Warning: Permanently added '[localhost]:34457' (ECDSA) to the list of known hosts. 2025/01/23 23:50:27 fuzzer started 2025/01/23 23:50:28 dialing manager at localhost:45511 syzkaller login: [ 69.617468] cgroup: Unknown subsys name 'net' [ 69.744219] cgroup: Unknown subsys name 'cpuset' [ 69.785973] cgroup: Unknown subsys name 'rlimit' [ 76.303171] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 23:50:46 syscalls: 202 2025/01/23 23:50:46 code coverage: enabled 2025/01/23 23:50:46 comparison tracing: enabled 2025/01/23 23:50:46 extra coverage: enabled 2025/01/23 23:50:46 setuid sandbox: enabled 2025/01/23 23:50:46 namespace sandbox: enabled 2025/01/23 23:50:46 Android sandbox: enabled 2025/01/23 23:50:46 fault injection: enabled 2025/01/23 23:50:46 leak checking: enabled 2025/01/23 23:50:46 net packet injection: enabled 2025/01/23 23:50:46 net device setup: enabled 2025/01/23 23:50:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 23:50:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 23:50:46 USB emulation: enabled 2025/01/23 23:50:46 hci packet injection: enabled 2025/01/23 23:50:46 wifi device emulation: enabled 2025/01/23 23:50:46 802.15.4 emulation: enabled 2025/01/23 23:50:46 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 23:50:48 starting 8 fuzzer processes 23:50:48 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xac}, @NL80211_ATTR_IE={0xd1, 0x2a, [@cf={0x4, 0x6, {0x1f, 0x1, 0xfbff, 0x4}}, @mic={0x8c, 0x18, {0xec3, "6b2f8ae6e8d7", @long="387f1d486391bf65067444198bfeb093"}}, @measure_req={0x26, 0x9a, {0x1f, 0x7, 0x1, "5603467973fbd61f2943a0ba91d1a0ad7c9212762b9210e2654ccb08a9a4ef7852e44c8ec376a6d7aae77b4afe991c0b2b5cfc1ab81361fb49922701c0cc24cb0e0497971d617bda0b5afbaef25595c42e625be9fabd0b64352e2dd4795420c5577046b49125cb0c6ba2b2dc8052cbc35df0a812cba740b1958079544beaa4a8ee287f5997a0930f253cd2b91aee5ec230db43e2731f01"}}, @dsss={0x3, 0x1, 0xa9}, @chsw_timing={0x68, 0x4, {0x40a, 0x6}}, @chsw_timing={0x68, 0x4, {0x1, 0x200}}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @chsw_timing={0x68, 0x4, {0x4, 0xca}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socketpair(0x21, 0xa, 0x1ce, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x4000, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000003c0)) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000600)='\x00', 0x0, r3) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) r9 = dup3(r8, r3, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x80000) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000000680)='udp:syz1\x00', 0x0, r10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5, 0xaf0d}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r11, 0x40505412, &(0x7f0000000740)={0x2, 0x3, 0x7, 0x0, 0xf}) sendmsg$FOU_CMD_ADD(r6, 0x0, 0x20000054) r12 = openat$null(0xffffffffffffff9c, &(0x7f00000007c0), 0x10201, 0x0) ioctl$FICLONE(r12, 0x40049409, r0) r13 = openat$cgroup_ro(r5, &(0x7f0000000800)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r13, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xda6a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x20040085) 23:50:48 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x22}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x34}}, 0xc0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r2 = fork() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf8, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x41}, 0x45) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r3) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000500)={0x4, "819b33"}, 0x6) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000540)) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8804}, 0x40800) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x118, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x38, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7bba730a7c77f63ad99612b7c9557a1dcff9f3127bc6f19d797a32796ac6344f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x68, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8f78ca6901b5e5a2419e91f7656ef8e528e1e39c74f5e829b29d106822dd1d0d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ae52aa660083de162ff49b58a78ddc3a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "643ccaa3162f0cf510d4122c8a84475b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3b8f2aeaa16e76ac332c596063bbc4f88bc1f7165c351dd18a32e71f30c127e9"}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000940)) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000b40)='&\x00', 0x0, 0xffffffffffffffff) fcntl$lock(r5, 0x7, &(0x7f0000000b80)={0x0, 0x0, 0x100000001, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r3, {0x7, 0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2c8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) 23:50:48 executing program 2: semop(0x0, &(0x7f0000000000)=[{0x2, 0x7, 0x1800}, {0x1, 0x8001, 0x3800}, {0x1, 0x9, 0x1000}, {0x4}], 0x4) semtimedop(0xffffffffffffffff, &(0x7f0000000040)=[{0x3}, {0x1, 0x8, 0x800}, {0x3, 0xfffc, 0x3000}], 0x3, &(0x7f0000000080)={0x77359400}) semop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x1, 0x9, 0x1800}], 0x1) r0 = semget$private(0x0, 0x1, 0xe5) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000100)=[{0x4, 0x4}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x6, 0x6, 0x800}, {0x2, 0x100, 0x1000}], 0x2) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000000180)=""/35) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f00000001c0)=""/121) r1 = semget$private(0x0, 0x4, 0x474) semop(r1, &(0x7f0000000240)=[{0x3, 0x8}, {0x0, 0xfa, 0x1800}], 0x2) getgid() semctl$SEM_INFO(r1, 0x2, 0x13, &(0x7f0000000280)=""/22) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x80402, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000400)=[{0x3, 0x8, 0x1000}, {0x2, 0xf3e5}, {0x4, 0x361}, {0x4, 0xfc}, {0x4, 0x20}], 0x5, &(0x7f0000000480)={r3, r4+60000000}) semtimedop(r0, &(0x7f00000004c0)=[{0x0, 0x5a2, 0x1000}, {0x0, 0xdeb2, 0x1000}, {0x0, 0x355e, 0x1800}, {0x1, 0x3, 0x1c00}, {0x0, 0x1, 0x1800}], 0x5, &(0x7f0000000500)={0x77359400}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "51ab70e94a8242bb047874c100e30a8f"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) 23:50:48 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) recvmmsg$unix(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000140)=""/244, 0xf4}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/4096, 0x1000}], 0xa}}], 0x1, 0x40000001, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001980)={&(0x7f0000001800), 0xc, &(0x7f0000001940)={&(0x7f0000001840)={0xd0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x23}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x1c}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40844}, 0x4000084) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x31}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24014040}, 0x20008800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000002680)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000025c0)=[{{&(0x7f0000001b00), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001b80)=""/223, 0xdf}], 0x1}}, {{&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001d40)=""/172, 0xac}, {&(0x7f0000001e00)=""/5, 0x5}, {&(0x7f0000001e40)=""/167, 0xa7}, {&(0x7f0000001f00)=""/114, 0x72}, {&(0x7f0000001f80)=""/134, 0x86}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/222, 0xde}], 0x7, &(0x7f0000002240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002380)=""/184, 0xb8}, {&(0x7f0000002440)=""/21, 0x15}, {&(0x7f0000002480)=""/31, 0x1f}], 0x3, &(0x7f0000002500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x3, 0x40010140, &(0x7f00000026c0)={r2, r3+10000000}) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x841) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002800), 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000002880)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r13 = openat$cgroup_ro(r10, &(0x7f0000002980)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r13, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000002b00)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002b40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002b80)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000002cc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x8c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r8, 0x40045402, &(0x7f0000002d00)=0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040811) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008801) 23:50:48 executing program 4: clock_gettime(0x2, &(0x7f0000000000)) clock_getres(0x6, &(0x7f0000000040)) semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x2, 0x5e, 0x800}, {0x4, 0x800, 0x1000}, {0x2, 0x4, 0x1800}], 0x3, &(0x7f00000000c0)) r0 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x124}, 0x1, 0x0, 0x0, 0x48005}, 0x4004840) pselect6(0x40, &(0x7f0000000340)={0x5, 0x81, 0xea6, 0xd45, 0x5, 0x1ff, 0x80000001, 0x200}, &(0x7f0000000380)={0x5, 0x4, 0x5, 0x8001, 0xff, 0x1, 0x7, 0xb5}, &(0x7f00000003c0)={0x928, 0x80000001, 0x8, 0x3, 0x1, 0x7fff, 0x80000001, 0x4}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000480)={&(0x7f0000000440)={[0x79b4]}, 0x8}) clock_gettime(0x5, &(0x7f00000004c0)) clock_gettime(0x4, &(0x7f0000000500)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x880}, 0xc854) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/171, 0xab}, {&(0x7f0000000880)=""/4, 0x4}, {&(0x7f00000008c0)=""/92, 0x5c}, {&(0x7f0000000940)=""/236, 0xec}], 0x4, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)=""/108, 0x6c}, {&(0x7f0000000c40)=""/155, 0x9b}, {&(0x7f0000000d00)=""/129, 0x81}, {&(0x7f0000000dc0)=""/83, 0x53}, {&(0x7f0000000e40)=""/105, 0x69}], 0x5, &(0x7f0000000f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000002380)=[{&(0x7f00000010c0)=""/184, 0xb8}, {&(0x7f0000001180)=""/175, 0xaf}, {&(0x7f0000001240)=""/206, 0xce}, {&(0x7f0000001340)=""/39, 0x27}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x5}}], 0x3, 0x2, &(0x7f00000024c0)={0x77359400}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r4, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x70, 0x0, 0x200, 0x9, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x70}, 0x1, 0x0, 0x0, 0xc004040}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002680)={0xa0, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xff53}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x3c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x80) [ 89.495763] audit: type=1400 audit(1737676248.309:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:50:48 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x7c}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000091}, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x621, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}]}, 0x1c}}, 0x41) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x60101, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x16c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x91}, 