[ OK ] Finished Update UTMP about System Runlevel Changes. [ 92.217806] audit: type=1400 audit(1750327500.680:6): avc: denied { checkpoint_restore } for pid=222 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:52202' (ECDSA) to the list of known hosts. 2025/06/19 10:05:09 fuzzer started 2025/06/19 10:05:10 dialing manager at localhost:36157 syzkaller login: [ 102.251247] cgroup: Unknown subsys name 'net' [ 102.386093] cgroup: Unknown subsys name 'cpuset' [ 102.424827] cgroup: Unknown subsys name 'rlimit' 2025/06/19 10:05:36 syscalls: 2214 2025/06/19 10:05:36 code coverage: enabled 2025/06/19 10:05:36 comparison tracing: enabled 2025/06/19 10:05:36 extra coverage: enabled 2025/06/19 10:05:36 setuid sandbox: enabled 2025/06/19 10:05:36 namespace sandbox: enabled 2025/06/19 10:05:36 Android sandbox: enabled 2025/06/19 10:05:36 fault injection: enabled 2025/06/19 10:05:36 leak checking: enabled 2025/06/19 10:05:36 net packet injection: enabled 2025/06/19 10:05:36 net device setup: enabled 2025/06/19 10:05:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/19 10:05:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/19 10:05:36 USB emulation: enabled 2025/06/19 10:05:36 hci packet injection: enabled 2025/06/19 10:05:36 wifi device emulation: enabled 2025/06/19 10:05:36 802.15.4 emulation: enabled 2025/06/19 10:05:36 fetching corpus: 0, signal 0/0 (executing program) 2025/06/19 10:05:39 starting 8 fuzzer processes 10:05:39 executing program 0: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) recvmmsg$unix(r0, &(0x7f0000001f00)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/153, 0x99}], 0x3, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000700)=""/39, 0x27}, {&(0x7f0000000740)=""/98, 0x62}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000008c0)=""/136, 0x88}, {&(0x7f0000000980)=""/156, 0x9c}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/182, 0xb6}, {&(0x7f0000001b00)=""/186, 0xba}, {&(0x7f0000001bc0)=""/63, 0x3f}, {&(0x7f0000001c00)=""/15, 0xf}], 0xa, &(0x7f0000001d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001d80), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001e00)=""/75, 0x4b}], 0x1, &(0x7f0000001ec0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x3, 0x20000000, &(0x7f0000001fc0)={0x0, 0x3938700}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002000)={{}, {0x1, 0x4}, [{0x2, 0x0, r1}, {0x2, 0x3, r3}, {0x2, 0x4, 0xee00}, {0x2, 0x5}], {0x4, 0x1}, [{0x8, 0x0, r6}], {}, {0x20, 0x5}}, 0x4c, 0x2) accept$inet(r0, &(0x7f0000002080)={0x2, 0x0, @remote}, &(0x7f00000020c0)=0x10) fremovexattr(r9, &(0x7f0000002100)=@known='com.apple.FinderInfo\x00') fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000002140)='(^\x00', 0x0, r5) lstat(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)) r10 = syz_io_uring_complete(0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r10, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4804) r11 = openat$incfs(0xffffffffffffffff, &(0x7f0000002380)='.pending_reads\x00', 0x400000, 0x82) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r11, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x59}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x4001) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r10, 0xc0505405, &(0x7f00000024c0)={{0x1, 0x3, 0x0, 0x2, 0xfff}, 0x401, 0x2, 0x6}) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000002540)={0x80, 0x2, 0xa00e, 0x9, 0x1}) open$dir(&(0x7f0000002580)='./file0\x00', 0x80202, 0x32) prctl$PR_GET_KEEPCAPS(0x7) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000025c0), 0x10800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000002600)={{0x1, 0x1, 0x18, r12, {0x5c, 0x7}}, './file0\x00'}) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000002640)=""/140) 10:05:39 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'system.', 'TIPC\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0xb, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0xa, 0x1, '\\-@:[\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x9, 0x1, 'TIPC\x00'}, @NFTA_COMPAT_NAME={0x9, 0x1, 'TIPC\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x51) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001680)=[{{&(0x7f00000001c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/235, 0xeb}, {&(0x7f0000001340)=""/79, 0x4f}, {&(0x7f00000013c0)=""/93, 0x5d}, {&(0x7f0000001440)=""/228, 0xe4}, {&(0x7f0000001540)=""/49, 0x31}], 0x6, &(0x7f0000001600)=""/125, 0x7d}, 0x101}], 0x1, 0x40002100, &(0x7f0000001700)={r2, r3+10000000}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000018c0)={0x0, 0x8f5}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) write$P9_RWSTAT(r1, &(0x7f00000028c0)={0x7, 0x7f, 0x1}, 0x7) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000002900), &(0x7f0000002940)=0x30) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000002b40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a00)={0xd0, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000002bc0)={0x81, 0x18, '\x00', 0x0, &(0x7f0000002b80)=[0x0, 0x0, 0x0]}) syz_mount_image$nfs(&(0x7f0000002c00), &(0x7f0000002c40)='./file0\x00', 0x5, 0x1, &(0x7f0000002cc0)=[{&(0x7f0000002c80)="7e78c3655e21064477bcf0c7754538da6b3733f06c7669d3026486822f9c16a5", 0x20, 0x88}], 0x100080, &(0x7f0000002d00)={[{}, {'pci\x00'}, {'-/^@'}, {'netdevsim'}], [{@smackfsdef={'smackfsdef', 0x3d, 'devlink\x00'}}, {@uid_lt={'uid<', 0xee01}}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, '+*%+]!