Warning: Permanently added '[localhost]:11580' (ECDSA) to the list of known hosts. 2025/06/21 20:56:05 fuzzer started 2025/06/21 20:56:06 dialing manager at localhost:33119 syzkaller login: [ 90.705248] cgroup: Unknown subsys name 'net' [ 90.840091] cgroup: Unknown subsys name 'cpuset' [ 90.880461] cgroup: Unknown subsys name 'rlimit' 2025/06/21 20:56:22 syscalls: 2214 2025/06/21 20:56:22 code coverage: enabled 2025/06/21 20:56:22 comparison tracing: enabled 2025/06/21 20:56:22 extra coverage: enabled 2025/06/21 20:56:22 setuid sandbox: enabled 2025/06/21 20:56:22 namespace sandbox: enabled 2025/06/21 20:56:22 Android sandbox: enabled 2025/06/21 20:56:22 fault injection: enabled 2025/06/21 20:56:22 leak checking: enabled 2025/06/21 20:56:22 net packet injection: enabled 2025/06/21 20:56:22 net device setup: enabled 2025/06/21 20:56:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 20:56:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 20:56:22 USB emulation: enabled 2025/06/21 20:56:22 hci packet injection: enabled 2025/06/21 20:56:22 wifi device emulation: enabled 2025/06/21 20:56:22 802.15.4 emulation: enabled 2025/06/21 20:56:22 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 20:56:25 starting 8 fuzzer processes 20:56:25 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$FIOCLEX(r0, 0x5451) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x1f, 0xb2, 0x5, 0x40}, {0x1, 0x7f}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2, 0xffffffff}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/15, 0xf, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x1000}], 0x3a, 0x0, &(0x7f0000000340)="13581468bc2f054eee546fdec98e43f83fd6aa9bb5d6abb7591ab4994c6c77db09addf0f4813057ebcf6e7515bdda2eaa84ee80835dabf519ecd"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockname(r3, &(0x7f0000000440)=@nfc, &(0x7f00000004c0)=0x80) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000500)={0x0, 0x4, 0x10000, 0x400}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000580)={0x227, 0x20, '\x00', 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000005c0)={r2, 0x52d, 0x3, 0xffffffffffffffd2}) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x6, 0x0, 0x2, 0x5, 0x794]}, &(0x7f0000000680)=0x54) r6 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x0, 0x10000) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20004005) pidfd_getfd(r6, r5, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg$unix(r5, &(0x7f0000000ac0)={&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/159, 0x9f}], 0x1, &(0x7f0000000a80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x10002) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f0000000b00)={0x4a, 0xe6a2, 0x7ff}) 20:56:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400, 0x40, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_LABELS_MASK={0x20, 0x17, [0x3, 0xfffffffa, 0x8, 0xb06, 0x0, 0x100, 0x81]}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0x9b5]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3c}, @CTA_TUPLE_ORIG={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x14, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_LABELS_MASK={0x8, 0x17, [0x5]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000}, 0x40) io_setup(0x4, &(0x7f0000000380)=0x0) io_getevents(r1, 0x7fffffff, 0xa, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000500)={0x0, 'macvlan0\x00', {}, 0x5}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xec}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000800) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x1, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf8f4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7fffffff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0xc054) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x24008000) mq_timedsend(0xffffffffffffffff, &(0x7f00000008c0)="5ed1eb823dc023a09fd5bde6d72ad1fda759270c57a37573c45bba788641484ed97dcf69c836955917a3bb47378a1c5c61267e30117ce522f59c1aac1e2521c0b5ba2ddb1b34ba8912a919cad9716969e0a1e8f124208d0d05aa89e5952ab7b343baaffff46ecefa6011ba2fd7cb658b8958cdf946cce6215f1530ca4ca7ebc581fa6f6dfe8001775df09f1c28da355ded4b6d09119b44a91d15ebeb4e80278370282e4065d72da4e7f74a3baf4b7a08d8ba04f22adf49775b2f4f34b787a3b5362294c623af104e72b6544a394a171e5d30cade68f9ae03528649", 0xdb, 0x7, &(0x7f00000009c0)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000a40)=@v1={0x0, @aes128, 0x2, @desc2}) nanosleep(&(0x7f0000000a80)={0x0, 0x989680}, &(0x7f0000000ac0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000b00), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000b80)=""/107, 0x6b}, {&(0x7f0000000c00)=""/210, 0xd2}, {&(0x7f0000000d00)=""/188, 0xbc}], 0x3, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000001200)=[{&(0x7f0000000f00)=""/34, 0x22}, {&(0x7f0000000f40)=""/193, 0xc1}, {&(0x7f0000001040)=""/159, 0x9f}, {&(0x7f0000001100)=""/209, 0xd1}], 0x4, &(0x7f0000001240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001280)=""/186, 0xba}, {&(0x7f0000001340)=""/238, 0xee}, {&(0x7f0000001440)=""/185, 0xb9}, {&(0x7f0000001500)=""/207, 0xcf}, {&(0x7f0000001600)=""/117, 0x75}, {&(0x7f0000001680)=""/152, 0x98}, {&(0x7f0000001740)=""/248, 0xf8}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001980)=""/230, 0xe6}, {&(0x7f0000001a80)=""/253, 0xfd}, {&(0x7f0000001b80)=""/94, 0x5e}, {&(0x7f0000001c00)=""/86, 0x56}], 0x4, &(0x7f0000001cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}], 0x4, 0x20, &(0x7f0000001e80)={0x0, 0x989680}) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x54, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) r5 = dup3(r0, r3, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x74, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xffff4032}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7ff}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xfd}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7f}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0xa8, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe83}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8040}, 