Warning: Permanently added '[localhost]:15332' (ECDSA) to the list of known hosts. 2025/06/24 07:06:16 fuzzer started 2025/06/24 07:06:17 dialing manager at localhost:37113 syzkaller login: [ 101.832398] cgroup: Unknown subsys name 'net' [ 101.996678] cgroup: Unknown subsys name 'cpuset' [ 102.050541] cgroup: Unknown subsys name 'rlimit' 2025/06/24 07:06:40 syscalls: 2214 2025/06/24 07:06:40 code coverage: enabled 2025/06/24 07:06:40 comparison tracing: enabled 2025/06/24 07:06:40 extra coverage: enabled 2025/06/24 07:06:40 setuid sandbox: enabled 2025/06/24 07:06:40 namespace sandbox: enabled 2025/06/24 07:06:40 Android sandbox: enabled 2025/06/24 07:06:40 fault injection: enabled 2025/06/24 07:06:40 leak checking: enabled 2025/06/24 07:06:40 net packet injection: enabled 2025/06/24 07:06:40 net device setup: enabled 2025/06/24 07:06:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/24 07:06:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/24 07:06:40 USB emulation: enabled 2025/06/24 07:06:40 hci packet injection: enabled 2025/06/24 07:06:40 wifi device emulation: enabled 2025/06/24 07:06:40 802.15.4 emulation: enabled 2025/06/24 07:06:40 fetching corpus: 0, signal 0/0 (executing program) 2025/06/24 07:06:42 starting 8 fuzzer processes 07:06:42 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4416200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb5d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x741}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff801}]}, 0x58}}, 0x4000) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000180)={0x1}, 0x4) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000841}, 0x4008005) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x6, 'ip6tnl0\x00', {0xffff}, 0x1}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x108, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x2f}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5bf0288e82973d2509ae36a320fbe66a6ce2073cadf46dfd"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4f2413689c9c57edfa48a67f00850a9f4015a6aa9bcb8aad"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6713fd7593d346e967bbf4872fcaa417a5ebc01a604e78fc"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e826506ba5bf648118a1b3c3a2b381f48cd2c23b16ee6a41"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9587544fbd3a10a62ac85bb4d6240d49c068609abefc3921"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "56afc20390b6f1008097842ac54bb77a03c3413698d3ae7a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x108}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x8010) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000680)=0x1, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf4, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xdd}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x16c}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6595}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5f1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x709e}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffff7fff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4840}, 0x5) pread64(r2, &(0x7f0000000880)=""/132, 0x84, 0x401) r3 = accept$inet(r2, &(0x7f0000000940)={0x2, 0x0, @remote}, &(0x7f0000000980)=0x10) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f00000009c0)={0x2, 0x3, 0x16}) syz_io_uring_setup(0x4fb9, &(0x7f0000000a00)={0x0, 0xcf33, 0x20, 0x5e, 0x347, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000b00)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000b40)=0x3, &(0x7f0000000b80)=0x1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000bc0)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000c00)) 07:06:42 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'wg1\x00', {0x1}, 0x181b}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@delpolicy={0x13c, 0x14, 0x200, 0x70bd2b, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in6=@remote, 0x4e21, 0x3, 0x4e22, 0x5, 0xa, 0x20, 0xa0, 0x89, 0x0, r1}, 0x6e6bc0}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @offload={0xc, 0x1c, {r2, 0x1}}, @algo_auth_trunc={0xd4, 0x14, {{'blake2s-256\x00'}, 0x440, 0x0, "4cd9bce8dd94a04b4f2ed420d7be7b5f46422bbad659bbad7c2855331ce3cdda7845c3b07359f0df44e08cf6ba3e2277773c2733444fe821fdad325de60a6eb91b5b22c2ca5f11849bafdb953c10034a16975db3da1bd1b6706079e6a84ec09bd480f2866e335844cd2ff3eeed7ac7a0adcd719e0c07613ebf45879826c674f101a0f9b5c49d67d4"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x28}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x200008c0) r4 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000680)=@gcm_256={{0x304}, "a569b97370ebb11e", "40a34bb25d8f0498c18aa8399001639915cf9043432316d669ca66f8ecc0d7a4", "98065c96", "f027aab8763d0845"}, 0x38) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f00000006c0)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/module/pnp', 0xa400, 0x118) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000740)={'\x00', 0x100, 0x1, 0x3}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000007c0)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r6 = getgid() syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x3, &(0x7f0000000ac0)=[{&(0x7f0000000880)="891a764c20d228d49aa5fb35e44656c75abbc2f93133043189b99790a0dd8ef20335e7d84c69df9f6923f5f24ad3a0cb5881f46e331c7178d701b4266ada2e68213f9d71871d65267e44c765a47ccf2eeb799814c19eafb9ede072a395fe126030d9d6739268b3eb31b045a1db758ad44d7cc27520ec140751b7e78f1b1c91750e025d89a0cf88c687bca1bc8d47cc6a766766bf8bc8132a4aa6e21264405fbbc827f5c05de89f0240f48640535b4cb53f8cfdb91d179a2b05fd245c5eaa24b8d1ef7b39a191765b482e4319ef709ccd7bbb9ee354047a3139f7ba1ea008a57c76123e8d52795623475259f72853", 