syzkaller login: [ 76.224431] sshd (231) used greatest stack depth: 23472 bytes left Warning: Permanently added '[localhost]:36554' (ECDSA) to the list of known hosts. 2024/11/13 19:41:14 fuzzer started 2024/11/13 19:41:15 dialing manager at localhost:46317 [ 79.645948] cgroup: Unknown subsys name 'net' [ 79.756120] cgroup: Unknown subsys name 'cpuset' [ 79.795159] cgroup: Unknown subsys name 'rlimit' 2024/11/13 19:41:39 syscalls: 2217 2024/11/13 19:41:39 code coverage: enabled 2024/11/13 19:41:39 comparison tracing: enabled 2024/11/13 19:41:39 extra coverage: enabled 2024/11/13 19:41:39 setuid sandbox: enabled 2024/11/13 19:41:39 namespace sandbox: enabled 2024/11/13 19:41:39 Android sandbox: enabled 2024/11/13 19:41:39 fault injection: enabled 2024/11/13 19:41:39 leak checking: enabled 2024/11/13 19:41:39 net packet injection: enabled 2024/11/13 19:41:39 net device setup: enabled 2024/11/13 19:41:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/13 19:41:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/13 19:41:39 USB emulation: enabled 2024/11/13 19:41:39 hci packet injection: enabled 2024/11/13 19:41:39 wifi device emulation: enabled 2024/11/13 19:41:39 802.15.4 emulation: enabled 2024/11/13 19:41:40 fetching corpus: 50, signal 22868/24656 (executing program) 2024/11/13 19:41:40 fetching corpus: 100, signal 33924/37286 (executing program) 2024/11/13 19:41:40 fetching corpus: 150, signal 41299/46118 (executing program) 2024/11/13 19:41:40 fetching corpus: 200, signal 50010/56046 (executing program) 2024/11/13 19:41:40 fetching corpus: 250, signal 55899/63130 (executing program) 2024/11/13 19:41:41 fetching corpus: 300, signal 61586/69969 (executing program) 2024/11/13 19:41:41 fetching corpus: 350, signal 65228/74739 (executing program) 2024/11/13 19:41:41 fetching corpus: 400, signal 68421/78995 (executing program) 2024/11/13 19:41:41 fetching corpus: 450, signal 70282/82032 (executing program) 2024/11/13 19:41:41 fetching corpus: 500, signal 73913/86621 (executing program) 2024/11/13 19:41:41 fetching corpus: 550, signal 76368/90071 (executing program) 2024/11/13 19:41:42 fetching corpus: 600, signal 80139/94675 (executing program) 2024/11/13 19:41:42 fetching corpus: 650, signal 82460/97897 (executing program) 2024/11/13 19:41:43 fetching corpus: 700, signal 86013/102127 (executing program) 2024/11/13 19:41:43 fetching corpus: 750, signal 88268/105222 (executing program) 2024/11/13 19:41:43 fetching corpus: 800, signal 90426/108176 (executing program) 2024/11/13 19:41:44 fetching corpus: 850, signal 91470/110110 (executing program) 2024/11/13 19:41:44 fetching corpus: 900, signal 92910/112379 (executing program) 2024/11/13 19:41:44 fetching corpus: 950, signal 94235/114541 (executing program) 2024/11/13 19:41:45 fetching corpus: 1000, signal 95884/116960 (executing program) 2024/11/13 19:41:45 fetching corpus: 1050, signal 97122/119025 (executing program) 2024/11/13 19:41:45 fetching corpus: 1100, signal 98792/121412 (executing program) 2024/11/13 19:41:46 fetching corpus: 1150, signal 101472/124510 (executing program) 2024/11/13 19:41:46 fetching corpus: 1200, signal 103473/127015 (executing program) 2024/11/13 19:41:47 fetching corpus: 1250, signal 104571/128810 (executing program) 2024/11/13 19:41:47 fetching corpus: 1300, signal 106030/130852 (executing program) 2024/11/13 19:41:47 fetching corpus: 1350, signal 107221/132658 (executing program) 2024/11/13 19:41:48 fetching corpus: 1400, signal 108636/134648 (executing program) 2024/11/13 19:41:48 fetching corpus: 1450, signal 109788/136404 (executing program) 2024/11/13 19:41:48 fetching corpus: 1500, signal 111079/138224 (executing program) 2024/11/13 19:41:49 fetching corpus: 1550, signal 112114/139877 (executing program) 2024/11/13 19:41:49 fetching corpus: 1600, signal 112825/141244 (executing program) 2024/11/13 19:41:49 fetching corpus: 1650, signal 113791/142766 (executing program) 2024/11/13 19:41:49 fetching corpus: 1700, signal 114569/144165 (executing program) 2024/11/13 19:41:50 fetching corpus: 1750, signal 115478/145580 (executing program) 2024/11/13 19:41:50 fetching corpus: 1800, signal 116258/146918 (executing program) 2024/11/13 19:41:51 fetching corpus: 1850, signal 117242/148393 (executing program) 2024/11/13 19:41:51 fetching corpus: 1900, signal 118461/149995 (executing program) 2024/11/13 19:41:51 fetching corpus: 1950, signal 119256/151236 (executing program) 2024/11/13 19:41:52 fetching corpus: 2000, signal 120512/152807 (executing program) 2024/11/13 19:41:52 fetching corpus: 2050, signal 121528/154287 (executing program) 2024/11/13 19:41:52 fetching corpus: 2100, signal 122187/155470 (executing program) 2024/11/13 19:41:52 fetching corpus: 2150, signal 123101/156799 (executing program) 2024/11/13 19:41:53 fetching corpus: 2200, signal 123674/157928 (executing program) 2024/11/13 19:41:53 fetching corpus: 2250, signal 124792/159334 (executing program) 2024/11/13 19:41:53 fetching corpus: 2300, signal 125491/160506 (executing program) 2024/11/13 19:41:54 fetching corpus: 2350, signal 126271/161723 (executing program) 2024/11/13 19:41:54 fetching corpus: 2400, signal 126631/162678 (executing program) 2024/11/13 19:41:54 fetching corpus: 2450, signal 127421/163858 (executing program) 2024/11/13 19:41:55 fetching corpus: 2500, signal 128165/164976 (executing program) 2024/11/13 19:41:55 fetching corpus: 2550, signal 128939/166106 (executing program) 2024/11/13 19:41:55 fetching corpus: 2600, signal 129475/167127 (executing program) 2024/11/13 19:41:55 fetching corpus: 2650, signal 130856/168523 (executing program) 2024/11/13 19:41:56 fetching corpus: 2700, signal 132079/169791 (executing program) 2024/11/13 19:41:56 fetching corpus: 2750, signal 132874/170836 (executing program) 2024/11/13 19:41:57 fetching corpus: 2800, signal 133847/171981 (executing program) 2024/11/13 19:41:57 fetching corpus: 2850, signal 134737/173052 (executing program) 2024/11/13 19:41:57 fetching corpus: 2900, signal 135355/174012 (executing program) 2024/11/13 19:41:57 fetching corpus: 2950, signal 135847/174866 (executing program) 2024/11/13 19:41:58 fetching corpus: 3000, signal 136331/175737 (executing program) 2024/11/13 19:41:58 fetching corpus: 3050, signal 137229/176799 (executing program) 2024/11/13 19:41:58 fetching corpus: 3100, signal 137916/177717 (executing program) 2024/11/13 19:41:59 fetching corpus: 3150, signal 138598/178597 (executing program) 2024/11/13 19:41:59 fetching corpus: 3200, signal 139688/179630 (executing program) 2024/11/13 19:42:00 fetching corpus: 3250, signal 140232/180471 (executing program) 2024/11/13 19:42:00 fetching corpus: 3300, signal 140631/181223 (executing program) 2024/11/13 19:42:00 fetching corpus: 3350, signal 141179/182054 (executing program) 2024/11/13 19:42:01 fetching corpus: 3400, signal 141821/182862 (executing program) 2024/11/13 19:42:01 fetching corpus: 3450, signal 142464/183654 (executing program) 2024/11/13 19:42:02 fetching corpus: 3500, signal 143038/184406 (executing program) 2024/11/13 19:42:02 fetching corpus: 3550, signal 143708/185187 (executing program) 2024/11/13 19:42:02 fetching corpus: 3600, signal 144266/185946 (executing program) 2024/11/13 19:42:03 fetching corpus: 3650, signal 144813/186663 (executing program) 2024/11/13 19:42:03 fetching corpus: 3700, signal 145484/187440 (executing program) 2024/11/13 19:42:03 fetching corpus: 3750, signal 146175/188195 (executing program) 2024/11/13 19:42:04 fetching corpus: 3800, signal 146482/188838 (executing program) 2024/11/13 19:42:04 fetching corpus: 3850, signal 147243/189617 (executing program) 2024/11/13 19:42:04 fetching corpus: 3900, signal 147888/190310 (executing program) 2024/11/13 19:42:04 fetching corpus: 3950, signal 148205/190909 (executing program) 2024/11/13 19:42:05 fetching corpus: 4000, signal 148675/191553 (executing program) 2024/11/13 19:42:05 fetching