Warning: Permanently added '[localhost]:7549' (ECDSA) to the list of known hosts. 2024/10/24 08:16:34 fuzzer started syzkaller login: [ 66.476370] hrtimer: interrupt took 4560529 ns 2024/10/24 08:16:35 dialing manager at localhost:45639 [ 67.606795] cgroup: Unknown subsys name 'net' [ 67.762227] cgroup: Unknown subsys name 'cpuset' [ 67.788883] cgroup: Unknown subsys name 'rlimit' 2024/10/24 08:16:52 syscalls: 201 2024/10/24 08:16:52 code coverage: enabled 2024/10/24 08:16:52 comparison tracing: enabled 2024/10/24 08:16:52 extra coverage: enabled 2024/10/24 08:16:52 setuid sandbox: enabled 2024/10/24 08:16:52 namespace sandbox: enabled 2024/10/24 08:16:52 Android sandbox: enabled 2024/10/24 08:16:52 fault injection: enabled 2024/10/24 08:16:52 leak checking: enabled 2024/10/24 08:16:52 net packet injection: enabled 2024/10/24 08:16:52 net device setup: enabled 2024/10/24 08:16:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/24 08:16:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/24 08:16:52 USB emulation: enabled 2024/10/24 08:16:52 hci packet injection: enabled 2024/10/24 08:16:52 wifi device emulation: enabled 2024/10/24 08:16:52 802.15.4 emulation: enabled 2024/10/24 08:16:52 fetching corpus: 0, signal 0/0 (executing program) 08:16:53 executing program 0: r0 = syz_io_uring_setup(0x1a3c, &(0x7f0000000000)={0x0, 0xd680, 0x1, 0x3, 0x1fb}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x110, r0, 0x8000000) r1 = socket(0x25, 0x800, 0x0) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0xf9, "2a16e15597ef06d90a4e1c94fee8a37c242143fe49559ea11cef4f050b55da764d716432332b07559ad7c7137de43a20e0eb2580725f70e0a0fc0006451198d9a832a77a01e9e66c40538898aef80667dcb5b5b845281ff4e8e304cbd47b3d88af04ec99295fabdb78cf7036f01d2ff8763771caa647e42879120c2512529909a070099b1fd7778a19edd8937123cf9fb55cc017022722b67b80c7c6c5467534def3e1443dcb0747d7f48b9422c586c018ff80c482a647956905e656f49d5bb220ded07eb7f1e693ec120106fbcef2acc366d070df4b275c0a42f76194f5eb34e365dbd6fa0313b4ca97c922012811ccc4693d54d35ad2409f"}, &(0x7f0000000380)=0x11d) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x802, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0xc4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4000051, r0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000580)={'icmp\x00'}, &(0x7f00000005c0)=0x1e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000680)=0x2c) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0xd0800, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r2, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x80, 0xc}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000800), 0xffffffffffffffff) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2220c0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000f00)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000f40)=0x2c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000003cc0)='vlan0\x00', 0x10) 2024/10/24 08:16:53 starting 8 fuzzer processes 08:16:53 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) r1 = accept4$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) clock_gettime(0x0, &(0x7f0000003000)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002f00)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/112, 0x70}, {&(0x7f0000000200)=""/5, 0x5}, {&(0x7f0000000240)=""/170, 0xaa}], 0x4, &(0x7f0000000340)=""/137, 0x89}, 0x80000000}, {{&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/1, 0x1}, {&(0x7f0000001540)=""/174, 0xae}], 0x4, &(0x7f0000001640)=""/44, 0x2c}, 0x8ac}, {{&(0x7f0000001680)=@phonet, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001700)=""/14, 0xe}, {&(0x7f0000001740)=""/71, 0x47}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002800)=""/84, 0x54}, 0x9}, {{&(0x7f0000002880)=@rc={0x1f, @none}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002900)=""/212, 0xd4}, {&(0x7f0000002a00)=""/132, 0x84}, {&(0x7f0000002ac0)=""/113, 0x71}, {&(0x7f0000002b40)=""/193, 0xc1}, {&(0x7f0000002c40)=""/41, 0x29}, {&(0x7f0000002c80)=""/115, 0x73}, {&(0x7f0000002d00)=""/134, 0x86}], 0x7, &(0x7f0000002e40)=""/143, 0x8f}, 0xfffffffe}], 0x4, 0x40, &(0x7f0000003040)={r2, r3+60000000}) clock_gettime(0x0, &(0x7f0000003140)={0x0, 0x0}) select(0x40, &(0x7f0000003080)={0x558, 0x8, 0x4, 0x2, 0x6, 0x7, 0x6, 0x8}, &(0x7f00000030c0)={0x8236, 0xffffffffffffffa7, 0x1000, 0x5, 0x4, 0x101, 0x6, 0x10000}, &(0x7f0000003100)={0x6, 0xa375, 0x40, 0x200, 0x4, 0x4, 0x14ed993, 0x6}, &(0x7f0000003180)={r4, r5/1000+10000}) clock_gettime(0x0, &(0x7f00000058c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000005740)=[{{&(0x7f00000031c0)=@phonet, 0x80, &(0x7f0000003240), 0x0, &(0x7f0000003280)=""/236, 0xec}, 0x5}, {{&(0x7f0000003380)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003400)=""/171, 0xab}, {&(0x7f00000034c0)=""/103, 0x67}, {&(0x7f0000003540)=""/170, 0xaa}], 0x3, &(0x7f0000003640)=""/51, 0x33}}, {{&(0x7f0000003680)=@alg, 0x80, &(0x7f0000003980)=[{&(0x7f0000003700)=""/73, 0x49}, {&(0x7f0000003780)=""/211, 0xd3}, {&(0x7f0000003880)=""/43, 0x2b}, {&(0x7f00000038c0)=""/177, 0xb1}], 0x4, &(0x7f00000039c0)=""/123, 0x7b}, 0x4}, {{&(0x7f0000003a40)=@tipc=@name, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003ac0)=""/24, 0x18}, {&(0x7f0000003b00)=""/178, 0xb2}, {&(0x7f0000003bc0)=""/36, 0x24}, {&(0x7f0000003c00)=""/32, 0x20}], 0x4}, 0x1}, {{&(0x7f0000003c80)=@nl=@unspec, 0x80, &(0x7f0000005180)=[{&(0x7f0000003d00)=""/102, 0x66}, {&(0x7f0000003d80)=""/28, 0x1c}, {&(0x7f0000003dc0)=""/239, 0xef}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/185, 0xb9}, {&(0x7f0000004f80)=""/219, 0xdb}, {&(0x7f0000005080)=""/251, 0xfb}], 0x7, &(0x7f0000005200)=""/177, 0xb1}, 0x7}, {{&(0x7f00000052c0)=@l2, 0x80, &(0x7f0000005600)=[{&(0x7f0000005340)=""/72, 0x48}, {&(0x7f00000053c0)=""/132, 0x84}, {&(0x7f0000005480)=""/128, 0x80}, {&(0x7f0000005500)=""/75, 0x4b}, {&(0x7f0000005580)=""/77, 0x4d}], 0x5, &(0x7f0000005680)=""/152, 0x98}, 0x5}], 0x6, 0x21, &(0x7f0000005900)={r6, r7+60000000}) pselect6(0x40, &(0x7f0000005940)={0x1, 0x62, 0x80, 0x6, 0x2, 0x4, 0x7ff, 0x5}, &(0x7f0000005980)={0x80000001, 0x6, 0x7, 0x100000000, 0x7, 0x7fff, 0xffff, 0x3f}, &(0x7f00000059c0)={0x0, 0x6, 0x7f, 0x6, 0x3, 0x2, 0x7, 0xffffffffffffff52}, &(0x7f0000005a00), &(0x7f0000005a80)={&(0x7f0000005a40)={[0xfff]}, 0x8}) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000005ac0), 0x400, 0x0) execveat(r8, &(0x7f0000005b00)='./file0\x00', &(0x7f0000005c40)=[&(0x7f0000005b40)='/dev/bsg\x00', &(0x7f0000005b80)='\x00', &(0x7f0000005bc0)='/dev/bsg\x00', &(0x7f0000005c00)='/dev/bsg\x00'], &(0x7f0000005d80)=[&(0x7f0000005c80)='/dev/bsg\x00', &(0x7f0000005cc0)='\x00', &(0x7f0000005d00)='+*{\n%:\x00', &(0x7f0000005d40)='/dev/bsg\x00'], 0x1000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e00), r8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000005f00)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005e80)={0x34, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000051}, 0x90) pipe2$9p(&(0x7f0000005fc0)={0xffffffffffffffff}, 0x84000) r12 = getuid() mount$9p_fd(0x0, &(0x7f0000005f40)='./file0\x00', &(0x7f0000005f80), 