0xee, 0x3}, {&(0x7f0000000980)="0355f0e463c0124fc2ec3d448d2f5a7d2d49e9df9de4f647ed892c432ffb081d89d9135c8ef9db6fc9d396717543499e6a49647fd5a62f396b9d0eab91b9452c9d0125b856707063242592c074ee50eee3a60c6cdd35aa2e7fe502772898bd4a16f1de02c716d0ad7f75f1e7dadf8e4760c185c33119cd3b3a05bc2382b173fe407a5c0f06742500f8738e5b45e588bd08171e58c138ad50703f7a6ad3d87f6f712afee5ccb7af69bf55d2634256e3c2536b3faa8bb4944b08895bfd9c6e0e4573fa798a6670b688fceef21ff9006da4ce3635", 0xd3, 0x1}, {&(0x7f0000000a80)="b3bc6ab006e2db22", 0x8, 0x7}], 0x2000, &(0x7f0000000b40)={[{@utf8}, {@map_acorn}, {@block={'block', 0x3d, 0x100}}, {@block={'block', 0x3d, 0x800}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@check_strict}, {@map_normal}, {@gid={'gid', 0x3d, r6}}, {@session={'session', 0x3d, 0x3f}}], [{@subj_role={'subj_role', 0x3d, '%--:%$\xf3.+#'}}]}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x40c842, 0x32, 0x4}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000c80)) splice(r5, &(0x7f0000000e80)=0x7, 0xffffffffffffffff, &(0x7f0000000f00)=0xfffffffeffffffff, 0xd37e, 0x4) 07:06:42 executing program 2: munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)={0x7fffffff, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x108) r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) r1 = getegid() r2 = fcntl$getown(0xffffffffffffffff, 0x9) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x1, 0xffffffffffffffff, r1, 0xee01, 0xffffffffffffffff, 0x120, 0x1}, 0x0, 0x4, 0x7fff, 0x56, 0x0, r2}) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000680)={0x5, &(0x7f00000005c0)=[{0x10000, 0x95, &(0x7f00000001c0)="cc2d22a5c280fb74e0ffa2d10d7485b0ea7b89831340ff5d1d9e366f8591ba709100dd094c20f3b4e04083464212538378c1aeabfbccfcbede8331618fa9e8478441f07f5d25956a64f1afa5e76d6f0268cfc970594e8d6b4510bc8fcb830fc45f2dbe5c8b15448f566a884e5c8cb6f26ea92609198d4847b394d6997e528a891671a789ef189adad1cd111e894667cd0e78bd18cc", 0x1}, {0x1, 0x27, &(0x7f0000000280)="79196a2b081d39d49561b36a7aa9d4921350fc6a4aac6405e3d33a4fec4c656e98226eab6c636f", 0x0, 0x1}, {0x1f4e0583, 0xd3, &(0x7f00000002c0)="f715df06bf337b8122a4221b8d93c9eea2ee89c1a7bbc0da98e3766f56e3542613e355a2b12269cfba296374807184dd53fefa0f8b6bd3a1855efe42405b6ae25f1d784fb9ebc6a7863a4047d9e6388d97d07200dce193ae1cccdd1a769403ed790d2dec3bbcbab0d5bb2ee9aa05f9fb9109db643f7bf839b17e8093b78d86732d713c812711ed4dbfa14b272ab2946a9ee0b35e54b86900445cb43517338e3c5d785af66d88ce014e2d53e3582c70b4fc88faa140574312754d1474a96fa9e0466cb09618397f271a1c7d65d86f3eff8addf5", 0x0, 0x1}, {0x9, 0xde, &(0x7f00000003c0)="8e47781537239b7b4e40bb6ef446d2dc321b560b5e856790fc88cb225930712f01019c7fbfc92121f39922b68fb6622117242790ed3d4af987fc51b4e1eabb49a86ab46602a4603d95515c3a40852b76b470b9a72bf48429da4ad7ab2155c1db836ee416f45c7e5a57386bfeff80f8b3bf5d716803fc703cf95f907b284366486344fdebe6ade4ec5d0a84c2d67cbdcda09d65cc2805b8f51420087b251d915e37fd0901fbf4ad927e2365c5020c2418edc5053a51edaadc408197b0444eda2fe09167a0d85cb4249c377b5a45e2bfd63908a26854cac02cb18545e8d558", 0x1}, {0x5, 0xdc, &(0x7f00000004c0)="19e2af3b7a0671870c925f2c39f5a3f24dc3e90ab31dbefe3182a4c943f7e62512d5fd88b55192a3806a4f0f25d939c07fd0e84edaa54624f960385e0da65568c0fe7fa7be1a69661607fbe2736db2f6af5568da9b4ca1aa58685316c1d0e715945535f37dfcc8b7ff0eabeafa57400e7bd418c31ade51ca9aa0f18d4961f23923a5d9d47f24c797a7709f8570ac0ad1f695d8b97f91edea25a0935886f35969cb32f0090bffbec67f905b5bb3edd8e8e95f137051bfcf9ce32f1b6994928c59791b8b6dc269dda38153abd4be7ecfa762299c67a6b1cbe2d727eb23"}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000700)={0x9, 0x20, 0x5, 0x4, 0x2, [0x6, 0x0, 0x3ff, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1a4, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "91b9c86439a7263cc13417adfde10f7e2b341e278fa93bd4"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "6227bd26adb7ee2e5d1460148429f9eac4210d0a66403fb3e21b549ffa52d95d"}}, @TIPC_NLA_NODE_ID={0x43, 0x3, "bc7d50a016e9f9d90fb4c75314204bb3969014a42482912ea859a733e1859cc2d6a3fb068d8f8a2842ed62d11f9a0f1ed7b05c75c599d5ee09620d85c0d520"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ID={0x63, 0x3, "1e0730d8e8c10e08aeff45e373662a6e553bbc68e259c438955d93e9541d5f44785127a2e93ed1b6aa2dafc1d6738638c7975a69175e68291c327ea523df5fbf565ed6fa756998ff48cc826a159c8067f387803d9fa1fc99cefe36b455a38a"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004011) r5 = signalfd(r3, &(0x7f00000009c0)={[0x8]}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000a00)={0x7, 0x80, 0x800, 0x8000}, 0x10) setregid(r1, r1) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a40), 0xc002, 0x0) ioctl$CDROMREADALL(r6, 0x5318, &(0x7f0000000a80)) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000001500)=0x40) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000001540)) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x6c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x50}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4a, 0xbe, "178f2871e384a7d141bb5d8e6ce52c1e1565bb530c9d7a62c700cd8216b38db883d6438b5bf5dd7cd774ec8c717d7ccebf4e89517fdc0139603d549f52f5af008cf4c0825624"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40011}, 0x80) 07:06:42 executing program 3: recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/21, 0x15, 0x141, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0, 0x11}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0xffffffffffffffff, r0, 0xee01}, 0xc) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101040, 0x14) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000480)={0x0, @phonet={0x23, 0x0, 0x0, 0xef}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)='veth1_to_hsr\x00', 0x80, 0x5, 