corpus: 4050, signal 149207/192199 (executing program) 2024/11/13 19:42:06 fetching corpus: 4100, signal 149618/192798 (executing program) 2024/11/13 19:42:06 fetching corpus: 4150, signal 150265/193453 (executing program) 2024/11/13 19:42:06 fetching corpus: 4200, signal 151076/194104 (executing program) 2024/11/13 19:42:07 fetching corpus: 4250, signal 151641/194688 (executing program) 2024/11/13 19:42:07 fetching corpus: 4300, signal 152129/195273 (executing program) 2024/11/13 19:42:08 fetching corpus: 4350, signal 152591/195859 (executing program) 2024/11/13 19:42:08 fetching corpus: 4400, signal 153031/196428 (executing program) 2024/11/13 19:42:08 fetching corpus: 4450, signal 153591/196985 (executing program) 2024/11/13 19:42:08 fetching corpus: 4500, signal 154097/197536 (executing program) 2024/11/13 19:42:09 fetching corpus: 4550, signal 154578/198079 (executing program) 2024/11/13 19:42:09 fetching corpus: 4600, signal 154914/198585 (executing program) 2024/11/13 19:42:09 fetching corpus: 4650, signal 155388/199143 (executing program) 2024/11/13 19:42:09 fetching corpus: 4700, signal 155741/199627 (executing program) 2024/11/13 19:42:10 fetching corpus: 4750, signal 156033/200102 (executing program) 2024/11/13 19:42:10 fetching corpus: 4800, signal 156354/200635 (executing program) 2024/11/13 19:42:10 fetching corpus: 4850, signal 156867/201120 (executing program) 2024/11/13 19:42:10 fetching corpus: 4900, signal 157293/201572 (executing program) 2024/11/13 19:42:11 fetching corpus: 4950, signal 157630/202067 (executing program) 2024/11/13 19:42:11 fetching corpus: 5000, signal 158052/202483 (executing program) 2024/11/13 19:42:11 fetching corpus: 5050, signal 158530/202939 (executing program) 2024/11/13 19:42:11 fetching corpus: 5100, signal 158745/203204 (executing program) 2024/11/13 19:42:12 fetching corpus: 5150, signal 159127/203204 (executing program) 2024/11/13 19:42:12 fetching corpus: 5200, signal 159481/203204 (executing program) 2024/11/13 19:42:12 fetching corpus: 5250, signal 159939/203204 (executing program) 2024/11/13 19:42:13 fetching corpus: 5300, signal 160460/203208 (executing program) 2024/11/13 19:42:13 fetching corpus: 5350, signal 160754/203208 (executing program) 2024/11/13 19:42:13 fetching corpus: 5400, signal 161176/203208 (executing program) 2024/11/13 19:42:13 fetching corpus: 5450, signal 161504/203208 (executing program) 2024/11/13 19:42:14 fetching corpus: 5500, signal 162090/203208 (executing program) 2024/11/13 19:42:14 fetching corpus: 5550, signal 162510/203208 (executing program) 2024/11/13 19:42:14 fetching corpus: 5600, signal 162795/203208 (executing program) 2024/11/13 19:42:15 fetching corpus: 5650, signal 163399/203208 (executing program) 2024/11/13 19:42:15 fetching corpus: 5700, signal 164076/203210 (executing program) 2024/11/13 19:42:15 fetching corpus: 5750, signal 164365/203210 (executing program) 2024/11/13 19:42:15 fetching corpus: 5800, signal 164756/203210 (executing program) 2024/11/13 19:42:15 fetching corpus: 5850, signal 165069/203218 (executing program) 2024/11/13 19:42:16 fetching corpus: 5900, signal 165393/203218 (executing program) 2024/11/13 19:42:16 fetching corpus: 5950, signal 165602/203221 (executing program) 2024/11/13 19:42:16 fetching corpus: 6000, signal 165967/203221 (executing program) 2024/11/13 19:42:17 fetching corpus: 6050, signal 166249/203221 (executing program) 2024/11/13 19:42:17 fetching corpus: 6100, signal 166574/203221 (executing program) 2024/11/13 19:42:17 fetching corpus: 6150, signal 166834/203221 (executing program) 2024/11/13 19:42:17 fetching corpus: 6200, signal 167362/203221 (executing program) 2024/11/13 19:42:17 fetching corpus: 6250, signal 167675/203221 (executing program) 2024/11/13 19:42:17 fetching corpus: 6300, signal 167972/203221 (executing program) 2024/11/13 19:42:18 fetching corpus: 6350, signal 168283/203221 (executing program) 2024/11/13 19:42:18 fetching corpus: 6400, signal 168535/203226 (executing program) 2024/11/13 19:42:18 fetching corpus: 6450, signal 168921/203226 (executing program) 2024/11/13 19:42:18 fetching corpus: 6500, signal 169448/203226 (executing program) 2024/11/13 19:42:18 fetching corpus: 6550, signal 169707/203226 (executing program) 2024/11/13 19:42:19 fetching corpus: 6600, signal 170100/203226 (executing program) 2024/11/13 19:42:19 fetching corpus: 6650, signal 170678/203226 (executing program) 2024/11/13 19:42:19 fetching corpus: 6700, signal 170811/203226 (executing program) 2024/11/13 19:42:19 fetching corpus: 6750, signal 171058/203234 (executing program) 2024/11/13 19:42:20 fetching corpus: 6800, signal 171424/203234 (executing program) 2024/11/13 19:42:20 fetching corpus: 6850, signal 171641/203234 (executing program) 2024/11/13 19:42:20 fetching corpus: 6900, signal 172125/203234 (executing program) 2024/11/13 19:42:21 fetching corpus: 6950, signal 172350/203234 (executing program) 2024/11/13 19:42:21 fetching corpus: 7000, signal 172563/203234 (executing program) 2024/11/13 19:42:21 fetching corpus: 7050, signal 172732/203234 (executing program) 2024/11/13 19:42:21 fetching corpus: 7100, signal 172897/203234 (executing program) 2024/11/13 19:42:22 fetching corpus: 7150, signal 173076/203234 (executing program) 2024/11/13 19:42:22 fetching corpus: 7200, signal 173336/203234 (executing program) 2024/11/13 19:42:22 fetching corpus: 7250, signal 173682/203234 (executing program) 2024/11/13 19:42:23 fetching corpus: 7300, signal 173974/203234 (executing program) 2024/11/13 19:42:23 fetching corpus: 7350, signal 174234/203234 (executing program) 2024/11/13 19:42:23 fetching corpus: 7400, signal 174525/203234 (executing program) 2024/11/13 19:42:23 fetching corpus: 7450, signal 174823/203234 (executing program) 2024/11/13 19:42:24 fetching corpus: 7500, signal 175284/203234 (executing program) 2024/11/13 19:42:24 fetching corpus: 7550, signal 175497/203234 (executing program) 2024/11/13 19:42:24 fetching corpus: 7600, signal 175835/203234 (executing program) 2024/11/13 19:42:24 fetching corpus: 7650, signal 176276/203234 (executing program) 2024/11/13 19:42:24 fetching corpus: 7700, signal 176785/203234 (executing program) 2024/11/13 19:42:24 fetching corpus: 7750, signal 177139/203234 (executing program) 2024/11/13 19:42:25 fetching corpus: 7800, signal 177370/203234 (executing program) 2024/11/13 19:42:25 fetching corpus: 7850, signal 177592/203234 (executing program) 2024/11/13 19:42:25 fetching corpus: 7900, signal 177868/203234 (executing program) 2024/11/13 19:42:25 fetching corpus: 7950, signal 178115/203234 (executing program) 2024/11/13 19:42:25 fetching corpus: 8000, signal 178362/203234 (executing program) 2024/11/13 19:42:26 fetching corpus: 8050, signal 178729/203234 (executing program) 2024/11/13 19:42:26 fetching corpus: 8100, signal 178947/203235 (executing program) 2024/11/13 19:42:26 fetching corpus: 8150, signal 179180/203235 (executing program) 2024/11/13 19:42:27 fetching corpus: 8200, signal 179349/203235 (executing program) 2024/11/13 19:42:27 fetching corpus: 8250, signal 179481/203235 (executing program) 2024/11/13 19:42:27 fetching corpus: 8300, signal 179690/203235 (executing program) 2024/11/13 19:42:27 fetching corpus: 8350, signal 179856/203235 (executing program) 2024/11/13 19:42:28 fetching corpus: 8400, signal 180055/203235 (executing program) 2024/11/13 19:42:28 fetching corpus: 8450, signal 180266/203235 (executing program) 2024/11/13 19:42:28 fetching corpus: 8500, signal 180570/203235 (executing program) 2024/11/13 19:42:29 fetching corpus: 8550, signal 180802/203235 (executing program) 2024/11/13 19:42:29 fetching corpus: 8600, signal 181014/203235 (executing program) 2024/11/13 19:42:29 fetching corpus: 8650, signal 181239/203235 (executing program) 2024/11/13 19:42:30 fetching corpus: 8700, signal 181402/203235 (executing program) 2024/11/13 19:42:30 fetching corpus: 