@-+'}}]}) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002dc0)={0xac, r5, 0x231, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x60, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40000011) 10:05:39 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0xd8) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffff800}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x9}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_ID={0x8}, @CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x9, 0x3]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x170, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "0629d6300e75ec539e8358f039c507f39a4b89e4b84a93dcd70e4058d55cd652"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "de2475db5a00887f0d31268698c976655d592af8bc22a2"}}, @TIPC_NLA_NODE_ID={0x35, 0x3, "43a11c0ea6be067afaf874180bcf2048c747304983e0b3e34344ef814158a614b758f36180e7c204a1c9a9fd161301cda0"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "d8f6feb79631a9d14573aba73bcf07a7e4553f451993be3b676e0daac2c07249a412a819dedb5ecb183364bc61a2a4ceffed1cfc1a67f6fc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "4985a29c0d60352b0ea689f88de20d68136217b1223d7c307880d318e6ebb04366"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x2994}, 0x40800) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000580)=0x52b4, 0x4) sendto$inet6(r3, &(0x7f00000005c0)="154b10f322ed1654ede1a3a458ec88386e3075fbbcbd9bc9fee2c8a11dfb7a46162c5fb21df803b8200569bfc6f1b3214f3ce2e976bb6b643ea7f1223ab7bf19f4a9a74d336143a56873e41bad9b48bb6925db848b5e0838f7a204c6de", 0x5d, 0x8000, &(0x7f0000000640)={0xa, 0x4e21, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000680)={0x1, 0x9, 0x3}) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r6, 0x100, 0x70bd29, 0x1ff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r8 = dup3(r0, r3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r9, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12b1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4ea}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) [ 130.978991] audit: type=1400 audit(1750327539.442:7): avc: denied { execmem } for pid=280 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:05:39 executing program 3: sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x801) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000400)=0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005ac0)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000003840)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/108, 0x6c}, {&(0x7f0000002540)=""/202, 0xca}, {&(0x7f0000002640)=""/64, 0x40}, {&(0x7f0000002680)=""/229, 0xe5}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/129, 0x81}], 0x8}}, {{&(0x7f00000038c0), 0x6e, &(0x7f0000003940)}}, {{&(0x7f0000003980), 0x6e, &(0x7f0000003f40)=[{&(0x7f0000003a00)=""/245, 0xf5}, {&(0x7f0000003b00)=""/88, 0x58}, {&(0x7f0000003b80)=""/173, 0xad}, {&(0x7f0000003c40)=""/42, 0x2a}, {&(0x7f0000003c80)=""/117, 0x75}, {&(0x7f0000003d00)=""/90, 0x5a}, {&(0x7f0000003d80)=""/212, 0xd4}, {&(0x7f0000003e80)=""/81, 0x51}, {&(0x7f0000003f00)=""/39, 0x27}], 0x9, &(0x7f0000004000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000004140), 0x6e, &(0x7f0000004340)=[{&(0x7f00000041c0)=""/204, 0xcc}, {&(0x7f00000042c0)=""/106, 0x6a}], 0x2, &(0x7f0000004380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000004400)=@abs, 0x6e, &(0x7f0000005980)=[{&(0x7f0000004480)=""/191, 0xbf}, {&(0x7f0000004540)=""/240, 0xf0}, {&(0x7f0000004640)=""/222, 0xde}, {&(0x7f0000004740)=""/66, 0x42}, {&(0x7f00000047c0)=""/102, 0x66}, {&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/187, 0xbb}], 0x8, &(0x7f0000005a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0x5, 0x2000, &(0x7f0000005c00)) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000005d80)={&(0x7f0000005c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005d40)={&(0x7f0000005c80)={0x94, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1e, 0xa8, @random="08408e2f9fe9a3e31d93a0c10ed6d18d49cfd595e06c5a86584a"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008011}, 0x20040040) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000005dc0)={{0x1, 0x1, 0x18, r10, {0x78}}, './file0\x00'}) ioctl$VT_RESIZEX(r11, 0x560a, &(0x7f0000005e00)={0x4, 0x5, 0x7f, 0x65a, 0x0, 0x2}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000005fc0)={&(0x7f0000005e40), 0xc, &(0x7f0000005f80)={&(0x7f0000005e80)={0xec, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000800}, 0x8091) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000006000)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$TIOCNXCL(r12, 0x540d) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006080), r7) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000006180)={&(0x7f0000006040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006140)={&(0x7f00000060c0)={0x50, r13, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x4f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7e}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x4095) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006200), r8) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000006300)={&(0x7f00000061c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000062c0)={&(0x7f0000006240)={0x74, r14, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "825ecc1a5b2e0bd793b2b2db12"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8b43617d27dff965938e2bf49f"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6b9af58969"}]}, 0x74}, 0x1, 0x0, 0x0, 0x1004}, 0x20008010) syz_genetlink_get_family_id$nl80211(&(0x7f0000006340), r7) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000063c0), r9) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000064c0)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006480)={&(0x7f0000006400)={0x70, r15, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x80}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9196}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]]}, 0x70}}, 0x4040) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000006500)={0x10}) 10:05:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x15) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x4, 0x84, 0x4088}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000080)={0x0, "108be879d55963f4bb04736e9f85480e"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) fremovexattr(r1, &(0x7f0000001080)=@known='trusted.overlay.impure\x00') fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000010c0)=0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001100)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000040) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001280), 