Warning: Permanently added '[localhost]:14217' (ECDSA) to the list of known hosts. 2025/06/19 00:36:26 fuzzer started 2025/06/19 00:36:27 dialing manager at localhost:36157 syzkaller login: [ 94.009728] cgroup: Unknown subsys name 'net' [ 94.160019] cgroup: Unknown subsys name 'cpuset' [ 94.199523] cgroup: Unknown subsys name 'rlimit' 2025/06/19 00:36:51 syscalls: 2214 2025/06/19 00:36:51 code coverage: enabled 2025/06/19 00:36:51 comparison tracing: enabled 2025/06/19 00:36:51 extra coverage: enabled 2025/06/19 00:36:51 setuid sandbox: enabled 2025/06/19 00:36:51 namespace sandbox: enabled 2025/06/19 00:36:51 Android sandbox: enabled 2025/06/19 00:36:51 fault injection: enabled 2025/06/19 00:36:51 leak checking: enabled 2025/06/19 00:36:51 net packet injection: enabled 2025/06/19 00:36:51 net device setup: enabled 2025/06/19 00:36:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/19 00:36:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/19 00:36:51 USB emulation: enabled 2025/06/19 00:36:51 hci packet injection: enabled 2025/06/19 00:36:51 wifi device emulation: enabled 2025/06/19 00:36:51 802.15.4 emulation: enabled 2025/06/19 00:36:51 fetching corpus: 0, signal 0/0 (executing program) 2025/06/19 00:36:53 starting 8 fuzzer processes 00:36:53 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x100000001, 0x7ff, 0x6}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x2}, 0xe) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4d6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4001080) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", ""]}, 0x14}}, 0x20040000) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) bind(r0, &(0x7f0000000300)=@ll={0x11, 0x1c, r1, 0x1, 0x1, 0x6, @local}, 0x80) r2 = openat$incfs(r0, &(0x7f0000000380)='.pending_reads\x00', 0x88000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'gre0\x00', r1, 0x700, 0x40, 0xfffffff9, 0x1, {{0x18, 0x4, 0x0, 0x7, 0x60, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x4c, 0x7a, 0x1, 0x5, [{@loopback, 0x4}, {@rand_addr=0x64010101, 0x40}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x7ff}, {@initdev={0xac, 0x1e, 0x7, 0x0}}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@multicast1, 0x500000}, {@empty, 0x5}, {@empty, 0x8001}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r1, 0x4, 0x5, 0x7f, 0x4, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, 0x77f, 0x40, 0x9c}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', r1, 0x2b, 0xfc, 0x5c, 0x7, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x1, 0x20, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl0\x00', r1, 0x29, 0xf5, 0xd7, 0x101, 0x20, @mcast2, @empty, 0x8000, 0x80, 0x761a, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x120, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffffe00}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}]}, 0x120}, 0x1, 0x0, 0x0, 0x811}, 0x20000040) r7 = accept4(r2, &(0x7f00000008c0)=@ieee802154, &(0x7f0000000940)=0x80, 0x80000) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x884) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000ac0)=0x72, 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), &(0x7f0000000b80)={0x0, 0xfb, 0x82, 0x4, 0x0, "4af443b7b7d456652d12b35c815399f0", "b423d7ee08c62db67ff1dc556543727544fab0fd2558375575bfd030bf06da7c964fc3b1b4a0af2b5590fabe5d31e3de3271724b725d43811b8d3d03eba4b1d698edef7589461324447221d57f4085ff90ab2439ad3efa673c3550bd2c1f3674f33d4910949b62b3546ff87633"}, 0x82, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl1\x00', r5, 0x29, 0x8, 0x1f, 0x80000001, 0x10, @empty, @local, 0x1, 0x1, 0x9, 0xffffffff}}) fallocate(r0, 0x9, 0x400, 0x4) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18}, 0x20000000) 00:36:53 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x2ac, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_TESTDATA={0x1d, 0x45, "ce30cb9a73fd91176da8710c88c150a90a5e0919d810bbe381"}, @NL80211_ATTR_TESTDATA={0x5e, 0x45, "50b38a2408da05c1be1a1f270fdcd74044cc15f4f3fdceaff037371f334a6cd4948dc1c685ff1271eb9733b024e85259e71099c5a84c5dd07ae04260008d63ddcb52be66d9c06c5c31ba992198105719a1f36751a0c548b8b1b9"}, @NL80211_ATTR_TESTDATA={0xc, 0x45, "e070f6f75afd4124"}, @NL80211_ATTR_TESTDATA={0xa1, 0x45, "68aa07424dc83b0f7d2eb58f96905c87f5b16c10e973615ac0d04587559f714fccbeae81f83b305b115ac956bb41118f9adf448022ad36d45777f520520a9b653c0cde2650f9b5b2e4c772ea3eb9a2c42a5d44c34d4115ec84566392ed5ba8040a4b7ea12d86ad6d4ccdd2e030c46d472e6f15d7daa82fb5b55a9ea885b2e274fa6017e25151c8a2600231bf81cfc13bf8cd70d5da8c589008c4a9d2cc"}, @NL80211_ATTR_TESTDATA={0x1c, 0x45, "a3a3edd14e985b3c58db4ee16bf1bf40258d519f613b9b33"}, @NL80211_ATTR_TESTDATA={0xc6, 0x45, "c88ea24507c1b08c6011fddf7acd58ba489a297aceea5bcd52881e34a1fc7569446951793481699ce4d7f73075e62f21b1bc9640cd3cd53b7b8563b50fab19771ae45ee9c7aa19ca7ea05bd899777699ef4d926d2c7c4272d90ed55d720be5849dd665a48759e9bd848726d835a036f1fa8954695c6e3650880a62fcc178665bd9a4b93fe85c63132bb7666b9017631de2e07a41dd3a498b13cfbcc70f3e55ef217c5f915693ec252ebbbffa73fe14fb875e398295e85415fdaabb4f704981a46bb6"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "a71365342af50c32b202588d6258178f32a89b01526cc997951c5d6bd8a9c2deb0b357130c1afc72191a4bc3f9ae90441600aa2f3ec7767d99cb41b6baac618ffba1db97be6edf7abe41a4cdb96fec038ea96453f83393a6fa16b0d4be97210ebccfbaf8f47681"}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4}, 0x4004080) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x22a0000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x28, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r3}, @dead_binder_done, @enter_looper], 0x3e, 0x0, &(0x7f0000000440)="20487045f75093edf0a50a21b7ef02427ac70890036f3b4a9bb19ae59d87015fdb41982e7f0e24252d437dedb87840a3654c239634065c3165d2f2b053bc"}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x30}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c0}, 0x4004020) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000005c0)={0x2, 0x2, 0x9}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/key-users\x00', 