0x80002c, &(0x7f0000006100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@cache_mmap}], [{@euid_lt={'euid<', r12}}, {@hash}, {@audit}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@uid_gt}]}}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000006280)={&(0x7f00000061c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006240)={&(0x7f0000006200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f00000063c0)={&(0x7f00000062c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006380)={&(0x7f0000006300)={0x5c, r9, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x20495b0f9d06089d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f99fed25b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x11) futimesat(0xffffffffffffffff, &(0x7f0000007600)='./file0\x00', &(0x7f0000007640)={{0x0, 0xea60}}) 08:16:53 executing program 3: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x40000, 0x8e) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x897fd5781f5640a5, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40040) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4801) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f0000000280)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r1, 0x327, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b1363e3169"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x5c}, 0x1, 0x0, 0x0, 0xd4}, 0x40008c5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008854}, 0x20000000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x400180, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f00000006c0)={0x300, r5, 0x12c, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfff, 0x68}}}}, [@NL80211_ATTR_IE={0x2bf, 0x2a, [@mic={0x8c, 0x18, {0x602, "1850f0d2a473", @long="30f0f06ee3aa85c80fbfcb30f8b0b53e"}}, @random={0x10, 0xa1, "6f02b51b68880f8e5d0f295eef97999acacfff02165ea7d3d3492398df3637292e1b466cee418df09956b5557764c2b99c440fdc6ef97bcddd49328f7e50dd9d06404225141831a63d70fe7f7021d3f647cdcca66b0b5b2b64378bfe78d30a513cb66f5cac4d7f1a594822c17fc9f34d542613be3747b8d8195598315792246c6a7912b82814bdec363a004bc1b636f6afe9675b30b1040c7741d8279a09bc43af"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0xef, "c8de92ccd96e9a4bb8093a20ed8f7f29f333855791adae31495e3518fc8c9310eb05922d32463383f7e579337c4ea18eba23d645d93389b5acdd8ef03a298aac18a83b1802e9019c2d1741a03ca47d86e209008e30dc170b0a0e07ecff3944eea59a245e05d20515a27a60530133f8c0c59b4092dbd46feafab138a9e84c180ffb3ee92e8b441762f683ad25ac8bcb947b5cd54c770628476212c375466401b628219083a27d1f244aece696ddcd524322931124fdae75494ac14be7bb69ea38d7acb2cd1cb937dd6353ac2e9127014f524a8d1343013f88b5de9fb4e9cbb91eff59e881c4cc43179c3103f4a5cd79"}, @random_vendor={0xdd, 0xd9, "0e55a864980e075ed48b3decc19d3766a67744542c45589148dfcce3d4c5aeb3a9eac4999b7ff3c57bc5d58c7d8e8feb8497659175a130b9022baf96f11bc3a4c5cd9b195cadd3ca92903c998381bf07fa802df5db23f2f9016a7608dfde94e117a04596a83296701cd115428cd38552c226adb082c94ff6b951525dd5d8a0133b65c066fb2946f44182a9d0aa89d53f03b463cd8894dfdc30124560d54aa7573a1e5ee98b9dac249b569d7c3a7725e19e5b36d1594013c801cdac2d0668c282e91dbd7f8f2600074f1fec5baf524bf100bc974840184ac461"}, @supported_rates={0x1, 0x7, [{0x6, 0x1}, {0x30}, {0x30}, {0x60, 0x1}, {0x5, 0x1}, {0x16, 0x1}, {0x30, 0x1}]}, @rann={0x7e, 0x15, {{0x0, 0x57}, 0xe4, 0x5, @broadcast, 0x189, 0x9, 0x80000000}}, @peer_mgmt={0x75, 0x8, {0x1, 0x27a, @val=0x7ff, @val=0x1a, @void}}]}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x5, 0x77}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6bcd45819943"}]}, 0x300}, 0x1, 0x0, 0x0, 0x40004}, 0x4000040) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x1) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a40)={0xa7, 0xa}) read$ptp(0xffffffffffffffff, &(0x7f0000000a80)=""/4096, 0x1000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001a80), 0x501000, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x29}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000001bc0)) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000001c40)={0x5c, @multicast2, 0x4e21, 0x0, 'wrr\x00', 0x0, 0x9, 0x43}, 0x2c) 08:16:53 executing program 2: kexec_load(0x5, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="82a368aa9cc7e03725849eea275320b133e66d7a02947b4867a0be72ab0985168d734969d81ad9811dbbebf9365f45d45a0c9fdd1a630aff2bcadde3d4f35c1573ffb3853fe332ec9f0af8a47739c970171a006547d7a5874b9592d7b0bb550558c0fc72a5ccd72dc042252f16dfbd782926a99e5b665351d7c35fd9613b9ea241f417829873595f91d3b19ad09a3ed14befb6", 0x93, 0x7fff, 0x9cc6}, {&(0x7f00000000c0)="9b4875e12e0c264bcffd706d8fc47405054d9955b26cb9ff146a1e487bb3f04593cc1bc96b04e52a30895719521a5950d8866ac7765de2df4bac04a473ad550d05f9056aafb37f05ecb2952e615030870866718f8c01af8b5c207244056caecfb86b4781dea4dd7c5ce0c3c66111788809d4ff114d333cb546d9b1aabeebb7e5352d5c072dbcfe804c4b8a8ebee248eb6133e59be0f4696077fde14e2e01d438bc944516727529aab732bf887922e5a2618e070ff66fecaa4d0980d7e0fd6241c4ed2130219c7e4e66f58dd70ecd", 0xce, 0x9, 0x100}], 0x150000) kexec_load(0x5, 0x7, &(0x7f0000000740)=[{&(0x7f0000000200)="e66c9faa1375aba2529c76184a7cf88acfc519ce67d9e82868b13fad3887ea317b2f05151f30c07e1df9f96f153d03234e5ddf7e73518e36d7afc8d123f19228377940db586598ab8def33d6b8a9c384ee13eaa2cc26c2f68e892d3b15cb379849096813b955bbfb1a7439261f1fb92bdb5bc4365614600d2abd0ac08614f8d1ee43991c0cc33914b311c2ac6b6e9090a1d61f9911da1021d9f2e04d6c", 0x9d, 0x7, 0x6}, {&(0x7f00000002c0)="c76a37ebf69a76e3f8448b3ca0d80c712be6e3e6e82bb481d67d7722f590d4aa9f541e93abc23f01dc761ec5412ce2cc816a42c62c94955a14fe6dbbb3be4e7864d6403589d0e00f2a57ec0c1b4b57", 0x4f, 0x9a7, 0x1}, {&(0x7f0000000340)="ffe2d6161f558a46e872bb72dac8b51e122930e235cf63b855749c02088f89e581da4d704057c7f9ce1ac1e136850b6edf2d3223ead1272f5763323a2e1a58a899fa2c913d0319a8e6516b8a7218e31c4d7c1a43004993678b5a5d548952bbeebbdc1512d42a9e854b7bba33b96887438e568a9662ea1a542b4604fbd8cb31c51a88651377575f73f3cef8e55962e198c0b37ea87f2d8c187053bbc02a2d38eb2c3460fa5f5ca8c4ca7dbdc5d7e72f0987485c55c170a29aaa197cd0abd9b99df00893799258", 0xc6, 0x7f, 0xff}, {&(0x7f0000000440)="9b9f724fa0bc5ebc39e5", 0xa, 0x4, 0x4}, {&(0x7f0000000480)="4ba0eeb017799f7634ad9233476345cf605b76e27acafd944298e92fd14c16fb7e78aa6fa4e9c7d41a93aa646bfdbc111c72a499512f40f7cb92713cdf5928411ee90c88666ae3e41c125d6187e8964d6828d7c45d193cbe5b8e0eefa75a36ce92421f990d9ba195b6771c5821af808337d72a1c2b58c8f0ceb7ba19930f5f162a236e57b995d6e345c6528163266f7df7ea38cf88b7030c738490d1ff57574e9461db573e8253515f15db497a51051c05712635ba47306b416edc55e535dbf442ceaacdfa5fad23c2e9289b7273fb62", 0xd0, 0x80000001, 0xffffffffffffffe0}, {&(0x7f0000000580)="f5d794e12fcefefd32518452df876abbc9837613fd7f6076f2b525b6070e02df42927d564bbf37757e5db7a3d6eff2dafc2e2c848909c8ee3e9ee47d29e2da28c8a5e7b28252d66ebf297ccf17fc0098d1fbefcc6535bd72736fb13d0f2e3dbded92916adb7d110d7936d5376973ef82561d57c73c24b95b49f25293ea58c9a577c014e3dfa8717374a5c57a113978377c2098d95f0d7e78abd5cda79e09213bf511a0df3a3d82f9d204871dd2e883fc1832b2f73d3a6f2454851e197b3140315f2d70443e68e536305e55b80157ba8a88c27b34ffd8", 0xd6, 0x81, 0x3}, {&(0x7f0000000680)="095108c34baf42b76fbc70903949cb2165bbb53bc2359614c620beefb5958130b52e2fdb4f19c4bba83bbb0758d1cda2c5a74a566311aaa9e3c6d25562a123e558abbd33df1f72e2b1ce7862be9f6cc0b64177f3986fddba6067a06dafa0d4165b8d10512443ff0f8718d4fc56f8747ea150725b6ae85181ef4201d74175c7ecabf4c77462d67e0b51b0", 