0x4040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004010}, 0x14) socketpair(0x8, 0x2, 0x2, &(0x7f0000000a00)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc8, 0x0, 0x98e7eed27fb7562, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000d40), 0x92a02, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000000d80)={0xc41, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000013400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000013500)={&(0x7f00000133c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000134c0)={&(0x7f0000013440)={0x44, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x44001) 23:50:48 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x240300, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc06}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e1d50ccc711e"}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x4885) r5 = memfd_secret(0x80000) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa0b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x4000010) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000740)={"2e64a2702f31d3f0f0883775d772bed0", 0x0, r6, {0x6, 0x6}, {0x7fffffff, 0xc7a}, 0x15d, [0x8, 0x80000001, 0x0, 0x5, 0xfffffffffffff000, 0x101, 0x80000001, 0x81, 0xcb, 0x81, 0x6, 0xbe, 0x0, 0x10001, 0xca6d, 0x6]}) r7 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000840)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r3) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1518, 0xe}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "88580eb3bd"}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "e663"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r3) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x160, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x9dd5dfd5a4ffcc53}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x23}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1c}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7670}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x400c4}, 0x21) 23:50:48 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008814}, 0x4040000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000894}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x9c}}, 0x4000080) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x50000404}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x88d0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040890}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x81, 0xa91, 0x10, @dev={0xfe, 0x80, '\x00', 0x3d}, @private0, 0x20, 0x40, 0x1, 0xfff}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) [ 91.037326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.042951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.045293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.051100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.058076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.063850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.080913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.089213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.105082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.122105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.140843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.143920] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.186492] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.195795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.199053] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.205708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.209547] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.212456] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.236828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.260712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.266281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.275030] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.279112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.281169] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.284947] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.289200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.291081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.293846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.296576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.303793] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.313239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.316521] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.321538] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.323785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.326114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.337767] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.347331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.351662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.354831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.355996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.356170] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.357365] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.360669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.365572] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.366926] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.369290] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.369652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.373799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.155193] Bluetooth: hci0: command tx timeout [ 93.217567] Bluetooth: hci1: command tx timeout [ 93.281530] Bluetooth: hci2: command tx timeout [ 93.345457] Bluetooth: hci3: command tx timeout [ 93.409770] Bluetooth: hci5: command tx timeout [ 93.473689] Bluetooth: hci6: command tx timeout [ 93.474930] Bluetooth: hci4: command tx timeout [ 93.476302] Bluetooth: hci7: command tx timeout [ 95.202423] Bluetooth: hci0: command tx timeout [ 95.267386] Bluetooth: hci1: command tx timeout [ 95.332568] Bluetooth: hci2: command tx timeout [ 95.394524] Bluetooth: hci3: command tx timeout [ 95.459368] Bluetooth: hci5: command tx timeout [ 95.522464] Bluetooth: hci7: command tx timeout [ 95.522960] Bluetooth: hci6: command tx timeout [ 95.524012] Bluetooth: hci4: command tx timeout [ 97.249488] Bluetooth: hci0: command tx timeout [ 97.315406] Bluetooth: hci1: command tx timeout [ 97.377449] Bluetooth: hci2: command tx timeout [ 97.441987] Bluetooth: hci3: command tx timeout [ 97.505513] Bluetooth: hci5: command tx timeout [ 97.569597] Bluetooth: hci4: command tx timeout [ 97.570773] Bluetooth: hci6: command tx timeout [ 97.571832] Bluetooth: hci7: command tx timeout [ 99.299159] Bluetooth: hci0: command tx timeout [ 99.362498] Bluetooth: hci1: command tx timeout [ 99.426465] Bluetooth: hci2: command tx timeout [ 99.490406] Bluetooth: hci3: command tx timeout [ 99.553856] Bluetooth: hci5: command tx timeout [ 99.620384] Bluetooth: hci4: command tx timeout [ 99.620934] Bluetooth: hci7: command tx timeout [ 99.621503] Bluetooth: hci6: command tx timeout [ 152.984401] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.988078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.991038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.997054] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.000949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.004794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.024711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.037205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.039841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.054845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.063768] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.065999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.132495] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.145685] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.150306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.163668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.168297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.170258] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.216570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.233627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.237185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.244699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.250099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.258440] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.278977] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.282735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.295698] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.304272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.310605] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.320533] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.328733] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.333656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.357797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.377059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.389492] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.392185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.402068] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.420664] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.457634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.467754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.470862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.475628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.490481] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.492993] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.497815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.523388] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.535467] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.540055] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.041473] Bluetooth: hci0: command tx timeout [ 155.105458] Bluetooth: hci1: command tx timeout [ 155.233411] Bluetooth: hci2: command tx timeout [ 155.299398] Bluetooth: hci3: command tx timeout [ 155.425583] Bluetooth: hci4: command tx timeout [ 155.491494] Bluetooth: hci5: command tx timeout [ 155.619426] Bluetooth: hci7: command tx timeout [ 155.619452] Bluetooth: hci6: command tx timeout [ 157.090372] Bluetooth: hci0: command tx timeout [ 157.153656] Bluetooth: hci1: command tx timeout [ 157.282443] Bluetooth: hci2: command tx timeout [ 157.346422] Bluetooth: hci3: command tx timeout [ 157.474469] Bluetooth: hci4: command tx timeout [ 157.537407] Bluetooth: hci5: command tx timeout [ 157.666405] Bluetooth: hci6: command tx timeout [ 157.666909] Bluetooth: hci7: command tx timeout [ 159.137447] Bluetooth: hci0: command tx timeout [ 159.201509] Bluetooth: hci1: command tx timeout [ 159.329554] Bluetooth: hci2: command tx timeout [ 159.393412] Bluetooth: hci3: command tx timeout [ 159.521453] Bluetooth: hci4: command tx timeout [ 159.585410] Bluetooth: hci5: command tx timeout [ 159.713612] Bluetooth: hci7: command tx timeout [ 159.714103] Bluetooth: hci6: command tx timeout [ 161.185428] Bluetooth: hci0: command tx timeout [ 161.250399] Bluetooth: hci1: command tx timeout [ 161.378425] Bluetooth: hci2: command tx timeout [ 161.441486] Bluetooth: hci3: command tx timeout [ 161.569476] Bluetooth: hci4: command tx timeout [ 161.633392] Bluetooth: hci5: command tx timeout [ 161.761506] Bluetooth: hci6: command tx timeout [ 161.761973] Bluetooth: hci7: command tx timeout [ 215.029722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.032907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.037897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.044951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.048216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.051055] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.216084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.220576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.229238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.233706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.236818] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.242643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.277759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.282487] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.287566] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.302777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.307782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.311590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.335275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.351515] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.354527] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.360446] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.369199] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.371981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.420522] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.428663] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.447006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.447900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.461987] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.466392] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.467213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.469611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.470456] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.488048] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.492161] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.495581] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.496620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.540517] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.567993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.589887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.591967] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.597420] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.612293] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.617794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.618587] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.619803] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.626476] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.646446] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.122081] Bluetooth: hci0: command tx timeout [ 217.314471] Bluetooth: hci1: command tx timeout [ 217.377688] Bluetooth: hci2: command tx timeout [ 217.441792] Bluetooth: hci3: command tx timeout [ 217.505455] Bluetooth: hci4: command tx timeout [ 217.633435] Bluetooth: hci5: command tx timeout [ 217.634601] Bluetooth: hci7: command tx timeout [ 217.697460] Bluetooth: hci6: command tx timeout [ 219.171393] Bluetooth: hci0: command tx timeout [ 219.362638] Bluetooth: hci1: command tx timeout [ 219.425629] Bluetooth: hci2: command tx timeout [ 219.491518] Bluetooth: hci3: command tx timeout [ 219.553589] Bluetooth: hci4: command tx timeout [ 219.681522] Bluetooth: hci5: command tx timeout [ 219.681644] Bluetooth: hci7: command tx timeout [ 219.745466] Bluetooth: hci6: command tx timeout [ 221.219348] Bluetooth: hci0: command tx timeout [ 221.410472] Bluetooth: hci1: command tx timeout [ 221.474491] Bluetooth: hci2: command tx timeout [ 221.538057] Bluetooth: hci3: command tx timeout [ 221.602020] Bluetooth: hci4: command tx timeout [ 221.729683] Bluetooth: hci7: command tx timeout [ 221.732488] Bluetooth: hci5: command tx timeout [ 221.793397] Bluetooth: hci6: command tx timeout [ 223.265598] Bluetooth: hci0: command tx timeout [ 223.457439] Bluetooth: hci1: command tx timeout [ 223.521392] Bluetooth: hci2: command tx timeout [ 223.586541] Bluetooth: hci3: command tx timeout [ 223.649755] Bluetooth: hci4: command tx timeout [ 223.777872] Bluetooth: hci5: command tx timeout [ 223.778013] Bluetooth: hci7: command tx timeout [ 223.843247] Bluetooth: hci6: command tx timeout [ 