0x6966}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000500)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = accept(r2, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000005c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000640)={0x77359400}, 0x10) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x50300, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f00000006c0)) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x10001, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x48001) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) [ 127.268018] audit: type=1400 audit(1750748802.874:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:06:42 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, @llc={0x1a, 0x1c, 0x9, 0x6, 0x3, 0x4}, @hci={0x1f, 0x2, 0x24e3d475c721cbbd}, 0x85b, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='macvlan0\x00', 0x8, 0x6, 0x6}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/thermal', 0x80000, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x200}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c0}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x254, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9051}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0xb, 0x16, 0xb, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x183, 0x80, 0x86, 0x5, 0xb4f1, 0x71, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x401, 0x2, 0x3ff, 0x401, 0xb5, 0x8, 0x400]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x18, 0x61, 0xb, 0x30, 0x6]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x12, 0x6, 0x36, 0x30, 0x60, 0x50, 0x48, 0x18, 0x6, 0x5, 0x30, 0x48, 0x60, 0x48, 0x7666d414d5a5bb27, 0x5, 0xb, 0x24, 0x0, 0x18, 0x18, 0x6, 0x60, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f, 0x6, 0x7f, 0x2, 0x3d7, 0x7ff, 0x8001, 0xf453]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x16, 0x1b, 0x1, 0x4, 0x2, 0xc, 0x12, 0x5, 0x6, 0x3, 0x4, 0xa, 0x5, 0xc, 0xc, 0x16, 0x4, 0x1, 0x1, 0x48]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x6}, {0x2, 0x1}, {0x2, 0x5}]}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xe9, 0x8, 0x81, 0x6, 0x7, 0xf28]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0x2, 0x12, 0x6c, 0x6c, 0x1b, 0x1b, 0x4, 0x34, 0x4, 0xb, 0x1b, 0x30, 0x6c, 0x2]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x1}, {0x5, 0x6}, {0x3, 0x3}, {0x1, 0x4}, {0x4}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x4, 0x18, 0x36, 0x4d]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x60, 0x1, 0x16, 0x6c, 0x16, 0x6, 0x60, 0x36, 0x4, 0x18, 0x18, 0xc, 0x68, 0x30, 0x1, 0x18, 0x12, 0x30, 0xb, 0x6, 0x1b, 0x1b, 0x9, 0x24, 0x36, 0x5, 0x4, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x4, 0x7, 0x7, 0x0, 0x8, 0x1000]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0xb, 0x60, 0x0, 0x24, 0x3, 0x24, 0x30, 0x12, 0x36, 0x18, 0x1b, 0xc, 0x16, 0x68, 0x6, 0x30, 0x4, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0x1}, {0x3, 0x9}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0x2}, {0x7, 0x2}, {0x3, 0xa}, {0x0, 0xa}, {0x7, 0x6}, {0x6, 0x3}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x6, 0x2}, {0x1, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x5}, {0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x4, 0x1d}, {0x3, 0x4}, {0x3, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x1}, {0x2, 0x9}, {0x5, 0x9}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x9}, {0x6}, {0x7, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x18}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6abd, 0x1, 0x0, 0x7, 0x62, 0xb43a, 0xfff, 0x9]}}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]]}, 0x254}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x20000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x5}}, {@posixacl}, {@cache_none}, {@cache_fscache}, {@version_9p2000}, {@mmap}, {@cache_fscache}, {@access_any}], [{@hash}, {@fsname={'fsname', 0x3d, '$'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@permit_directio}, {@audit}]}}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe50, 0x56}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x20001010}, 0x4000) r1 = openat$cgroup_ro(r0, &(0x7f0000000840)='cpuset.memory_pressure\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xe22}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000009c0)={r1, 0x7, 0xff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r0) accept4$packet(r0, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14, 0x400) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r3, 0x425, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20008011) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x5004}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, r5, 0x10, 0x70bd2b, 0x5f2763b2, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) getcwd(&(0x7f0000000d40)=""/4096, 0x1000) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001f80), 0x80000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r1) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000002140)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0xb8, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x269}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x163}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x72}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x279}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x198}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0xb8}}, 0x0) r8 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000002180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0/file0\x00'}) 07:06:42 executing program 5: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x5) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xfa, 