec5ea1c49c7e55164c6b6d2b389ae3f6f1a1434d7bb9460dcff8d2cb295e33858e25baf921c2a6cfd653c4d180ae949e86ca544a335d976446cc51e8e3383bf754c64a7f2e2f72b9cef544b79b7a1254f228258e875b851c19c38c188431adddfcfbbab019c4e5c8846cac3ce6052b90c15015e5035173f456d96d05fdf340cc59d14093f2b39408f09c30f018ebd9aee771fb7f5e3aca4399414e1c9aea46777ed53fd3b2b03b2c", 0xed, 0xcf2}, {&(0x7f0000000800)="3ce6780acae6049b21f381728a2d44e8f82bb4ff99a66d26a127b46ecbcb", 0x1e, 0x5}, {&(0x7f0000000840)="bda20b9dfbe663a07e597870786c30a76f4079925dec2dd33cceeb42e1035c9a2ca2ba0a126b2cbada2da9e8f1c0ba87e4a11ca3d95e6cbf86faadf619a551641813c2f56c8c7e3f768b009199cc708d28d6e9eaae7d064a44f6c24b196d02b30e3fea08638f2137179a9a10bead324c12f7eb216ede47096d9ee5921de631295109bf8c6529841ac50c2ab3046191ada5f2725d3168e81e62c007125d659a0e4a338023678ece875133af9ba74d8d9bc714c92462f7c951c2bd30494807267c4ac4c73bf62f7a356107a58579a4ee171b9234b497bb23f32854", 0xda, 0x8}, {&(0x7f0000000940)="fa7232c67c198d31c039594610d19bde707756bbde4bed83b8415e458f7e8bb9b4f2c3ed531b8cfae44b8ff5f62ad35db96a2b8093c2a661d396d3fa9b4bfb9e40693ce413cd08fe92c41a01bfbe9619eff7ae80d8d8b1adc17004138b19751df58f8b5e412d5e9cc6043bc31da8c0aae73f8a23381a536d5d002ad5951c55e176ef272269c537f4f70b1b2895af869fe2b2b28bcb1e162859bc35db912bb09e9a11b3e0686ea1f5cc3faa2f9c3b4875bc77eac4ff0d7b0c6650772fbda89e7d9dc53d878f9b6dac877a00331f0c6ae49df852a416236d0e1b88f9cf04", 0xdd, 0x3a}, {&(0x7f0000000a40)="c1a68807af77787ae04a40097fd67142ce27892c340cd42a0b31de1e4c39c96901f0240e79c9a5950afc49a6ae18cba7aa4f", 0x32, 0xfffffffffffff800}], 0x2080000, &(0x7f0000000b40)={[{'wlan1\x00'}, {'TIPC\x00'}, {'TIPC\x00'}, {'\xdc)'}, {'\x00'}, {'TIPC\x00'}, {'%/'}], [{@appraise}, {@fsname={'fsname', 0x3d, 'TIPC\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000bc0)={0x1, 0x0, 0x200, 0x3, 0x40, 0x81}) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000c00)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20008884) 14:50:04 executing program 5: prlimit64(0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000000)) setrlimit(0x8, &(0x7f0000000040)={0x9, 0x8}) r0 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000140)='\xc6^\x00', &(0x7f0000000180)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000001c0)={0x3, 0x2, 0x8000, 0x7ff, 0xa, "b4cebc230ca07008"}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) keyctl$read(0xb, 0x0, &(0x7f00000002c0)=""/229, 0xe5) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000400)="3e4828c4621825b1728c", 0xa}, {&(0x7f0000000440)="61724ef84f9a9571a197b2da6bf89295112bd8e6f74e7f33b09186751cc11b54ebd42b1201b78f4cb6551477ad3a9757db81148f802639bea5f5f996b4f10ab2574cdb14", 0x44}], 0x2, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0x75e4}}], 0x78}, 0xc090) r4 = accept4$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10, 0x80c00) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000640)={0x1, 0x8, 0x4, 0xe2}, 0x14) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000000680)={0x7}) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$inet_int(r6, 0x0, 0x2a, &(0x7f0000000700)=0x1e23, 0x4) connect$inet(r4, &(0x7f0000000740)={0x2, 0x4e24, @local}, 0x10) clone3(&(0x7f0000000980)={0x8020000, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0, {0x19}, &(0x7f0000000840)=""/54, 0x36, &(0x7f0000000880)=""/131, &(0x7f0000000940)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58) tkill(r7, 0x3b) keyctl$link(0x8, r0, r0) 14:50:04 executing program 6: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x40004) ioctl$TIOCSBRK(r0, 0x5427) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x13c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24b8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3956}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r0, 0x7f, 0x1, 0xfc51}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x69}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c844}, 0x8001) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x20, 0x7e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x84b7a8b10b78279f) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x105881, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa0, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4db7, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4c800}, 0x40400) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000900), 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xd, 0x4, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x148, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x3ec3}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xffffffff00000000}, {0xc, 0x90, 0x6}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44000}, 0x24040090) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2d1b971655b8fc5d}, 0x801) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r2) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r5, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x40) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x20}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x801) 14:50:04 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f4, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1a0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x692ba461}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd324}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3934c216}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a57d9a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeda2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f93e2c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20d0c66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f9e2b28}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11490073}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb00c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41c6f398}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4020f39b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4579}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7964}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c04edd6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4497}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ace6d27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23731c1c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ae14d43}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x244c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc61949a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e841738}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a241be1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc744}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x383a2396}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5e0}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dedd558}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b413250}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc64c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c45}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb176}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5082a1e5}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17c914f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7049fdd4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76130120}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5798928e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x40004) setgid(0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}}, 