8750, signal 181612/203235 (executing program) 2024/11/13 19:42:30 fetching corpus: 8800, signal 181824/203235 (executing program) 2024/11/13 19:42:30 fetching corpus: 8850, signal 182094/203235 (executing program) 2024/11/13 19:42:30 fetching corpus: 8900, signal 182321/203235 (executing program) 2024/11/13 19:42:31 fetching corpus: 8950, signal 182507/203235 (executing program) 2024/11/13 19:42:31 fetching corpus: 9000, signal 182771/203235 (executing program) 2024/11/13 19:42:31 fetching corpus: 9050, signal 182987/203235 (executing program) 2024/11/13 19:42:31 fetching corpus: 9100, signal 183199/203235 (executing program) 2024/11/13 19:42:31 fetching corpus: 9150, signal 183365/203235 (executing program) 2024/11/13 19:42:31 fetching corpus: 9200, signal 183526/203235 (executing program) 2024/11/13 19:42:32 fetching corpus: 9250, signal 183787/203235 (executing program) 2024/11/13 19:42:32 fetching corpus: 9300, signal 184004/203235 (executing program) 2024/11/13 19:42:32 fetching corpus: 9350, signal 184281/203235 (executing program) 2024/11/13 19:42:33 fetching corpus: 9400, signal 184488/203236 (executing program) 2024/11/13 19:42:33 fetching corpus: 9450, signal 184687/203239 (executing program) 2024/11/13 19:42:33 fetching corpus: 9500, signal 184900/203239 (executing program) 2024/11/13 19:42:33 fetching corpus: 9550, signal 185101/203239 (executing program) 2024/11/13 19:42:33 fetching corpus: 9600, signal 185328/203239 (executing program) 2024/11/13 19:42:34 fetching corpus: 9650, signal 185550/203239 (executing program) 2024/11/13 19:42:34 fetching corpus: 9700, signal 185881/203239 (executing program) 2024/11/13 19:42:34 fetching corpus: 9750, signal 186058/203239 (executing program) 2024/11/13 19:42:35 fetching corpus: 9800, signal 186308/203239 (executing program) 2024/11/13 19:42:35 fetching corpus: 9850, signal 186487/203239 (executing program) 2024/11/13 19:42:35 fetching corpus: 9900, signal 186697/203239 (executing program) 2024/11/13 19:42:35 fetching corpus: 9950, signal 186878/203239 (executing program) 2024/11/13 19:42:35 fetching corpus: 10000, signal 187165/203239 (executing program) 2024/11/13 19:42:36 fetching corpus: 10050, signal 187455/203239 (executing program) 2024/11/13 19:42:36 fetching corpus: 10100, signal 187719/203239 (executing program) 2024/11/13 19:42:37 fetching corpus: 10150, signal 187954/203239 (executing program) 2024/11/13 19:42:37 fetching corpus: 10200, signal 188078/203239 (executing program) 2024/11/13 19:42:37 fetching corpus: 10250, signal 188292/203239 (executing program) 2024/11/13 19:42:38 fetching corpus: 10300, signal 188455/203239 (executing program) 2024/11/13 19:42:38 fetching corpus: 10350, signal 188688/203243 (executing program) 2024/11/13 19:42:38 fetching corpus: 10400, signal 188861/203243 (executing program) 2024/11/13 19:42:38 fetching corpus: 10450, signal 189015/203243 (executing program) 2024/11/13 19:42:38 fetching corpus: 10500, signal 189305/203243 (executing program) 2024/11/13 19:42:39 fetching corpus: 10550, signal 189493/203243 (executing program) 2024/11/13 19:42:39 fetching corpus: 10600, signal 189609/203243 (executing program) 2024/11/13 19:42:39 fetching corpus: 10650, signal 189813/203243 (executing program) 2024/11/13 19:42:40 fetching corpus: 10700, signal 190175/203243 (executing program) 2024/11/13 19:42:40 fetching corpus: 10750, signal 190341/203243 (executing program) 2024/11/13 19:42:40 fetching corpus: 10800, signal 190543/203243 (executing program) 2024/11/13 19:42:40 fetching corpus: 10850, signal 190682/203243 (executing program) 2024/11/13 19:42:41 fetching corpus: 10900, signal 190897/203243 (executing program) 2024/11/13 19:42:41 fetching corpus: 10930, signal 190964/203243 (executing program) 2024/11/13 19:42:41 fetching corpus: 10930, signal 190964/203243 (executing program) 2024/11/13 19:42:44 starting 8 fuzzer processes 19:42:44 executing program 0: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x110, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x62}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004004}, 0x1) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x1f, 0xf22, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @private2, 0x7, 0x8, 0xffffff1c, 0x8}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84000}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x56}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x408000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r3) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000bc0)={&(0x7f0000000840), 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x288, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf88b}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "fae2f58d1a399a46417aac6014973b2137f7dc2a2066cdce0eaf62e36e4d5154"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "2a26d4a553f564e28fd95a549dc310a30105cdd731"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ef8e1d858eb936b356a821356ee5e079e4de8fb8403f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x38}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x22c}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x646}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb85f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9866}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r6 = openat(r4, &(0x7f0000000c00)='./file0\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r8 = syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000000cc0)='./file0\x00', 0x7d69, 0x9, &(0x7f00000011c0)=[{&(0x7f0000000d00)="11a99ad35ae4f4cc16d35d532920995e14bcc5172a0cf5d7b71cea2b74311bb70bd0d3cf3fa14ed342b931f5cacfc71e619efab9ac0f1f2262ec3abd915061e04d89703c3783beef89fdf2235a077ad2c0ab462c10543cdf1ef3ce07e4f6b56ac6ff994916fe9074172ccb6f13a51f075eed1bfc4898953de43d832c34363b00258823a2e59f80c16b8a", 0x8a, 0x9}, {&(0x7f0000000dc0)="cd84ec26c56e887046546f4605492c", 0xf, 0x2}, {&(0x7f0000000e00)="652d8594eee1cc33981e153fe274a7c32248031cd98fd401115d79c4102cdafea589bdccbd7613890f255f2f263f0eda13fd42525b2daae8fb58f1885ae5187026cf04c94077460a3484d8a0c000df84a9da238df107b27c3d407ca6a6dac91e3c81875e8e3f274ca5f3f1563321d061a800c1d50bc26f44f67f4918934739e8a24772f7e46f3f00e6c571c281d696a23f677c83bfffdf1642eb3861c430ac54897a479c5ce1556b3eca577a69f7a99648add15005beb413bfb71a99da7d67be227d3eed85e16410b189dd2db3bbc56ac2ef28", 0xd3, 0x80000000}, {&(0x7f0000000f00)="16b72feeaf1ed5d4f19887688cd71b7e2cb47414e7786ead7c34", 0x1a, 0x3}, {&(0x7f0000000f40)="c62275150423f94213f29a0d1dba0becb4097e0bccba0960b3948c5ca2775cd2aada5a7b35de604698", 0x29, 0xd}, {&(0x7f0000000f80)="923269feff1ddf1aa972b482cdb555dc14f9ba5fc55d14d3f59d909cda7a02cd1da540fc63bab9c27117b358b0f74cc7b033becd46f9523860946e26ed788b84e50e1944a83421a7c4ca6eb6642596d8171aa81afd72ed9e62c70317c2330c9ab9494a54d7c15a3da7354509bd65baf558317ac419a7a313b4b3ade0550b8e50e2933b3379df3e3be07ce8652ad54eeb75ad1b0a2479255713277b7d31c4e7733f763e686a61b6fd1b1c815cad6c540a99ac7c201d054d6a", 0xb8, 0x80000000}, {&(0x7f0000001040)="519b58936542fa67b6154757b6af72649ee56a910784aff11ff8449ae07e02029308d32ade39c85c610db70422eb447d9537982a1c06d39cea49bd73a56b40173fb8b90b947cd365ad23c985bf755879febd", 0x52, 0x8}, {&(0x7f00000010c0)="40386ff47ac365853f0fce0c635d00b5bca4941435d5324a2ad4ea4586ec5a8f2cf23b259e10e9f936daa7d5ce5349be0d33371a53892a6fcbe6011e47abb6e92a9edda33470ec155dfa752a1cd599bbb88c72a84b7dc0894d14954e0865722b0ee5cabe453f9f335508b5215a1f51f530548630d5ad8d631b9ac1b9078be1d46e3f984ca5b094766ef115e6e8694d9271941079fdcf1587e9364cd9a0b6e4e18e44de8303f74a0128ffe01ce464ac45d5b72f2d747a60cc99", 0xb9, 0x1}, {&(0x7f0000001180)="0d90b14f5f46bb116f35704fbc976ea939911e18473d257fd2f5580b424a7ae53e3a6abfe755076cbd7215cc58418a0c2e64", 0x32, 0x5}], 0x8a0000, &(0x7f00000012c0)={[{@init_itable_val={'init_itable', 0x3d, 0x3}}, {@dioread_lock}], [{@obj_role}]}) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000001300)=0x1000) connect$inet(r7, &(0x7f0000001340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r9 = openat$cgroup_freezer_state(r6, &(0x7f0000001380), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r9, 0x4010942a, &(0x7f00000013c0)={0x1, 0x1}) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000001400), &(0x7f0000001440), 0x2, 0x1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x114, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:load_policy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:devicekit_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40810}, 0xab92cbe7cbaf70e6) 19:42:44 executing program 1: setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x90000, 0x3a) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x800, 0xc8) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='.