0xfffffffb, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xa}, 0x20, 0x8000, 0x0, 0x9}}) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000500)={0x7d6}, 0x4) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000680)={0x1, 0x0, 0x1000, 0xd0, &(0x7f0000000540)="831110c12382fddf16ef387852ff0b88dc04f782c1f21223df1aebffa847fd1ad85f3bec219ede2bb94258edbc01d61450ea278eb381f3b7ed139f133dfea172c0dd2f524f39cb1fc9a6ba5bb47439877af10c74759e1958e1482f6efed1fb845e20457a569fb8943065f257862994496c86cd9e2b2bdb755d456fa3585853679f0ba3f6ebcfd7dce4015279064dc3d0d5daf53b01b76dc21c71101670ce8eec3a14dd955d09cdb4af5cce1a6270233abe4c06a8eab32e25d0ba7f7b26d1a58a6edbf8acdc873a68c180eb41e3724187", 0x3b, 0x0, &(0x7f0000000640)="da729328adeac053dd9a370df9594734b0edfe8078b8f41353e7ad0df8fa1296f2c433da89dc2d810a775b0aadc2543da9729edfb7ab1b39c80156"}) write$snapshot(r0, &(0x7f0000000700)="bc719154951625ba209feccb659651df52d1e19c42c0d9a589cb52c236656f61c80b9b0b6241bcebca3b01c4acb965a751696431fef80b9ceae0d8d82af559af745b2a3034f0174b77fcce29e7fef48bc55d3b999f98b846c6675f35e72778e3b8d9693f5c8f3f8792", 0x69) r1 = accept4$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14, 0x80800) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x400040, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000840)={0x6, 0xc}) r3 = fsmount(r0, 0x1, 0xd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x84808120}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x7c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "c0f08e1d30a8c6bf78d57b75f2227a08"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6437506021b2f5e2296e5617b9298f46"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3797727fa9b723a4294ff709c390cd10"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "4654eca3ff5c0bf4aa5590c57a336f06"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20009800}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7301}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x8000) 07:06:43 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9d}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1c6f6d42aba98986"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f9928d532e046dba94611311bae30217"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd68a89b531d17fdf}, 0x4000000) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000080) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x4, 0x14, &(0x7f00000002c0)=""/202) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x400c050) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000844) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000640), r5) r6 = syz_open_dev$vcsn(&(0x7f0000000680), 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f00000006c0)) r7 = open(&(0x7f0000000740)='./file0\x00', 0x40102, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x80000) syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), r9) 07:06:43 executing program 7: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1e8, 0x24, 0x800, 0x70bd28, 0x25dfdbfb, {0x14}, [@generic="280c674affaf792e02344c3988bfd4a8b83a5a8b6b525222736928c8f43bfd44b0f3c675a1804bfae27abb58df8fa88b1b74e6123821f92a70ecb8abcf081bf233897f04f601a41820052f85981e8c84847328d3a6045a2f23372a6636d438a2a1c9a2675789df1e94aad080099c65da9afbca43c5ad057d44edde2fbe808287b226bf44ba284e1762c2814ae7597fec867cc3d6b946ee67ff2857733d2267a86e21a6580c6f74bea2e53420470d21567ea6ca8024404b5d0d5b45e19c3b470eb8ae2582aee0c4a787bc1fbefcb640209bbaa053e3c2667f68996e99fe2f1777d57d25de", @typed={0xe8, 0x12, 0x0, 0x0, @binary="f561bc4dc26a516e069b105f4bf7d181358b2818b3ba864916ff1842901301bc9f61a8c208d171587e11ab40447574b857424e47775b37aa150f528d5c8a5edfb643e1abe218ba911b02cce28d3b4d9a83a38ba014720f196ad38be03a6f4e2af08b265b3ca1e81189119ff05dd53b07532551710188a19e8a936c31122e6d956543fafc29acd5db24602d12ddc387efa6f8e718ba5642a2613e43502ae1bedc3f212a9e5d9a12ffef91821c98450bc4a01e5f704fbf3c58c65ee57996cc6c20ac4e4a663631a74bd3c04a81f820a760c79ad5728d91a60730ccd97276d194d72ea5ff3c"}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r0, 0x0, 0x2, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x35}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x20, 0x2f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800a1}, 0x1) r2 = accept4(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000005c0)=0x80, 0x80800) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, 0x2, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x400}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xa}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x400000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000007c0)=0xffff, 0x4) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000800)={@multicast2, @rand_addr=0x64010100}, 0xc) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x40010) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000002a40)=[{{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c40)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/212, 0xd4}], 0x2, &(0x7f0000000e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000f80)=""/134, 0x86}, {&(0x7f0000001040)=""/220, 0xdc}, {&(0x7f0000001140)=""/41, 0x29}, {&(0x7f0000001180)=""/106, 0x6a}, {&(0x7f0000001200)=""/36, 0x24}, {&(0x7f0000001240)=""/19, 0x13}, {&(0x7f0000001280)=""/144, 0x90}], 0x7}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002400)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002580)=""/9, 0x9}, {&(0x7f00000025c0)=""/167, 0xa7}, {&(0x7f0000002680)=""/146, 0x92}, {&(0x7f0000002740)=""/118, 0x76}], 0x4, &(0x7f0000002800)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000002880)=@abs, 