Warning: Permanently added '[localhost]:25307' (ECDSA) to the list of known hosts. 2025/04/25 00:16:38 fuzzer started 2025/04/25 00:16:39 dialing manager at localhost:46629 syzkaller login: [ 92.249490] cgroup: Unknown subsys name 'net' [ 92.405085] cgroup: Unknown subsys name 'cpuset' [ 92.455931] cgroup: Unknown subsys name 'rlimit' 2025/04/25 00:16:55 syscalls: 2214 2025/04/25 00:16:55 code coverage: enabled 2025/04/25 00:16:55 comparison tracing: enabled 2025/04/25 00:16:55 extra coverage: enabled 2025/04/25 00:16:55 setuid sandbox: enabled 2025/04/25 00:16:55 namespace sandbox: enabled 2025/04/25 00:16:55 Android sandbox: enabled 2025/04/25 00:16:55 fault injection: enabled 2025/04/25 00:16:55 leak checking: enabled 2025/04/25 00:16:55 net packet injection: enabled 2025/04/25 00:16:55 net device setup: enabled 2025/04/25 00:16:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/25 00:16:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/25 00:16:55 USB emulation: enabled 2025/04/25 00:16:55 hci packet injection: enabled 2025/04/25 00:16:55 wifi device emulation: enabled 2025/04/25 00:16:55 802.15.4 emulation: enabled 2025/04/25 00:16:55 fetching corpus: 0, signal 0/0 (executing program) 2025/04/25 00:16:57 starting 8 fuzzer processes 00:16:57 executing program 0: ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000, 0x7}) r0 = syz_open_dev$vcsn(&(0x7f0000001040), 0x6, 0x2280) fgetxattr(r0, &(0x7f0000001080)=@random={'osx.', '#\x00'}, &(0x7f00000010c0)=""/105, 0x69) fgetxattr(r0, &(0x7f0000001140)=@random={'os2.', '/dev/vcs#\x00'}, &(0x7f0000001180)=""/91, 0x5b) r1 = syz_open_dev$vcsa(&(0x7f0000001200), 0x10001, 0x100) fdatasync(r1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001480)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f0000001280)={0x18c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) getpeername$packet(r1, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001540)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001580)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000001680)=0xe8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000001800)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0x100, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x81, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004000}, 0x840) syz_genetlink_get_family_id$ipvs(&(0x7f0000001840), 0xffffffffffffffff) r4 = memfd_secret(0x80000) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x28, 0xe, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x440c1}, 0x800) fcntl$addseals(r1, 0x409, 0x4) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f0000001980)=0x2a34, 0x6, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0xb8, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x61}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8d}, @NL80211_ATTR_CSA_IES={0x88, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x1, 0x55, 0x40a, 0x7, 0xfbff, 0x4, 0x7ff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x8, 0x0, 0x0, 0x2, 0x879f]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x7, 0x9, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x6, 0x1ff]}, @beacon_params=[@NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x5}, 0xfc, 0x81, @device_a, 0x4, 0x3, 0xffffffc1}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x3, 0x9, 0x3ab5, 0x1, 0x1, 0x895d]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x3, 0x1000, 0x81, 0x2, 0x1000]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9b}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2008000}, 0x48851) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000001b80)=0xfffffffffffffff7) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000001bc0)={0x0, 0x2, 0xe}) 00:16:57 executing program 1: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) init_module(&(0x7f0000000040)=':{)[)+\x00', 0x7, &(0x7f0000000080)='&@##\x00') setrlimit(0x4, &(0x7f00000000c0)={0x5694}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x84242, 0x120, 0x21}, 0x18) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000001c0)=""/104) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) renameat(r1, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00') ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r3 = openat$cgroup_subtree(r1, &(0x7f0000000300), 0x2, 0x0) fcntl$setown(r3, 0x8, r2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000340)={"d7c423d9a0a17ccbfe916d1e79d5f27f", 0x0, 0x0, {0x9, 0x3}, {0xb883, 0x7}, 0x6, [0x8, 0x10000, 0xfffffffffffffffd, 0x0, 0x5, 0x6, 0x9, 0x5, 0x5, 0xfffffffffffffffe, 0x100000000, 0x6, 0x80000001, 0x400, 0x0, 0xe8]}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) r4 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x7f, 0x60200) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0xc8b}}, './file1\x00'}) clock_gettime(0x0, &(0x7f0000004cc0)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000004b80)=[{{&(0x7f0000000540), 0x6e, &(0x7f0000002a40)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/23, 0x17}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/237, 0xed}, {&(0x7f0000001780)=""/223, 0xdf}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/118, 