Warning: Permanently added '[localhost]:30584' (ECDSA) to the list of known hosts. 2025/06/18 22:50:01 fuzzer started 2025/06/18 22:50:02 dialing manager at localhost:36157 syzkaller login: [ 93.786703] cgroup: Unknown subsys name 'net' [ 93.915442] cgroup: Unknown subsys name 'cpuset' [ 93.956285] cgroup: Unknown subsys name 'rlimit' 2025/06/18 22:50:18 syscalls: 2214 2025/06/18 22:50:18 code coverage: enabled 2025/06/18 22:50:18 comparison tracing: enabled 2025/06/18 22:50:18 extra coverage: enabled 2025/06/18 22:50:18 setuid sandbox: enabled 2025/06/18 22:50:18 namespace sandbox: enabled 2025/06/18 22:50:18 Android sandbox: enabled 2025/06/18 22:50:18 fault injection: enabled 2025/06/18 22:50:18 leak checking: enabled 2025/06/18 22:50:18 net packet injection: enabled 2025/06/18 22:50:18 net device setup: enabled 2025/06/18 22:50:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/18 22:50:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/18 22:50:18 USB emulation: enabled 2025/06/18 22:50:18 hci packet injection: enabled 2025/06/18 22:50:18 wifi device emulation: enabled 2025/06/18 22:50:18 802.15.4 emulation: enabled 2025/06/18 22:50:18 fetching corpus: 0, signal 0/0 (executing program) 2025/06/18 22:50:19 starting 8 fuzzer processes 22:50:19 executing program 0: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="d077a91775486bfc6dd0802fec3a1e51c59309610fbb4ff432330fd2d876a99d34e6196a42f47cc7238a9b1d5e3de554bcbe54c34a2007780417fd8a6723aec83f559fea84f2b5155ed4270de5dfd649986688c51a9fb8a30b493a9da0244fbf8d43573324257c0daa97e5e8318ce21b3d36b059417007ce164c5e0eeeeca10b9cbbe7a7ea153b723dd60f7e54f0e12cf8dcd50e371d16b79361c457cf625a4f06622426a85f171fce8357405c7d64e4e8b5f21bc6be85d8ae9cf974b2b55cc42b67") ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000100)={0x1, 0x7, 0x6, 0x9, 0x80}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200, 0x198) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000180)={0x1, 0x90, 0x8}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) connect(r2, &(0x7f0000000480)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000500)={0xa9, 0x1c200000000000, 0xffffffff, 0xffffffff, 0x6, 0x200}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000540)={0x0, 0x6}, 0x2) pwrite64(r3, &(0x7f0000000580)="08615dcd4322311904ee9704cd5f45c837c11e63599f48d1d820a563a8b3eebbb3bab5b1ffc5a01829d18d7f0f7fe6a1094d6813bbe8851f8ecfeb490b545e9c95dc92", 0x43, 0x5) write$P9_RWALK(r0, &(0x7f0000000600)={0x30, 0x6f, 0x1, {0x3, [{0x0, 0x4, 0x8}, {0x10, 0x1, 0x3}, {0x10, 0x2, 0x4}]}}, 0x30) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r0) r5 = signalfd4(r3, &(0x7f00000006c0)={[0xfc4]}, 0x8, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40005) statx(r0, &(0x7f0000000800)='./file0\x00', 0x1000, 0x200, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000940)=@v3={0x3000000, [{0x7, 0x7}, {0x0, 0x3}], r6}, 0x18, 0x2) sendmsg$nl_netfilter(r3, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x13c, 0x7, 0x3, 0x401, 0x70bd26, 0x25dfdbfd, {0x545057b5b2e22c95, 0x0, 0x5}, [@generic="a2cbb9714940968b88eb075dd504817fed9c4cc10e2fb58c9feac211b22acbca07a5908d2406eaf64472928b295446851a91e7dd7607f488c7093b71ef2e486fe56a8579e97d675f019359f7a1cd041496d1ba1769139e15f68bb5d52a0615d4c20c42b33b3c91418cf9311a2eefe68dcf77cbcc65ca0a23121a0d1175f2d6873e0c03f2e3612bd3e5ce16f8168fb8eb4d636b3668a3d53afdf8f0ab810378f497a8220388b6808cecd93b067144d6c061f669b7f82751e4aca6b183a8461ed2a6f153b905101e8605fb4501009ae1149b17228ef466c7c1", @typed={0x8, 0x48, 0x0, 0x0, @u32=0x542a}, @nested={0x46, 0x20, 0x0, 0x1, [@generic="b35dec548775055842009a34dddac1b7c40ec57da7765ec159895d924bebe92581e3", @typed={0x7, 0x3f, 0x0, 0x0, @str=']@\x00'}, @typed={0x4, 0x95}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@private0}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 22:50:19 executing program 1: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000040)) r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x18) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000100)) r1 = accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000240)) r4 = dup2(r1, r1) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000300)=""/90) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0xe02, 0x3}, {0x6, 0x5}, {0x8, 0x21b9}, {0xdb, 0x9}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r0) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000400)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000001440)={&(0x7f0000000440)=""/4096, 0x1000, 0x1, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000001480)='net/ip6_tables_matches\x00') ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) mount$9p_xen(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x20024, &(0x7f0000001580)={'trans=xen,', {[{@cache_fscache}, {@nodevmap}, {@access_any}], [{@uid_lt={'uid<', 0xee00}}, {@obj_user}]}}) mknodat$null(r3, &(0x7f0000001600)='./file0\x00', 0x8000, 0x103) syz_io_uring_complete(0x0) 22:50:19 executing program 2: getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x81}, {r0, 0x2020}, {0xffffffffffffffff, 0x42}, {0xffffffffffffffff, 0xa252}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x31e8}, {0xffffffffffffffff, 0x1266}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x4}], 0x9, 0xa4e) preadv2(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000140)=""/66, 0x42}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/144, 0x90}], 0x5, 0x3, 0x1, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000004c0)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x3c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x9, 0x0, 0x19, 0xffe0, 0x4, 0x3e3, 0x3, 0xd8d, 0xc5e]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x8000]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x5, 0x21fd, 0x401, 0x970]}, @beacon_params=[@NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xab, 