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4044000) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000001900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000000780)={0x1114, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "43918d46ffa3b4c65cff72b3e3e84182b941512876c85bbd04a22bc19da19d671e67c54dcdfa2a86946dce625ff44a2a49310adb5950cbda0d4cf1a5276edb4aa740ebcc3266c3705b6b7ad67c1c7fbc91a97b65079c7bdd3ca989bfcbe5386c5e16e5e4d436e9ee90e3b4f542e984334ed5bd661863d0975d6ba7f71d21410c2a972c639d51d19951f479985461eaf2a661616a8917aceeacee5282a1c461485c73cd9aae88bef8793c1ccc27a561f8e95523e25167ffa16562dd0d5b3c87f7005aa20f01eda224ac2117ebd9d51340a91406b0e9ec10cd27dfb46189ec6588e432e9e0e38b1113c5f9bfa328173d6531fc6835f683de486e420ea9d498d24c4ad84a5fd8c7cc6ac2728d5535f1235d1764d9fe8cf6f347b34ca47cd59ad843c4330959b87a379707a053c5a73a289ec7faa85d7c4c094fabc2b04b4f176c8bcdaf7e2d718d57280c721ee3567a2b46ffb89f578ffe396e78b2e02dc676cb5d11f7a6dd65ebfd64c915eac749074c39c61acc7cf178eadc7a15075eb45964f9761af0b843d1f4bdf6adfe29ad390dc1fc84cb7f2b864e0391928741021348d71e9a1f7d41fc9dc270b6d649aed3b8cb3297e05c7137e377b7624b534e0266d45c38de540a4cc418db93e769320afc4779a118432d432b8a8249025fbc81b87af38359065c2d69c1583302dff790921ea91e5175fe006c8ec2b3a5a6c27c33d919274b428b339548f2e7f7511a1bc46e5737cb7c32427bf90b2d3ddb3d199b424387fa089ef39f0071e10b875d32cc4da9bcbd7c7cbf988b313b02ae78565551fbff6f616c44bb64063e1c700baea8f3a1ce87d6368c5f34eae3604ac0c4536fd88cff9efa44c4956deb66c41608f8859f62201ca5c0a90107f4d68768e66f6aa08c6899761cff7e4949786653ff83ae2a80f54a090fac0109e75326988883b401e850fde6eef7a96e0c69035d81cfda8199ff271abdd9da6bfa75a12fe63f16e2177bb4935a25745a6b588e3dd335b5a91a9ff6b8dbe42183828a058a741626dea605b595ffdc7d7efce157c1a7745edc55eee31d091c15afabb6a3a358d8ee9176b9fffdbdf8e5cade7fcc4c24741d2e3d099daa8ad4faabd0f5538da212c4c9f947cd69d566271a231917b1505a44574937e3f4afc0c7df25439573c2bbb17f929da1088dd35e84f1df2bc6b6bc874e643566e44b8c29a714e8f108defbf2ccec2d609d03f722a77838953be4226ad3b18a8b95ee8c77e212683c5eee4cbdb9a8bcd896dd57b1a25ab97ec19185366548e9e5e57f6bab40f994c77dbf8a515ea8ae67d76037b87428cba9a0c4cf826da13fe0fc1f5c705c4f39307929dfe1d2277664131722a3ef55c1bfa97c1f0631ae936d2d7e36a08a61ca0de8a1ccabcf99d2e2c8ac99dacf82ac373e973613aaaa25303ce3026e0f053de46a0a7f92f8fcd330dfbbcb8ccc86f564775c240a8671d32a36e134b0481632cecfb2f8d1560d9114ea6ea2b08d9339285d89e98c65e13d7411955fe9711d82d59869cb4dc8b15094115d7019fbe2053a2506e065d0d0089ca2751b95112a98a2a7fa8fd6af9aa7c0997a937f119e66030ccd4d522a986860a218fd024fe45475afd72665f1ceb9287e35eefd59ee99c56e2b3bf57a772538982f6889eca40932d417e38136d4aa5629a0e471e95d69a07626b32c1fe57ee5f43795219bd4728c6ef433a70f6c3f3a24c0b5c95bc2134f3872ae7f43f2441c25bc192997c6dc2aa618e7c0929a470a892dfd80e902c81d0c6b50f72cc5e3dcf174aea2c222a845c0c24c37fbfba80b1f338d717a78099a663ae4002cf823ededb99536864227244bb7720622022667855c568e1ba0a56fa20468a2ebf5034aefce9026321898c39c74b0c8336b97d374ed12dde55374447c0cc7a7a3b6946e9e2d7320c4b186a993fef572dc89d005599a5be67491f6e4c61c17be13b937514a6e743f4f06f1f4a51f91164c7165d135093f182568fb05c6091b7daf29b2aed73ffdce239c830d872addba8818182ec56b8dec7acbd0cfe9919f32e66b3a8fa1b5ca8b86d24f727f71197f184c461be8eb5a3d9ad469ae70905e065999f8d528b03898dcc3fe723e8430682800cbdbfa7d6dbb8451449ebc2b4e4c097c7f2d89f5d83e797eca46dd97bdae9fda2dbb3d282d22cb8ecc49098f44bad93bdca42b7ca3e9c1b4a883c4451bb727a35d3604105c858c4801d0a06bbda4b5b57054e5bcfde0f0e6ad8d116eb0383cbed8ccf788a85fa8df4fd75bd2875b73589cd4b7775b21e32237df4efb9fc0a376e6742969b940a6ba16fe05b7097ce3b0b306e68d4aa3fca65fc697bfed6dcba5cd21c0ed1e02d2882e4f7e8facf7f88ae6766794f3b135a83e946e9156e32e00bec30b4859f8b028d7a9136890ad8b90b4baa3e1019f16126e77c979684fcc8d2bd4093534db2aecd55c40ccc4431780ade834e6eea922ee49198597f650d412c2770a17ae918775886d9d7979aadf4d38630a62065a608d8319b59fad8420b3d2a8ce6e66c29ce31f406c90c3dc941ebf21f3d24ac9f63e1b3b3d3c37532719750165e146ffacd504e0f672c55fa96cbf82f31e39f34c6872a7e9872b503efdc0fa81e23ce6e2b803baf96265dcfd209ac940a52b6b8151241099a70a83571b64bb0744e9d69aedbd9d1933fbcbb8c663d42dbfa04082cdde62b578be2b7e091739633c1b6643a11601caff61d863cff0bdef5013501b6a4ccbc32e58df63905d5a647972d804aaecbaa13638fa9ac26e5cf17f681eaa37d16ba708da6c365b950d55fec775300df63493e1387b0803df76427e7484e21ce07b7bd2e210b57d52e2f273fe14121df30f22a114a67a87c09ab707e5d12e0a8210987b3402c2f87cfdcf984f8126305d6dab55d193f05a42745e98faed94eb569eb2850fdb29da3aa80d4d10e59d60ec8ccc9c4290ed1fee9eb29d7a22c2ab47426526daed5f7447b9ff61d9be4491072ed338d334ccbd2a49ef5921b665acfee051b61005b62adbd7f26ec7f6fa4e9b2ea0dd61e3be33bf8f37ab2eaa8a437181e334ea236e15fd68e48a452c88839e7fcd731d74e1ef5efdf5601d0c4cf02e28707a379e963b9be74598afbc306a41a79d4b8acc38ff6414d2c09b56fb3b893bb640f6db70813798c6aabf0ed8c135d723b084bd1cea627c9ba0a1c31c90d38ef3814f0321d6259f646080460d116c5e0b28cadb9b9cf3b977e52534bc51b262a1798543a6394acce2100095f906b496782828c09277b31fdfd037669394a727e613a49e211b2f4ba9927425d96a47966a76c9275cd6c36e8efbf732d3e7797223c2ed17a3af97f9b5602f01974b19e5bcdfd0ba3a98d8521c05bb394bc8abbcce80bdf4e89f66f9b8551cbd9a84ed6b711592a424754ccfaa3d37be341589d86ad73189fc343424707daadb7f8e2467f4a894948f2e98f1871e7d9295fb2b8807f9c35b71a1e9dfe0314700c450aa288ad65635be3105dc8c7004310e557bdb4fa7cee2e79cba6c58bb963643b9d9a36eb10cafa2d455645867eb41dcb623ea50e1dc03c73423c5b9b607e56532929e8d5559b2d3119314ef77b19bb159dc2f8d64072d6bf8f75732eabd29dfa90c5398d9731f0614963b4c4a2eabcccb715b9e52955e1b2884081ea64667748ac83b091e8faca2009271c91d175641bae5c3694d877fa4aeb8b5e28d0f0a50c7f79b133868689e64494e009a315e0c1a5bb160f0e193b2b796a7eb6c86e26aa9355711a014ad4f2b13c492b242b1a9f0229ff180f0bb7f5e1e591cba22d41e21a15575ad681ea8ead2e6c2eba06d86c7d1898dcf95f309d7e8975260dcc2239d2afec0db2d90199cebd83901e7acadc330fcde9adb0d609a08f74a5367fe7fa9831bb8b18a8c15a72bf21887662179b43bbcd759d57bc5a03c3aee9d9473c57a36f15e6d56bdf225311826d7c353d5945a0218c5f3f0ee6ff9d8ad9f34e206f301797b18303f2ccf0cc918ce40b96468e5c2948fb5e4a03dad5ce60b58066c01a3940c230fb2497ea51fa9c06a62f74718bcbc5822b182c79ff6d24a642468ae19f0eb3328221c9767309a07c1cc5b02