0x8a, 0x400, 0x387c14d9}], 0x1) r0 = getuid() wait4(0xffffffffffffffff, &(0x7f0000000840), 0xc1000000, &(0x7f0000000880)) kexec_load(0x5, 0x4, &(0x7f0000000b80)=[{&(0x7f0000000940)="563a38a45a1a3dae9aaaf2", 0xb, 0x4, 0x70d85d39}, {&(0x7f0000000980)="1962201f8c37b1e7a602117ea95936f2cd5e7a2641c53e4dfc1237264ccca85c89cfa16e33f8fff639a473e4d949d094b5621af89203695b4b7e1c86ba5cb722dafa92998189881877ec903be6a0ce50b86c323c4ed3a996baff930a9cbaac24e147fa9cb678ecf42434ccee5bd4c758a09fdb28744efbc7c7e7aa6da48d493aba16ee9bb68197792cd462023477cebfb7e05293b4f5d2e69e486baaf12d8c55ae6f4e708ebc6ca46077adbca1c5ecdae92b553e6718fb35125fb3", 0xbb, 0xcc, 0x7}, {&(0x7f0000000a40)="75193ea441694fc9577809cad98cee594f7dd058f1cee8a124e1844bfcdd882dec93c7c006f39ff3f572809a5508bd944967e11708d0400485702088ae84617baada667d81bf3decf73e1b7c687f8a45d2fecbb6f6696e1ad176cfed9ae68ab85f358b6ea26d6482bc964e191909c5a79443", 0x72, 0x90, 0x6}, {&(0x7f0000000ac0)="862d3302199fed0faf60156ab6ed06a7a293a82dc29a1410138e2051696cac29629712ba1d925e36e024b9c47b7f5491e2e785d73d95d35fd0aaa96327d8b7066a843878e3b76faeaff66f51b1d04d965e9aeac31798b5a783eee7bba1ac79b07a225a50c47bbed052fdf9c6b2813966506a33cd0f5ec4aa4586a65e355dd9faad048bc271de7d4c5041", 0x8a, 0x8, 0x80000001}], 0x280000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x50000, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000c40)={{0x3, 0x510}, {0x4ba, 0x2a}, 0x3}) r2 = getuid() syz_mount_image$iso9660(&(0x7f0000000c80), &(0x7f0000000cc0)='./file0\x00', 0x4, 0x3, &(0x7f0000000f00)=[{&(0x7f0000000d00)="44a5253b0227f5b7e40cfdc7adb283f9f8ba217f876a821ec9fda144e377e7257043fd4bef5e045d7495dcbe4928329f0ed8f1fd285ea4ffc4a828128134f6ee9fee4da4a427d61cd106de720947922eabfa2675cf3906ea3bbbbfb0c527f8737f4acb875a6ab08766671432c4a1f62a411351e8a1bf32406f9289aa8809d23a59650d4a2a26", 0x86, 0x1}, {&(0x7f0000000dc0)="230a75560f6b7ab564ec7e28e3b199f7967d2b6d2d8a85372128e4251c4be462", 0x20, 0x100000001}, {&(0x7f0000000e00)="66ff28b80666302be1e3aaf8c2d03c18bc6512d4378ca8fb7e22e0be3abeddce6b54debbfcf84007cbaca0f2c0ef1caa0cce23a8c8763efa4ffb6c09266ef8e74666ccb4b5ee6058347709f199a40518600cf08fe424369db295749ef5a20c5a18c49f8631de4cf9af618126a6b447487076bebdf314c57ecdefe2048d642d0766d49e781b4cdfd2d7b6008982cc64a5df643db1a0672dfd9d7578e4c04c705a1e3f8aebd85441f6e179b863595c003edc744ebd7755fede41013827df0e4d09449b7016360817d76c8db5c74185ebba5f204f1ef29e143ff6d9e2fbf9b677edc1bfc87a9581428a8fb79eb8a77d34d3f74bb409076b5e73", 0xf8, 0x8da}], 0x18000, &(0x7f0000000f80)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@map_normal}, {@nocompress}, {@nojoliet}], [{@euid_eq={'euid', 0x3d, r0}}, {@uid_eq={'uid', 0x3d, r2}}]}) r3 = io_uring_setup(0x79b8, &(0x7f0000001000)={0x0, 0xf508, 0x10, 0x3, 0x347, 0x0, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x2010, r3, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000001080)={@local, @private, @local}, &(0x7f00000010c0)=0xc) r4 = fsopen(&(0x7f0000001100)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000001140)='nolazytime\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000001180), &(0x7f00000011c0)='./file0\x00', 0x1, 0x5, &(0x7f0000001500)=[{&(0x7f0000001200)="403783e21a9d20c3746512034c87b38507c5efda33d9e3e0c6835da571f0025bcde603b1443672ce6c5167b9314cd5803049767a65a6c569e38fba24c9783073d30a2d96c7309f9ede4d0992c5a7ec9ec8d4b83ab2c42d77b73bbd320673bacc9256e6961c87d76f7a0dfc1c6358288a963eb3", 0x73, 0x10000}, {&(0x7f0000001280)="683681367f8a1d55948853bcd33f0c18796c86e34153bffe073ed496f8fa", 0x1e, 0x5}, {&(0x7f00000012c0)="3b1df6319c769415e5112eecc44c913fa7f8b0c9b9afbba99769ee7db9822670fba516aacfd607c7e859704ac3288e476d878b496aa8ede887888a380f21b8d0e7e8ceef81e9b33e2b1ea1e71e7fe4aa4ba45caa2960411ee16f06ce26456f2813f44847733057104c123635d50e1511f2ccf8800f402c1e8c2ab1897d66007fb6277100da8e2b2937f91b63", 0x8c, 0xff}, {&(0x7f0000001380)="9ba0d5d32605324c99b45208007704e772290fc3f3f8d569df5e717080a67a887c10f9fc8d937e9dfb2e95aa4e719e0b202eb693af0bef7ec9b9abd4581fbdfb962578bea96d339960406203cb68b0df6096821960223d5ad596767664ff508d3ecbaa94fed5930fedc86dd10b5db6afbc0969ef45d37d15422823a20dda4746acd30acbe15524b3b9941ae6328273efb4bd4d596d17c62b303a096c2a1f1f3c7c6b5b795b65060de270d8ef655ae62afeb68e33b1adbaf105e0aa58ebfabf4c74a6e047fb9709168e535802739b76b8db", 0xd1, 0x8000}, {&(0x7f0000001480)="3194c6014e12225c4b6dc39fd21b22fd7abc7dfce290295c60ca0a3cda0145823cacb3e86b976fad7ba8754f2409150171c93cd9d7ff0836a80fed975b411c7830925edb0355df5e305569e5e2b4dd2095f4539b439a4bf0750bffda1b3123", 0x5f, 0x3}], 0x8, &(0x7f0000001580)={[{@unhide}, {@nocompress}], [{@dont_hash}, {@dont_measure}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_user={'obj_user', 0x3d, '}-,>+%'}}]}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x1010, r1, 0x10000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r5, &(0x7f0000001600)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r6, 0x0, 0x0, 0x0, 0x40000002, 0x0, {0x2}}, 0x40) modify_ldt$write(0x1, &(0x7f0000001640)={0xf8, 0x20000800, 0x42313fb3182e8951, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000001680)=""/36, &(0x7f00000016c0)=0x24) [ 85.743265] audit: type=1400 audit(1729757813.957:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:16:53 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x109402, 0x1c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffc1}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x44, 0x2a, [@dsss={0x3, 0x1, 0x24}, @preq={0x82, 0x3b, @not_ext={{0x1}, 0x58, 0x1, 0x4, @device_b, 0x8, "", 0x4, 0xb7, 0x3, [{{}, @device_b, 0x800}, {{0x1, 0x0, 0x1}, @broadcast, 0xd3}, {{0x1, 0x0, 0x1}, @device_b, 0x1ff}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x45, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @challenge={0x10, 0x1, 0x31}, @challenge={0x10, 0x1, 0x6e}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0xfc, @device_a, 0xaae3, "", 0x4ed, 0x401, @device_a, 0x2}}, @rann={0x7e, 0x15, {{0x1, 0x4c}, 0xc0, 0x2, @device_b, 0x1ff, 0x100, 0x4}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x75db0897d2d635e5}, 0x40) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x48004) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}]}, 0x24}}, 0x24008080) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x40d4) r4 = openat$incfs(r1, &(0x7f0000000600)='.log\x00', 0x200, 0x10d) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000640)='/dev/sr0\x00', &(0x7f0000000680)='./file0\x00', r0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000006c0)={{0x5, 0x5}, {0x100, 0x6}, 0x3, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r2, 0xfd8b8dd21422c4d1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x10, 0x34, @random="4cbf4ed8970d0385afd48bb1"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x851) r6 = accept4$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, &(0x7f0000000880)=0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000008c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4009011}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)=""/156, 0x9c}, {&(0x7f0000000b80)=""/209, 0xd1}, {&(0x7f0000000c80)=""/111, 0x6f}], 0x3, &(0x7f0000000d40)=""/70, 0x46}, 