0x3}}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4865}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x180, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x153}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9256}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xabdb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x885}, 0x40188c4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xc8, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000ac0), 0xc, &(0x7f0000000f00)={&(0x7f0000000b00)={0x3cc, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x88a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ID={0xd5, 0x3, "c87da8059432387bec310910eb12d0306383471a35b85f5284745bf48bc9c99ea5efec69ba1ac7ee4715f149a86b7ae093420b437f81f54e2d700fb0c4dda7c63974a2fb8d85d61b5271389d9ed3fb885121ed818c35a4e180818ec5a52dbe68175392673880dfe1e48ba5735d36579f6be8dc3d5a96c51ea6a7030248f22a09c324e746a5ebf411f2c5b131dc1a481c35c9e7d0b07e8c6cb005b48d82415f020c8e7fca8f483a0cd8e491f8ab110763e4d12980ec667fec53bd207100de307ee9470a3b838028aafb5f6e1742884b70dc"}, @TIPC_NLA_NODE_ID={0x18, 0x3, "97dd62a688f41524383cbb4eab30f94d01366015"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "e78810fc0328ee5bedd8cc1d4b2e0b14f51078e30fcf023bac05a6d366708c7e83"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "6cadf9966f1a2173335cfa58d3a1ca7ad26f7b6381ac918713f1585d0cefeb"}}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "80c19a51ead383640b5dd28a1a740bcb9f2f55220226bb1e"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2c1e2ddac64f19d14749741bdb3e5897e1bb441ea50278911c0f75b2faa6174a8d404b"}}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x60, 0x3, "4d1cc2c63b546dafd4613181b49c49a9720baa255a86642df576d593f68429c8057dc2aea9dfcfba9cb000dbf92a8a63f9e396f4037a0a2a17599affc49bee7d509209bdb42865923af63455d2d2a0185c0ce683adcd4c26e459e2b8"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "497468446611bcd6d56fbefefa9a05b455432d89e779604444f2e6"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "a44ce2b46267bc53eff8fda9404035d3561fa1e9807574a13daf0d88"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "b32e35a22da0add204ec8a1fe20cd42853f433eff445bb"}}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x41}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000f80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$RTC_UIE_ON(r2, 0x7003) r3 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0x9, 0x80200) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000001000)={{0x1, 0x1, 0x18, r3}, './file0/file0\x00'}) r5 = openat$incfs(r4, &(0x7f0000001040)='.log\x00', 0x40000, 0xa2) r6 = pidfd_getfd(r3, r5, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40080) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001280)={0x6, &(0x7f0000001240)=[{0x607, 0x7, 0x6, 0x5}, {0x6, 0x2, 0x2c, 0x4}, {0x9, 0x3f, 0x8}, {0x3, 0x40, 0x7f, 0x2}, {0x4, 0x81, 0x1f, 0x7}, {0x4, 0x0, 0x84, 0x5}]}) readv(r7, &(0x7f0000001400)=[{&(0x7f00000012c0)=""/108, 0x6c}, {&(0x7f0000001340)=""/39, 0x27}, {&(0x7f0000001380)=""/107, 0x6b}], 0x3) 22:50:19 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fff, 0x49083) ioctl$KDMKTONE(r0, 0x4b30, 0xcd3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x12800, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x54, 0x80, 0x4848, 0x20, @dev={0xfe, 0x80, '\x00', 0x3e}, @rand_addr=' \x01\x00', 0x80, 0x80, 0x1ea, 0x1}}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20010001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40c0001}, 0x81) r2 = dup3(r1, r0, 0x80000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000002c0)={r3, 0x0, 0xffff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x3, 0x6}}, './file0\x00'}) write$P9_RMKNOD(r4, &(0x7f0000000340)={0x14, 0x13, 0x2, {0x4, 0x1, 0x2}}, 0x14) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000380)={0xfd48, 0xffffffff, 0x29, 0x3, 0x14, "b09315763a9532e565cc85065b790fb9266c34"}) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x2, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3d}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000500)={0x6, 0x8001, 0x4, 0xf3b, 0x6}) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3b}, @private2, @private2, 0x1, 0x0, 0x2, 0x100, 0xfffffffffffffff7, 0x220, r6}) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000a40)={0xc7, 0x16, &(0x7f0000000640)}) syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r5) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000000, 0x4d}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x8, 0x7}, {0x1}], "456fcf18f54ed513"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3f, 0x1}, {0x1, 0x3}, {0x80, 0x2}, {0x4}, {0x1, 0x1}, {0xfc, 0x6}, {0xe0, 0x5}, {0x0, 0x2}], "921421fc133088e3"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 22:50:19 executing program 4: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x20, 0x4, 0x20, 0x8000}, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x3, 0xc}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x21, @local, 0x4e22, 0x2, 'sh\x00', 0x5, 0x0, 0x2}, 0x2c) r1 = accept4$inet(r0, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f0000000180)=0x10, 0x800) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x0, 0x0, 0x3a, 0x0, "072d7002b13bbb784ff623019ed229dd234e098e11c797b0737cdb591345c2795187cd049106e98170829da0f8bc09fdc3781435cbef26ba4693ebc870a280bb77271442d646c11dfed920078f3974e5"}, 0xd8) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000380)=0x68) r2 = openat(r0, &(0x7f00000003c0)='./file0\x00', 0x141880, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) keyctl$read(0xb, 0x0, &(0x7f0000000440)=""/56, 0x38) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000680)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000006c0)={0x2, 0x8000}) setrlimit(0xc, &(0x7f0000000700)={0x10001, 0x4}) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000740)={'veth1_to_bond\x00', {0x2, 0x0, @empty}}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r5 = openat2(r2, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x210000, 0x143, 0x4}, 0x18) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000800)) [ 111.081602] audit: type=1400 audit(1750287019.819:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:50:19 