0x8000, 0x0) fcntl$getownex(r4, 0x10, &(0x7f00000012c0)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x9, 0x100000) r6 = syz_mount_image$iso9660(&(0x7f0000001440), &(0x7f0000001480)='./file1\x00', 0x8000, 0x6, &(0x7f00000017c0)=[{&(0x7f00000014c0)="e286dba19d83ebe438cb56e30fc91f188d7bddea7ee3a2caf5612cb659e14ca9aceb138d92f78c7a8288bad4df1c3aaa3ed543d67fd95a5ae5c9efb1fb88b9830b58f571bd357f3a37b164a05f8854f5069b59acd70d733fd94aa371f3cb257f46276878c8808f8f8009ac783027f8cb08", 0x71, 0x5}, {&(0x7f0000001540)="c9838e78a761231360f411c93cbd96ac55af5a6fb9b1f894a5ab695ef88a5c758bb911d4d95483612c8cb031bfa3da8c02d52ec66dcaffff7e8d360c62fd723476446ce4f77186960f7cb54dfec3fd59", 0x50, 0x100000001}, {&(0x7f00000015c0)="d493e8233f9d6820bab8201b51316db7b6e2815332b8a820f10fcee7af0d57fffe4bea8ee17dee05a14292e861a4a751a25b854b7674523e36066de34df0e6af5350cd6d1a9f6932c55eda773d409eecbb7d513923402d76bb3576bdfdfe76ac92bdfe4e67ef0a3f0501d509d846626af6fe14b9db5c", 0x76, 0xe000000000000000}, {&(0x7f0000001640)="ac183de7004f12d5aa314888f0fd3a7f82509993c31afea3c0c025ef812562b2d7adfc61ca9949f8d09590d96a17627259491f2d6279fd84f1d97d7af492029a76450c4b4d8048520e3ccb6b13b0964473d88082d13cacf857f056001b05d89a8db6531ed7774e6c1aeb21", 0x6b, 0x6}, {&(0x7f00000016c0)="fa21c940fcbd25f6fd8477eb84ff679519b9e0cdd262438697e6fbde9db74a8b27a72ffab72c08e0fc14d20bf21b228b06fd182cabe08aacc2a7dc8b37ee6bbd555add7d8281c85d1a21d65ac76392cde50c7a7159d258b2260a9e3e264522054f0e25cf60ecb0a52f7b7ac97ffecbc30c266e6ed9010cecf074aefcc8568034dfd5012fb18f", 0x86, 0x8}, {&(0x7f0000001780)="5dd5776c1c25165e8e2e988d9d04d562b2f288b9db6beb334a", 0x19, 0x20}], 0x2004000, &(0x7f0000001880)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9}}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001900)={{0x1, 0x1, 0x18, r6, {0x4b}}, './file0/../file0\x00'}) r7 = open(&(0x7f0000001940)='./file0/../file0\x00', 0x18c6882b8b3dd3f0, 0xc) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000001980)) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 10:05:39 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x102, 0x100) r2 = epoll_create1(0x0) io_submit(0x0, 0x4, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x1000, r0, &(0x7f0000000000)="f3ff627c288197850d9443e2cda8184d9bc3633201c5c1dca2355db0738bb97838af38a36539099120fc3ffd807d96e6c105770b83b2", 0x36, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f00000000c0)="526b8f39d4874afce9ea88c8c5ce22fd07bb3b9cb731fc486ea0031f169615fe9f5a6ad6aeb9435da551623b1e865ba6a5cf87390efde33365f435832572d509a3b43038809d4269eef9c7b179667c7c19c8a79a443502f067b79aaa2a2cedebde835dee8a5079b66a1eafa0bc9f1b3bf9dc16471491cb682e109d84dc8f23b2c24631451426e3c15a09b1", 0x8b, 0x7fff}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r2, &(0x7f00000001c0)="5afadd9c3759da9a89688e51fba27e6ab822bb36b99b9d16cb780d45ee5e3b877c15c0c7d3884bf4fba04c2647b94fea70f3d3063b571f5ce35a2df9f6600d31bca6f8b772fd3f98453695bef541901091e548dc544cc7c44f58b3d3b8827bb8d60619ea45ee35ac820398c2d2119cf8400d2b6743eb03249b425a17ff2f6455966083771272aa9b6dc0a65356d4698fc3de91a5e34f28d263fe7f383ebf", 0x9e, 0x1, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0xe0f0, 0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x7fff, 0x0, 0x1}]) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x110, r1, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x5) setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000480)={0x2, 'hsr0\x00', {0x7}, 0x3}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4000) chmod(&(0x7f0000000600)='./file1\x00', 0x18) io_uring_enter(r1, 0x7a79, 0xd38f, 0x0, &(0x7f0000000640)={[0x7]}, 0x8) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xe0, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x45, 0x3, "bc011edfdb9a96d8b308ce8a55cd213b1ed4fe9b4569dbf2c6af591874341c8b156e1789750bfbc425f22359e2bec957b8a80cdf4cc678116b33e2afd7bf29d50f"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bbc48c34ad0fc15d8b904e1c88ce222608f653c1"}}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x98, r6, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd5b, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = accept4$bt_l2cap(r5, &(0x7f0000000b40)={0x1f, 0x0, @fixed}, &(0x7f0000000b80)=0xe, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RWALK(r5, &(0x7f0000000e00)={0x71, 0x6f, 0x2, {0x8, [{0x84, 0x2, 0x8}, {0x10, 0x4, 0x2}, {0x0, 0x1, 0x8}, {0x8a, 0x1}, {0x4, 0x1, 0x6}, {0x40, 0x3, 0x2}, {0x0, 0x1, 0x8}, {0x10, 0x4, 0x3}]}}, 0x71) 10:05:39 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r0, 0x7) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r2, 0x3, 0xffffffffffffffff, 0x100}) r3 = eventfd(0x2) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x0, @broadcast}}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000140)={0x3c, @multicast2, 0x4e20, 0x1, 'fo\x00', 0x10, 0x2, 0x76}, 0x2c) r5 = signalfd(r3, &(0x7f0000000180)={[0x80]}, 0x8) ioctl$CDROMPLAYTRKIND(r5, 0x5304, &(0x7f00000001c0)={0x0, 0x9, 0x5, 0x46}) r6 = socket(0x0, 0x6, 0xffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x430, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x1}}}}, [@NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x7, 0x2a, 0x5b7, 0x5, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0xfff8, 0xff7f, 0x3, 0x39, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x5, 0x8, 0xfe01, 0x400, 0x2, 0x81]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x60, 0x36, 0xb, 0x18, 0x1b, 0x48, 0x12, 0x4, 0x2, 0x6, 0x1b, 0x48, 0x1b, 0x12, 0x1b, 0x12, 0x3, 0x2, 0x18, 0x5, 0x60, 0x12, 0x48, 0x36, 0x6, 0x4, 0x4, 0x30, 0x4]}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0x16, 0x2, 0x1b, 0x3, 0x12, 0x60]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x48, 0x16, 0x24, 0x3, 0x5, 0x16, 0x18, 0x18, 0x4]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0xb, 0x24, 0xb, 0x18, 0x30, 0x1, 0x9, 