\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x800, 0x1b7) r3 = openat(r2, &(0x7f0000000280)='./file0\x00', 0x2000, 0xa) write(r3, &(0x7f00000002c0)="5446d3e52ffc2cbf613fbca9e6e65022b7bc52fa74933248d1b00f02d33cf27962a1781f70ba29cd1a3e7ed69c8cbc4215e7a02127795751f51544d992df7524853bbb44c16a0cb35fb13f1611545bb676fdf68b4afa05e4b8dc94789919727f850223c44cf1ad01f9c2c097e365f20044a25f06838306725d6a60072d2b25e508becd3949fb2ddd876a8ad84edc43d555fcfe2173b6e7622dc3e213acc009b08f8cca0d7597a7f001f9a488bf16bf5a5e9ee085a0f00092ee903da5252f1529616761942cc2dac98a3bd50310931f8d5daba1fb894539e706128746bf", 0xdd) mount$9p_xen(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x802004, &(0x7f0000000480)={'trans=xen,', {[{@access_user}, {@noextend}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, ')[@*@'}}, {@subj_role={'subj_role', 0x3d, '%-\\\\'}}]}}) r4 = accept4$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, &(0x7f0000000540)=0x10, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0xfffffffc}}, './file0\x00'}) unlinkat(r3, &(0x7f00000005c0)='./file0\x00', 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x400202, 0x0) sendfile(r5, r6, &(0x7f0000000640), 0x8c) truncate(&(0x7f0000000680)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000980)={'nr0\x00', &(0x7f00000006c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x800, 0x8000, 0x4, 0x3, 0xc24b, 0xfffffffb, 0xfffffffb, 0x7ff, 0x8, 0x1a3, 0x18a, 0x5, 0x8, 0x8, 0x7f, 0x3, 0x8, 0x8, 0xffffffff, 0x8e, 0x1, 0xe9f, 0x80, 0x6, 0x3f, 0x9, 0x80, 0x2baa40b3, 0xebed, 0x0, 0x2, 0xfffffff7, 0x7, 0x7fff, 0x5, 0x2, 0x7fffffff, 0x9e6, 0x5, 0x3, 0x9, 0x401, 0x3, 0x36, 0x2, 0x1, 0x101, 0x3, 0xffffe3e1, 0x2, 0x3, 0x7fff, 0xfffffff7, 0xf22, 0xeb3b, 0x5, 0x442a, 0x10000, 0x8, 0x1, 0x3, 0x8, 0x800, 0x8001, 0x7, 0x7, 0xffff, 0x1000, 0x3, 0xf74e, 0x2, 0x6, 0x0, 0x2, 0xf5c, 0x6, 0xb20, 0x8, 0x1, 0x2, 0x4f, 0x7, 0x8, 0x513a, 0x1, 0x7, 0x4, 0x7f, 0x9, 0x800, 0x9, 0x63, 0x0, 0x2, 0x3, 0x7, 0x9, 0x2, 0x0, 0x0, 0x8, 0xffffffc1, 0x3a, 0x1, 0x10001, 0x9, 0x7, 0x3, 0x2, 0x3, 0x0, 0x1000, 0x10000, 0x2, 0xb905, 0x8, 0x6, 0x41e, 0x1, 0x65a3, 0xa5b5, 0xffff, 0x0, 0x0, 0xffffffe0, 0xffffffff, 0xfffffffb, 0x8], "365540127eed7a5464ad20d878f3d05fd8011142b0d3541f2a064b4447cd687977dc0d98afd80be3fae29c28739471e6084566f7b863301db89322801eb6fa1801f30028eee9488b190d21e4cf9150de02f8d4ce840b8490997f689cf0961415b040bd0fa25a79a05c163aea3dc349067e23889b0c8e054571fefad802382c092c047c8a1a6f1e6b6d8b360c"}}) r7 = openat(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x4b6481, 0x21) syz_io_uring_setup(0x89d, &(0x7f0000000a00)={0x0, 0x33ed, 0x20, 0x0, 0x33b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000b00)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0xffffffffffff22ea, 0x0, 0x6fa6, 0x0, 0x0, {0x0, r9}}, 0x86) 19:42:44 executing program 4: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 19:42:44 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x101102) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2b2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x10c02, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x184, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32b41ecc}]}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb9}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = epoll_create1(0x80000) readv(r3, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/13, 0xd}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000580), 0x40c100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r4, &(0x7f0000000640)={r5, r7, 0x1}) write$bt_hci(r5, &(0x7f0000000680)={0x1, @le_set_ext_adv_enable={{0x2039, 0xc0}, {0xff, 0xb6, "88dcdf31da69bb08cb318debf5a8ec7586d23aedaa83ce44b06c777f190c3320e56330ebfe37c968d251aed3b06ea0f01eac01bdc16680138bae11343902e8c8f9525d7919db35092ce4af5af1d90c0c8d2f070fbc2113393e3a3ce1677b421f19a46e2bc0e2823ed51f8f51ef0f3424a37283b3c0d86bb88733cc6d71f5ae821cdb9a6e4c485e3635bc7267ada0ffa7e87af4024afd60f80a783a575c0544c9825f495cb170ae9e994aa9aee919039df52733fe072a1c17b9c9c9b2b0ab"}}}, 0xc4) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000780)={0x2, {{0x2, 0x4e20, @multicast1}}, 0x0, 0x2, [{{0x2, 0x4e24, @empty}}, {{0x2, 0x4e22, @remote}}]}, 0x190) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000980)={0x1, 0x0, &(0x7f0000000940)=[r4]}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r0) r8 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000a00)={0x1}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_TRIM(r9, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3f6, 0x200, 0x70bd27, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000084}, 0x1) 19:42:44 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="9431637053e4"}, @NL80211_ATTR_PMKID={0x14, 0x55, "143303bcdd03e85c8bfb2e85894e5389"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x8008801) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000280)={0x0, "7f0b8625c0413d8e536f355b6d7fc278"}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000001280), 0x4c2100, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x40045) r4 = syz_open_dev$vcsu(&(0x7f0000001400), 0x80000000, 0x40000) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000001440)={0x88, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = dup3(r1, r2, 0x80000) r6 = accept4$packet(r4, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000021c0)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002200)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000002300)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000023c0)={'syztnl1\x00', &(0x7f0000002340)={'sit0\x00', 0x0, 0x4, 0x7, 0x0, 0x80, 0x28, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8, 0xfffff000, 0x3}}) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f00000025c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002580)={&(0x7f0000002400)={0x14c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000002600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000002640)={@empty, 0x4e, r8}) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000002680), &(0x7f00000026c0)={0x0, 0xfb, 0x103, 0x0, 0x4, "ac711a06cdd327293c4c14fbec18ec31", "b9ff85e53ae1631df3168fb606be9f0faf8f3f587ee33e75adbe71b10b21cce48e1abf8b125ffeccaef45dc087a7bc0d1a08c8d3120ac73a9eea9f4c6e329a94c45ee4bb36289154af2c79b7fe4869937dfa608ff083240da0108feca61e20ed4c460e40b7c65616f5867e4262deafa6dc15ee9ce211a2f6c6c7960e915e29925daed75485661c1fc33ff046bfb45dcbaae12f1287a4c313f7fac2a95db6be88d4027dd591f21b54c4008f5a082b18f24a74a955d3e89f5a21757c0720e051cdbee6c29f561bfdf54e4505cd6e0ade426b6e96a335fc3f0128f0f746e5c3336648f6e057d9d78820871d097b8b8a"}, 0x103, 0x0) fsetxattr(r2, &(0x7f0000002800)=@known='trusted.overlay.opaque\x00', &(0x7f0000002840)='\x00', 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000002880)) [ 169.291553] audit: type=1400 audit(1731526964.907:7): avc: denied { execmem } for pid=272 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:42:44 executing program 5: io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xc000, 0xffffffffffffffff, &(0x7f0000000000)="e932186f89222692cf9a0e750ab36807fab5b6e029366fa1fc93f5c4f776cb6b1ebbc6bd3a08bd3af6c2a02fa9180affa51c35e0961094614a3448c889fd9695080dd832702201dd68abf7838fbc294fe35f1ba775bd600018f338f1baf49aa86ae8bf36cd46382d51771dab09f820d8f30189e6dbf40fa039aa85e72dcdf5c4edb56da8280065fd7d0e3e7c3ba53d368ef24aedad232501b455d432c26dc12021bfbea710e95481f1a7b620427d7c2dbd320a52fbdecf5c", 0xb8, 0xea, 0x0, 0x1}, &(0x7f0000000100)) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = accept(r0, &(0x7f0000000200)=@alg, &(0x7f0000000280)=0x80) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000002c0)={r3, 0x3, 0x7, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x6}}, '.