0x2003) linkat(r1, &(0x7f0000000e00)='./file0\x00', r1, &(0x7f0000000e40)='./file0\x00', 0x400) 08:16:53 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0xa5010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2}, 0x4) r1 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@ieee802154={0x24, @long}, &(0x7f0000000400)=0x80, 0x80000) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x67}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x14) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000600)=""/55, 0x37}, {&(0x7f0000000640)=""/64, 0x40}], 0x3}, 0x100) syz_io_uring_setup(0x5c2f, &(0x7f0000000700)={0x0, 0x1106, 0x10, 0x2, 0x2e4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000001bc0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2f927f8a6f76b155, 0x0, @fd_index=0x8, 0x190e5404, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/233, 0xe9}, {&(0x7f0000000900)=""/189, 0xbd}, {&(0x7f00000009c0)=""/115, 0x73}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/216, 0xd8}], 0x5, 0x16}, 0x6) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000001c00), 0x10000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r1) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x2c, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x24044001) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x40, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0xc800}, 0x4004008) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x40, r4, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x63}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r6 = openat$cgroup_ro(r3, &(0x7f00000020c0)='blkio.bfq.sectors\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x50, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x801) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r3) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000002700)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002300)={0x3ac, r8, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x38}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x12a, 0xf, [@channel_switch={0x25, 0x3, {0x1, 0x9d, 0x2}}, @mesh_chsw={0x76, 0x6, {0x6, 0x20, 0x3c, 0x8}}, @sec_chan_ofs={0x3e, 0x1}, @preq={0x82, 0x41, @ext={{0x1, 0x1, 0x1}, 0x3, 0x9, 0x57, @device_a, 0xfc, @broadcast, 0x2, 0x5, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0x401}, {{0x0, 0x0, 0x1}, @broadcast, 0x3ff}, {{0x1, 0x0, 0x1}, @device_b, 0x200}]}}, @dsss={0x3, 0x1, 0x24}, @channel_switch={0x25, 0x3, {0x1, 0xa9, 0xb1}}, @fast_bss_trans={0x37, 0xc9, {0x5, 0x6, "2cd51428b0da33882699f31f886ed2dd", "0d9d48fdbcb5740b57bf10b51939c933556784b9fe5021a65fbb8d1b126414de", "8ba03f3e3b0b3dac39c6a812356fad91fb8a32e5dd23259ad285f8d854554d68", [{0x1, 0x3, '\',V'}, {0x1, 0x8, "dc03e06f46ac77f9"}, {0x1, 0x25, "61c1f9904f22b113b461cbd7c3a8a091d854f1c48f54c3f1a4d05bf976c411e414ff182e67"}, {0x1, 0x1a, "9c7fe52298800f38db7848260db8654acc0d58a495b2c9b82727"}, {0x2, 0x4, "c871c2f2"}, {0x3, 0x1d, "863f6da9fc1a635ef5b83a2646ac665f243c988f0e6f760da465afff0b"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xa, 0x7f, [@chsw_timing={0x68, 0x4, {0x7, 0x6}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x30, 0x80, [@gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x0, 0x81, @device_a, 0x6, 0x5}}, @supported_rates={0x1, 0x3, [{0x30, 0x1}, {0xb}, {0x16}]}]}, @NL80211_ATTR_FTM_RESPONDER={0xec, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xe5, 0x3, "f66fecd1055a1c19162d08b6cef6f8fdbf91a31b91e711bb436840028890197336e098383cb41e49080e41fe7412598ef4e44c6e760aa78d6e3d8ed1a7f0970e659a4908d96e1f42188fe2a8e553328ee00166c352972cade74d0391f9796ea3c7138faba1ee3d640c99f5ccb33eccaf5a6783dccd4a002de7a5d538ebe6b2013796b03f539c8208346986778da31c5b8eaaf10f183291a8b590b3bc31bc57aaceb328ccf56f2895a77b46925e11aebade172be3e81f7434f735b7a3b8192da77ba9feafc44e25a1d2fcf5e260dc4828578a5bcd8b13442777842e645f9036b6bf"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x130, 0x7f, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x30, 0x4}}, @tim={0x5, 0xd8, {0x7, 0xea, 0x3, "52a4d170c3ddf45c84134ced383bbb6bc36491dd6a003c8d6b916229a32de86f63bae7b1305c73e489a1409c03387a5fe412f6e0b9c96b025358286786d67d4e120ebf06a416febd41c83f00beb35b39111c60132ceffb14e14870adfc938644da8c8775cfa76073ad05c580ee51b5006f8ec21f7703b83d24f6ac818bc08fe1474e984b65767f607120c36ca01677f886ec70cf789be82d5b1e9c804e8415fd61882e6178361118c487e170388c14bfc6dec9c976882ea7856d3c698ba63c9c16e47423c5d45c38a8e30f459606d337e65f3fe90f"}}, @prep={0x83, 0x1f, @not_ext={{}, 0xf3, 0x7f, @broadcast, 0x4, "", 0x1, 0x101, @device_b, 0x1}}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, &(0x7f0000002740)) 08:16:54 executing program 4: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @l2={0x1f, 0x5, @any, 0x1, 0x1}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}, @phonet={0x23, 0x7, 0x1, 0xc1}, 0xfc01, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000080)='team_slave_1\x00', 0x5, 0x8, 0x8000}) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0x7ff, {{0x2, 0x4e24, @private=0xa010100}}, {{0x2, 0x4e21, @empty}}}, 0x108) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000280)={0xcca, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x88) r1 = socket$inet(0x2, 0x80800, 0x7) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'ipvs\x00'}, &(0x7f0000000380)=0x1e) socketpair(0x1f, 0x2, 0x6, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/161, 0xa1}], 0x7, &(0x7f00000008c0)=""/9, 0x9}, 0x1000}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/78, 0x4e}, {&(0x7f0000000980)=""/32, 0x20}], 0x2}, 0xfffffc55}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/167, 0xa7}, {&(0x7f0000000b40)=""/236, 0xec}, {&(0x7f0000000c40)=""/204, 0xcc}, {&(0x7f0000000d40)=""/61, 0x3d}, {&(0x7f0000000d80)=""/40, 0x28}, {&(0x7f0000000dc0)=""/157, 0x9d}], 0x6, &(0x7f0000000f00)=""/232, 0xe8}, 0x6}, {{&(0x7f0000001000)=@hci, 0x80, &(0x7f0000001280)=[{&(0x7f0000001080)=""/70, 0x46}, {&(0x7f0000001100)=""/197, 0xc5}, {&(0x7f0000001200)=""/91, 0x5b}], 0x3, &(0x7f00000012c0)=""/87, 0x57}, 0x80000000}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001340)=""/34, 0x22}, {&(0x7f0000001380)=""/25, 0x19}, {&(0x7f00000013c0)=""/84, 0x54}, {&(0x7f0000001440)=""/245, 0xf5}, {&(0x7f0000001540)=""/213, 0xd5}, {&(0x7f0000001640)=""/182, 0xb6}], 0x6, &(0x7f0000001780)=""/155, 0x9b}, 0x9362}, {{&(0x7f0000001840)=@generic, 0x80, &(0x7f0000002d40)=[{&(0x7f00000018c0)}, {&(0x7f0000001900)=""/30, 0x1e}, {&(0x7f0000001940)=""/204, 0xcc}, {&(0x7f0000001a40)=""/205, 0xcd}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/48, 0x30}, {&(0x7f0000002b80)=""/148, 0x94}, {&(0x7f0000002c40)=""/255, 0xff}], 0x8, &(0x7f0000002dc0)=""/2, 0x2}, 0x5}], 0x6, 0x10040, &(0x7f0000002f80)={0x77359400}) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000002fc0), 0x80800) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000003000)=""/4096, &(0x7f0000004000)=0x1000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000004040)={0x6, 'wlan1\x00', {0x8}, 0x20}) syz_genetlink_get_family_id$mptcp(&(0x7f0000004080), r3) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000040c0), 0x80, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000004100)={0xd9f, {{0x2, 0x4e21, @multicast2}}}, 0x88) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000041c0)={@rand_addr, @loopback, @loopback}, &(0x7f0000004200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004240)) execveat(r5, &(0x7f0000004280)='./file0\x00', &(0x7f0000004440)=[&(0x7f00000042c0)='team0\x00', &(0x7f0000004300)='&\x00', &(0x7f0000004340)='\x00', &(0x7f0000004380)='wlan1\x00', &(0x7f00000043c0)='$/\xa1\xe0\x00', &(0x7f0000004400)='\x00'], &(0x7f0000004540)=[&(0x7f0000004480)='*\xc9%\\\\.