0x24, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x5}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x8}, {}, {0x6, 0xa}, {0x4}, {0x5, 0x1}, {0x5, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x6, 0xa}, {0x3, 0x7}, {0x6, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x6, 0x5}, {0x7, 0x7}, {0x5, 0x9}, {0x7, 0x5}, {0x6}, {0x3}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x4}, {0x6, 0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x3, 0x2}, {0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x3}, {0x3, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x4, 0x1}, {0x1}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0xa}, {0x1}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x5, 0x2}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xde57, 0x100, 0x4, 0xffff, 0x6, 0xfff8, 0x9, 0x20]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x2}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x3, 0x7}, {0x7, 0x9}, {0x3, 0x1}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0xa}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x4, 0x2}, {0x3, 0x5}, {0x4, 0x3}, {}, {0x7}, {0x5, 0x6}, {0x2, 0x7}, {0x5, 0xa}, {0x6, 0x9}, {0x6, 0x3}, {0x3}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x1b, 0x5, 0x12, 0x60, 0x6, 0x12, 0x5, 0x4, 0x2, 0x6c, 0xae72522b6d61ed3a, 0x48, 0xb, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x2, 0x9, 0x12, 0xc, 0x16, 0xc, 0x41, 0x1, 0x9, 0x6c, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x4, 0x5}, {0x3, 0x2}, {0x5, 0x9}, {0x6, 0x2}, {0x5}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x3, 0x2, 0x2, 0x3, 0xc, 0x16, 0x1b, 0xc, 0xb, 0x5, 0x6, 0x0, 0x24, 0x30, 0xc, 0x60, 0x18, 0x9, 0x36, 0x6c, 0x1, 0x48, 0x3]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x20, 0x4, 0x3, 0x2, 0x8001, 0x133d, 0x6]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x12, 0x5]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0xc458, 0x100, 0x49, 0x3, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x48, 0x6, 0x60]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x800, 0x1, 0x9, 0x1, 0x100, 0x0, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x54, 0x996, 0x1f10, 0x81, 0x8, 0x2, 0x1f, 0x1]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x8}, {0x7, 0x5}, {0x2, 0x9}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x7}, {0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x3}, {0x1, 0x1}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x4, 0xa}, {0x0, 0x3}, {0x6, 0x1}, {0x6, 0x6}, {}, {0x6, 0x1}, {0x2, 0x3}, {0x5, 0x9}, {0x1, 0x16}, {0x7, 0x1}, {0x5, 0x2}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x9}, {0x6, 0x9}, {0x0, 0x2}, {0x0, 0xa}, {0x6}, {0x3, 0x6}, {0x5, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x4, 0x3}, {0x2, 0x9}, {0x4, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x3, 0x12, 0x1b, 0x18, 0x18, 0x2, 0x36, 0x30, 0x1, 0x30, 0x36, 0x4, 0x18, 0x1b, 0x1b, 0x30]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x16, 0x2, 0x48, 0x30, 0x3, 0x2a, 0x30, 0x5, 0x48, 0x18, 0x4, 0x1b]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x5, 0x24, 0x5, 0x36, 0x3, 0xc, 0x3, 0x2, 0x5, 0x30, 0x1]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3}, {0x4}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0x2}, {0x3, 0x7}, {}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x3}, {0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x2}, {0x7, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {}, {0x3, 0x7}, {0x7, 0x1}, {0x3, 0x7}, {0x6, 0x9}, {0x2, 0x5}, {0x1}, {0x4, 0x18}, {0x0, 0x9}, {0x1, 0x5}, {0x6}, {0x7, 0x7}, {0x3, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x9, 0x48, 0x3, 0x18, 0xb, 0x48, 0x6, 0xc, 0xb, 0x2, 0x36, 0x18, 0x4, 0x30, 0x1, 0x5d, 0x1b]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x7}, {0x1, 0xa}, {0x3, 0x3}, {0x7, 0x8}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x5, 0x8}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0x7}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x4, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x3}, {0x3, 0x1}, {}, {0x3, 0x6}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x1b, 0xc, 0x1, 0x18, 0x16, 0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x1, 0x12, 0x1b, 0x79, 0xf, 0x48, 0x16, 0x27, 0x24, 0x48, 0x3, 0x5, 0x9, 0x1, 0x1b, 0x1, 0x1, 0x4, 0x1, 0x3, 0x5, 0x48, 0xb, 0x16]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x12, 0x1b, 0x4, 0x48, 0x36, 0x48, 0x6c, 0x16, 0x30, 0x6c, 0x6c, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x1}, {0x0, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x4}, {0x2, 0xa}, {0x5, 0x2}, {0x7, 0x1}, {0x5, 0x7}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0x9}, {0x3}, {0x0, 0x7}, {0x6, 0x7}, {0x2, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x4, 0x9}, {0x4}, {0x4, 0xa}, {0x5, 0xa}, {0x6}, {0x2, 0xa}, {0x5, 0x9}, {0x2, 0x2}, {0x7, 0x2}, {0x2, 0x3}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x18, 0x3, 0x24, 0x4c, 0x48, 0x60, 0x18, 0xa, 0x12, 0x64, 0x6c, 0x30]}]}]}]}, 0x430}, 0x1, 0x0, 0x0, 0x4000820}, 0x40040) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_RELDISP(r7, 0x5605) r8 = memfd_create(&(0x7f0000000700)='],]}#\x00', 0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000740)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 10:05:39 executing program 7: lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendto$unix(r0, &(0x7f0000000080)="d3339536153334b3fc535ad6e17f8aa8b8eca9e5e3e025b94e46a00f4b2cf83476c2923d", 0x24, 0x80, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x2d, "260b510344979d4fffc7e912e85881dc43cf2625fd0083ae29867336211bae9ae6863897727e3dc0b2652ed2e1"}, &(0x7f00000001c0)=0x51) chmod(&(0x7f0000000200)='./file0\x00', 0x128) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x288, r3, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x9c, 0x5b, "5067fe7b07ba1b3e527b3cc472712b5c28916fd6f6dd3ea50f4454817bc8055989c098ab6c5d6c1d1e893275d033960d0dfa11b35505baac4b9c6f7e510bba0ecf54420ed928de86b4d62d4953f93fea81099c3b601f918b400d3061daae89837fa242903c93acbe0f20288c685de1827f49ac378936b6acc503bb00d55e715c73ccde1a1de000fb9dfbec29cc8debf374c3345a6f466c08"}, @NL80211_ATTR_FRAME_MATCH={0xd6, 