\x00'}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom1\x00', 0x1000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000380)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000580)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0xcc01, 0x0) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x4e23, 0x3ff, @loopback, 0x5}, 0x1c) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r7 = pidfd_getfd(r1, r4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000780)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc8, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) mount$9p_fd(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x8, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_none}], [{@fsname={'fsname', 0x3d, '*!&]((/\x9d,+\\(!^%-'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r9, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000b80)={0x1f, 0xff, @none, 0x8000, 0x5}, 0xe) 19:42:44 executing program 6: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a0, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7f, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x1a0}}, 0x4008004) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0xd06, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x6c}}, 0x4000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf0, 0x0, 0x906, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40040}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x31) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x108, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x58d8}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x4096}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x108}, 0x1, 0x0, 0x0, 0x50}, 0x4000080) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000980)={0x3a8c, 0x9, 0x4, 0x8, 0x5, [{0x9, 0x4, 0x5ef53268, '\x00', 0x2101}, {0xa4, 0x4, 0x8, '\x00', 0x2}, {0x3f, 0x2, 0x1, '\x00', 0x484}, {0x14, 0x7a1, 0x10000, '\x00', 0x1400}, {0x701, 0x7, 0x5, '\x00', 0x100}]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1b4, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd58c}, @TIPC_NLA_NODE_ID={0xce, 0x3, "ee80e67ffd0dff61ad22120d0ccf4b3b726bf1982d8b4b8ba7d0810a5154cbc560f32d9f05b245a9919fdc666cbfc730ae05d559abb813a3d0b369330fb702e00b924cabc869c7f96b095f4db3bf3902ae5c9218d8bdcc1c48ac142527ed9d649f8d0ea13e0350716126308465092f118b721a834c354c714c6f90b4f28bbd80e00daa7dd97ebb0c0825796bfa3dda1b4c640b775e01dc2b2bb129395389b3a5279394381dad4a1dbe453291c38f4ddc4fcb56a5a929049b1473086ea4f7d09e2f3efadd1f4acb5e1cde"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2299a553ccf17a21b0c50c79bd6eff63a0889be1d380ed02409201cc34016ae25b4fe625"}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20001}, 0xd0) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4105}, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xf4, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'syz_tun\x00'}) 19:42:44 executing program 7: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000c0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x11c, r0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x6}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x798cc5e12ca0f346}, 0x800) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc0ce69a4, 0x59}}, './file0\x00'}) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x6, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000600)=0x2) r2 = accept(r1, &(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000006c0)=0x80) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x118, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7e}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x49, 0x18}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x118}, 0x1, 0x0, 0x0, 0x4009}, 0x80) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r4 = dup2(r3, r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x38}}, 0x800) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x41087086}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a40)={0x404, 0x12, 0x800, 0x70bd2d, 0x25dfdbfe, {0x18, 0x1, 0x40, 0x3f, {0x4e24, 0x4e24, [0x8, 0x1ff, 0x7, 0x10000], [0x5, 0x30418a6b, 0x7fffffff, 0x7], 0x0, [0x6, 0x4]}, 0x7f}, [@INET_DIAG_REQ_BYTECODE={0x60, 0x1, "ca1fbaeb751f02212779ea3971abd18e10329096f13e50d69284179ca5770ffd2998fecc1048d65ad15d6ad5e77fe50e5fab713a90dbf97a0aba5591ad6e75e28efe75b3b1208376a603da0bd5a7eec32472610ad87e363deab1ddde"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "9de8473e2debe0e7878cbd9d804a955b198a8ad8acb2f71d5d2fb29415fe89d5c1bcff08f6f54bd02c09434cc7625648248b9e1bb43c20fdafe7a5c7446597e69b7eb500d649912d8cd28bf898dce5f47580d4145a75e75a882ce9d8d9c84e09a6e973e0740ebaabde393c1e3231db2c9359e36200c5f7b05a987cda6f320a2e3409d81971d70b1128450853cc7f6377fbe5f083cd9c9340d7404153c733a272664bb0cd8dd5c280c48fcd66833a048ad6bc98c48507a08d6e105d11c4"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "9bb5df86802a073bcc1049d9d193de0ffecc868e980dd4e3563285adf7b916573dda03b8d341673dac8f061bbae0606df0faef493562ad472420009023d6bdd7606eaf0528d04067e0b0ca7255a95acaa2c076a28aa9829e4fc9a27ffa2334c43455130ebd9fce06a61f7148471548e9e452a98323ad971f46b7cabd25b31ca5468ab152308533bb1c4828242b680f2a7c5c73c0f3ee956145518913ffa025ad0d1604bd71fb7379"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "5e4d9444f4fb782e3264b0e6cb81bf448ac01e024ffe7b10e96b1309c0417fb1710dabd380a7b331eb1c7a5f8370e9e9e742ba638cf042ac525351a6510607454a93c2ebf30e2e697f2e3b45cb1ed371253a8450ab48e71b8020c1e5b179f3d39281c595a44729dcfbb4ecbe542efcea51994d1744032d4333ae98c1751f38d86807bc273e66e3bd6113da085a26d5a6557f"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "d45818b2303321bac8fc273700341cc475b777ddda637021baa2a1fd92d40d609001835d294ef034b310beaf60ce634e4d3d7c88ad70befac7686d5af8ad5d2e823f0e0adb3c1e308b9adc847462300e1be9c23c58e6c214af4e57683d5a4780ab33e28fe6e42d892bfe59c00e21"}, @INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "d1c8439d9167448a8fc42782717f2b123c14a54ae2a6745b224cae62b6b0b079a0a7ddfd6672e4f564ae3386bde3b5574477e669befc9c2f4ae7796e952a2d19f45aadf0b82b07d0a69fec68a69d606d21f7b22d54883a4a475ba280985a90f3efe0adfdababf29ca0b66f6fe44f816c21cc2ae2dbd567e9aa84db6d848776cb64e8858389359491e9bf2a738ac797150de4fd913e1a0577b2afd744cce51d3b101b37ac6264b107bd815f24ff42c8c0b7abf64f30b96f288b2ae2e143e634090a2007078cf0eac167330fca8bf9cc82a368501e67b762"}]}, 0x404}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000f80)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x4, &(0x7f00000010c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}, {@debug={'debug', 0x3d, 0x8}}, {@msize={'msize', 0x3d, 0x8ac}}, {@access_client}, {@access_any}, {@posixacl}, {@access_any}], [{@euid_gt={'euid>', r5}}]}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000011c0)={0xc}) openat2(0xffffffffffffffff, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x60000, 0x80, 0xc9a1c753f569723f}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4c440202}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbf5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x24000000) creat(&(0x7f0000001380)='./file0\x00', 0xd1) [ 