299815997b0fa1e9312c5e01302b64c0b0d3da88b0740a65d7757722d21a7611d11c6ab53e35c87e77bd5706d71c1bf0878d15baa74c9242cdac5513edf5bc9894c41763c50bcd3fe38847f1ec38b89fac8d685e89d08be12a059d0d9a288bcf59f87f7dcf16307f95a32e55be82319a2ea111703fff82ad69b33582129c130882eef2ea3a86c14acc9c70c262e6b09d1c2f656ced65a95d91c3596c2f2a6ef1023eea22c9c75fdb05114a6dd787a380bce4d86ffbb121f34b8549b1d1423782ce502049fa17dbe73b6585ae0484723e0b5474a13e58b8f6a105c4d24d34bd90ecf376e827d7e66c445fd6b0a5d0958ae6a612160bf5c315dc8f6e83e6167d44dea755f360931a13ef9a1a5830a0766756c17188b8822337257d768cacfdf6d61b4f256fe7cc9d8f6ef51bbe8a46a53f4dda3bfa62e0355bf041db6e5d19d700b4f0da9d3a4bfb4bf7b039651d3dbdb334a7fd80cb646f178ee4237850f85214510d7d4af13b872288157124ef04d2c1266b99942a1f41434327567107677254392022022cbe5ea006856e575730bdb55ef79b5b08e37193318e881030e8ad8127a9fffb60f63c92f5e424352f53c799f0c31918b3e2644ab43e12321a844bd47d9a7fb47c5c4c2aeb96d9b0b050ecba9d8702abd610bf07d954edebd07d39adfbe3ad491c04f8f53190a2584513aff4814b60cca61afc17856a3699047b64ef8cff6c0506fa64bcee892ea265ed097fbe59bf85328c6327dd07695a1195095b29eb50266c59bfd1940c88cf9319ff996b27733521304b43ae17b58620828ebefc0a325dace5a8d551c28b3f92c5c7f0f1a02403bf56e3627b92b7fa317940e64b494078906c4ea043ece654a4b4b802e72b952ebefca15f970038433f6616a3de9121d8c9f39db8019a2e2e8d2258fae14fdbca4fbe012c4d5c995b4d13c95179755a6166d623551c78807448e9885a0f8f0788cbecd8679793f1bf5ebb2221917040e92ee362f9eee294d1b44b1e7a768e0bbeb4ff09b5dd2018eb4cc3596ea990713c32975a8ba449164fd1801b55dd604f9baec6628ab88afdd283b404b2326c6d299405f60229d0d80e21a7fc21d4656e68b727eeb042373bffe59d6fd8d0dfa3ba9d0e739f8d62b66ddf84d315af9e8c8f7f255061d658ded60350aaec8de1109a0d089d8fa285c85b56b50c74640e203e536ffb8464bf457256100aa59746938496da6ad3fd96eae89ba7e097a8bdd2f9fab4a4741dba7993519a8bd4510d9b7dfb5b8b0f54b2bec28ae4a5647e198b83b9ff4e8df9dc098b4765220debbcec15164a0af9dc86c1b6990ac6fdf976f625c5d6edb13a3ff1d06d9afdd9678ddaf9c4530e607c08b8e1c4307c498d2b046a087027a52145539b3927a0589a9991387d13a0103a4c786f1c0a79b76544eb7a20a32b8c1a2c5947387f0242fedc5caf92eb59586eddbf2c264a4df5754c84200cf850aa403b03f3926d7c79bc531aebc40351d9471be8eb50d2570d60d28b79ca5c164df37a4e86eb1831cff85ce8a993781a81f179b124e9b3452c37edaeb6b50a2023fad91fccd6bba59974d1142638b82ce90e9362ab606090c9ff57ccc511f90147da66f0fc7ea4030a82f8e33f53ba853880a6890dad5034f6fcc543bdae469f3a270a39df4518a2a26eb177386961"}, @NL80211_ATTR_VENDOR_DATA={0xa0, 0xc5, "510f5514ad0fbfac6cf9ad858b9481f22fdaf111473aef86921477319e20949585259de505fdbb98f565b2a561b54cf747dbd45adaae03ce5da62928404f73e1bd922181a87563e0f77e3fee6dd4a8c582e55cf22dc0a6525043f848049aa1a230c1d911d20565279b6a52f0eb609d1ee7496cdf65b535b3036ef23e8cd50db83eb1e7f208c812ceebceb92ffa5f0635afaa40009ed10fbd1125e7ba"}, @NL80211_ATTR_VENDOR_DATA={0xb, 0xc5, "6d0f2f48f89670"}, @NL80211_ATTR_VENDOR_DATA={0x4f, 0xc5, "34d9ee657799a41742bbab0c49f4d3e74174d2dc79fee339cc4e26696e2149934848cf3860a9a21269d485998eaa91d4cf8051b9b2a80f876364a31b5b915f7c8d5e573cc1d70c6050c54b"}]}, 0x1114}}, 0x20000000) r5 = pidfd_getfd(r0, r0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001940)={@rand_addr, 0x0}, &(0x7f0000001980)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000001a40)={'syztnl1\x00', &(0x7f00000019c0)={'ip6_vti0\x00', r6, 0x29, 0x6, 0x3, 0x7fff, 0x64, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8000, 0x8000, 0xe779, 0x9}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000001a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000001ac0)={0x1, 0x3, 0x9, 0x1, 0xa302}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r0, {0x83}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r7) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x8001a2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x54, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x40}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xfffffff7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xf80}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xfffff801}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x40000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) 00:36:53 executing program 2: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x4, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xaf}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x74}, 0x1, 0x0, 0x0, 0x891}, 0x8001) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xca0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000240), &(0x7f0000000280)={[0x3]}, 0x8) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x464, 0x2, 0x70bd26, 0x25dfdbfe, "425d21f96598d2070d8ea99895bdd46a0936f77cf8c9ecd3d0cfbfce2554281fb9e4e41c7f2e5953782a44f7c876775a2201638dbdd80916c1aa02b9e92e52cb1b91c769e388ade8", [""]}, 0x58}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000480)={'vlan0\x00'}) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42044}, 0x40000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3e}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb8, 0x17, 0xa, 0x1bc58a18567ee2f0, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfcd}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000009c0)={0x0, 0x0}) r3 = geteuid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40)={r2, r3, 0xffffffffffffffff}, 0xc) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000a80)={'\x00', 0x0, 0x0, 0x9}) pipe2(&(0x7f0000000b00)={0xffffffffffffffff}, 0x80400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x20c, r5, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xffff0001, 0x6a}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c903b024972e7d8b580aa5c35efc6a22647be9b2014169e3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8fead45c8537291f561a949e6fa65e9f3e51206f806c8e08"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3c8e8c0b2a1b2d7f25c1f458adbcf167ca80ffe4f2a9aa03"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4b24bdf50119e44b4ed04f344f188771152c505d96769ea8"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ac123a96faab641f5d36c51000123786a2c1835ad255d247"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2531df2cdacf7f86c037e9244ce37c5c298faabfc1582379"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b0df6e09168887b530a0d3faea5c3839ac08784ab296ac55"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "498a50a7ab4d009c87e0dde1e65de29da068ea8ddc7ffa7a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f823791e1188a11ba750639ce9a938709c28f9e93ebbb014"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000020}, 