0x5b, "724b6d5092eb5d72f711f1c017706ae1fbad65f5481d3634cf9bd421fab40769f8e7ed0138905fe2ca600ac5ffa403182a481c81b3c2556face6f126c0216afab795a4667e5b8e50b72af557430fa79ae683cae1aac72f478e8fe3a53a80db90b468fc42fdce6d8ed9a64b471a406d544479f3ced0ab8dab0216ba543b620cc1d4a42f06be9511a26a00f4ee3fe5c7c38f523f30f8601ea59a579035829801071a2dae37fe6a6f52273a874c2123f8f9e5f6f88a71b1466b14cc3c55adc26350668ebd2242097a9b8c36b4b421ee425140a7"}, @NL80211_ATTR_FRAME_MATCH={0x1d, 0x5b, "a06e3040ad6cba7a4e7669a31ce0cdc04be9e078000f5bab3f"}, @NL80211_ATTR_FRAME_MATCH={0xc7, 0x5b, "03c4e021564a32c9dcd918eba83af7edad8beadb8302bdb176c5965733ba9ae8287c7cf7d74da0b60a896ad1225581ed2f1942bcefd927da12bbfb2b859e889026ccdd486346dce8d33e4f451d0462ecdbe3e3070cd45a07f0334f0723a43f0ef37f890bdd538e16837cade9c77042520d7ddf99f55550d48e0562470a64dcf1c4060d00d088ed2af7150717bf2be3eca8848aa94ff9166c56d0aa6a3c9f8c249dadf3898d63705d9f5d5da7235cb1b8346af6d0fd0662adde529dbaf5d4488a4b6fc5"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff}]}, 0x288}, 0x1, 0x0, 0x0, 0x4800}, 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) mount$9p_rdma(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x1004, &(0x7f0000000800)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x7e8100}}, {@rq={'rq', 0x3d, 0xffffffffffff0000}}, {@common=@version_u}, {@timeout={'timeout', 0x3d, 0x3}}, {@timeout={'timeout', 0x3d, 0xff}}, {@timeout={'timeout', 0x3d, 0x4a39}}, {@sq={'sq', 0x3d, 0xa1}}, {@common=@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@common=@cachetag={'cachetag', 0x3d, '$'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa#\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '+):\"):('}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/!'}}, {@euid_lt}, {@euid_eq={'euid', 0x3d, r5}}]}}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x1) chdir(&(0x7f0000000ac0)='./file0\x00') r6 = openat$cgroup_ro(r0, &(0x7f0000000b40)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b00), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x70, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4c000) lsetxattr$trusted_overlay_origin(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), &(0x7f0000000d00), 0x2, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000d40)=""/128) mkdirat(r0, &(0x7f0000000dc0)='./file0\x00', 0x1e0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 132.430097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.433488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.435915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.442776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.449839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.578471] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.582633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.587445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.593701] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.597880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.607551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.611704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.616530] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.633081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.654564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.698388] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.715515] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.721772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.730493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.735449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.831622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.835954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.846687] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.853112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.865367] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.870834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.881395] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 132.884511] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.886481] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 132.892094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.893688] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 132.899104] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 132.908640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 132.910457] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.915442] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 132.920769] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 132.937882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 132.938525] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 132.940934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.946659] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.514949] Bluetooth: hci0: command tx timeout [ 134.642790] Bluetooth: hci1: command tx timeout [ 134.705316] Bluetooth: hci2: command tx timeout [ 134.834594] Bluetooth: hci3: command tx timeout [ 134.961350] Bluetooth: hci4: command tx timeout [ 135.025368] Bluetooth: hci6: command tx timeout [ 135.027239] Bluetooth: hci7: command tx timeout [ 135.089293] Bluetooth: hci5: command tx timeout [ 136.561784] Bluetooth: hci0: command tx timeout [ 136.689463] Bluetooth: hci1: command tx timeout [ 136.753368] Bluetooth: hci2: command tx timeout [ 136.882546] Bluetooth: hci3: command tx timeout [ 137.010332] Bluetooth: hci4: command tx timeout [ 137.073432] Bluetooth: hci7: command tx timeout [ 137.073856] Bluetooth: hci6: command tx timeout [ 137.137430] Bluetooth: hci5: command tx timeout [ 138.609530] Bluetooth: hci0: command tx timeout [ 138.739059] Bluetooth: hci1: command tx timeout [ 138.801206] Bluetooth: hci2: command tx timeout [ 138.929495] Bluetooth: hci3: command tx timeout [ 139.057261] Bluetooth: hci4: command tx timeout [ 139.122388] Bluetooth: hci6: command tx timeout [ 