170.762599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.765564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.767883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.772210] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.781377] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.783834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.822501] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.839072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.842209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.844847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.849261] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.853571] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.856542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.858601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.861639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 170.863459] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.865822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.866124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 170.872001] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.874260] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 170.876631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 170.878359] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.879457] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 170.880593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.887257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.888194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.890880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.891550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 170.896248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.898328] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 170.902699] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.904148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.909462] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.912858] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 170.913649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.915840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.916668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 170.917468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.918222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 170.925582] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.926523] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.928976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.929921] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.933582] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 170.950534] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 170.951765] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.967544] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.968406] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 172.852737] Bluetooth: hci0: command tx timeout [ 172.976637] Bluetooth: hci2: command tx timeout [ 172.977692] Bluetooth: hci4: command tx timeout [ 172.978271] Bluetooth: hci1: command tx timeout [ 173.040386] Bluetooth: hci7: command tx timeout [ 173.041131] Bluetooth: hci5: command tx timeout [ 173.041850] Bluetooth: hci6: command tx timeout [ 173.041867] Bluetooth: hci3: command tx timeout [ 174.895566] Bluetooth: hci0: command tx timeout [ 175.024354] Bluetooth: hci2: command tx timeout [ 175.024940] Bluetooth: hci1: command tx timeout [ 175.024975] Bluetooth: hci4: command tx timeout [ 175.087398] Bluetooth: hci6: command tx timeout [ 175.088209] Bluetooth: hci3: command tx timeout [ 175.088236] Bluetooth: hci5: command tx timeout [ 175.089156] Bluetooth: hci7: command tx timeout [ 176.943534] Bluetooth: hci0: command tx timeout [ 177.071544] Bluetooth: hci4: command tx timeout [ 177.072099] Bluetooth: hci2: command tx timeout [ 177.072354] Bluetooth: hci1: command tx timeout [ 177.136549] Bluetooth: hci5: command tx timeout [ 177.136634] Bluetooth: hci7: command tx timeout [ 177.137086] Bluetooth: hci3: command tx timeout [ 177.137671] Bluetooth: hci6: command tx timeout [ 178.991443] Bluetooth: hci0: command tx timeout [ 179.119518] Bluetooth: hci1: command tx timeout [ 179.119617] Bluetooth: hci4: command tx timeout [ 179.120042] Bluetooth: hci2: command tx timeout [ 179.183571] Bluetooth: hci7: command tx timeout [ 179.184090] Bluetooth: hci3: command tx timeout [ 179.184633] Bluetooth: hci6: command tx timeout [ 179.184676] Bluetooth: hci5: command tx timeout [ 233.422426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.431093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.434220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.443970] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.451556] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.452932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.475713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.477612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.479661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.486003] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.487308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.489177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.493059] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.495755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.497231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 233.498841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.503757] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.504990] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.574186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.574523] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.579985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.580075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.582110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.587802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.592777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.599591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.600406] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.611944] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 233.613807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.615777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.617348] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.618796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.624209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.627537] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.631235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 233.635634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 233.640703] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 233.642405] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 233.648603] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 233.650505] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.660567] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 233.661691] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 233.666215] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 233.686471] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 233.734701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.735464] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 233.741987] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 233.743427] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.505338] Bluetooth: hci0: command tx timeout [ 235.567673] Bluetooth: hci1: command tx timeout [ 235.632549] Bluetooth: hci2: command tx timeout [ 235.697327] Bluetooth: hci3: command tx timeout [ 235.698863] Bluetooth: hci4: command tx timeout [ 235.700156] Bluetooth: hci7: command tx timeout [ 235.760370] Bluetooth: hci5: command tx timeout [ 235.824466] Bluetooth: hci6: command tx timeout [ 237.554310] Bluetooth: hci0: command tx timeout [ 237.615391] Bluetooth: hci1: command tx timeout [ 237.680306] Bluetooth: hci2: command tx timeout [ 237.745356] Bluetooth: hci3: command tx timeout [ 237.745866] Bluetooth: hci4: command tx timeout [ 237.747058] Bluetooth: hci7: command tx timeout [ 237.807641] Bluetooth: hci5: command tx timeout [ 237.872337] Bluetooth: hci6: command tx timeout [ 239.600355] Bluetooth: hci0: command tx timeout [ 239.664471] Bluetooth: hci1: command tx timeout [ 239.727371] Bluetooth: hci2: command tx timeout [ 239.792356] Bluetooth: hci7: command tx timeout [ 239.792891] Bluetooth: hci4: command tx timeout [ 239.793000] Bluetooth: hci3: command tx timeout [ 239.855667] Bluetooth: hci5: command tx timeout [ 239.920478] Bluetooth: hci6: command tx timeout [ 241.648396] Bluetooth: hci0: command tx timeout [ 241.712347] Bluetooth: hci1: command tx timeout [ 241.790685] Bluetooth: hci2: command tx timeout [ 241.840371] Bluetooth: hci7: command tx timeout [ 241.840891] Bluetooth: hci3: command tx timeout [ 241.841784] Bluetooth: hci4: command tx timeout [ 241.903368] Bluetooth: hci5: command tx timeout [ 241.967347] Bluetooth: hci6: command tx timeout [ 295.870885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.875010] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.881518] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.887014] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.894753] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.897657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.187757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.191430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.196622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.200097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.200932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.203345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.206393] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.216002] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.217149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.218196] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.237506] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 296.242569] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.327990] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.330353] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.331009] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.332863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.340705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.350050] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.354414] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.379235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.383776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.387473] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.388603] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 296.389648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.394841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.404110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.407198] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.409054] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.409093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.411216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.418535] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.418548] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.437181] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.439787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.448088] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.451525] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 296.453528] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.480541] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.491590] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 296.492787] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 296.495215] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.497021] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 297.967350] Bluetooth: hci0: command tx timeout [ 298.287485] Bluetooth: hci2: command tx timeout [ 298.287561] Bluetooth: hci1: command tx timeout [ 298.479485] Bluetooth: hci5: command tx timeout [ 298.481336] Bluetooth: hci3: command tx timeout [ 298.482137] Bluetooth: hci4: command tx timeout [ 298.543530] Bluetooth: hci7: command tx timeout [ 298.607383] Bluetooth: hci6: command tx timeout [ 300.015327] Bluetooth: hci0: command tx timeout [ 300.335329] Bluetooth: hci2: command tx timeout [ 300.335896] Bluetooth: hci1: command tx timeout [ 300.527467] Bluetooth: hci4: command tx timeout [ 300.528966] Bluetooth: hci5: command tx timeout [ 300.529507] Bluetooth: hci3: command tx timeout [ 300.591382] Bluetooth: hci7: command tx timeout [ 300.655372] Bluetooth: hci6: command tx timeout [ 302.063341] Bluetooth: hci0: command tx timeout [ 302.383370] Bluetooth: hci2: command tx timeout [ 302.383896] Bluetooth: hci1: command tx timeout [ 302.575655] Bluetooth: hci5: command tx timeout [ 302.576160] Bluetooth: hci3: command tx timeout [ 302.577331] Bluetooth: hci4: command tx timeout [ 302.639434] Bluetooth: hci7: command tx timeout [ 302.736748] Bluetooth: hci6: command tx timeout [ 304.111434] Bluetooth: hci0: command tx timeout [ 304.433326] Bluetooth: hci2: command tx timeout [ 304.434765] Bluetooth: hci1: command tx timeout [ 304.623445] Bluetooth: hci3: command tx timeout [ 304.623581] Bluetooth: hci4: command tx timeout [ 304.625126] Bluetooth: hci5: command tx timeout [ 304.689618] Bluetooth: hci7: command tx timeout [ 304.752483] Bluetooth: hci6: command tx timeout [ 358.606909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.609828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.611883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.615542] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.619799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 358.621976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.980125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.981629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.982797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.985075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.002475] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 359.009406] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.034653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.044526] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.050882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.059629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.061481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.062373] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.063317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.064991] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.066300] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.068027] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.068923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.070586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.072400] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.073139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.074900] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.077966] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 359.079617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.082350] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.087597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.089049] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 359.090252] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.091105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.094775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.096811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.098936] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.109946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.116611] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 