0x76}, {&(0x7f0000002900)=""/174, 0xae}, {&(0x7f00000029c0)=""/116, 0x74}], 0xa, &(0x7f0000002b00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002bc0)=""/118, 0x76}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002c80)=""/96, 0x60}, {&(0x7f0000002d00)=""/148, 0x94}, {&(0x7f0000002dc0)=""/126, 0x7e}, {&(0x7f0000002e40)=""/14, 0xe}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/32, 0x20}, {&(0x7f0000003ec0)=""/157, 0x9d}, {&(0x7f0000003f80)=""/163, 0xa3}, {&(0x7f0000004040)=""/203, 0xcb}], 0x9}}, {{&(0x7f0000004200), 0x6e, &(0x7f0000004580)=[{&(0x7f0000004280)=""/31, 0x1f}, {&(0x7f00000042c0)=""/189, 0xbd}, {&(0x7f0000004380)=""/202, 0xca}, {&(0x7f0000004480)=""/150, 0x96}, {&(0x7f0000004540)=""/10, 0xa}], 0x5, &(0x7f0000004600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f00000046c0), 0x6e, &(0x7f0000004ac0)=[{&(0x7f0000004740)=""/66, 0x42}, {&(0x7f00000047c0)=""/22, 0x16}, {&(0x7f0000004800)=""/169, 0xa9}, {&(0x7f00000048c0)=""/49, 0x31}, {&(0x7f0000004900)=""/137, 0x89}, {&(0x7f00000049c0)=""/20, 0x14}, {&(0x7f0000004a00)=""/57, 0x39}, {&(0x7f0000004a40)=""/78, 0x4e}], 0x8, &(0x7f0000004b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x5, 0x10000, &(0x7f0000004d00)={r6, r7+10000000}) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000004e00)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d80)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f3bddb12c5"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4002095) r10 = accept$inet6(r9, 0x0, &(0x7f0000004e40)) getsockopt(r10, 0x7, 0xbc, &(0x7f0000004e80)=""/147, &(0x7f0000004f40)=0x93) 00:16:57 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "2e0e8e948f8c10d2c0d3122458408505fc22eb2d28f0"}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}]}, 0x8c}}, 0x91) r1 = accept4$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0x80800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x11}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0xc8080, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x32}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffff632, 0x39}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x85) fchdir(r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000880)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, r8, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x14040) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(r10, 0xca289435, &(0x7f0000000ac0)={0x0, 0x1, @start={0x0, 0x0, "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", "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"}, [0x6, 0x0, 0xff, 0x81, 0xfff, 0xffffffffffff8000, 0x2, 0x7fffffff, 0x4, 0x8, 0x4, 0xfa6, 0x800, 0x0, 0x8, 0x5, 0x200, 0x1, 0x20, 0x7, 0x28000000000, 0x3e7, 0x4, 0x8, 0xac00, 0x5, 0x3, 0x133, 0x1, 0x2, 0x3, 0x7, 0x3ff, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x7fffffff, 0x10000, 0x0, 0x81, 0xaa2, 0x4, 0x4, 0x4c, 0x100, 0x0, 0x8, 0x4fa8a12c, 0x8, 0xc4, 0x6, 0x5, 0x1, 0x1, 0x2, 0x3, 0x8, 0x100, 0x7, 0x909, 0x7fff, 0x80000001, 0x9]}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000001500)={0xffffffffffffffff, 0x9, 0x0, 0x7}) preadv2(r11, &(0x7f0000003800)=[{&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/72, 0x48}, {&(0x7f0000002680)=""/255, 0xff}, {&(0x7f0000002780)=""/36, 0x24}, {&(0x7f00000027c0)=""/41, 0x29}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x7, 0x0, 0x4, 0x12) 00:16:57 executing program 3: sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240840c1}, 0x44000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x1c}}, 0x40004) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x24002840}, 0x50) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, 0xb, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000128}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r0) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0xac}}, 0x4000) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x870}, 0x4000004) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x108900) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = pidfd_getfd(r6, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000a00)=0x2b3c, 0x4) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa8, 0x453, 0x300, 0x70bd2a, 0x25dfdbfe, "aa01a3f6713c2f3f28fc1e0d30cee52c2edf0886a1497e4421074ea7100219155010e15f0cc1091e53c702ee81c6741099327dff43f41203042658fb743978a3608236cca02e4350db5012b36b26fa9c192cf027f8c1dee281e29adf885022190113812ac8db839b0711168cbe321ec836c29d41b9eafd75de235278eb907f6e0020a0b6c11908226e36ed12b14fd183b2b9a1fa461e", ["", "", "", ""]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 110.093470] audit: type=1400 audit(1745540217.616:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:16:57 executing program 4: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x3, 0x40}]}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}}, 0x20000085) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r0, 0x2, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x240c9042) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, r2, 0x200, 