0x6e, &(0x7f0000002940)=[{&(0x7f0000002900)=""/57, 0x39}], 0x1, &(0x7f0000002980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}], 0x5, 0x10000, &(0x7f0000002b80)={0x77359400}) io_submit(0x0, 0x3, &(0x7f0000002cc0)=[&(0x7f0000000a80)={0x0, 0x0, 0x0, 0x8, 0x5, r3, &(0x7f00000009c0)="7000cc62fb63eecb34821974700a3404f9b2ec5d3c614ddcf1e3fe50783ca00af6bf5c79132ee9906545a3ab20d62328d92020cea4cb4aa82afd26ff28287b2f33f3fe8475239ceca5b10fa32adb1dede8c41e4693ffead9554c268814aea8b83c1d207ebc0bc6c43fe5c181e40531b86c2672f0a4446e35c27215c4c2de833ae004e433227cf34932f3e46d0407010e7cf3688766f1371ee8bf35eb257163", 0x9f, 0x5, 0x0, 0x1, r3}, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x1000, r5, &(0x7f0000000b00)="871ce9c65ce2ae65e1b57cd1ce1754d731e86c7653d6307ac4713233f1020d35d1594b8683d59bfe800369ab8bd761adb014e495479d8703e7fc0df461ffe9e2fd3dd02d9712b81fe229f5ab99c1b6f97e0064cd84de04171ec4abcda3b5b200907ea170ad2ac65625838220516c5e6b155f5aceba9fa72a75eace9ee48db86b5f917f9a05c87a0a40e719f54ec816dadc69d87f", 0x94, 0x1, 0x0, 0x2, r7}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x2, 0x2, r2, &(0x7f0000002c00)="b8ac0e696efdf720fe6be4b3913bbccdb549fda78033c1e77c9d7d69bc04136f216cc64bc7e2985d6311eb2c401904b05c6c060967e34de65cc8e10654ef0f07bed90af93f172b424dca02d258ec", 0x4e, 0xac, 0x0, 0x1, r3}]) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d40), r6) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000002e80)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x44, r10, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x44}}, 0x20000010) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r12, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8014}, 0x0) [ 128.752964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.756310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.759379] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.762064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.767088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.770821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.781498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.787679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.795501] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.797480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.855027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.857421] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.859557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.870148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.875814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.938201] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.941207] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.945407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.948319] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.950333] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.953955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.958231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.962566] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.972664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.972772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.981423] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.001055] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.008441] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.010379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.011688] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.031121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.051144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.053432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.059523] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.063260] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.069141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.082107] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.085894] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.093261] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.117894] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.886145] Bluetooth: hci1: command tx timeout [ 130.886156] Bluetooth: hci0: command tx timeout [ 130.950788] Bluetooth: hci2: command tx timeout [ 131.012721] Bluetooth: hci5: command tx timeout [ 131.077026] Bluetooth: hci3: command tx timeout [ 131.141734] Bluetooth: hci4: command tx timeout [ 131.205811] Bluetooth: hci7: command tx timeout [ 131.205939] Bluetooth: hci6: command tx timeout [ 132.934840] Bluetooth: hci0: command tx timeout [ 132.934913] Bluetooth: hci1: command tx timeout [ 132.996684] Bluetooth: hci2: command tx timeout [ 133.060966] Bluetooth: hci5: command tx timeout [ 133.125400] Bluetooth: hci3: command tx timeout [ 133.188938] Bluetooth: hci4: command tx timeout [ 133.253114] Bluetooth: hci7: command tx timeout [ 133.254498] Bluetooth: hci6: command tx timeout [ 134.981116] Bluetooth: hci0: command tx timeout [ 134.981146] Bluetooth: hci1: command tx timeout [ 135.045335] Bluetooth: hci2: command tx timeout [ 135.108782] Bluetooth: hci5: command tx timeout [ 135.173344] Bluetooth: hci3: command tx timeout [ 135.236713] Bluetooth: hci4: command tx timeout [ 135.301423] Bluetooth: hci7: command tx timeout [ 135.301876] Bluetooth: hci6: command tx timeout [ 137.028911] Bluetooth: hci0: command tx timeout [ 137.029426] Bluetooth: hci1: command tx timeout [ 137.092721] Bluetooth: hci2: command tx timeout [ 137.158656] Bluetooth: hci5: command tx timeout [ 137.220699] Bluetooth: hci3: command tx timeout [ 137.284696] Bluetooth: hci4: command tx timeout [ 137.348701] Bluetooth: hci6: command tx timeout [ 137.348749] Bluetooth: hci7: command tx timeout [ 191.003408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.011754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.016175] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.023222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.031940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.198576] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.202267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.204725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.210460] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.214795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.246699] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.250947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.253212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.258431] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.261863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.419424] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.438585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.450981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.452918] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.457303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.459255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.491252] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.495468] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.504742] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.514465] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.516095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.523933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.525835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.527428] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.538305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.550761] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.599439] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.602091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.602462] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.608427] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.612061] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.623189] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.624902] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.689491] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.712416] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.092932] Bluetooth: hci0: command tx timeout [ 193.286132] Bluetooth: hci1: command tx timeout [ 193.348981] Bluetooth: hci2: command tx timeout [ 193.669227] Bluetooth: hci3: command tx timeout [ 193.733718] Bluetooth: hci5: command tx timeout [ 193.735563] Bluetooth: hci6: command tx timeout [ 193.736519] Bluetooth: hci4: command tx timeout [ 193.861281] Bluetooth: hci7: command tx timeout [ 195.141424] Bluetooth: hci0: command tx timeout [ 195.333964] Bluetooth: hci1: command tx timeout [ 195.397001] Bluetooth: hci2: command tx timeout [ 195.717744] Bluetooth: hci3: command tx timeout [ 195.780802] Bluetooth: hci6: command tx timeout [ 195.781281] Bluetooth: hci4: command tx timeout [ 195.781865] Bluetooth: hci5: command tx timeout [ 195.909197] Bluetooth: hci7: command tx timeout [ 197.188697] Bluetooth: hci0: command tx timeout [ 197.380725] Bluetooth: hci1: command tx timeout [ 197.444676] Bluetooth: hci2: command tx timeout [ 197.764761] Bluetooth: hci3: command tx timeout [ 197.828740] Bluetooth: hci5: command tx timeout [ 197.829197] Bluetooth: hci4: command tx timeout [ 197.829595] Bluetooth: hci6: command tx timeout [ 197.956866] Bluetooth: hci7: command tx timeout [ 199.237896] Bluetooth: hci0: command tx timeout [ 199.428690] Bluetooth: hci1: command tx timeout [ 199.492937] Bluetooth: hci2: command tx timeout [ 199.814799] Bluetooth: hci3: command tx timeout [ 199.876994] Bluetooth: hci6: command tx timeout [ 199.877471] Bluetooth: hci4: command tx timeout [ 199.878092] Bluetooth: hci5: command tx timeout [ 200.004737] Bluetooth: hci7: command tx timeout [ 253.275499] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.280546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.283586] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.292370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.297045] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.350552] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.356904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.359519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.368907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.377483] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.552363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.559451] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.563289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.574094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.577554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.635230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.643367] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.662130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.673902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.688575] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.746588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.751358] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.761325] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.794881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.801212] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.803574] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.807837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.809673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.823325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.827452] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.850072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.851992] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.855263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.857227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.862336] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.865491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 