0x40888) 00:36:53 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x312, 0x12) r0 = syz_open_dev$rtc(&(0x7f0000000040), 0xffff, 0x40800) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x6, 0x98, 0x1, 0x3, 0x9}) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x10, 0xfc8, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1b10}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2980}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48844}, 0x4000800) ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x63}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48}, 0x8001) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000480)) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@dev, @local, 0x0}, &(0x7f0000000580)=0xc) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x26}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000004) lsetxattr$security_selinux(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x2) r6 = syz_open_dev$mouse(&(0x7f0000000780), 0xabf5, 0x600400) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f00000007c0), &(0x7f0000000800)=0xc) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000840)="b188d206e8e8036132ce1f24fcbd019c1c2e113d0788a6d69ae997c176659b8e7c493b27952a2d598e2b389e19b81f2ac233ca9cbacfaa8c12a406e066003c33a5734cceda7cd20fb2aa434e1a33a36770e36374243b0ba175a0ff2e18261227bf94a713bb10d01088cb0e97", 0x6c}], 0x1) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$CDROM_SET_OPTIONS(r6, 0x5320, 0x11) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000900)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) [ 120.192135] audit: type=1400 audit(1750293413.747:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:36:53 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x80581, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x9}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000140)) r2 = memfd_secret(0x80000) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000180)) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)=0x1) r3 = accept4$packet(r2, 0x0, &(0x7f0000000200), 0x800) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000240)) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000280)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x2bf5f5532557591e, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000300)={{0x3, 0x3, 0xdb6f, 0x1, 0x9}, 0x10001, 0x1}) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000006c0)={{}, {0x80}, 0x1a0, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)="de1aeb93425edafdcec28c1e8427c720a3b70f3b31d30597f01463cad5b9249f46e33dfe75fad0d265d2fde2b8e362e9d949ae369fe64f93f4806ac9d3db79b8f35e1cc8cad1d5d9ae5b57f03185296c39185399b45785c6cfbe437dad03d10bb6dfbb1c5ed19daf12f204c8d281af26f1bb", 0x72, 0x0, &(0x7f0000000480)={0x2, 0x169, {0x1, 0xc, 0xcf, "a9d351e3b524dbb18ef98e86d0c7b66dfc96af1bf6c06734e61466c4a1214ebccce76fa2c9cc3a5f7ea2560ac3b2cbae55876a90968276115f18b18d778ca767e24eb3aa2ff8abdd933ab335cf375a1fb63009f76a0feef48d6212f38abd5200f4c6f17f285e9c8c649c520b3cfbe95c7337f85b732ca43f74bfe1482da8fbb31ef4496a3e6790fd7af7dea435aec3366f5fa633060853d764950d576e04f369a3a60f2fb0e71beeb2dec8d8b33c15f70df1b71fcfe084f39d42a5005ca5eee9afbfe1a0f49c2abba4f4060f9d6bb0", 0x8d, "966e27b506dc045c3f73e2a364eb3ba7e863b4ec065641498bc20a0ee15e00efead9b347ce68a61755e3aa0372c808292af186939b7fce63e75136b4b2fd11d96f6d5e932978521ee9a2b42f7eef61a9eaf82370d1cd63f129855bca7ff2b752db36bced3d72fd75e99ad83897aafc2ec7bb2f31bda22697c0d4ea41aeea9e2db347ba22374afbc1e9de433368"}, 0xbe, "adb2a1511ceac1015a1b2094eb3619c7b05dbcc7b6701af0857c78245cc6028ade6b651270577a2219c30c0ea033153eac71f562a5a807ebb455911a5ab8341b3e8d599af29b091c45b76e5a9903974aaf397a820e314bf520a3b1b335ed796f7f33d6be100297235d77c1f0bb2fca0cb89001f60193231ae04f100824d2daebc2e921773e67e4f7f0ef82d2bda133aec7c66c8b7b0caa0d5084bd9510a5d27263b9bf92d8e7154ce416cbdd7bd5d79b050be3d4e97c75c97d9986388548"}, 0x233}) r5 = accept4$inet6(r2, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000780)=0x1c, 0x800) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000007c0)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000880)={0x3, 0x2, 0x48, &(0x7f0000000800)=""/72}) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xc0240204}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x80, 0x3, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000001}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x18000) 00:36:53 executing program 5: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'batadv0\x00', {0x2, 0x0, @remote}}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200)=r2, 0x12) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x30230000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x47}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x101}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r6 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x100000000, 0x436100) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000540)={0x3, 0x80000000, 0x28, &(0x7f0000000500)=""/40}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r7, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}}, 0x40080) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfa0}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44080) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r5, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffa, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x4008000) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ba4, 0x18}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c051}, 0x44055) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) 