0x10001, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x90, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6ec}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x335}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x44084) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x4083, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000940)='ext2\x00', &(0x7f0000000980)='./file0\x00', 0x52, 0x2, &(0x7f0000000a40)=[{&(0x7f00000009c0)="ff06", 0x2, 0x2}, {&(0x7f0000000a00)="6e697ade53d028e2674548", 0xb, 0xfff}], 0x900000, &(0x7f0000000a80)={[{@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x80}}], [{@appraise_type}, {@appraise}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000b80), 0x8000, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40), 0x10200, 0x0) io_submit(0x0, 0x6, &(0x7f0000000dc0)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000000680)="dd4bcb9d9e10fc94f1d77acea2dde354dc5a239521fb4ba5f424ac687951c6568b6df5c268f2d7d1c8a7fb05e51888f8fddc941b73ef252c48bfc36a048081e3dd6fd2a95bb3ebea068518a1da92ea15976146e4973f224930f14f92d9a15e6940d2fc3ac92cb268577a07bd2de8d7a685efdd14d31e9948fefa8960bc0d99f9dfcef8e301afc86eb7494a0d97ebe4de1cd9ac0adc80ea8fa6946687dd8800a2c6bdc89927a1177a", 0xa8, 0x7}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0xffff, r5, &(0x7f0000000780)="e0f8f421f0668033813650", 0xb, 0x3, 0x0, 0x1, r6}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x3ff, r1, &(0x7f0000000840)="523ad353eddc83d9ea8ba85ec96b8066ebc6e6036fd00fd0eb0d736dc141311fa7ff07f50b6988e98f9f51d5588719862230ebf78ef191f07662f2d4f0fb5b5e1da1ad0e5cd7d7b242944b3a61202efa525fff0323cd3ebcbb64fe1a59e0c65bd1d163b1689af0fded4e041aad4af81bb16b30e5bfddcf9a93a79370a8509d8325d8e989a9695e29a51cecc7f4e7", 0x8e, 0x2, 0x0, 0x1, r1}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x9, r7, &(0x7f0000000b00), 0x0, 0x4, 0x0, 0x2, r3}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x5, 0x7, r8, &(0x7f0000000bc0)="3b8d25847e2f9d3f72e468655050052a58312176b06d9c71c5e605ca000d675fa439a9e93f4b1e586cc98abd63ed", 0x2e, 0xf9e, 0x0, 0x3, r4}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x1, r4, &(0x7f0000000c40)="e509175a561298f029337af3f882453c945365aebdbdc759defd556e628c1d314c77546165264d30429b4d7ed51a253b8d033b40292f139db1527fbf52d45e5363a5a4cbd450c9d29bf9e585fa4676de5e7a25b2c4ebeabb0dc0831ff4720f59c6ca671accffaab917d2461178d3b1f6eb88b8c2940d066188a84f32ccdcc63614c4f765c3df11b085f5037a9bb141adf6aa5727e913fd8fe4a285233cb7f5c829a71add5c301a17ca9e5cdff66cca5c61de17f5e0b714fe7b12d91bd720231e309bee160ae45344a39811770daa3a1abf46031023", 0xd5, 0x8, 0x0, 0x2, r9}]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r5, @in_args={0x1}}, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4c011) move_mount(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', r9, &(0x7f0000000f80)='./file0\x00', 0x6c) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r3, {0x10001}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xb8, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x56}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x2e1}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfa}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfa}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x29a}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x65b, 0x5, 0x9141, 0x4, 0x8c54, 0x8000, 0x7fff, 0xf6]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004801}, 0x10) 00:16:57 executing program 5: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2}, 0x4) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x218000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth0_to_team\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x2}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044011) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000240)=""/131) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1290}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000100}, 0x10) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x36000, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) splice(r2, &(0x7f0000000640)=0x3, r2, &(0x7f0000000680)=0x7f, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x29, 0x36, 0x7, 0x1f, 0x7, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1, 0xa6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x7, 0x3, 0x19, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x7800, 0x7, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x8, 0x80, 0x9b2, 0x0, {{0x1a, 0x4, 0x0, 0x5, 0x68, 0x67, 0x0, 0x1f, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xff, [@loopback]}, @cipso={0x86, 0x4d, 0xffffffffffffffff, [{0x1, 0xd, "9718a5bbcd2c516836feae"}, {0x2, 0xb, "7f4273566157097408"}, {0x1, 0x9, "48c0e67d999365"}, {0x2, 0xb, "524a7869b7784e008c"}, {0x7, 0x10, "bd8c2dc27a5e9037f34702348461"}, {0x6, 0xb, "8970d572e4efcc16a0"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl1\x00', 0x0, 0x2f, 0x3f, 0x8, 0x1, 0x8, @mcast2, @empty, 0x8000, 0x8, 0x11a8000, 0x8}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000c00)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d80)={'ip6_vti0\x00', &(0x7f0000000d00)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x5, 0x7, 0x0, @empty, @mcast1, 0x8, 