\x00', &(0x7f00000044c0)='\x00', &(0x7f0000004500)='ipvs\x00'], 0x1000) socketpair(0xf, 0x2, 0x5, &(0x7f0000004580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f00000045c0)={0x4, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000047c0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x28, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) 08:16:54 executing program 7: r0 = getuid() r1 = getuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x2, r0, 0xffffffffffffffff, r1, 0xee01, 0x43}, 0x7fff, 0x1, 0x6, 0xc251, 0xffffffffffffffff, 0xffffffffffffffff, 0x9}) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) shmget(0x1, 0xd000, 0x100, &(0x7f0000ff0000/0xd000)=nil) r2 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ff3000/0x1000)=nil) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '*!)#@'}}, {@cache_none}, {@afid={'afid', 0x3d, 0x1688}}, {@version_L}, {@loose}, {@cache_none}], [{@obj_user={'obj_user', 0x3d, '(@\'^'}}, {@dont_appraise}]}}) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={0x24, @none={0x0, 0x1}}, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r5 = accept4(0xffffffffffffffff, &(0x7f0000000a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x80, 0x80800) connect$802154_dgram(r5, &(0x7f0000000ac0)={0x24, @short}, 0x14) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x0) getresgid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x2b8, 0x0, 0x4, 0x70bd29, 0x1, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d06c32a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x613ea1ba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6afa649f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x60, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xada8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c2d6401}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c5}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79f46add}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63e0cc55}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf4018c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x266}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x740e947c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fed4c89}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa457}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c0a57c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7822}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25e9bd36}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6db0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6276e76a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x663a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d5f174f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x688dabd0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x227733f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x189be7d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7da6deee}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10e9f47a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef07}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56112fb3}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x331732fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd869}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x709cb2b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24e887c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d1a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2341}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f8a16}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x323e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe091}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd64f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14b4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2803}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x946b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5438a9b6}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb272}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57153e28}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34f64567}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b336935}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0ad}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd580}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32a765ca}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x2b8}}, 0x24048003) syz_io_uring_submit(r6, 0x0, &(0x7f0000000fc0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f0000000f40)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x0, 0x0, 0x1}, 0x8) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/time_for_children\x00') sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x64}}, 0x20000011) [ 87.160811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.163831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.165031] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.171444] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.173144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.174288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.182717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.186314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.187794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.198184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.204781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.221049] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.222389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.226242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.227286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.231646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.234451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.244720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.246373] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.247513] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.248316] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.256697] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.264973] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.266628] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.269983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.271312] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.274184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.278248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.279741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.281033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.282381] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.285819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.287042] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.293193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.299791] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.301611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.303794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.306915] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.310958] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.314029] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.315689] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.316764] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.317595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.335042] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.340764] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.349752] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.351710] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.354623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.188067] Bluetooth: hci1: command tx timeout [ 89.317357] Bluetooth: hci0: command tx timeout [ 89.379686] Bluetooth: hci6: command tx timeout [ 89.380346] Bluetooth: hci5: command tx timeout [ 89.381327] Bluetooth: hci4: command tx timeout [ 89.381583] Bluetooth: hci7: command tx timeout [ 89.444014] Bluetooth: hci2: command tx timeout [ 89.444832] Bluetooth: hci3: command tx timeout [ 91.235672] Bluetooth: hci1: command tx timeout [ 91.363650] Bluetooth: hci0: command tx timeout [ 91.427614] Bluetooth: hci4: command tx timeout [ 91.427707] Bluetooth: hci5: command tx timeout [ 91.428094] Bluetooth: hci6: command tx timeout [ 91.428705] Bluetooth: hci7: command tx timeout [ 91.493138] Bluetooth: hci3: command tx timeout [ 91.493853] Bluetooth: hci2: command tx timeout [ 93.284706] Bluetooth: hci1: command tx timeout [ 93.412730] Bluetooth: hci0: command tx timeout [ 93.475715] Bluetooth: hci5: command tx timeout [ 93.476237] Bluetooth: hci7: command tx timeout [ 93.476835] Bluetooth: hci4: command tx timeout [ 93.477300] Bluetooth: hci6: command tx timeout [ 93.539674] Bluetooth: hci3: command tx timeout [ 93.540194] Bluetooth: hci2: command tx timeout [ 95.331847] Bluetooth: hci1: command tx timeout [ 95.459630] Bluetooth: hci0: command tx timeout [ 95.523807] Bluetooth: hci5: command tx timeout [ 95.524366] Bluetooth: hci6: command tx timeout [ 95.524970] Bluetooth: hci4: command tx timeout [ 95.525440] Bluetooth: hci7: command tx timeout [ 95.587665] Bluetooth: hci3: command tx timeout [ 95.588218] Bluetooth: hci2: command tx timeout [ 149.616922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.619716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.620763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.623277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.625602] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.627354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.672866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.675225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.677870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.693932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.698621] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.702672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.746265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.751377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.753562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.763147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.765315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.769400] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.771687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.791796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.796773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.803412] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.807855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.811123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.813073] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.819240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.822817] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.825606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.837763] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.848283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.857734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.860996] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.865741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.867913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.868802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.869991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.872363] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.877813] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.879027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.887925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.894799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.898769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.921968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.926681] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.928763] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.929849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.931151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.952825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.652254] Bluetooth: hci0: command tx timeout [ 151.779568] Bluetooth: hci1: command tx timeout [ 151.844534] Bluetooth: hci3: command tx timeout [ 151.908554] Bluetooth: hci5: command tx timeout [ 151.909184] Bluetooth: hci6: command tx timeout [ 151.971599] Bluetooth: hci4: command tx timeout [ 151.973962] Bluetooth: hci2: command tx timeout [ 152.035604] Bluetooth: hci7: command tx timeout [ 153.700575] Bluetooth: hci0: command tx timeout [ 153.828608] Bluetooth: hci1: command tx timeout [ 153.892572] Bluetooth: hci3: command tx timeout [ 153.956724] Bluetooth: hci6: command tx timeout [ 153.957227] Bluetooth: hci5: command tx timeout [ 154.020636] Bluetooth: hci4: command tx timeout [ 154.021124] Bluetooth: hci2: command tx timeout [ 154.084520] Bluetooth: hci7: command tx timeout [ 155.747580] Bluetooth: hci0: command tx timeout [ 155.876543] Bluetooth: hci1: command tx timeout [ 155.940601] Bluetooth: hci3: command tx timeout [ 156.003549] Bluetooth: hci6: command tx timeout [ 156.005056] Bluetooth: hci5: command tx timeout [ 156.069530] Bluetooth: hci2: command tx timeout [ 156.071006] Bluetooth: hci4: command tx timeout [ 156.131604] Bluetooth: hci7: command tx timeout [ 157.795555] Bluetooth: hci0: command tx timeout [ 157.923571] Bluetooth: hci1: command tx timeout [ 157.987611] Bluetooth: hci3: command tx timeout [ 158.051617] Bluetooth: hci5: command tx timeout [ 158.053138] Bluetooth: hci6: command tx timeout [ 158.116614] Bluetooth: hci2: command tx timeout [ 158.118260] Bluetooth: hci4: command tx timeout [ 158.179857] Bluetooth: hci7: command tx timeout [ 