00:36:53 executing program 6: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xb0001, 0x184, 0x12}, 0x18) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000080)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400300}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000841}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x7c, 0x0, &(0x7f0000000380)=[@enter_looper, @exit_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/103, 0x67, 0x0, 0xc}, @flat=@handle={0x73682a85, 0x10a}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}, 0x40}, @exit_looper, @request_death={0x400c630e, 0x3}, @acquire_done={0x40106309, 0x2}], 0xf7, 0x0, &(0x7f0000000400)="a10ac53cb036b542203300ca60fd49578f017030bbacdc3452f67896c2f04a6ee24a0582898e9b3a66f9c5be881e9201437bff33927b1b75876d7fd2e069c97852b4d66373b9b177950e6ffbea06d6c58db4a1b990ff109e22b3cfc158460287407a3491b6e6ddd1c12cc65c8dc41af375aaf5749a9cd6cd09e22a54b7bda63e2e9a471ef34488e297c07056a1892d8feb2dbd6e4091a079d7b62bb40e158000ffc37cafbe55b805f7d9d23a265aac86359fdaaaf256baf8fbd3bc78ee2e41390cee861ac24f0a6bab1a1b47554a6fddc642077ea608e959b95f810d5697434d7597a0043bc02b7ab04f5a776751230e92889a4decc726"}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x6341015a01180f87) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x200, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, 0x453, 0x200, 0x70bd25, 0x25dfdbfe, "afa071fd4b77a73945fc23bb22f9c03bfc3980e2712c62b2808cfb484750b18a407ee56dbf4fa06f6b45b3e12707ae8d38aa07f9683de48df44dbbf8c2", [""]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000007c0)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000800)=r3) r4 = open(&(0x7f0000000840)='./file0\x00', 0x8000, 0x104) r5 = syz_open_dev$hiddev(&(0x7f0000000880), 0x2, 0x4400) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000009c0)={0x40, 0x3b6, 0x2, 0x1, 0x1, [{0x6, 0x0, 0x60d, '\x00', 0x1000}]}) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000a40)='system_u:object_r:framebuf_device_t:s0\x00', 0x27) r6 = signalfd(r4, &(0x7f0000000a80)={[0x7ff]}, 0x8) r7 = dup2(r4, r6) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 00:36:53 executing program 7: readahead(0xffffffffffffffff, 0x6, 0x100000001) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ieee802154, &(0x7f0000000080)=0x80) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x9, 0x4) fcntl$addseals(r0, 0x409, 0x1) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = syz_open_pts(0xffffffffffffffff, 0x2) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000200)={0x2, 0xd8, 0x3}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000240)='.pending_reads\x00', 0x200, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r1, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x2f, 0x3, 0x1, 0x6, 0x70, @private1, @remote, 0x40, 0x8, 0x5, 0x18a}}) ioctl$KDENABIO(r2, 0x4b36) tee(r1, r1, 0x8, 0x7) setsockopt$inet_int(r2, 0x0, 0xaeaac33c042168c0, &(0x7f0000000400)=0x54, 0x4) r4 = openat$cgroup_ro(r2, &(0x7f0000000440)='blkio.bfq.sectors\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000480)) [ 121.852020] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.864323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.879744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.884871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.887349] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.889903] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.893106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.894481] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.896274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.898615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.907515] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.912491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.921888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.928188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.937678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.948266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.949595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.960010] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.980358] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.986525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.990332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 121.993330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.010635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.016651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.030561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.032161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.035657] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.056462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.058060] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.065586] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.073004] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.074408] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.075462] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.081621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.108648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.113729] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.135418] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.146245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.151583] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.169459] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 124.049621] Bluetooth: hci0: command tx timeout [ 124.050881] Bluetooth: hci1: command tx timeout [ 124.113101] Bluetooth: hci4: command tx timeout [ 124.177170] Bluetooth: hci3: command tx timeout [ 124.178213] Bluetooth: hci2: command tx timeout [ 124.179194] Bluetooth: hci5: command tx timeout [ 124.243151] Bluetooth: hci7: command tx timeout [ 124.244147] Bluetooth: hci6: command tx timeout [ 126.097234] Bluetooth: hci0: command tx timeout [ 126.098217] Bluetooth: hci1: command tx timeout [ 126.161262] Bluetooth: hci4: command tx timeout [ 126.225325] Bluetooth: hci2: command tx timeout [ 126.226244] Bluetooth: hci5: command tx timeout [ 126.227132] Bluetooth: hci3: command tx timeout [ 126.289271] Bluetooth: hci6: command tx timeout [ 126.290234] Bluetooth: hci7: command tx timeout [ 128.145131] Bluetooth: hci1: command tx timeout [ 128.145608] Bluetooth: hci0: command tx timeout [ 128.209032] Bluetooth: hci4: command tx timeout [ 128.273226] Bluetooth: hci2: command tx timeout [ 128.273658] Bluetooth: hci5: command tx timeout [ 128.274320] Bluetooth: hci3: command tx timeout [ 128.337057] Bluetooth: hci7: command tx timeout [ 128.337507] Bluetooth: hci6: command tx timeout [ 130.193149] Bluetooth: hci0: command tx timeout [ 130.193629] Bluetooth: hci1: command tx timeout [ 130.257245] Bluetooth: hci4: command tx timeout [ 130.321067] Bluetooth: hci3: command tx timeout [ 130.321496] Bluetooth: hci5: command tx timeout [ 130.321902] Bluetooth: hci2: command tx timeout [ 130.385268] Bluetooth: hci6: command tx timeout [ 130.385697] Bluetooth: hci7: command tx timeout [ 184.499496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.506769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.509327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.523080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.525132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.530741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.546462] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.550235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.559620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.564859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.605047] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.612217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.614154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.617244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.624482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.636380] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.639361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.649134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.658947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.678458] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.685320] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.697934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.703735] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.711302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.716576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.730263] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 184.747794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.751613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.754321] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 184.756342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.767561] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 184.775491] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 184.784617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.793886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 184.796466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 184.802239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.865190] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 184.870472] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 184.872268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.885244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.577058] Bluetooth: hci0: command tx timeout [ 186.642151] Bluetooth: hci1: command tx timeout [ 186.770110] Bluetooth: hci3: command tx timeout [ 186.770759] Bluetooth: hci2: command tx timeout [ 186.899390] Bluetooth: hci4: command tx timeout [ 186.900076] Bluetooth: hci5: command tx timeout [ 186.961411] Bluetooth: hci7: command tx timeout [ 187.025238] Bluetooth: hci6: command tx timeout [ 188.625103] Bluetooth: hci0: command tx timeout [ 188.689053] Bluetooth: hci1: command tx timeout [ 188.817057] Bluetooth: hci2: command tx timeout [ 188.817486] Bluetooth: hci3: command tx timeout [ 188.945073] Bluetooth: hci5: command tx timeout [ 188.945507] Bluetooth: hci4: command tx timeout [ 189.009636] Bluetooth: hci7: command tx timeout [ 189.073203] Bluetooth: hci6: command tx timeout [ 190.673017] Bluetooth: hci0: command tx timeout [ 190.737020] Bluetooth: hci1: command tx timeout [ 190.865144] Bluetooth: hci2: command tx timeout [ 190.865570] Bluetooth: hci3: command tx timeout [ 190.993070] Bluetooth: hci5: command tx timeout [ 190.993504] Bluetooth: hci4: command tx timeout [ 191.057779] Bluetooth: hci7: command tx timeout [ 191.121282] Bluetooth: hci6: command tx timeout [ 192.721443] Bluetooth: hci0: command tx timeout [ 192.785053] Bluetooth: hci1: command tx timeout [ 192.913054] Bluetooth: hci2: command tx timeout [ 192.913508] Bluetooth: hci3: command tx timeout [ 193.041069] Bluetooth: hci4: command tx timeout [ 193.041515] Bluetooth: hci5: command tx timeout [ 193.105178] Bluetooth: hci7: command tx timeout [ 193.169444] Bluetooth: hci6: command tx timeout [ 246.252197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.259574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.266552] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.277734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.281913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.562300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.569028] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.573072] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.586657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.593456] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.621659] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.624482] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.627533] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.633794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.637553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.769637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.772693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.775645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.781013] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.784446] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.894929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.919521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.945554] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 