0x10, 0x4, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000ec0)={'syztnl2\x00', &(0x7f0000000dc0)={'gre0\x00', 0x0, 0x7800, 0x80, 0xffffffff, 0x7f, {{0x32, 0x4, 0x1, 0xa, 0xc8, 0x68, 0x0, 0xff, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x55, 0x3, 0x6, [{@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xdf}]}, @timestamp_prespec={0x44, 0x4c, 0x11, 0x3, 0x5, [{@multicast2, 0x6}, {@multicast2, 0x401}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1e93}, {@private=0xa010102, 0x2}, {@rand_addr=0x64010100, 0x6}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x10000}]}, @noop, @ssrr={0x89, 0x13, 0x4c, [@empty, @loopback, @private=0xa010101, @loopback]}, @cipso={0x86, 0x3d, 0x1, [{0x2, 0x9, "195c31a833e283"}, {0x1, 0x8, "df79bc419fcd"}, {0x7, 0x10, "bdcb68bfe14cb1fc7ccbc9cbe786"}, {0x6, 0xf, "9ce987a8dab73eb1e40019ea61"}, {0x7, 0x7, "ca6645a597"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000001040)={'ip6gre0\x00', &(0x7f0000000fc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x5, 0xffff, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7821, 0x40, 0x6, 0x10000}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001100)={'sit0\x00', &(0x7f0000001080)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x1, 0xda, 0x10, @local, @private1, 0x8700, 0x8000, 0x1, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001180)={0xa40, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xba19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1b}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2a4}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xc76d, 0xff, 0x0, 0x9}, {0x6, 0x6, 0xff, 0xf2}, {0x7, 0x0, 0x40, 0x40}, {0xffff, 0x0, 0x2, 0x1}, {0x85f8, 0x5, 0x1, 0x8000}, {0x8, 0x3, 0x40, 0x8}, {0x7, 0x1, 0x6}, {0xfd84, 0x6, 0x7, 0x51b1}, {0x2, 0x20, 0x6, 0x7}, {0x0, 0x3, 0xa0, 0x3}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0xa40}, 0x1, 0x0, 0x0, 0x20040004}, 0x48850) 00:16:57 executing program 6: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'ip6erspan0\x00'}) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x48, 0xc}, 0x18) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x11}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000580)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000005c0)=0x1) r1 = openat2(r0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x4400, 0x90, 0x8}, 0x18) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000680)=""/4096) r2 = dup(0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001900)={{r2}, r3, 0x4, @inherit={0x68, &(0x7f0000001880)={0x0, 0x4, 0x0, 0xfffffffffffffffa, {0x0, 0x0, 0xfffffffffffffff7, 0x8001, 0x4}, [0x9, 0x8, 0x8, 0xffffffffffffffff]}}, @subvolid=0xcfc}) r4 = dup3(r0, r1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000002900)) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000002940)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000002980)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$evdev(r5, &(0x7f00000029c0)=[{{0x0, 0x2710}, 0x6, 0x5, 0xf1}, {{0x77359400}, 0x2, 0xf800, 0x20}], 0x30) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a80), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x24, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) accept$packet(r4, &(0x7f0000002b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002bc0)=0x14) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040041}, 0x20000000) 00:16:57 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffc, 0x24040000) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x4}, 0xb) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40010) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) bind$802154_dgram(r2, &(0x7f00000001c0)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000802}, 0x20) r4 = pidfd_getfd(r2, r2, 0x0) ioctl$CDROMVOLCTRL(r4, 0x530a, &(0x7f0000000340)={0x7, 0x83, 0x0, 0x3}) fstat(0xffffffffffffffff, &(0x7f0000000380)) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x66}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x81) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8006) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x40041) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0x305101, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r6, 0x40047211, &(0x7f00000007c0)) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x30, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 