0x800) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x845) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000006c0)=0x3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000740)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x2000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x8, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, 0x3c}}, 0x80) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000a40), 0x8000, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x48004) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000b80)={0x8, 0x6}) [ 132.880566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.890389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.905623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.909261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.915262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.950424] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.955195] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.959687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.967450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.971346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.007673] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.018067] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.021471] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.028641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.035182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.095527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.099825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.104195] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.109257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.117207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.121953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.124236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.127555] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.144579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.149529] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 133.152568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.154811] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 133.164508] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 133.169240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.171175] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 133.173476] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 133.176296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.180540] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.187232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 133.200250] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 133.221669] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.227481] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 133.229679] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 133.229751] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 133.260735] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 134.972317] Bluetooth: hci0: command tx timeout [ 135.035235] Bluetooth: hci1: command tx timeout [ 135.099408] Bluetooth: hci2: command tx timeout [ 135.227979] Bluetooth: hci4: command tx timeout [ 135.291010] Bluetooth: hci3: command tx timeout [ 135.355084] Bluetooth: hci6: command tx timeout [ 135.355122] Bluetooth: hci7: command tx timeout [ 135.356440] Bluetooth: hci5: command tx timeout [ 137.020168] Bluetooth: hci0: command tx timeout [ 137.084007] Bluetooth: hci1: command tx timeout [ 137.148965] Bluetooth: hci2: command tx timeout [ 137.276076] Bluetooth: hci4: command tx timeout [ 137.339959] Bluetooth: hci3: command tx timeout [ 137.403048] Bluetooth: hci6: command tx timeout [ 137.403531] Bluetooth: hci5: command tx timeout [ 137.404219] Bluetooth: hci7: command tx timeout [ 139.067944] Bluetooth: hci0: command tx timeout [ 139.131109] Bluetooth: hci1: command tx timeout [ 139.195467] Bluetooth: hci2: command tx timeout [ 139.323543] Bluetooth: hci4: command tx timeout [ 139.387394] Bluetooth: hci3: command tx timeout [ 139.451420] Bluetooth: hci5: command tx timeout [ 139.451652] Bluetooth: hci6: command tx timeout [ 139.451925] Bluetooth: hci7: command tx timeout [ 141.115017] Bluetooth: hci0: command tx timeout [ 141.179010] Bluetooth: hci1: command tx timeout [ 141.243221] Bluetooth: hci2: command tx timeout [ 141.371008] Bluetooth: hci4: command tx timeout [ 141.435016] Bluetooth: hci3: command tx timeout [ 141.498970] Bluetooth: hci7: command tx timeout [ 141.500031] Bluetooth: hci6: command tx timeout [ 141.500060] Bluetooth: hci5: command tx timeout [ 196.115626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.118254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.119638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.128665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.135599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.237011] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.239370] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.240754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.245156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.248674] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.443710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.450369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.454786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.462278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.463130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.468634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.471677] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.478466] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.481692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.486239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.487770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.494793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.509185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.517500] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.520509] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.607324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.619942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.634167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.650541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.687411] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.956917] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 196.968384] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 196.982352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.020289] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 197.044243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.045144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 197.060182] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 197.148069] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 197.159203] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.161853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 198.204973] Bluetooth: hci0: command tx timeout [ 198.267989] Bluetooth: hci1: command tx timeout [ 198.587171] Bluetooth: hci2: command