0xc000) 20:56:25 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x400802, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x0, 0x5, 0x9, 0x80, 0x10001]}, &(0x7f0000000200)=0x54) fremovexattr(r0, &(0x7f0000000240)=@random={'osx.', '/dev/hpet\x00'}) bind$802154_dgram(r2, &(0x7f0000000280), 0x14) setsockopt$inet_opts(r1, 0x0, 0xb, &(0x7f00000002c0)="a8d808aa0aea1b99d8453b08d469c19be94517bc2068a21d33b915c90c9761808e", 0x21) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000300)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x7fffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20048084) r6 = accept4$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14, 0x80000) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000540), &(0x7f0000000580)=0x10) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000005c0)) pwrite64(r1, &(0x7f0000000600)="5c93ee5eeae163b83b838e330acefd1f125e611554d7e7ec507babf6ef361621d423bd9dbea8976ac96ac8f4e3b1", 0x2e, 0x5) [ 109.383987] audit: type=1400 audit(1750539385.347:7): avc: denied { execmem } for pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:56:25 executing program 3: socketpair(0x27, 0x6, 0x45, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xffff}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004804}, 0x2404c004) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000340)={0x2, 0x1, 0xe}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000001580)={[0x6]}, 0x8, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r1) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1c0}, 0x4040000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x4c, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffff}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8000}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001880), 0x4880, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2004860}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xbc, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044812}, 0x44001) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x4c, r8, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x400}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x800) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x402602, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x20000001) 20:56:25 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x2}, [{0x2, 0x2, r0}, {0x2, 0x2, r2}], {}, [{0x8, 0xf, r3}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x5}, {0x20, 0x7}}, 0x44, 0xad305f3b5174e53c) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000300)) r4 = syz_io_uring_complete(0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000340)={0xa}) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x3f, 0x0, 0x5, 0x1604, 0x3, 0x38, 0x8, 0x3d, 0x40, 0x281, 0xffffff01, 0x6, 0x38, 0x1, 0x50, 0x2, 0x61}, [{0x2, 0x401, 0x1, 0x5, 0x8, 0x401, 0x5, 0x5}], "fff35086c16b4923f09a74feef085f4aab69", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x78a) setxattr$security_ima(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040), &(0x7f0000001080)=@ng={0x4, 0x5, "259309b89a51"}, 0x8, 0x2) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000010c0), 0x10100, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000001100)=0x1ff, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001140)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1a, &(0x7f0000001180)=""/79, &(0x7f0000001200)=0x4f) r10 = openat$cgroup_ro(r4, &(0x7f0000001240)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) pidfd_getfd(r10, r7, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0), &(0x7f0000001300)={0x0, 0xfb, 0x36, 0x4, 0x4, "d39b01821c8cd4219c012f0540cd8550", "7a9ddbd8f45999c18ecbbc249c8ce30ac1c266c950ae0bb6a22348e66c719652c2"}, 0x36, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'ip6_vti0\x00', r1, 0x29, 0x6, 0x5, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x1, 0x48, 0xff, 0x9}}) 20:56:25 executing program 5: lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', '{\x00'}, &(0x7f0000000080)=""/236, 0xec) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000180)=""/205) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'os2.', '\x00'}) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1000, &(0x7f0000000340)={0x1, 0x70, 0x140000}, 0x20) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={{r0, r1/1000+10000}}) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00') ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) accept4$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14, 0x80800) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000540)=r4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [""]}, 0x14}}, 0x1) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000680)={0x8000, 0x5, 0x2, 0x6, 0x5}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000006c0)={@dev, @local, 0x0}, &(0x7f0000000700)=0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r5, 0x2f, 0x8, 0x4, 0x0, 0xc, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x1, 0x6}}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000880)={@dev, @loopback, 0x0}, &(0x7f00000008c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6gre0\x00', r5, 0x4, 0x0, 0x2, 0x3, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}, @remote, 0x80, 0x7800, 0x1, 0x7}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x194, 0x0, 0x10, 0x70bd2b, 0x8, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x84}, 0x800) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x54}}}}, [@NL80211_ATTR_IE={0x19, 0x2a, [@random_vendor={0xdd, 0x13, "14bf3b48ec91dffcc6d28bc5e173d0a360b269"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008005}, 0x84) 20:56:25 executing program 6: ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000080)={0x6, 0x50, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x480a00, 0x0) syncfs(r0) r1 = openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x349102, 0x12, 0x14}, 0x18) setsockopt$inet6_int(r1, 0x29, 0xc2, &(0x7f0000000180)=0xd2, 0x4) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4021) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)={0x3, 'veth1\x00', {0x2}, 0x4}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000300)=0x8) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x110, r1, 0x7fff) write$cgroup_pid(r1, &(0x7f0000000340)=0xffffffffffffffff, 0x12) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x882402, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000003c0), 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x103000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000480)=@v1={0x0, @aes128, 0x1c, @desc1}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000500)={{r2}, 0x8, &(0x7f00000004c0)=[0x5, 0x7, 0x8, 0x4, 0x9, 0x1, 0x10001, 0x1], 0x5, 0x3, [0x2, 0xbf45, 0x7fffffff]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000000580)=""/76, &(0x7f0000000600)=0x4c) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000680)={0x1, &(0x7f0000000640)=[{0x7, 0x7f, 0x7f, 0x6}]}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f00000006c0)) 20:56:25 executing program 7: r0 = syz_io_uring_complete(0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xfffc}}, 0x14, &(0x7f0000000200)={&(0x7f0000000140)="329eb601dbc1d6d6034a605601a731506d39b3ea97bdbcf787cb802a05d7f5e69c3f3f42df3f643c76b265f06bad2890227b714ace005f2a380c5c2e34de01f2ed21f273c4f3c71d27a62b16394e4a5ef4ff1e2ad759dc4d903a15c0c4278879f7a5e5fba3ad233bf0626a9e3c5b653494dbfab9a683995b813af1a69ca9386b33fe07e9c382b7e2dd3649f0fc0ca0beea826f313238508d9353b438dc327752e3f9133140c1", 0xa6}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/vt', 0x610100, 0x12) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "242a6376ec0d98f6c3c0e7db9ee70f0211e6ed4079109e6c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000) r2 = accept4$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14, 0x80000) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000004c0)={0x4, 0xe7f, 0xfffffffc, 0xfff, 0x3}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x20040011) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000680)={0x7, 'geneve0\x00', {0x7fffffff}, 0x6}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0xb0ab48e7d893473, 0x0) syncfs(r5) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000880)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x4, 0xff, 0x7f, 0x8, 0x3, @remote, @loopback, 0x8, 0x7800, 0x3804c6ff, 0x4}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r5, &(0x7f0000000a80), &(0x7f0000000ac0)=0x14) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r9, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x5c}}, 0x81) [ 110.603305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.607738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.610248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.619212] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.624469] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.780293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.785697] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.787713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.792590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.796945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.847051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.855195] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.862451] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.872544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.876733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.916228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.931226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.936454] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.946871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.950182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.030734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.034147] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.037529] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.059000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.059943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.063274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.064446] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.066359] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.068334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.069587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.074538] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.076279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.079976] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.085973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.088364] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.096150] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.134063] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.160301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.195219] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.201081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.678171] Bluetooth: hci0: command tx timeout [ 112.868970] Bluetooth: hci1: command tx timeout [ 112.932860] Bluetooth: hci2: command tx timeout [ 113.060985] Bluetooth: hci3: command tx timeout [ 113.125233] Bluetooth: hci6: command tx timeout [ 113.188891] Bluetooth: hci5: command tx timeout [ 113.188978] Bluetooth: hci7: command tx timeout [ 113.317914] Bluetooth: hci4: command tx timeout [ 114.726162] Bluetooth: hci0: command tx timeout [ 114.919075] Bluetooth: hci1: command tx timeout [ 114.980866] Bluetooth: hci2: command tx timeout [ 115.109155] Bluetooth: hci3: command tx timeout [ 115.173904] Bluetooth: hci6: command tx timeout [ 115.236946] Bluetooth: hci5: command tx timeout [ 115.236984] Bluetooth: hci7: command tx timeout [ 115.364872] Bluetooth: hci4: command tx timeout [ 116.772912] Bluetooth: hci0: command tx timeout [ 116.966896] Bluetooth: hci1: command tx timeout [ 117.029006] Bluetooth: hci2: command tx timeout [ 117.157138] Bluetooth: hci3: command tx timeout [ 117.221392] Bluetooth: hci6: command tx timeout [ 117.287006] Bluetooth: hci5: command tx timeout [ 117.287030] Bluetooth: hci7: command tx timeout [ 117.414912] Bluetooth: hci4: command tx timeout [ 118.821380] Bluetooth: hci0: command tx timeout [ 119.012874] Bluetooth: hci1: command tx timeout [ 119.076998] Bluetooth: hci2: command tx timeout [ 119.206877] Bluetooth: hci3: command tx timeout [ 119.269058] Bluetooth: hci6: command tx timeout [ 119.333348] Bluetooth: hci7: command tx timeout [ 119.333891] Bluetooth: hci5: command tx timeout [ 119.460924] Bluetooth: hci4: command tx timeout [ 173.951393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.959387] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.963026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.971147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.980035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.998161] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.003257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.008106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.017193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.021987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.023583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.026704] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.028005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.040259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.047509] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.072096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.079954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.082920] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.089153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.102347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.109368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.114387] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.123811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.123987] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.144713] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.148498] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.150963] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.159025] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.159040] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.166442] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.169273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.173394] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.182178] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.188550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.210062] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.216204] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.220668] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.225598] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.229130] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.254200] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.100963] Bluetooth: hci1: command tx timeout [ 176.101728] Bluetooth: hci0: command tx timeout [ 176.165180] Bluetooth: hci3: command tx timeout [ 176.293344] Bluetooth: hci2: command tx timeout [ 176.294276] Bluetooth: hci7: command tx timeout [ 176.356979] Bluetooth: hci5: command tx timeout [ 176.421970] Bluetooth: hci4: command tx timeout [ 176.612906] Bluetooth: hci6: command tx timeout [ 178.149168] Bluetooth: hci0: command tx timeout [ 178.149670] Bluetooth: hci1: command tx timeout [ 178.212930] Bluetooth: hci3: command tx timeout [ 178.341006] Bluetooth: hci7: command tx timeout [ 178.341447] Bluetooth: hci2: command tx timeout [ 178.404894] Bluetooth: hci5: command tx timeout [ 178.469095] Bluetooth: hci4: command tx timeout [ 178.660943] Bluetooth: hci6: command tx timeout [ 180.198864] Bluetooth: hci1: command tx timeout [ 180.199338] Bluetooth: hci0: command tx timeout [ 180.260862] Bluetooth: hci3: command tx timeout [ 180.389039] Bluetooth: hci2: command tx timeout [ 180.389509] Bluetooth: hci7: command tx timeout [ 180.452856] Bluetooth: hci5: command tx timeout [ 180.516866] Bluetooth: hci4: command tx timeout [ 180.709146] Bluetooth: hci6: command tx timeout [ 182.244995] Bluetooth: hci0: command tx timeout [ 182.245473] Bluetooth: hci1: command tx timeout [ 182.308885] Bluetooth: hci3: command tx timeout [ 182.437848] Bluetooth: hci7: command tx timeout [ 182.438301] Bluetooth: hci2: command tx timeout [ 182.501150] Bluetooth: hci5: command tx timeout [ 182.565098] Bluetooth: hci4: command tx timeout [ 182.756866] Bluetooth: hci6: command tx timeout [ 236.151351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.154150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.158909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.168337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.175580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.314491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.321867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.325095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.333687] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.347495] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.396485] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.401761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.405284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.426126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.443376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.590864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.605329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.607746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.615957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