111.599404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.605066] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.611030] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.616006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.621108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.671428] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.677830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.680620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.688288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.695820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.768788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.774834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.777861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.788493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.801944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.826439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.829769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.833510] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.861085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.871063] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.873637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.878896] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.889425] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.895715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.903128] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.925683] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.928028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.931081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.975984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.999042] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.003090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.019539] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.029292] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.087480] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.094207] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.110207] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.127815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.139022] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.169049] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 112.174155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.678274] Bluetooth: hci0: command tx timeout [ 113.805695] Bluetooth: hci1: command tx timeout [ 113.869687] Bluetooth: hci2: command tx timeout [ 113.997907] Bluetooth: hci3: command tx timeout [ 114.125854] Bluetooth: hci5: command tx timeout [ 114.126822] Bluetooth: hci4: command tx timeout [ 114.189652] Bluetooth: hci6: command tx timeout [ 114.318673] Bluetooth: hci7: command tx timeout [ 115.726087] Bluetooth: hci0: command tx timeout [ 115.854591] Bluetooth: hci1: command tx timeout [ 115.918928] Bluetooth: hci2: command tx timeout [ 116.045665] Bluetooth: hci3: command tx timeout [ 116.175614] Bluetooth: hci5: command tx timeout [ 116.176103] Bluetooth: hci4: command tx timeout [ 116.237783] Bluetooth: hci6: command tx timeout [ 116.366852] Bluetooth: hci7: command tx timeout [ 117.774827] Bluetooth: hci0: command tx timeout [ 117.902653] Bluetooth: hci1: command tx timeout [ 117.966425] Bluetooth: hci2: command tx timeout [ 118.094627] Bluetooth: hci3: command tx timeout [ 118.222161] Bluetooth: hci5: command tx timeout [ 118.222915] Bluetooth: hci4: command tx timeout [ 118.286955] Bluetooth: hci6: command tx timeout [ 118.413869] Bluetooth: hci7: command tx timeout [ 119.821795] Bluetooth: hci0: command tx timeout [ 119.949662] Bluetooth: hci1: command tx timeout [ 120.014682] Bluetooth: hci2: command tx timeout [ 120.141700] Bluetooth: hci3: command tx timeout [ 120.270995] Bluetooth: hci5: command tx timeout [ 120.271477] Bluetooth: hci4: command tx timeout [ 120.333916] Bluetooth: hci6: command tx timeout [ 120.461841] Bluetooth: hci7: command tx timeout [ 171.561876] syz-executor.5 (285) used greatest stack depth: 24008 bytes left [ 173.933942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.940009] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.942896] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.944913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.946322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.949969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.954447] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.958931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.964620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.977726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.998597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.003119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.005122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.012312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.020144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.056796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.060916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.062495] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.071073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.073477] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.128487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.136211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.145090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.170677] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.181343] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.292132] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.309344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.358056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.415919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.430011] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.433524] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.444178] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.469422] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.471088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.474055] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.529033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.530056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.547399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.547452] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.582858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.013660] Bluetooth: hci0: command tx timeout [ 176.014983] Bluetooth: hci1: command tx timeout [ 176.142640] Bluetooth: hci3: command tx timeout [ 176.206137] Bluetooth: hci2: command tx timeout [ 176.270626] Bluetooth: hci4: command tx timeout [ 176.589676] Bluetooth: hci7: command tx timeout [ 176.654667] Bluetooth: hci5: command tx timeout [ 176.718500] Bluetooth: hci6: command tx timeout [ 178.062607] Bluetooth: hci1: command tx timeout [ 178.062964] Bluetooth: hci0: command tx timeout [ 178.189726] Bluetooth: hci3: command tx timeout [ 178.253663] Bluetooth: hci2: command tx timeout [ 178.319643] Bluetooth: hci4: command tx timeout [ 178.637611] Bluetooth: hci7: command tx timeout [ 178.701681] Bluetooth: hci5: command tx timeout [ 178.765808] Bluetooth: hci6: command tx timeout [ 180.109747] Bluetooth: hci1: command tx timeout [ 180.110307] Bluetooth: hci0: command tx timeout [ 180.237926] Bluetooth: hci3: command tx timeout [ 180.301799] Bluetooth: hci2: command tx timeout [ 180.365747] Bluetooth: hci4: command tx timeout [ 180.685883] Bluetooth: hci7: command tx timeout [ 180.751602] Bluetooth: hci5: command tx timeout [ 180.813719] Bluetooth: hci6: command tx timeout [ 182.158163] Bluetooth: hci0: command tx timeout [ 182.158718] Bluetooth: hci1: command tx timeout [ 182.287278] Bluetooth: hci3: command tx timeout [ 182.350651] Bluetooth: hci2: command tx timeout [ 182.414605] Bluetooth: hci4: command tx timeout [ 182.733706] Bluetooth: hci7: command tx timeout [ 182.800724] Bluetooth: hci5: command tx timeout [ 182.861710] Bluetooth: hci6: command tx timeout [ 236.254881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.258036] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.261399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.270355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.274383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.337082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.340002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.342517] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.347341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.354524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.377021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.396771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.401759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.413680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.418433] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.507305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.512119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.514833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.522181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.526512] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.627639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.642645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.644711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.654047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.658326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.662578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.674423] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.691366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.701246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.706450] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.708852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.710847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.715173] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.720783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.751668] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.752444] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.757023] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.786980] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.795315] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.804127] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.349898] Bluetooth: hci0: command tx timeout [ 238.415635] Bluetooth: hci1: command tx timeout [ 238.478641] Bluetooth: hci2: command tx timeout [ 238.605701] Bluetooth: hci3: command tx timeout [ 238.733690] Bluetooth: hci4: command tx timeout [ 238.797738] Bluetooth: hci5: command tx timeout [ 238.798852] Bluetooth: hci7: command tx timeout [ 238.861670] Bluetooth: hci6: command tx timeout [ 240.398596] Bluetooth: hci0: command tx timeout [ 240.461716] Bluetooth: hci1: command tx timeout [ 240.525640] Bluetooth: hci2: command tx timeout [ 240.653721] Bluetooth: hci3: command tx timeout [ 240.781738] Bluetooth: hci4: command tx timeout [ 240.846695] Bluetooth: hci5: command tx timeout [ 240.847216] Bluetooth: hci7: command tx timeout [ 240.909743] Bluetooth: hci6: command tx timeout [ 242.445641] Bluetooth: hci0: command tx timeout [ 242.510611] Bluetooth: hci1: command tx timeout [ 242.574599] Bluetooth: hci2: command tx timeout [ 242.701785] Bluetooth: hci3: command tx timeout [ 242.829873] Bluetooth: hci4: command tx timeout [ 242.893776] Bluetooth: hci5: command tx timeout [ 242.894215] Bluetooth: hci7: command tx timeout [ 242.957829] Bluetooth: hci6: command tx timeout [ 244.493649] Bluetooth: hci0: command tx timeout [ 244.558575] Bluetooth: hci1: command tx timeout [ 244.621834] Bluetooth: hci2: command tx timeout [ 244.749648] Bluetooth: hci3: command tx timeout [ 244.878720] Bluetooth: hci4: command tx timeout [ 244.941722] Bluetooth: hci7: command tx timeout [ 244.942218] Bluetooth: hci5: command tx timeout [ 245.005671] Bluetooth: hci6: command tx timeout [ 298.721121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.730141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.733125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.743331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.752374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.856519] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.872130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.878274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.890914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.897653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.999287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.002106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.004500] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.040279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.057530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.062101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.078868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.091288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.113444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.117960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.252743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.273845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.285529] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.321019] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.322987] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.344245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.354121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.356160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.372054] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.382357] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.402272] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.409141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.414995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.416718] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.474920] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.490275] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.493303] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.507509] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.509319] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.521749] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.813699] Bluetooth: hci0: command tx timeout [ 300.941635] Bluetooth: hci1: command tx timeout [ 301.199643] Bluetooth: hci3: command tx timeout [ 301.325931] Bluetooth: hci2: command tx timeout [ 301.517710] Bluetooth: hci4: command tx timeout [ 301.582082] Bluetooth: hci7: command tx timeout [ 301.648617] Bluetooth: hci6: command tx timeout [ 301.710630] Bluetooth: hci5: command tx timeout [ 302.861616] Bluetooth: hci0: command tx timeout [ 302.990970] Bluetooth: hci1: command tx timeout [ 303.246051] Bluetooth: hci3: command tx timeout [ 303.373821] Bluetooth: hci2: command tx timeout [ 303.565634] Bluetooth: hci4: command tx timeout [ 303.629912] Bluetooth: hci7: command tx timeout [ 303.693608] Bluetooth: hci6: command tx timeout [ 303.757644] Bluetooth: hci5: command tx timeout [ 304.909771] Bluetooth: hci0: command tx timeout [ 305.037717] Bluetooth: hci1: command tx timeout [ 305.293792] Bluetooth: hci3: command tx timeout [ 305.421953] Bluetooth: hci2: command tx timeout [ 305.614810] Bluetooth: hci4: command tx timeout [ 305.677635] Bluetooth: hci7: command tx timeout [ 305.741653] Bluetooth: hci6: command tx timeout [ 305.805979] Bluetooth: hci5: command tx timeout [ 306.957883] Bluetooth: hci0: command tx timeout [ 307.085796] Bluetooth: hci1: command tx timeout [ 307.341634] Bluetooth: hci3: command tx timeout [ 307.469704] Bluetooth: hci2: command tx timeout [ 307.661816] Bluetooth: hci4: command tx timeout [ 307.726226] Bluetooth: hci7: command tx timeout [ 307.789665] Bluetooth: hci6: command tx timeout [ 307.854010] Bluetooth: hci5: command tx timeout [ 