139.122818] Bluetooth: hci7: command tx timeout [ 139.185241] Bluetooth: hci5: command tx timeout [ 140.658427] Bluetooth: hci0: command tx timeout [ 140.785409] Bluetooth: hci1: command tx timeout [ 140.849357] Bluetooth: hci2: command tx timeout [ 140.977404] Bluetooth: hci3: command tx timeout [ 141.105478] Bluetooth: hci4: command tx timeout [ 141.169814] Bluetooth: hci7: command tx timeout [ 141.170410] Bluetooth: hci6: command tx timeout [ 141.233307] Bluetooth: hci5: command tx timeout [ 195.205396] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.211586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.214054] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.224015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.231429] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.275693] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.279843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.281700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.286327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.289802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.304294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.316500] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.319228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.324730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.329523] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.369333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.375693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.387743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.413693] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.415002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.419577] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.423828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.425035] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.428520] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.430012] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.432395] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.436977] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.444542] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.448521] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.450381] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.474624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.477398] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.480705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.498658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.499649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.063387] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 196.081893] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 196.121834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 196.169304] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 196.191284] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 197.297233] Bluetooth: hci0: command tx timeout [ 197.361244] Bluetooth: hci1: command tx timeout [ 197.425459] Bluetooth: hci2: command tx timeout [ 197.553420] Bluetooth: hci5: command tx timeout [ 197.681237] Bluetooth: hci3: command tx timeout [ 197.682414] Bluetooth: hci4: command tx timeout [ 197.682449] Bluetooth: hci6: command tx timeout [ 198.321234] Bluetooth: hci7: command tx timeout [ 199.345695] Bluetooth: hci0: command tx timeout [ 199.409257] Bluetooth: hci1: command tx timeout [ 199.473652] Bluetooth: hci2: command tx timeout [ 199.601255] Bluetooth: hci5: command tx timeout [ 199.729281] Bluetooth: hci6: command tx timeout [ 199.729443] Bluetooth: hci4: command tx timeout [ 199.729767] Bluetooth: hci3: command tx timeout [ 200.369530] Bluetooth: hci7: command tx timeout [ 201.394654] Bluetooth: hci0: command tx timeout [ 201.459389] Bluetooth: hci1: command tx timeout [ 201.522496] Bluetooth: hci2: command tx timeout [ 201.650877] Bluetooth: hci5: command tx timeout [ 201.779202] Bluetooth: hci6: command tx timeout [ 201.779657] Bluetooth: hci4: command tx timeout [ 201.780056] Bluetooth: hci3: command tx timeout [ 202.420238] Bluetooth: hci7: command tx timeout [ 203.441305] Bluetooth: hci0: command tx timeout [ 203.506446] Bluetooth: hci1: command tx timeout [ 203.570308] Bluetooth: hci2: command tx timeout [ 203.698206] Bluetooth: hci5: command tx timeout [ 203.826266] Bluetooth: hci3: command tx timeout [ 203.826699] Bluetooth: hci4: command tx timeout [ 203.827102] Bluetooth: hci6: command tx timeout [ 204.466241] Bluetooth: hci7: command tx timeout [ 254.966245] syz-executor.0 (2903) used greatest stack depth: 24536 bytes left [ 257.159430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.165857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.168909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.182403] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.188391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.316305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.338466] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.347784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.359890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.366832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.416468] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.419684] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.432663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.439414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.449396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.482691] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.486628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.489030] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.498923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.503781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.549343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.552044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.560661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.568643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