277.298447] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.303088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.305880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.312137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.316841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.319821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.362428] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.365991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.368058] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.372272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.376636] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.378494] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.495426] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.502857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.520773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.538370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.544422] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.568758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.689249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.691228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.701033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.713844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.715578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.724753] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.734589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.741030] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.744618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.746074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.747582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.753268] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.758248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.784205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.788637] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.790987] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.800763] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.800781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.807574] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.820951] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.832625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.839143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.855612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.857257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.866026] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.881897] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.900672] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.974734] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.010084] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.018718] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.393453] Bluetooth: hci1: command tx timeout [ 279.393505] Bluetooth: hci0: command tx timeout [ 279.649550] Bluetooth: hci2: command tx timeout [ 279.905518] Bluetooth: hci6: command tx timeout [ 280.033768] Bluetooth: hci4: command tx timeout [ 280.097808] Bluetooth: hci7: command tx timeout [ 280.161503] Bluetooth: hci5: command tx timeout [ 280.225598] Bluetooth: hci3: command tx timeout [ 281.442103] Bluetooth: hci1: command tx timeout [ 281.442777] Bluetooth: hci0: command tx timeout [ 281.697361] Bluetooth: hci2: command tx timeout [ 281.955334] Bluetooth: hci6: command tx timeout [ 282.082423] Bluetooth: hci4: command tx timeout [ 282.145992] Bluetooth: hci7: command tx timeout [ 282.210639] Bluetooth: hci5: command tx timeout [ 282.274383] Bluetooth: hci3: command tx timeout [ 283.489400] Bluetooth: hci1: command tx timeout [ 283.489446] Bluetooth: hci0: command tx timeout [ 283.746376] Bluetooth: hci2: command tx timeout [ 284.002455] Bluetooth: hci6: command tx timeout [ 284.130383] Bluetooth: hci4: command tx timeout [ 284.193443] Bluetooth: hci7: command tx timeout [ 284.258465] Bluetooth: hci5: command tx timeout [ 284.323346] Bluetooth: hci3: command tx timeout [ 285.537603] Bluetooth: hci1: command tx timeout [ 285.537758] Bluetooth: hci0: command tx timeout [ 285.795522] Bluetooth: hci2: command tx timeout [ 286.049540] Bluetooth: hci6: command tx timeout [ 286.178104] Bluetooth: hci4: command tx timeout [ 286.241486] Bluetooth: hci7: command tx timeout [ 286.305567] Bluetooth: hci5: command tx timeout [ 286.369375] Bluetooth: hci3: command tx timeout [ 337.643973] [ 337.644382] ====================================================== [ 337.645512] WARNING: possible circular locking dependency detected [ 337.646609] 6.13.0-next-20250123 #1 Not tainted [ 337.647428] ------------------------------------------------------ [ 337.648452] kworker/u8:0/11 is trying to acquire lock: [ 337.649326] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.651142] [ 337.651142] but task is already holding lock: [ 337.652151] ffff888035b98768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.653898] [ 337.653898] which lock already depends on the new lock. [ 337.653898] [ 337.655275] [ 337.655275] the existing dependency chain (in reverse order) is: [ 337.656533] [ 337.656533] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.657669] __mutex_lock+0x13d/0xb50 [ 337.658809] wiphy_register+0x1b2e/0x25d0 [ 337.664459] ieee80211_register_hw+0x23a4/0x3d60 [ 337.665083] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 337.665786] init_mac80211_hwsim+0x389/0x870 [ 337.666362] do_one_initcall+0xf9/0x640 [ 337.666882] kernel_init_freeable+0x53d/0x7a0 [ 337.667444] kernel_init+0x1e/0x2d0 [ 337.667902] ret_from_fork+0x48/0x80 [ 337.668366] ret_from_fork_asm+0x1a/0x30 [ 337.668885] [ 337.668885] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.669504] __lock_acquire+0x29fd/0x4580 [ 337.670006] lock_acquire+0x19b/0x520 [ 337.670478] __mutex_lock+0x13d/0xb50 [ 337.670956] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.671636] unregister_netdevice_queue+0x224/0x2e0 [ 337.672273] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.672930] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.673607] ieee80211_unregister_hw+0x55/0x3a0 [ 337.674204] hwsim_exit_net+0x3a0/0x730 [ 337.674748] ops_exit_list+0xb3/0x180 [ 337.675250] cleanup_net+0x546/0xad0 [ 337.675735] process_one_work+0x8ee/0x1a10 [ 337.676280] worker_thread+0x674/0xe70 [ 337.676816] kthread+0x3ab/0x720 [ 337.677339] ret_from_fork+0x48/0x80 [ 337.677842] ret_from_fork_asm+0x1a/0x30 [ 337.678357] [ 337.678357] other info that might help us debug this: [ 337.678357] [ 337.679251] Possible unsafe locking scenario: [ 337.679251] [ 337.679933] CPU0 CPU1 [ 337.680485] ---- ---- [ 337.680998] lock(&rdev->wiphy.mtx); [ 337.681418] lock(rtnl_mutex); [ 337.682099] lock(&rdev->wiphy.mtx); [ 337.682852] lock(rtnl_mutex); [ 337.683285] [ 337.683285] *** DEADLOCK *** [ 337.683285] [ 337.683966] 4 locks held by kworker/u8:0/11: [ 337.684494] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.685702] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.686908] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.688071] #3: ffff888035b98768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.689365] [ 337.689365] stack backtrace: [ 337.689918] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250123 #1 [ 337.689974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.690006] Workqueue: netns cleanup_net [ 337.690069] Call Trace: [ 337.690085] [ 337.690103] dump_stack_lvl+0xca/0x120 [ 337.690190] print_circular_bug+0x47b/0x750 [ 337.690259] check_noncircular+0x2e9/0x3c0 [ 337.690324] ? __pfx_check_noncircular+0x10/0x10 [ 337.690399] ? hlock_class+0x4e/0x130 [ 337.690444] ? srso_return_thunk+0x5/0x5f [ 337.690529] ? mark_lock+0xac/0xed0 [ 337.690595] ? lockdep_lock+0xba/0x1b0 [ 337.690682] ? __pfx_lockdep_lock+0x10/0x10 [ 337.690776] __lock_acquire+0x29fd/0x4580 [ 337.690859] ? __pfx___lock_acquire+0x10/0x10 [ 337.690924] ? lock_release+0x20f/0x6f0 [ 337.690990] ? __pfx_lock_release+0x10/0x10 [ 337.691056] ? srso_return_thunk+0x5/0x5f [ 337.691148] lock_acquire+0x19b/0x520 [ 337.691213] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.691289] ? __pfx_lock_acquire+0x10/0x10 [ 337.691357] ? __pfx_lock_release+0x10/0x10 [ 337.691422] ? __pfx_try_to_wake_up+0x10/0x10 [ 337.691487] ? srso_return_thunk+0x5/0x5f [ 337.691573] ? lock_is_held_type+0x9e/0x120 [ 337.691657] ? srso_return_thunk+0x5/0x5f [ 337.691747] __mutex_lock+0x13d/0xb50 [ 337.691827] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.691896] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.691967] ? srso_return_thunk+0x5/0x5f [ 337.692053] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.692119] ? __pfx___mutex_lock+0x10/0x10 [ 337.692203] ? srso_return_thunk+0x5/0x5f [ 337.692290] ? srso_return_thunk+0x5/0x5f [ 337.692375] ? kasan_quarantine_put+0x84/0x1e0 [ 337.692466] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.692519] ? srso_return_thunk+0x5/0x5f [ 337.692611] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.692682] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.692761] ? __pfx_lock_release+0x10/0x10 [ 337.692832] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.692905] ? find_held_lock+0x2c/0x110 [ 337.692992] ? srso_return_thunk+0x5/0x5f [ 337.693080] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.693170] ? srso_return_thunk+0x5/0x5f [ 337.693254] ? lock_release+0x20f/0x6f0 [ 337.693320] ? __pfx_lock_release+0x10/0x10 [ 337.693384] ? srso_return_thunk+0x5/0x5f [ 337.693468] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.693538] ? srso_return_thunk+0x5/0x5f [ 337.693631] unregister_netdevice_queue+0x224/0x2e0 [ 337.693697] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.693764] ? up_write+0x195/0x520 [ 337.693847] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.693927] ? srso_return_thunk+0x5/0x5f [ 337.694017] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.694077] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.694137] ? srso_return_thunk+0x5/0x5f [ 337.694221] ? srso_return_thunk+0x5/0x5f [ 337.694304] ? synchronize_rcu+0x1ff/0x260 [ 337.694380] ieee80211_unregister_hw+0x55/0x3a0 [ 337.694449] hwsim_exit_net+0x3a0/0x730 [ 337.694514] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.694576] ? srso_return_thunk+0x5/0x5f [ 337.694661] ? netdev_run_todo+0x788/0x1040 [ 337.694737] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.694803] ops_exit_list+0xb3/0x180 [ 337.694869] cleanup_net+0x546/0xad0 [ 337.694937] ? __pfx_cleanup_net+0x10/0x10 [ 337.695020] process_one_work+0x8ee/0x1a10 [ 337.695119] ? __pfx_lock_acquire+0x10/0x10 [ 337.695186] ? __pfx_process_one_work+0x10/0x10 [ 337.695274] ? srso_return_thunk+0x5/0x5f [ 337.695358] ? move_linked_works+0x172/0x270 [ 337.695425] ? srso_return_thunk+0x5/0x5f [ 337.695510] ? assign_work+0x196/0x240 [ 337.695595] worker_thread+0x674/0xe70 [ 337.695683] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.695762] ? __pfx_worker_thread+0x10/0x10 [ 337.695856] kthread+0x3ab/0x720 [ 337.695934] ? __pfx_kthread+0x10/0x10 [ 337.696012] ? srso_return_thunk+0x5/0x5f [ 337.696096] ? finish_task_switch.isra.0+0x206/0x840 [ 337.696172] ? __pfx_kthread+0x10/0x10 [ 337.696253] ret_from_fork+0x48/0x80 [ 337.696300] ? __pfx_kthread+0x10/0x10 [ 