359.119768] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 359.121089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.128942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.201498] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.217657] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.221821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.224737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.296427] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 359.305465] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.687467] Bluetooth: hci0: command tx timeout [ 361.072565] Bluetooth: hci2: command tx timeout [ 361.199411] Bluetooth: hci1: command tx timeout [ 361.200519] Bluetooth: hci3: command tx timeout [ 361.201165] Bluetooth: hci4: command tx timeout [ 361.201465] Bluetooth: hci5: command tx timeout [ 361.391361] Bluetooth: hci6: command tx timeout [ 361.392140] Bluetooth: hci7: command tx timeout [ 362.736373] Bluetooth: hci0: command tx timeout [ 363.119582] Bluetooth: hci2: command tx timeout [ 363.248554] Bluetooth: hci5: command tx timeout [ 363.249083] Bluetooth: hci4: command tx timeout [ 363.249646] Bluetooth: hci3: command tx timeout [ 363.249684] Bluetooth: hci1: command tx timeout [ 363.439923] Bluetooth: hci7: command tx timeout [ 363.440618] Bluetooth: hci6: command tx timeout [ 364.784321] Bluetooth: hci0: command tx timeout [ 365.167340] Bluetooth: hci2: command tx timeout [ 365.295362] Bluetooth: hci4: command tx timeout [ 365.295980] Bluetooth: hci1: command tx timeout [ 365.296009] Bluetooth: hci3: command tx timeout [ 365.296538] Bluetooth: hci5: command tx timeout [ 365.488314] Bluetooth: hci7: command tx timeout [ 365.488890] Bluetooth: hci6: command tx timeout [ 366.833459] Bluetooth: hci0: command tx timeout [ 367.215314] Bluetooth: hci2: command tx timeout [ 367.347475] Bluetooth: hci3: command tx timeout [ 367.348036] Bluetooth: hci5: command tx timeout [ 367.348584] Bluetooth: hci1: command tx timeout [ 367.349065] Bluetooth: hci4: command tx timeout [ 367.535392] Bluetooth: hci6: command tx timeout [ 367.535965] Bluetooth: hci7: command tx timeout [ 421.313164] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.316477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.320123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.336454] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.346637] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 421.352681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.694775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.697317] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.701514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.702566] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.704099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.705066] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.717742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.723852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.725257] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 421.726646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.727454] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 421.729722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.774891] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 421.779127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.783496] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 421.784946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.786570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 421.791808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.800615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.801856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 421.803319] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 421.804553] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 421.806339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.809780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 421.811618] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 421.813874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 421.824414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.829460] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.834005] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 421.836529] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 421.839438] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 421.840840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 421.845150] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 421.846933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.847455] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 421.849697] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 421.849867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.860477] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 421.861530] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 421.915559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.917539] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 421.918649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.412385] Bluetooth: hci0: command tx timeout [ 423.791474] Bluetooth: hci1: command tx timeout [ 423.792911] Bluetooth: hci2: command tx timeout [ 423.855358] Bluetooth: hci6: command tx timeout [ 423.919455] Bluetooth: hci7: command tx timeout [ 423.919910] Bluetooth: hci4: command tx timeout [ 423.921184] Bluetooth: hci5: command tx timeout [ 423.983314] Bluetooth: hci3: command tx timeout [ 425.457281] Bluetooth: hci0: command tx timeout [ 425.839366] Bluetooth: hci2: command tx timeout [ 425.840288] Bluetooth: hci1: command tx timeout [ 425.903598] Bluetooth: hci6: command tx timeout [ 425.969321] Bluetooth: hci4: command tx timeout [ 425.970350] Bluetooth: hci7: command tx timeout [ 425.971268] Bluetooth: hci5: command tx timeout [ 426.032278] Bluetooth: hci3: command tx timeout [ 427.503315] Bluetooth: hci0: command tx timeout [ 427.887324] Bluetooth: hci2: command tx timeout [ 427.888774] Bluetooth: hci1: command tx timeout [ 427.951961] Bluetooth: hci6: command tx timeout [ 428.015532] Bluetooth: hci7: command tx timeout [ 428.017296] Bluetooth: hci4: command tx timeout [ 428.017317] Bluetooth: hci5: command tx timeout [ 428.079419] Bluetooth: hci3: command tx timeout [ 429.553432] Bluetooth: hci0: command tx timeout [ 429.935475] Bluetooth: hci2: command tx timeout [ 429.937291] Bluetooth: hci1: command tx timeout [ 429.999409] Bluetooth: hci6: command tx timeout [ 430.063289] Bluetooth: hci4: command tx timeout [ 430.064848] Bluetooth: hci5: command tx timeout [ 430.065925] Bluetooth: hci7: command tx timeout [ 430.127349] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 19:47:54 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=1ffff11006f1afba RCX=0000000000000000 RDX=ffff88801afc5280 RSI=ffffffff819b069d RDI=ffff88801afc567c RBP=0000000000000001 RSP=ffff8880378d7da0 R8 =0000000000000001 R9 =ffff88801afc5cb8 R10=ffffffff863f7797 R11=0000000000000000 R12=ffff8880378d7df0 R13=0000000000000001 R14=0000000000008000 R15=ffff888013f69650 RIP=ffffffff819b06a7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe6054a8540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe6056434a1 CR3=00000000330a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007f7ec7b67e27 RCX=0000000000000000 RDX=0000000000000000 RSI=00007f7ec7b67e27 RDI=ffffffff85c6d740 RBP=00007f7ec7b67e27 RSP=ffff8880380a7560 R8 =0000000000000001 R9 =ffff888040b94138 R10=ffffffff863f7797 R11=00000000000c33ea R12=ffff8880380a7670 R13=0000000000000000 R14=ffff888040b93700 R15=0000000000000cc0 RIP=ffffffff815257e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7ec7b18260 CR3=000000003b414000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000