246.951128] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.953703] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.963942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.969589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 246.980571] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 247.004459] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 247.025616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.025807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.034110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.041241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 247.044940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.046407] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 247.049103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.106357] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 247.114209] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 247.126870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 247.156521] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 248.337078] Bluetooth: hci0: command tx timeout [ 248.658297] Bluetooth: hci2: command tx timeout [ 248.721323] Bluetooth: hci1: command tx timeout [ 248.849127] Bluetooth: hci3: command tx timeout [ 249.106464] Bluetooth: hci5: command tx timeout [ 249.169269] Bluetooth: hci6: command tx timeout [ 249.233130] Bluetooth: hci4: command tx timeout [ 249.297347] Bluetooth: hci7: command tx timeout [ 250.385174] Bluetooth: hci0: command tx timeout [ 250.706249] Bluetooth: hci2: command tx timeout [ 250.769337] Bluetooth: hci1: command tx timeout [ 250.898090] Bluetooth: hci3: command tx timeout [ 251.153055] Bluetooth: hci5: command tx timeout [ 251.217313] Bluetooth: hci6: command tx timeout [ 251.281090] Bluetooth: hci4: command tx timeout [ 251.345040] Bluetooth: hci7: command tx timeout [ 252.434996] Bluetooth: hci0: command tx timeout [ 252.754307] Bluetooth: hci2: command tx timeout [ 252.817248] Bluetooth: hci1: command tx timeout [ 252.946302] Bluetooth: hci3: command tx timeout [ 253.201035] Bluetooth: hci5: command tx timeout [ 253.265407] Bluetooth: hci6: command tx timeout [ 253.329341] Bluetooth: hci4: command tx timeout [ 253.393303] Bluetooth: hci7: command tx timeout [ 254.481294] Bluetooth: hci0: command tx timeout [ 254.801037] Bluetooth: hci2: command tx timeout [ 254.865998] Bluetooth: hci1: command tx timeout [ 254.993247] Bluetooth: hci3: command tx timeout [ 255.249364] Bluetooth: hci5: command tx timeout [ 255.314562] Bluetooth: hci6: command tx timeout [ 255.379504] Bluetooth: hci4: command tx timeout [ 255.441296] Bluetooth: hci7: command tx timeout [ 308.644864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.647656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.654853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.668419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.675801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.022595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.026846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.031485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.038903] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.043454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.123900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.134570] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.139488] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.163913] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.186301] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.186831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.195378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.195421] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.199616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.209303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.223145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.225000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.228796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.231732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.239923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.241690] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.256214] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.266158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.278398] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.295196] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.443351] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.459620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.486233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.542468] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.553689] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.605260] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 309.642752] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.645226] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.650669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.656442] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.739038] Bluetooth: hci0: command tx timeout [ 311.121315] Bluetooth: hci1: command tx timeout [ 311.314074] Bluetooth: hci4: command tx timeout [ 311.377214] Bluetooth: hci5: command tx timeout [ 311.377254] Bluetooth: hci3: command tx timeout [ 311.378055] Bluetooth: hci2: command tx timeout [ 311.633320] Bluetooth: hci6: command tx timeout [ 311.827003] Bluetooth: hci7: command tx timeout [ 312.786390] Bluetooth: hci0: command tx timeout [ 313.170054] Bluetooth: hci1: command tx timeout [ 313.363326] Bluetooth: hci4: command tx timeout [ 313.425610] Bluetooth: hci3: command tx timeout [ 313.425663] Bluetooth: hci5: command tx timeout [ 313.426222] Bluetooth: hci2: command tx timeout [ 313.683983] Bluetooth: hci6: command tx timeout [ 313.874028] Bluetooth: hci7: command tx timeout [ 314.834998] Bluetooth: hci0: command tx timeout [ 315.218122] Bluetooth: hci1: command tx timeout [ 315.410040] Bluetooth: hci4: command tx timeout [ 315.474083] Bluetooth: hci2: command tx timeout [ 315.474340] Bluetooth: hci5: command tx timeout [ 315.474559] Bluetooth: hci3: command tx timeout [ 315.731271] Bluetooth: hci6: command tx timeout [ 315.922237] Bluetooth: hci7: command tx timeout [ 316.882298] Bluetooth: hci0: command tx timeout [ 317.265231] Bluetooth: hci1: command tx timeout [ 317.457180] Bluetooth: hci4: command tx timeout [ 317.521049] Bluetooth: hci5: command tx timeout [ 317.521088] Bluetooth: hci2: command tx timeout [ 317.523007] Bluetooth: hci3: command tx timeout [ 317.779037] Bluetooth: hci6: command tx timeout [ 317.972121] Bluetooth: hci7: command tx timeout [ 371.110546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.113512] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.120626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.134566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.145587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.246653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.263083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.267831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.276195] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.289602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.304118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.320472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.342252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.371653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.386859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.447171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.468564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.493728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.515703] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.524922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.526605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.547434] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.557821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.572659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.592367] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.607625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.640776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.655930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.670671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.677754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.778166] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.797128] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.810079] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.818677] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 371.833889] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.837390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.852431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.872719] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.889868] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.906494] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.201418] Bluetooth: hci0: command tx timeout [ 373.393219] Bluetooth: hci1: command tx timeout [ 373.458032] Bluetooth: hci2: command tx timeout [ 373.649281] Bluetooth: hci3: command tx timeout [ 373.778288] Bluetooth: hci5: command tx timeout [ 373.841076] Bluetooth: hci4: command tx timeout [ 373.969224] Bluetooth: hci6: command tx timeout [ 374.033296] Bluetooth: hci7: command tx timeout [ 375.250359] Bluetooth: hci0: command tx timeout [ 375.441331] Bluetooth: hci1: command tx timeout [ 375.505037] Bluetooth: hci2: command tx timeout [ 375.699282] Bluetooth: hci3: command tx timeout [ 375.828238] Bluetooth: hci5: command tx timeout [ 375.889197] Bluetooth: hci4: command tx timeout [ 376.017218] Bluetooth: hci6: command tx timeout [ 376.081052] Bluetooth: hci7: command tx timeout [ 377.299364] Bluetooth: hci0: command tx timeout [ 377.490981] Bluetooth: hci1: command tx timeout [ 377.554279] Bluetooth: hci2: command tx timeout [ 377.746080] Bluetooth: hci3: command tx timeout [ 377.874422] Bluetooth: hci5: command tx timeout [ 377.938023] Bluetooth: hci4: command tx timeout [ 378.066070] Bluetooth: hci6: command tx timeout [ 378.130409] Bluetooth: hci7: command tx timeout [ 379.346263] Bluetooth: hci0: command tx timeout [ 379.537055] Bluetooth: hci1: command tx timeout [ 379.601031] Bluetooth: hci2: command tx timeout [ 379.793052] Bluetooth: hci3: command tx timeout [ 379.921211] Bluetooth: hci5: command tx timeout [ 379.986037] Bluetooth: hci4: command tx timeout [ 380.113387] Bluetooth: hci6: command tx timeout [ 380.178993] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:41:55 Registers: info registers vcpu 0 RAX=00000000ffffffff RBX=0000000000000000 RCX=bde53094b5b1327e RDX=00000000db688f6a RSI=000000000b6dc639 RDI=00000000d61cd15b RBP=ffffffff85c1cc40 RSP=ffff88806ce08968 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff8151b063 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8b25ed3540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8b260be620 CR3=000000001cc37000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff86c1dc6c RDX=1ffff11006fc7e46 RSI=1ffff11006fc7e48 RDI=1ffff11006fc7e48 RBP=ffff888037e3f240 RSP=ffff888037e3f178 R8 =ffffffff86c1dc70 R9 =ffff888037e3f228 R10=000000000003b53d R11=00000000000c2e44 R12=ffff888037e3f248 R13=ffff888037e3f230 R14=ffff888037e3f740 R15=ffff888037e3f1e8 RIP=ffffffff81354891 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f807ebfb260 CR3=000000002d768000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000