executing program 5: getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x14}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c858) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8006}, 0x4040000) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x2004001, &(0x7f00000005c0)={[{@huge_always}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_gt={'euid>', r1}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fowner_eq={'fowner', 0x3d, r1}}]}) r3 = syz_io_uring_complete(0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000081) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mknodat(r4, &(0x7f00000008c0)='./file0\x00', 0x0, 0x7) setns(r4, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000900)) fcntl$setown(r4, 0x8, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000940), 0x2800, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r6, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 22:50:19 executing program 6: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x836c}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2219}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x200048d0) r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/195, 0xc3}], 0x2, &(0x7f00000005c0)=""/64, 0x40}, 0x2) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x81, 0x80000001, 0xfffffffe, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb0}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r2, &(0x7f0000000780)=""/177, 0xb1, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x40084) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000940), 0x80, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000980)='scalable\x00', 0x9) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) r4 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x3, 0x8, 0x0, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xa4, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) r7 = syz_open_dev$vcsa(&(0x7f0000000f40), 0x3, 0x88000) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8080) 22:50:19 executing program 7: sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x190, r0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x190}, 0x1, 0x0, 0x0, 0x484}, 0x20) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xda}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe972}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4001) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040911}, 0x4805) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8000, 0x33}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000091}, 0x11) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x24008010) r4 = openat(0xffffffffffffffff, &(0x7f0000000c00)='./file0\x00', 0x1, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x5c}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x846f}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "b45287"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x810) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x70, r0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000f80), &(0x7f0000001000)=0x68) [ 112.484952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.488839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.490733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.493354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.495379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.498990] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.505784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.519089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.521146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.524769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.553784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.570790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.573964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.592285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.594023] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.601306] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.604513] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.620229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.628514] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.631427] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.637961] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.643235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.643891] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.650023] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.654184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.716866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.738757] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.744168] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.747892] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.752867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.755162] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 112.758046] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.766753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.770505] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.791634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.809135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.810362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.834773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.840306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.862235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.628827] Bluetooth: hci0: command tx timeout [ 114.630293] Bluetooth: hci1: command tx timeout [ 114.692094] Bluetooth: hci2: command tx timeout [ 114.756160] Bluetooth: hci4: command tx timeout [ 114.756192] Bluetooth: hci3: command tx timeout [ 114.883810] Bluetooth: hci7: command tx timeout [ 114.948298] Bluetooth: hci6: command tx timeout [ 114.948388] Bluetooth: hci5: command tx timeout [ 116.675670] Bluetooth: hci1: command tx timeout [ 116.678550] Bluetooth: hci0: command tx timeout [ 