tx timeout [ 198.588241] Bluetooth: hci5: command tx timeout [ 198.588838] Bluetooth: hci3: command tx timeout [ 198.842986] Bluetooth: hci4: command tx timeout [ 199.227212] Bluetooth: hci7: command tx timeout [ 199.228543] Bluetooth: hci6: command tx timeout [ 200.252256] Bluetooth: hci0: command tx timeout [ 200.315231] Bluetooth: hci1: command tx timeout [ 200.635478] Bluetooth: hci3: command tx timeout [ 200.636320] Bluetooth: hci5: command tx timeout [ 200.636787] Bluetooth: hci2: command tx timeout [ 200.891618] Bluetooth: hci4: command tx timeout [ 201.275228] Bluetooth: hci6: command tx timeout [ 201.275770] Bluetooth: hci7: command tx timeout [ 202.299916] Bluetooth: hci0: command tx timeout [ 202.363440] Bluetooth: hci1: command tx timeout [ 202.683018] Bluetooth: hci3: command tx timeout [ 202.684453] Bluetooth: hci2: command tx timeout [ 202.685604] Bluetooth: hci5: command tx timeout [ 202.939343] Bluetooth: hci4: command tx timeout [ 203.323628] Bluetooth: hci6: command tx timeout [ 203.324219] Bluetooth: hci7: command tx timeout [ 204.347281] Bluetooth: hci0: command tx timeout [ 204.412033] Bluetooth: hci1: command tx timeout [ 204.731537] Bluetooth: hci5: command tx timeout [ 204.732941] Bluetooth: hci3: command tx timeout [ 204.733455] Bluetooth: hci2: command tx timeout [ 204.988011] Bluetooth: hci4: command tx timeout [ 205.371077] Bluetooth: hci6: command tx timeout [ 205.371634] Bluetooth: hci7: command tx timeout [ 258.900397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.903678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.914258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.920483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.935262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.016802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.022198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.027592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.034677] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.038915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.081531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.084181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.100446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.116345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.121844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.161023] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.163416] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.166694] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.171299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.173674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.177719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.181069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.187413] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.191675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.204616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.254416] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 259.261403] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 259.268066] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 259.278594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.286502] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.289337] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 259.291181] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.292207] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 259.295101] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 259.307508] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 259.312204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.316503] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.319834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.337183] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 259.349565] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 260.987104] Bluetooth: hci0: command tx timeout [ 261.115065] Bluetooth: hci1: command tx timeout [ 261.180121] Bluetooth: hci2: command tx timeout [ 261.243078] Bluetooth: hci3: command tx timeout [ 261.307345] Bluetooth: hci4: command tx timeout [ 261.370992] Bluetooth: hci5: command tx timeout [ 261.435203] Bluetooth: hci7: command tx timeout [ 261.435811] Bluetooth: hci6: command tx timeout [ 263.035022] Bluetooth: hci0: command tx timeout [ 263.163992] Bluetooth: hci1: command tx timeout [ 263.227365] Bluetooth: hci2: command tx timeout [ 263.291043] Bluetooth: hci3: command tx timeout [ 263.355496] Bluetooth: hci4: command tx timeout [ 263.419017] Bluetooth: hci5: command tx timeout [ 263.483970] Bluetooth: hci7: command tx timeout [ 263.484470] Bluetooth: hci6: command tx timeout [ 265.084050] Bluetooth: hci0: command tx timeout [ 265.211278] Bluetooth: hci1: command tx timeout [ 265.275007] Bluetooth: hci2: command tx timeout [ 265.339390] Bluetooth: hci3: command tx timeout [ 265.402964] Bluetooth: hci4: command tx timeout [ 265.467298] Bluetooth: hci5: command tx timeout [ 265.531038] Bluetooth: hci6: command tx timeout [ 265.531590] Bluetooth: hci7: command tx timeout [ 267.130959] Bluetooth: hci0: command tx timeout [ 267.261257] Bluetooth: hci1: command tx timeout [ 267.322953] Bluetooth: hci2: command tx timeout [ 267.387011] Bluetooth: hci3: command tx timeout [ 267.450984] Bluetooth: hci4: command tx timeout [ 267.515019] Bluetooth: hci5: command tx timeout [ 267.579032] Bluetooth: hci7: command tx timeout [ 267.580485] Bluetooth: hci6: command tx timeout [ 321.508657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.512444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.516826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.532340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.537903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.807454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.811204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.812533] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.816063] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.822084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.873905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.879624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.907240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.916664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.921968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.923443] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 321.937281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 321.945627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 321.968616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 321.970236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 321.971851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 321.978075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.992124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.000176] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.001425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.003675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.005458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.025650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.029330] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 322.046835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 