.627760] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.632482] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.634654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.642716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.644983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.649331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.783687] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.799174] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.838361] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.903854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.944463] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.319497] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.337534] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.392182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.427073] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.440931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.625507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.627469] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.629014] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.634297] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.637211] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.245773] Bluetooth: hci0: command tx timeout [ 238.438352] Bluetooth: hci1: command tx timeout [ 238.501107] Bluetooth: hci2: command tx timeout [ 238.757380] Bluetooth: hci4: command tx timeout [ 238.757901] Bluetooth: hci3: command tx timeout [ 239.268905] Bluetooth: hci6: command tx timeout [ 240.164889] Bluetooth: hci5: command tx timeout [ 240.294065] Bluetooth: hci0: command tx timeout [ 240.294137] Bluetooth: hci7: command tx timeout [ 240.486073] Bluetooth: hci1: command tx timeout [ 240.549126] Bluetooth: hci2: command tx timeout [ 240.805056] Bluetooth: hci3: command tx timeout [ 240.807824] Bluetooth: hci4: command tx timeout [ 241.317305] Bluetooth: hci6: command tx timeout [ 242.213207] Bluetooth: hci5: command tx timeout [ 242.342122] Bluetooth: hci7: command tx timeout [ 242.342579] Bluetooth: hci0: command tx timeout [ 242.534031] Bluetooth: hci1: command tx timeout [ 242.598847] Bluetooth: hci2: command tx timeout [ 242.853918] Bluetooth: hci4: command tx timeout [ 242.854391] Bluetooth: hci3: command tx timeout [ 243.366077] Bluetooth: hci6: command tx timeout [ 244.262194] Bluetooth: hci5: command tx timeout [ 244.388862] Bluetooth: hci7: command tx timeout [ 244.390225] Bluetooth: hci0: command tx timeout [ 244.581085] Bluetooth: hci1: command tx timeout [ 244.646845] Bluetooth: hci2: command tx timeout [ 244.900930] Bluetooth: hci3: command tx timeout [ 244.901089] Bluetooth: hci4: command tx timeout [ 245.413099] Bluetooth: hci6: command tx timeout [ 246.309012] Bluetooth: hci5: command tx timeout [ 246.437896] Bluetooth: hci7: command tx timeout [ 298.824178] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.829310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.835683] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.840346] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.843508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.845181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.852752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.858295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.860644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.872691] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.942557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.949364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.951621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.962029] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.969740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.008646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.021628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.035414] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.040319] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.053863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.060420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.062605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.076106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.087380] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.106022] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.112447] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.117348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.129333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.131310] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.133902] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.135088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.145669] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.148421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.150402] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.203730] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.207142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.226521] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.234947] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.237524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.247072] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.902142] Bluetooth: hci0: command tx timeout [ 300.902975] Bluetooth: hci1: command tx timeout [ 301.028865] Bluetooth: hci2: command tx timeout [ 301.222854] Bluetooth: hci3: command tx timeout [ 301.223555] Bluetooth: hci4: command tx timeout [ 301.350337] Bluetooth: hci7: command tx timeout [ 301.351244] Bluetooth: hci5: command tx timeout [ 301.351739] Bluetooth: hci6: command tx timeout [ 302.949927] Bluetooth: hci1: command tx timeout [ 302.950410] Bluetooth: hci0: command tx timeout [ 303.078241] Bluetooth: hci2: command tx timeout [ 303.269956] Bluetooth: hci4: command tx timeout [ 303.270401] Bluetooth: hci3: command tx timeout [ 303.397901] Bluetooth: hci6: command tx timeout [ 303.398345] Bluetooth: hci5: command tx timeout [ 303.398752] Bluetooth: hci7: command tx timeout [ 304.999164] Bluetooth: hci1: command tx timeout [ 304.999661] Bluetooth: hci0: command tx timeout [ 305.125856] Bluetooth: hci2: command tx timeout [ 305.317874] Bluetooth: hci3: command tx timeout [ 305.318328] Bluetooth: hci4: command tx timeout [ 305.446257] Bluetooth: hci7: command tx timeout [ 305.446701] Bluetooth: hci6: command tx timeout [ 305.447286] Bluetooth: hci5: command tx timeout [ 307.045887] Bluetooth: hci0: command tx timeout [ 307.046380] Bluetooth: hci1: command tx timeout [ 307.174103] Bluetooth: hci2: command tx timeout [ 307.365848] Bluetooth: hci4: command tx timeout [ 307.366310] Bluetooth: hci3: command tx timeout [ 307.493881] Bluetooth: hci6: command tx timeout [ 307.494334] Bluetooth: hci5: command tx timeout [ 307.494749] Bluetooth: hci7: command tx timeout [ 361.214854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.220451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.224305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.234342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.241525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.460994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.467480] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.470697] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.477519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.481354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.529175] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.533582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.536228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.545574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.550195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.594253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.622728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.625172] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.628204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.633592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.636765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.647967] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.650399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.654041] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.656355] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.735490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.749344] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.752391] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.754447] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.760151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.761091] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.786265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.789038] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.838912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.843143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.866601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.870422] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.875305] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.946484] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.006348] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.302088] Bluetooth: hci0: command tx timeout [ 363.558145] Bluetooth: hci1: command tx timeout [ 363.620886] Bluetooth: hci2: command tx timeout [ 363.812920] Bluetooth: hci3: command tx timeout [ 363.814373] Bluetooth: hci4: command tx timeout [ 364.005863] Bluetooth: hci6: command tx timeout [ 364.071463] Bluetooth: hci7: command tx timeout [ 364.196888] Bluetooth: hci5: command tx timeout [ 365.349890] Bluetooth: hci0: command tx timeout [ 365.605842] Bluetooth: hci1: command tx timeout [ 365.669129] Bluetooth: hci2: command tx timeout [ 365.861908] Bluetooth: hci4: command tx timeout [ 365.862372] Bluetooth: hci3: command tx timeout [ 366.052864] Bluetooth: hci6: command tx timeout [ 366.117913] Bluetooth: hci7: command tx timeout [ 366.245865] Bluetooth: hci5: command tx timeout [ 367.396850] Bluetooth: hci0: command tx timeout [ 367.654023] Bluetooth: hci1: command tx timeout [ 367.717859] Bluetooth: hci2: command tx timeout [ 367.909171] Bluetooth: hci4: command tx timeout [ 367.910509] Bluetooth: hci3: command tx timeout [ 368.102082] Bluetooth: hci6: command tx timeout [ 368.165061] Bluetooth: hci7: command tx timeout [ 368.292836] Bluetooth: hci5: command tx timeout [ 369.444983] Bluetooth: hci0: command tx timeout [ 369.702098] Bluetooth: hci1: command tx timeout [ 369.765832] Bluetooth: hci2: command tx timeout [ 369.958192] Bluetooth: hci3: command tx timeout [ 369.958690] Bluetooth: hci4: command tx timeout [ 370.148876] Bluetooth: hci6: command tx timeout [ 370.214248] Bluetooth: hci7: command tx timeout [ 370.340883] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 21:01:34 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88802940f7e0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81354012 RDI=ffff88806ce31850 RBP=ffffffff85c1cc40 RSP=ffff88806ce08998 R8 =0000000000000001 R9 =ffff88806ce08a90 R10=000000000003b53d R11=0000000000004402 R12=ffffffff81354012 R13=ffff88806ce08a98 R14=ffff88802940f7d0 R15=ffff88806ce08a50 RIP=ffffffff8151ad79 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe17d4e44a1 CR3=000000002a707000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff816049e0 RCX=ffff88806cf089cc RDX=1ffff1100d9e117c RSI=ffffffff813b5a61 RDI=ffff88806cf08b4c RBP=ffff88806cf08b10 RSP=ffff88806cf08a78 R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b53d R11=00000000000119c0 R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff888039088000 R15=ffff88800c204818 RIP=ffffffff812d95e8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1238ee7540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f12393cc000 CR3=000000002e973000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000