116.739739] Bluetooth: hci2: command tx timeout [ 116.803623] Bluetooth: hci4: command tx timeout [ 116.804788] Bluetooth: hci3: command tx timeout [ 116.931761] Bluetooth: hci7: command tx timeout [ 116.995686] Bluetooth: hci6: command tx timeout [ 116.996726] Bluetooth: hci5: command tx timeout [ 118.725163] Bluetooth: hci0: command tx timeout [ 118.725312] Bluetooth: hci1: command tx timeout [ 118.788292] Bluetooth: hci2: command tx timeout [ 118.852823] Bluetooth: hci3: command tx timeout [ 118.852911] Bluetooth: hci4: command tx timeout [ 118.980315] Bluetooth: hci7: command tx timeout [ 119.044810] Bluetooth: hci5: command tx timeout [ 119.044866] Bluetooth: hci6: command tx timeout [ 120.772726] Bluetooth: hci1: command tx timeout [ 120.773635] Bluetooth: hci0: command tx timeout [ 120.836052] Bluetooth: hci2: command tx timeout [ 120.899889] Bluetooth: hci3: command tx timeout [ 120.902200] Bluetooth: hci4: command tx timeout [ 121.027633] Bluetooth: hci7: command tx timeout [ 121.092625] Bluetooth: hci6: command tx timeout [ 121.092693] Bluetooth: hci5: command tx timeout [ 175.008817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.011017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.015648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.017883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.019111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.022452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.022818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.025203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.028499] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.033772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.129882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.133671] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.135375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.141163] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.150376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.184226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.190609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.192902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.215978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.224071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.251071] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.255728] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.261067] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.281497] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.283960] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.300061] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.303994] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.312795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.322493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.327796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.392943] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.399973] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.405938] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.418961] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.421701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.433918] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.468759] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.483196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.515932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.530685] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.091646] Bluetooth: hci0: command tx timeout [ 177.092384] Bluetooth: hci1: command tx timeout [ 177.220640] Bluetooth: hci2: command tx timeout [ 177.284963] Bluetooth: hci3: command tx timeout [ 177.412595] Bluetooth: hci6: command tx timeout [ 177.413161] Bluetooth: hci5: command tx timeout [ 177.475625] Bluetooth: hci7: command tx timeout [ 177.603645] Bluetooth: hci4: command tx timeout [ 179.139908] Bluetooth: hci0: command tx timeout [ 179.140364] Bluetooth: hci1: command tx timeout [ 179.267591] Bluetooth: hci2: command tx timeout [ 179.332663] Bluetooth: hci3: command tx timeout [ 179.459659] Bluetooth: hci5: command tx timeout [ 179.460100] Bluetooth: hci6: command tx timeout [ 179.524865] Bluetooth: hci7: command tx timeout [ 179.651662] Bluetooth: hci4: command tx timeout [ 181.187880] Bluetooth: hci1: command tx timeout [ 181.188337] Bluetooth: hci0: command tx timeout [ 181.315600] Bluetooth: hci2: command tx timeout [ 181.379834] Bluetooth: hci3: command tx timeout [ 181.507648] Bluetooth: hci6: command tx timeout [ 181.508101] Bluetooth: hci5: command tx timeout [ 181.571591] Bluetooth: hci7: command tx timeout [ 181.699711] Bluetooth: hci4: command tx timeout [ 183.236977] Bluetooth: hci0: command tx timeout [ 183.238047] Bluetooth: hci1: command tx timeout [ 183.363760] Bluetooth: hci2: command tx timeout [ 183.427687] Bluetooth: hci3: command tx timeout [ 183.557034] Bluetooth: hci5: command tx timeout [ 183.558310] Bluetooth: hci6: command tx timeout [ 183.620381] Bluetooth: hci7: command tx timeout [ 183.747898] Bluetooth: hci4: command tx timeout [ 237.073841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.077465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.080366] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.088010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.093141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.268059] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.276318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.278450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.289103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.294758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.414211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.424176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.428250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.441925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.451933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.525096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