322.049288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.057377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.061632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.063712] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 322.065624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.077280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.078484] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.122106] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 322.143493] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 322.145727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.579996] Bluetooth: hci0: command tx timeout [ 323.835969] Bluetooth: hci1: command tx timeout [ 324.027036] Bluetooth: hci2: command tx timeout [ 324.155130] Bluetooth: hci5: command tx timeout [ 324.156196] Bluetooth: hci3: command tx timeout [ 324.156280] Bluetooth: hci6: command tx timeout [ 324.219275] Bluetooth: hci4: command tx timeout [ 324.283035] Bluetooth: hci7: command tx timeout [ 325.626998] Bluetooth: hci0: command tx timeout [ 325.883282] Bluetooth: hci1: command tx timeout [ 326.075018] Bluetooth: hci2: command tx timeout [ 326.203944] Bluetooth: hci6: command tx timeout [ 326.204524] Bluetooth: hci3: command tx timeout [ 326.204575] Bluetooth: hci5: command tx timeout [ 326.267282] Bluetooth: hci4: command tx timeout [ 326.333105] Bluetooth: hci7: command tx timeout [ 327.675962] Bluetooth: hci0: command tx timeout [ 327.932125] Bluetooth: hci1: command tx timeout [ 328.124141] Bluetooth: hci2: command tx timeout [ 328.251349] Bluetooth: hci6: command tx timeout [ 328.251386] Bluetooth: hci5: command tx timeout [ 328.252334] Bluetooth: hci3: command tx timeout [ 328.315915] Bluetooth: hci4: command tx timeout [ 328.379232] Bluetooth: hci7: command tx timeout [ 329.723020] Bluetooth: hci0: command tx timeout [ 329.979394] Bluetooth: hci1: command tx timeout [ 330.171539] Bluetooth: hci2: command tx timeout [ 330.298965] Bluetooth: hci3: command tx timeout [ 330.299999] Bluetooth: hci5: command tx timeout [ 330.300485] Bluetooth: hci6: command tx timeout [ 330.363233] Bluetooth: hci4: command tx timeout [ 330.427166] Bluetooth: hci7: command tx timeout [ 384.333654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.337520] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.339293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.357460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.369981] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.524587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 384.526876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 384.528158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 384.534197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 384.537209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 384.657540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 384.665407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 384.666440] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.672992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 384.678222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.684443] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.688411] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 384.693161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.703390] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.706791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 384.751144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.760163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.763648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.773316] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 384.777079] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 384.785220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 384.786777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.790328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.792363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 384.825279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 384.870829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 384.879216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 384.884186] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 384.912428] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 384.917090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 385.035744] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 385.046532] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 385.052231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 385.084180] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 385.094283] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 386.426978] Bluetooth: hci0: command tx timeout [ 386.555180] Bluetooth: hci1: command tx timeout [ 386.747043] Bluetooth: hci2: command tx timeout [ 386.747665] Bluetooth: hci3: command tx timeout [ 386.812917] Bluetooth: hci4: command tx timeout [ 387.003245] Bluetooth: hci5: command tx timeout [ 387.131036] Bluetooth: hci6: command tx timeout [ 387.196016] Bluetooth: hci7: command tx timeout [ 388.476347] Bluetooth: hci0: command tx timeout [ 388.603364] Bluetooth: hci1: command tx timeout [ 388.795139] Bluetooth: hci3: command tx timeout [ 388.796475] Bluetooth: hci2: command tx timeout [ 388.861135] Bluetooth: hci4: command tx timeout [ 389.051972] Bluetooth: hci5: command tx timeout [ 389.179261] Bluetooth: hci6: command tx timeout [ 389.243961] Bluetooth: hci7: command tx timeout [ 390.524291] Bluetooth: hci0: command tx timeout [ 390.651008] Bluetooth: hci1: command tx timeout [ 390.844689] Bluetooth: hci3: command tx timeout [ 390.845213] Bluetooth: hci2: command tx timeout [ 390.907230] Bluetooth: hci4: command tx timeout [ 391.101901] Bluetooth: hci5: command tx timeout [ 391.227897] Bluetooth: hci6: command tx timeout [ 391.291942] Bluetooth: hci7: command tx timeout [ 392.573283] Bluetooth: hci0: command tx timeout [ 392.698983] Bluetooth: hci1: command tx timeout [ 392.891034] Bluetooth: hci2: command tx timeout [ 392.891527] Bluetooth: hci3: command tx timeout [ 392.954985] Bluetooth: hci4: command tx timeout [ 393.148918] Bluetooth: hci5: command tx timeout [ 393.274985] Bluetooth: hci6: command tx timeout [ 393.338962] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:55:14 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff110012c3f82 RCX=ffffffff84b4bbc0 RDX=ffff8880095fb700 RSI=7fffffffffffffff RDI=0000000000000007 RBP=0000000000000000 RSP=ffff88800961fc08 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000003 R11=0000000000000001 R12=0000000000000003 R13=dffffc0000000000 R14=0000000000000003 R15=ffff8880095fb700 RIP=ffffffff81738736 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d36fcb64c8 CR3=00000000265e3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=ffff8880369f3700 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff8880369f41a8 RDI=ffff8880369f3700 RBP=ffff8880369f4158 RSP=ffff88806cf08870 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff8880369f41a8 R13=99b43964c8769410 R14=0000000000000000 R15=0000000000000002 RIP=ffffffff81519188 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055594291e4c8 CR3=000000000e620000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000