.572645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.663899] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.674518] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.690876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.736775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.747551] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.934222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.945361] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.948720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.975876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.986966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.085842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.130027] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.157864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.238679] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.302461] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 259.250548] Bluetooth: hci0: command tx timeout [ 259.441442] Bluetooth: hci1: command tx timeout [ 259.634356] Bluetooth: hci4: command tx timeout [ 259.697353] Bluetooth: hci3: command tx timeout [ 259.697552] Bluetooth: hci2: command tx timeout [ 259.892197] Bluetooth: hci6: command tx timeout [ 260.081298] Bluetooth: hci5: command tx timeout [ 260.466408] Bluetooth: hci7: command tx timeout [ 261.299557] Bluetooth: hci0: command tx timeout [ 261.489357] Bluetooth: hci1: command tx timeout [ 261.681446] Bluetooth: hci4: command tx timeout [ 261.745303] Bluetooth: hci2: command tx timeout [ 261.746413] Bluetooth: hci3: command tx timeout [ 261.937276] Bluetooth: hci6: command tx timeout [ 262.129255] Bluetooth: hci5: command tx timeout [ 262.514292] Bluetooth: hci7: command tx timeout [ 263.347211] Bluetooth: hci0: command tx timeout [ 263.537749] Bluetooth: hci1: command tx timeout [ 263.729211] Bluetooth: hci4: command tx timeout [ 263.793581] Bluetooth: hci3: command tx timeout [ 263.793975] Bluetooth: hci2: command tx timeout [ 263.986241] Bluetooth: hci6: command tx timeout [ 264.177251] Bluetooth: hci5: command tx timeout [ 264.561340] Bluetooth: hci7: command tx timeout [ 265.395222] Bluetooth: hci0: command tx timeout [ 265.585417] Bluetooth: hci1: command tx timeout [ 265.778185] Bluetooth: hci4: command tx timeout [ 265.841547] Bluetooth: hci3: command tx timeout [ 265.842463] Bluetooth: hci2: command tx timeout [ 266.033406] Bluetooth: hci6: command tx timeout [ 266.226341] Bluetooth: hci5: command tx timeout [ 266.610229] Bluetooth: hci7: command tx timeout [ 320.005683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.010234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.014268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.030678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.040094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.329014] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.335834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.338438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.345922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.349384] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.413607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.418059] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.421844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.423973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.442458] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.448827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.467630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.470536] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.479544] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.497813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.567925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.580969] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.586067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.638982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.644061] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.886337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.891752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.897824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.905664] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.928521] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.004754] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 321.027786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 321.028672] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.051861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.075627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 321.081591] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.086918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 321.089414] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 321.128056] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 321.129810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 322.097339] Bluetooth: hci0: command tx timeout [ 322.417732] Bluetooth: hci1: command tx timeout [ 322.545685] Bluetooth: hci2: command tx timeout [ 322.673279] Bluetooth: hci4: command tx timeout [ 322.737292] Bluetooth: hci3: command tx timeout [ 323.121251] Bluetooth: hci5: command tx timeout [ 323.249247] Bluetooth: hci7: command tx timeout [ 323.313452] Bluetooth: hci6: command tx timeout [ 324.145201] Bluetooth: hci0: command tx timeout [ 324.466207] Bluetooth: hci1: command tx timeout [ 324.593406] Bluetooth: hci2: command tx timeout [ 324.723216] Bluetooth: hci4: command tx timeout [ 324.785398] Bluetooth: hci3: command tx timeout [ 325.170537] Bluetooth: hci5: command tx timeout [ 325.297253] Bluetooth: hci7: command tx timeout [ 325.361419] Bluetooth: hci6: command tx timeout [ 326.195176] Bluetooth: hci0: command tx timeout [ 326.513422] Bluetooth: hci1: command tx timeout [ 326.642041] Bluetooth: hci2: command tx timeout [ 326.770286] Bluetooth: hci4: command tx timeout [ 