211.765709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.770800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.773224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.779871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.784000] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.787709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.792635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.795575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.801536] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.803897] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.808848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.816623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.901911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.910272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.912948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.919645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.927735] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.930380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.969253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.982716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.991171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.031006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.033093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.045778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.050049] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.056948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.059979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.063868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.066964] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.069123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.148391] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.163320] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.168785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.170709] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.178164] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.181105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.184983] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.185896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.190698] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.194670] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.200560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.210544] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.218957] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.219010] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.231774] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.234318] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.255980] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.258098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.859682] Bluetooth: hci0: command tx timeout [ 213.860803] Bluetooth: hci1: command tx timeout [ 213.989529] Bluetooth: hci2: command tx timeout [ 214.115654] Bluetooth: hci3: command tx timeout [ 214.117161] Bluetooth: hci4: command tx timeout [ 214.307610] Bluetooth: hci6: command tx timeout [ 214.308678] Bluetooth: hci5: command tx timeout [ 214.372193] Bluetooth: hci7: command tx timeout [ 215.907691] Bluetooth: hci0: command tx timeout [ 215.908220] Bluetooth: hci1: command tx timeout [ 216.035970] Bluetooth: hci2: command tx timeout [ 216.163663] Bluetooth: hci4: command tx timeout [ 216.164183] Bluetooth: hci3: command tx timeout [ 216.356556] Bluetooth: hci6: command tx timeout [ 216.357046] Bluetooth: hci5: command tx timeout [ 216.419814] Bluetooth: hci7: command tx timeout [ 217.956774] Bluetooth: hci0: command tx timeout [ 217.957300] Bluetooth: hci1: command tx timeout [ 218.085488] Bluetooth: hci2: command tx timeout [ 218.211763] Bluetooth: hci3: command tx timeout [ 218.212240] Bluetooth: hci4: command tx timeout [ 218.404590] Bluetooth: hci5: command tx timeout [ 218.405086] Bluetooth: hci6: command tx timeout [ 218.467665] Bluetooth: hci7: command tx timeout [ 220.003722] Bluetooth: hci1: command tx timeout [ 220.004277] Bluetooth: hci0: command tx timeout [ 220.132780] Bluetooth: hci2: command tx timeout [ 220.260595] Bluetooth: hci4: command tx timeout [ 220.261117] Bluetooth: hci3: command tx timeout [ 220.452820] Bluetooth: hci6: command tx timeout [ 220.453363] Bluetooth: hci5: command tx timeout [ 220.516194] Bluetooth: hci7: command tx timeout [ 274.032139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.034033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.035498] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.038057] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.039844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.041010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.225116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.228915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.230876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.237616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.241956] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.243051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.355108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.358000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.359731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.368728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.370044] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.370977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.373779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.377704] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.378774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.391248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.399665] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.400872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.425015] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.433714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.450793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.464083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.473307] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.482324] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.484873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.486289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.490871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.494415] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.500771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.507275] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.512832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.517776] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.521039] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.522897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.526796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.528995] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.530527] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.531510] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.555620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.574609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.603682] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.604740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.069503] Bluetooth: hci0: command tx timeout [ 276.260517] Bluetooth: hci1: command tx timeout [ 276.387695] Bluetooth: hci2: command tx timeout [ 276.451523] Bluetooth: hci3: command tx timeout [ 276.579574] Bluetooth: hci6: command tx timeout [ 276.580269] Bluetooth: hci4: command tx timeout [ 276.645491] Bluetooth: hci7: command tx timeout [ 276.646103] Bluetooth: hci5: command tx timeout [ 278.115756] Bluetooth: hci0: command tx timeout [ 278.308534] Bluetooth: hci1: command tx timeout [ 278.435515] Bluetooth: hci2: command tx timeout [ 278.502171] Bluetooth: hci3: command tx timeout [ 278.627715] Bluetooth: hci4: command tx timeout [ 278.628196] Bluetooth: hci6: command tx timeout [ 278.692565] Bluetooth: hci5: command tx timeout [ 278.693050] Bluetooth: hci7: command tx timeout [ 280.164508] Bluetooth: hci0: command tx timeout [ 280.356495] Bluetooth: hci1: command tx timeout [ 280.483510] Bluetooth: hci2: command tx timeout [ 280.548102] Bluetooth: hci3: command tx timeout [ 280.676712] Bluetooth: hci6: command tx timeout [ 280.677278] Bluetooth: hci4: command tx timeout [ 280.739610] Bluetooth: hci7: command tx timeout [ 280.740084] Bluetooth: hci5: command tx timeout [ 282.213511] Bluetooth: hci0: command tx timeout [ 282.403528] Bluetooth: hci1: command tx timeout [ 282.531522] Bluetooth: hci2: command tx timeout [ 282.597575] Bluetooth: hci3: command tx timeout [ 282.724545] Bluetooth: hci4: command tx timeout [ 282.725090] Bluetooth: hci6: command tx timeout [ 282.787549] Bluetooth: hci5: command tx timeout [ 282.789193] Bluetooth: hci7: command tx timeout [ 336.617966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.623271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.623351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.625271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.626273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.632200] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.632720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.634270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.635788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.662119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.663940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.665072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.754341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.758481] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.774698] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.787571] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.791888] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.793101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.826402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.834240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.836267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.840632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.845820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.863877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.868946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.869485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.872713] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.874301] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.876039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.877358] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.955192] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.960510] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.961375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.965146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.970555] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.974107] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.976211] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 336.977404] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.981602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.982987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.996585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.002406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.010082] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.015044] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.036079] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.036954] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.044661] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.070601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.723679] Bluetooth: hci0: command tx timeout [ 338.724695] Bluetooth: hci1: command tx timeout [ 338.852553] Bluetooth: hci2: command tx timeout [ 338.915875] Bluetooth: hci4: command tx timeout [ 338.979616] Bluetooth: hci3: command tx timeout [ 339.302718] Bluetooth: hci5: command tx timeout [ 339.303511] Bluetooth: hci7: command tx timeout [ 339.619543] Bluetooth: hci6: command tx timeout [ 340.771748] Bluetooth: hci1: command tx timeout [ 340.771861] Bluetooth: hci0: command tx timeout [ 340.901466] Bluetooth: hci2: command tx timeout [ 340.963592] Bluetooth: hci4: command tx timeout [ 341.027720] Bluetooth: hci3: command tx timeout [ 341.347521] Bluetooth: hci7: command tx timeout [ 341.348646] Bluetooth: hci5: command tx timeout [ 341.667514] Bluetooth: hci6: command tx timeout [ 342.819536] Bluetooth: hci0: command tx timeout [ 342.820622] Bluetooth: hci1: command tx timeout [ 342.947547] Bluetooth: hci2: command tx timeout [ 343.011509] Bluetooth: hci4: command tx timeout [ 343.075697] Bluetooth: hci3: command tx timeout [ 343.396452] Bluetooth: hci5: command tx timeout [ 343.397013] Bluetooth: hci7: command tx timeout [ 343.715729] Bluetooth: hci6: command tx timeout [ 344.867525] Bluetooth: hci1: command tx timeout [ 344.867665] Bluetooth: hci0: command tx timeout [ 344.995675] Bluetooth: hci2: command tx timeout [ 345.059656] Bluetooth: hci4: command tx timeout [ 345.123596] Bluetooth: hci3: command tx timeout [ 345.443749] Bluetooth: hci7: command tx timeout [ 345.443786] Bluetooth: hci5: command tx timeout [ 345.764506] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 08:22:04 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88803380b700 RCX=ffffffff817ef643 RDX=1ffff110067016e3 RSI=0000000000000628 RDI=ffff88803380b718 RBP=ffffffff84c744c0 RSP=ffff8880360d7be8 R8 =0000000000000001 R9 =ffffed1006b4547a R10=ffff888035a2a3d3 R11=00000000000c3270 R12=0000000000000628 R13=ffff888035a2a330 R14=ffff888035a2a330 R15=ffff88801565e660 RIP=ffffffff81254393 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbe0db44610 CR3=0000000023dc8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888018c73a68 RCX=ffffffff815978fd RDX=ffff88806cf00000 RSI=0000000000000008 RDI=ffff88806cf36380 RBP=ffff888009412140 RSP=ffff888030bafcd0 R8 =0000000000000000 R9 =fffffbfff0c7e4e9 R10=ffffffff863f274f R11=00000000000c2f81 R12=0000000000000200 R13=ffffea0000631cc0 R14=0000000000000000 R15=ffff888018c73a68 RIP=ffffffff818b4779 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fec9bf7b540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fec9c1164a1 CR3=000000000dabe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000