337.696379] ret_from_fork_asm+0x1a/0x30 [ 337.696480] [ 339.243236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.246662] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.249107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.255768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.262728] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.264931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.432822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.437226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.439258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.444526] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.448192] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.450723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.500322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.508571] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.511399] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.516683] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.527550] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.528751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.563601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.574294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.580666] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.585599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.588263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.589702] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.648468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.649873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.655964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.660654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.667574] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.676530] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.676553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.679975] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.682724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.693148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.693618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.695416] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.697214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.703530] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.711506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.726594] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.728688] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.730000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.731152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.732772] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.741584] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.818831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.826813] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.830849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.281617] Bluetooth: hci0: command tx timeout [ 341.475401] Bluetooth: hci1: command tx timeout [ 341.601438] Bluetooth: hci2: command tx timeout [ 341.666605] Bluetooth: hci3: command tx timeout [ 341.793484] Bluetooth: hci6: command tx timeout [ 341.794537] Bluetooth: hci5: command tx timeout [ 341.859610] Bluetooth: hci4: command tx timeout [ 341.921393] Bluetooth: hci7: command tx timeout [ 343.330105] Bluetooth: hci0: command tx timeout [ 343.521370] Bluetooth: hci1: command tx timeout [ 343.651312] Bluetooth: hci2: command tx timeout [ 343.713406] Bluetooth: hci3: command tx timeout [ 343.841430] Bluetooth: hci6: command tx timeout [ 343.841701] Bluetooth: hci5: command tx timeout [ 343.905340] Bluetooth: hci4: command tx timeout [ 343.969377] Bluetooth: hci7: command tx timeout [ 345.377384] Bluetooth: hci0: command tx timeout [ 345.569344] Bluetooth: hci1: command tx timeout [ 345.699312] Bluetooth: hci2: command tx timeout [ 345.761366] Bluetooth: hci3: command tx timeout [ 345.889524] Bluetooth: hci6: command tx timeout [ 345.889810] Bluetooth: hci5: command tx timeout [ 345.954444] Bluetooth: hci4: command tx timeout [ 346.019486] Bluetooth: hci7: command tx timeout [ 347.425336] Bluetooth: hci0: command tx timeout [ 347.617326] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 23:54:56 Registers: info registers vcpu 0 RAX=0000000000057d51 RBX=0000000000000000 RCX=ffffffff84a8e9d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001 R12=ffffffff864043d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c851f81de8 CR3=0000000015712000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000001ffffffff000055c8917b9640 XMM05=000055c89179f320000055c89179f300 XMM06=00000000000000000000000300000004 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eaa5 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095deca0 R8 =0000000000000000 R9 =ffffed1001d60046 R10=0000000000000030 R11=3064353278302020 R12=0000000000000030 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283ea90 RIP=ffffffff8283eafd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2baab4a200 CR3=000000000c77a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=55cd7b524688f29f4c403a934b810143 XMM02=00000000000fea50d12871896912de2d XMM03=0000000000137530f9980df3bdc2dbad XMM04=987f23cf674cdde200000000000ae988 XMM05=ebfae20747c011c5000000000014f1e8 XMM06=9f165a4fe6c971ad0000000000137638 XMM07=711fbe8126c5d3440000000000137530 XMM08=68a8aee3740b9fad00000000000fea50 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000