326.834186] Bluetooth: hci3: command tx timeout [ 327.217619] Bluetooth: hci5: command tx timeout [ 327.345239] Bluetooth: hci7: command tx timeout [ 327.409214] Bluetooth: hci6: command tx timeout [ 328.241433] Bluetooth: hci0: command tx timeout [ 328.561326] Bluetooth: hci1: command tx timeout [ 328.689234] Bluetooth: hci2: command tx timeout [ 328.817213] Bluetooth: hci4: command tx timeout [ 328.881260] Bluetooth: hci3: command tx timeout [ 329.265225] Bluetooth: hci5: command tx timeout [ 329.394382] Bluetooth: hci7: command tx timeout [ 329.457232] Bluetooth: hci6: command tx timeout [ 383.171015] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.183866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.186591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.197315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.203659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.246119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.248880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.251386] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.261693] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.267727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.390696] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.402083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.407485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.425855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.437749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.451620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.455684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.484110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.522535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.561056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.562765] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.567411] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.572862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.581119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.586654] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.588756] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 383.604375] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 383.611578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.656749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.672858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 383.681685] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 383.683759] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.684114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 383.702719] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 383.704699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.714301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 383.726805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.758598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 383.760021] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 383.762857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 385.265280] Bluetooth: hci0: command tx timeout [ 385.329266] Bluetooth: hci1: command tx timeout [ 385.523219] Bluetooth: hci2: command tx timeout [ 385.777327] Bluetooth: hci6: command tx timeout [ 385.841324] Bluetooth: hci5: command tx timeout [ 385.844199] Bluetooth: hci3: command tx timeout [ 386.097268] Bluetooth: hci7: command tx timeout [ 386.290264] Bluetooth: hci4: command tx timeout [ 387.313378] Bluetooth: hci0: command tx timeout [ 387.377298] Bluetooth: hci1: command tx timeout [ 387.569663] Bluetooth: hci2: command tx timeout [ 387.825286] Bluetooth: hci6: command tx timeout [ 387.889377] Bluetooth: hci3: command tx timeout [ 387.889407] Bluetooth: hci5: command tx timeout [ 388.145287] Bluetooth: hci7: command tx timeout [ 388.337799] Bluetooth: hci4: command tx timeout [ 389.361246] Bluetooth: hci0: command tx timeout [ 389.426197] Bluetooth: hci1: command tx timeout [ 389.618218] Bluetooth: hci2: command tx timeout [ 389.873372] Bluetooth: hci6: command tx timeout [ 389.937210] Bluetooth: hci3: command tx timeout [ 389.938501] Bluetooth: hci5: command tx timeout [ 390.194385] Bluetooth: hci7: command tx timeout [ 390.387550] Bluetooth: hci4: command tx timeout [ 391.409320] Bluetooth: hci0: command tx timeout [ 391.473685] Bluetooth: hci1: command tx timeout [ 391.666400] Bluetooth: hci2: command tx timeout [ 391.921233] Bluetooth: hci6: command tx timeout [ 391.985373] Bluetooth: hci5: command tx timeout [ 391.985401] Bluetooth: hci3: command tx timeout [ 392.241563] Bluetooth: hci7: command tx timeout [ 392.435236] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 10:10:48 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88802ffcb700 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff88802ffcc1a8 RDI=ffff88802ffcb700 RBP=ffff88802ffcc158 RSP=ffff88806ce08880 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff88802ffcc1a8 R13=0000000000000002 R14=0000000000000000 R15=0000000000000003 RIP=ffffffff815190db RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4b98b9c1f0 CR3=000000000dce9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000007aa48 RBX=ffff8880134aa000 RCX=1ffff1100d9e6dfd RDX=dffffc0000000000 RSI=000000000000001f RDI=ffff88806cf36fe8 RBP=0000000000000c00 RSP=ffff88806cf08bc0 R8 =ffff8880134aa052 R9 =ffff8880134aa0c8 R10=1ffff11006daaa67 R11=ffff88806cf37058 R12=000000395493449d R13=00000000001629c2 R14=0000000000000000 R15=ffff888036ebb780 RIP=ffffffff8149dc11 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005561ad9e9080 CR3=000000000cd85000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=001b016c6c6f502e726567616e614d0c XMM02=682e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=000000000000000a000000c000014016 XMM09=000000000000002a000000c000016000 XMM10=0000000000000009000000c000014040 XMM11=0000000000000007000000c000014049 XMM12=000000000000001c000000c000018000 XMM13=0000000000000041000000c00001a000 XMM14=000000000000000c000000c000014050 XMM15=000000000000000d000000c000014060