361.632064] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.635349] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.640795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.659993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.664137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.729421] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.735984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.745970] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.750746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.759038] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.780933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.794026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.798182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.835041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.849872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.902291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.914434] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.922992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.950889] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.955925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.958174] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.964123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.983648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.990122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.998169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.998919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.005702] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.011834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.029198] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.033910] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.038992] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.046187] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.062144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.068364] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.073235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.084129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.085472] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.095032] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.106719] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.130876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.725792] Bluetooth: hci0: command tx timeout [ 363.853847] Bluetooth: hci1: command tx timeout [ 363.982733] Bluetooth: hci2: command tx timeout [ 364.109746] Bluetooth: hci5: command tx timeout [ 364.174768] Bluetooth: hci3: command tx timeout [ 364.175663] Bluetooth: hci4: command tx timeout [ 364.365652] Bluetooth: hci6: command tx timeout [ 364.366507] Bluetooth: hci7: command tx timeout [ 365.774602] Bluetooth: hci0: command tx timeout [ 365.902085] Bluetooth: hci1: command tx timeout [ 366.030047] Bluetooth: hci2: command tx timeout [ 366.158577] Bluetooth: hci5: command tx timeout [ 366.221692] Bluetooth: hci4: command tx timeout [ 366.222145] Bluetooth: hci3: command tx timeout [ 366.413713] Bluetooth: hci7: command tx timeout [ 366.414203] Bluetooth: hci6: command tx timeout [ 367.821751] Bluetooth: hci0: command tx timeout [ 367.949706] Bluetooth: hci1: command tx timeout [ 368.078293] Bluetooth: hci2: command tx timeout [ 368.206145] Bluetooth: hci5: command tx timeout [ 368.269728] Bluetooth: hci3: command tx timeout [ 368.270785] Bluetooth: hci4: command tx timeout [ 368.462637] Bluetooth: hci7: command tx timeout [ 368.463777] Bluetooth: hci6: command tx timeout [ 369.869890] Bluetooth: hci0: command tx timeout [ 369.998582] Bluetooth: hci1: command tx timeout [ 370.127752] Bluetooth: hci2: command tx timeout [ 370.254966] Bluetooth: hci5: command tx timeout [ 370.318578] Bluetooth: hci4: command tx timeout [ 370.319032] Bluetooth: hci3: command tx timeout [ 370.509855] Bluetooth: hci7: command tx timeout [ 370.510315] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 00:22:07 Registers: info registers vcpu 0 RAX=0000000000010001 RBX=00000061c5e68d49 RCX=ffffffff81615b57 RDX=ffff888027779bc0 RSI=000000651e059050 RDI=0000000000000006 RBP=ffff888009c2d400 RSP=ffff88806ce08e28 R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=00000061c5e68d49 R11=ffff88806ce37018 R12=ffff88806ce28080 R13=ffff88806ce28200 R14=000000651e059050 R15=dffffc0000000000 RIP=ffffffff81615b5a RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f659076b540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056128d65d4c8 CR3=0000000036cde000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2e7473696c6b63616c622d7665646266 XMM01=00666e6f632e7473696c6b63616c622d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff8685638c RBX=0000000000000002 RCX=ffffffff8685638c RDX=0000000000000000 RSI=ffffffff8685638c RDI=ffffffff864d9c84 RBP=ffff88806cf08ad0 RSP=ffff88806cf08a08 R8 =ffffffff8685638c R9 =0000000000000001 R10=000000000003b0c2 R11=00000000000231ac R12=ffff88806cf08ad8 R13=ffff88806cf08ac0 R14=ffff88806cf08ab9 R15=ffff88806cf08a78 RIP=ffffffff81350b0c RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005645c57109a0 CR3=000000002782a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000