.531700] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.534249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.535971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.544789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.549390] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.557022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.569610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.588392] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.610142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.681390] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.696559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.709594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.715381] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.718916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.747731] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.818845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.831614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.834476] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.854010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.861837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.871428] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.903844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.934054] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.947086] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.171622] Bluetooth: hci0: command tx timeout [ 239.363917] Bluetooth: hci1: command tx timeout [ 239.492859] Bluetooth: hci2: command tx timeout [ 239.619640] Bluetooth: hci3: command tx timeout [ 239.684827] Bluetooth: hci4: command tx timeout [ 239.812778] Bluetooth: hci5: command tx timeout [ 239.939610] Bluetooth: hci6: command tx timeout [ 240.068642] Bluetooth: hci7: command tx timeout [ 241.219653] Bluetooth: hci0: command tx timeout [ 241.412013] Bluetooth: hci1: command tx timeout [ 241.540595] Bluetooth: hci2: command tx timeout [ 241.667647] Bluetooth: hci3: command tx timeout [ 241.732788] Bluetooth: hci4: command tx timeout [ 241.859588] Bluetooth: hci5: command tx timeout [ 241.988585] Bluetooth: hci6: command tx timeout [ 242.115796] Bluetooth: hci7: command tx timeout [ 243.268277] Bluetooth: hci0: command tx timeout [ 243.460900] Bluetooth: hci1: command tx timeout [ 243.587742] Bluetooth: hci2: command tx timeout [ 243.716004] Bluetooth: hci3: command tx timeout [ 243.779858] Bluetooth: hci4: command tx timeout [ 243.908291] Bluetooth: hci5: command tx timeout [ 244.035683] Bluetooth: hci6: command tx timeout [ 244.163660] Bluetooth: hci7: command tx timeout [ 245.316596] Bluetooth: hci0: command tx timeout [ 245.508731] Bluetooth: hci1: command tx timeout [ 245.636861] Bluetooth: hci2: command tx timeout [ 245.763839] Bluetooth: hci3: command tx timeout [ 245.830056] Bluetooth: hci4: command tx timeout [ 245.956636] Bluetooth: hci5: command tx timeout [ 246.083651] Bluetooth: hci6: command tx timeout [ 246.213566] Bluetooth: hci7: command tx timeout [ 299.749177] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.756286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.760668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.775200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.783361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.895935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.906078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.911143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.949278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.953317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.955209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.959959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.961479] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.966720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.977277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.035897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.056384] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.065180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.081503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.119190] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.127290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.183058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.196813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.203060] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.205341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.208766] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.214197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.217651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.242820] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.247002] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.249783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.249916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.255291] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.257145] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.271100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.276283] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.293149] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.304201] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.310132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.319659] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.828787] Bluetooth: hci0: command tx timeout [ 302.020620] Bluetooth: hci1: command tx timeout [ 302.084665] Bluetooth: hci2: command tx timeout [ 302.212163] Bluetooth: hci3: command tx timeout [ 302.340664] Bluetooth: hci5: command tx timeout [ 302.403742] Bluetooth: hci6: command tx timeout [ 302.467732] Bluetooth: hci4: command tx timeout [ 302.531866] Bluetooth: hci7: command tx timeout [ 303.876376] Bluetooth: hci0: command tx timeout [ 304.068283] Bluetooth: hci1: command tx timeout [ 304.131676] Bluetooth: hci2: command tx timeout [ 304.259609] Bluetooth: hci3: command tx timeout [ 304.387688] Bluetooth: hci5: command tx timeout [ 304.452002] Bluetooth: hci6: command tx timeout [ 304.516927] Bluetooth: hci4: command tx timeout [ 304.580343] Bluetooth: hci7: command tx timeout [ 305.923965] Bluetooth: hci0: command tx timeout [ 306.115594] Bluetooth: hci1: command tx timeout [ 306.179630] Bluetooth: hci2: command tx timeout [ 306.308216] Bluetooth: hci3: command tx timeout [ 306.435660] Bluetooth: hci5: command tx timeout [ 306.499931] Bluetooth: hci6: command tx timeout [ 306.564339] Bluetooth: hci4: command tx timeout [ 306.627778] Bluetooth: hci7: command tx timeout [ 307.971772] Bluetooth: hci0: command tx timeout [ 308.164995] Bluetooth: hci1: command tx timeout [ 308.227662] Bluetooth: hci2: command tx timeout [ 308.355696] Bluetooth: hci3: command tx timeout [ 308.483702] Bluetooth: hci5: command tx timeout [ 308.547762] Bluetooth: hci6: command tx timeout [ 308.611830] Bluetooth: hci4: command tx timeout [ 308.676006] Bluetooth: hci7: command tx timeout [ 362.145286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.149440] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.158871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.172733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.185399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.339099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.346739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.349455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.369186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.381142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.394996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.403057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.406312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.420145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.428627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.664323] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.692444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.699771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.755126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.764902] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.784919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.791904] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.794416] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.809446] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.822772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.825128] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.828123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.830711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.847101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.850466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.854748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.858308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.860352] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.867105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.872674] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.888444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.903615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.946203] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.951074] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.051766] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.228763] Bluetooth: hci0: command tx timeout [ 364.484868] Bluetooth: hci2: command tx timeout [ 364.485607] Bluetooth: hci1: command tx timeout [ 364.934598] Bluetooth: hci6: command tx timeout [ 364.935327] Bluetooth: hci3: command tx timeout [ 364.997584] Bluetooth: hci7: command tx timeout [ 365.060600] Bluetooth: hci4: command tx timeout [ 365.316623] Bluetooth: hci5: command tx timeout [ 366.275887] Bluetooth: hci0: command tx timeout [ 366.532842] Bluetooth: hci2: command tx timeout [ 366.533301] Bluetooth: hci1: command tx timeout [ 366.979740] Bluetooth: hci3: command tx timeout [ 366.980217] Bluetooth: hci6: command tx timeout [ 367.044101] Bluetooth: hci7: command tx timeout [ 367.108755] Bluetooth: hci4: command tx timeout [ 367.364629] Bluetooth: hci5: command tx timeout [ 368.323591] Bluetooth: hci0: command tx timeout [ 368.580769] Bluetooth: hci2: command tx timeout [ 368.581222] Bluetooth: hci1: command tx timeout [ 369.029858] Bluetooth: hci3: command tx timeout [ 369.030332] Bluetooth: hci6: command tx timeout [ 369.092974] Bluetooth: hci7: command tx timeout [ 369.158565] Bluetooth: hci4: command tx timeout [ 369.412784] Bluetooth: hci5: command tx timeout [ 370.373779] Bluetooth: hci0: command tx timeout [ 370.628613] Bluetooth: hci2: command tx timeout [ 370.628652] Bluetooth: hci1: command tx timeout [ 371.075644] Bluetooth: hci6: command tx timeout [ 371.076111] Bluetooth: hci3: command tx timeout [ 371.139794] Bluetooth: hci7: command tx timeout [ 371.203793] Bluetooth: hci4: command tx timeout [ 371.460301] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 22:55:20 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff110069f5fa7 RCX=ffffffff819d3ce2 RDX=ffff888016800000 RSI=0000000000000000 RDI=0000000000000005 RBP=00000000000001d1 RSP=ffff888034fafce0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=00000000000001d7 R13=0000000000000001 R14=0000000000000001 R15=00000000000001d0 RIP=ffffffff84b4ec40 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f276ebd1368 CR3=000000002c8e3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000202 RCX=ffffffff8151f413 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88803679ba80 RSP=ffff88802bd17b28 R8 =0000000000000001 R9 =ffffed10057a2f60 R10=0000000000000003 R11=0000000000000001 R12=ffffffff81b22d6b R13=ffffea0000bb0100 R14=ffff88802f7cd280 R15=ffff88802ec04dc0 RIP=ffffffff8151ac35 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557baa1da080 CR3=0000000009c32000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f0f2014647000007f0f20145f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000