253.921352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.925509] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.069397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.076514] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.365002] Bluetooth: hci0: command tx timeout [ 255.428848] Bluetooth: hci1: command tx timeout [ 255.621786] Bluetooth: hci2: command tx timeout [ 255.813129] Bluetooth: hci3: command tx timeout [ 255.876838] Bluetooth: hci5: command tx timeout [ 256.005023] Bluetooth: hci4: command tx timeout [ 256.006061] Bluetooth: hci7: command tx timeout [ 256.262701] Bluetooth: hci6: command tx timeout [ 257.412844] Bluetooth: hci0: command tx timeout [ 257.477816] Bluetooth: hci1: command tx timeout [ 257.669667] Bluetooth: hci2: command tx timeout [ 257.860735] Bluetooth: hci3: command tx timeout [ 257.924756] Bluetooth: hci5: command tx timeout [ 258.053019] Bluetooth: hci7: command tx timeout [ 258.053040] Bluetooth: hci4: command tx timeout [ 258.308874] Bluetooth: hci6: command tx timeout [ 259.461048] Bluetooth: hci0: command tx timeout [ 259.526642] Bluetooth: hci1: command tx timeout [ 259.717137] Bluetooth: hci2: command tx timeout [ 259.908707] Bluetooth: hci3: command tx timeout [ 259.973679] Bluetooth: hci5: command tx timeout [ 260.100847] Bluetooth: hci7: command tx timeout [ 260.101820] Bluetooth: hci4: command tx timeout [ 260.356686] Bluetooth: hci6: command tx timeout [ 261.508934] Bluetooth: hci0: command tx timeout [ 261.573088] Bluetooth: hci1: command tx timeout [ 261.764693] Bluetooth: hci2: command tx timeout [ 261.956696] Bluetooth: hci3: command tx timeout [ 262.020854] Bluetooth: hci5: command tx timeout [ 262.149497] Bluetooth: hci4: command tx timeout [ 262.149762] Bluetooth: hci7: command tx timeout [ 262.404704] Bluetooth: hci6: command tx timeout [ 315.927588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.936835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.939392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.955474] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.963505] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.189264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.194923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.207536] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.220233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.223782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.231150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.238188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.240585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.242527] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.249438] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.254181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.259439] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.264349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.296320] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.304195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.378094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.397150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.403424] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.413238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.432052] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.437231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.443208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.452165] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.454569] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.462802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.465025] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.489096] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.504363] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.572164] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.584174] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.606190] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.613203] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.630167] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.658223] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.680238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.020707] Bluetooth: hci0: command tx timeout [ 318.341070] Bluetooth: hci1: command tx timeout [ 318.342008] Bluetooth: hci3: command tx timeout [ 318.533765] Bluetooth: hci4: command tx timeout [ 318.596704] Bluetooth: hci5: command tx timeout [ 318.597369] Bluetooth: hci2: command tx timeout [ 318.661970] Bluetooth: hci6: command tx timeout [ 318.788734] Bluetooth: hci7: command tx timeout [ 320.069823] Bluetooth: hci0: command tx timeout [ 320.389985] Bluetooth: hci1: command tx timeout [ 320.390476] Bluetooth: hci3: command tx timeout [ 320.583635] Bluetooth: hci4: command tx timeout [ 320.644925] Bluetooth: hci2: command tx timeout [ 320.645404] Bluetooth: hci5: command tx timeout [ 320.709880] Bluetooth: hci6: command tx timeout [ 320.836984] Bluetooth: hci7: command tx timeout [ 322.116800] Bluetooth: hci0: command tx timeout [ 322.436980] Bluetooth: hci3: command tx timeout [ 322.437465] Bluetooth: hci1: command tx timeout [ 322.629708] Bluetooth: hci4: command tx timeout [ 322.693714] Bluetooth: hci5: command tx timeout [ 322.694188] Bluetooth: hci2: command tx timeout [ 322.757701] Bluetooth: hci6: command tx timeout [ 322.886252] Bluetooth: hci7: command tx timeout [ 324.165646] Bluetooth: hci0: command tx timeout [ 324.485789] Bluetooth: hci1: command tx timeout [ 324.486288] Bluetooth: hci3: command tx timeout [ 324.676999] Bluetooth: hci4: command tx timeout [ 324.740804] Bluetooth: hci2: command tx timeout [ 324.741251] Bluetooth: hci5: command tx timeout [ 324.805929] Bluetooth: hci6: command tx timeout [ 324.933682] Bluetooth: hci7: command tx timeout [ 378.520250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.523690] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.528128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.535139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.539109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.591079] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.601286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.603504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.625673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.635721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.715137] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.727153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.742423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.768244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.780363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.839019] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.843097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.845975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.864256] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.897501] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.919506] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.929231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.933879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.960311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.969202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.036725] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.047861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.052170] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.054339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.066239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.089004] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.115842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.137881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.154149] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.179919] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.182391] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.186110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.220097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.232667] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.247093] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 380.612695] Bluetooth: hci0: command tx timeout [ 380.741727] Bluetooth: hci1: command tx timeout [ 380.868688] Bluetooth: hci2: command tx timeout [ 380.996977] Bluetooth: hci4: command tx timeout [ 381.060742] Bluetooth: hci3: command tx timeout [ 381.319786] Bluetooth: hci6: command tx timeout [ 381.320555] Bluetooth: hci5: command tx timeout [ 381.380696] Bluetooth: hci7: command tx timeout [ 382.660855] Bluetooth: hci0: command tx timeout [ 382.790637] Bluetooth: hci1: command tx timeout [ 382.918643] Bluetooth: hci2: command tx timeout [ 383.045899] Bluetooth: hci4: command tx timeout [ 383.108683] Bluetooth: hci3: command tx timeout [ 383.364914] Bluetooth: hci5: command tx timeout [ 383.365391] Bluetooth: hci6: command tx timeout [ 383.428918] Bluetooth: hci7: command tx timeout [ 384.708721] Bluetooth: hci0: command tx timeout [ 384.836676] Bluetooth: hci1: command tx timeout [ 384.966644] Bluetooth: hci2: command tx timeout [ 385.093665] Bluetooth: hci4: command tx timeout [ 385.156989] Bluetooth: hci3: command tx timeout [ 385.412827] Bluetooth: hci6: command tx timeout [ 385.413336] Bluetooth: hci5: command tx timeout [ 385.476775] Bluetooth: hci7: command tx timeout [ 386.757653] Bluetooth: hci0: command tx timeout [ 386.884881] Bluetooth: hci1: command tx timeout [ 387.013781] Bluetooth: hci2: command tx timeout [ 387.141861] Bluetooth: hci4: command tx timeout [ 387.205753] Bluetooth: hci3: command tx timeout [ 387.461310] Bluetooth: hci5: command tx timeout [ 387.462414] Bluetooth: hci6: command tx timeout [ 387.524711] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 07:11:45 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff85c75228 RCX=ffffffff817413c5 RDX=ffff88801a99b700 RSI=ffffffff8174136b RDI=0000000000000000 RBP=0000000000000001 RSP=ffff888016a4f828 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c75228 R15=0000000000000cc0 RIP=ffffffff81741372 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd06cb56610 CR3=000000002d738000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88803552fee8 RCX=ffff88803552f744 RDX=0000000000000001 RSI=ffffffff85c1cc40 RDI=ffff88801611a600 RBP=ffff888035528000 RSP=ffff88803552f778 R8 =0000000000000001 R9 =ffff88803552f830 R10=000000000003b53d R11=00000000000083e3 R12=ffff88803552f801 R13=ffff88803552f838 R14=ffff88803552feb8 R15=ffff88803552f7f0 RIP=ffffffff815bb020 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffff8b8cfe0 CR3=0000000025a67000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000