Warning: Permanently added '[localhost]:37050' (ECDSA) to the list of known hosts. 2025/04/25 01:32:14 fuzzer started 2025/04/25 01:32:15 dialing manager at localhost:46629 syzkaller login: [ 100.517886] cgroup: Unknown subsys name 'net' [ 100.661652] cgroup: Unknown subsys name 'cpuset' [ 100.694799] cgroup: Unknown subsys name 'rlimit' 2025/04/25 01:32:32 syscalls: 2214 2025/04/25 01:32:32 code coverage: enabled 2025/04/25 01:32:32 comparison tracing: enabled 2025/04/25 01:32:32 extra coverage: enabled 2025/04/25 01:32:32 setuid sandbox: enabled 2025/04/25 01:32:32 namespace sandbox: enabled 2025/04/25 01:32:32 Android sandbox: enabled 2025/04/25 01:32:32 fault injection: enabled 2025/04/25 01:32:32 leak checking: enabled 2025/04/25 01:32:32 net packet injection: enabled 2025/04/25 01:32:32 net device setup: enabled 2025/04/25 01:32:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/25 01:32:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/25 01:32:32 USB emulation: enabled 2025/04/25 01:32:32 hci packet injection: enabled 2025/04/25 01:32:32 wifi device emulation: enabled 2025/04/25 01:32:32 802.15.4 emulation: enabled 2025/04/25 01:32:32 fetching corpus: 0, signal 0/0 (executing program) 2025/04/25 01:32:35 starting 8 fuzzer processes 01:32:35 executing program 0: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "ec086bd94691005c", "e95203a9b4ed245e1b24c1b361e06ca107fb3739cd54bfb82d89bbc234fbfb8c", "bf6ba6a9", "68b3c72b511fc2d0"}, 0x38) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x4, 0x941f, 0x1a, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8000, 0x59b, 0x1}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@initdev, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x20, 0x1, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x700, 0x10001, 0x3}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x178, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x48f7eaa1cc17d5bc}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x3dcf4c18dc7680f1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xab01, 0x54}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0xc804) r5 = socket(0x2c, 0x1, 0xeb) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000680)={@mcast2, 0xd, r2}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa0, r6, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000009c0)=0x1, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000a40), 0x200, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x48000) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, 0x0, 0x200, 0x70bd27, 0x7, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x43}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x4004040) 01:32:35 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x10000, 0x4, {{0x42, 0x4, 0x2, 0x26, 0x108, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x23, 0x1, [{0x7, 0x5, "46cbba"}, {0x0, 0xb, "263cd868f74a356bfc"}, {0x6, 0xb, "32759d973c20c7ab44"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x2c, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1}, {@loopback, 0xfff}, {@remote, 0x2}, {@multicast1, 0x8001}]}, @lsrr={0x83, 0xb, 0x7f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0x24, 0x0, 0x0, [0x2a, 0x4, 0x3ff, 0x81, 0x5, 0x0]}, @timestamp={0x44, 0x8, 0xdb, 0x0, 0x1, [0x2e84]}, @cipso={0x86, 0x58, 0x1, [{0x6, 0xd, "664716eef3335b2ceb1578"}, {0x6, 0xb, "c46cab4c777d3f2d50"}, {0x2, 0x8, "5f0aa04dbcc2"}, {0xe, 0x9, "a05aa24a406756"}, {0x2, 0xb, "3e6d6a32abebd985d9"}, {0x5, 0x3, "05"}, {0x0, 0xb, "1f4cf841a70ebf51ca"}, {0x2, 0x10, "3c406240679bb42a5aa29c28cc55"}]}, @ssrr={0x89, 0x1b, 0x7e, [@empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @remote]}, @noop]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@local, @remote, 0x0}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x244, r0, 0x103, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x38}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c044}, 0x48000) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80802200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0xffffffff, 0x4, 0x6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7c}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000880)={@empty, r2}, 0x14) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/module/pcie_aspm', 0x102, 0x81) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000900)=0x1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001dc0)={0x0, 0x4, 0x9a, 0x5, @scatter={0x4, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000940)=""/243, 0xf3}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/254, 0xfe}, {&(0x7f0000001b40)=""/77, 0x4d}]}, &(0x7f0000001c00)="0714085c607eb4b6fd67988045664aadcb20cc94607fa7beb653dd8adea7bbcd7bfedaf07d6f87bd8c576f76275bb480e49a61e9418d138b4f761a355aac20788123ce979a131e5127d08f8fbad60827c2e864037807c264d2f31ec5fc1f00532352f0590d8c7d540e9d848c76413d0448763ca4640cbef49e0d910a9e98f19a3545c975ad4fd2665733bc5f6ad66b771fa548adcbd4840c1cee", &(0x7f0000001cc0)=""/163, 0x8, 0x10020, 0x1, &(0x7f0000001d80)}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e80), 0xffffffffffffffff) getpeername(r6, &(0x7f0000001f40)=@can={0x1d, 0x0}, &(0x7f0000001fc0)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003ec0)={'erspan0\x00', &(0x7f0000003e80)={'syztnl0\x00', r2, 0xc5, 0x80, 0x7, 0x40, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x68, 0x0, 0x2a, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x89, 0x3, "b7"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000003f00)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004040)={&(0x7f0000003f40)={0xf0, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24000090}, 0x880) setxattr$trusted_overlay_upper(&(0x7f00000040c0)='./file0\x00', &(0x7f0000004100), &(0x7f0000004140)={0x0, 0xfb, 0xf3, 0x0, 0x1, "7b4a19c7eb597425ce563214a85be72f", "d21fc96ccde773f0308afeeefd3c79053308dbfa1f206a8ed734d1efddc4763a67e1fde8a4a9abe8f9575429b2cc55a5b541767e629b60f1d339f533e45b99d9d59f66b62457c7397a3c7fcf6f9e1340ca1893f656a18b2b8e81fe8f3614de8f7a3cf70ee6648400441fa6eb174d94a2bf021d9ee571545ab527e05f040ccf4c72867fbce91f81e3ea8af557ac88a5314d29c100aa26a9aca9755ff3563808d3a98c0525d9cdd559b1fd6f5a46244eabc678b602c23783c4b32d55c902fd838d61cc55ab81512e88a57d4a826e35a481e74ca5ba8590c16c46bf6effbb38"}, 0xf3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004240)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000004340)=0xe8) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000004380)={0x1, 0xea21, "17d369", 0x5, 0x5}) 01:32:35 executing program 2: capget(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0xffff, 0x97, 0x5, 0x98, 0xa035, 0xcac}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080)={0x5, 0x7fff}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000000c0)=0x3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={0x0, 0xba, 0x73}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'sha1_mb\x00'}}, &(0x7f00000001c0)="dce786272d31d71d89be018ec08d4e782f9c3b62a7b89781656dab4fed34bff71b3eddccf5357679984ca95da652b8b485e139c0dd6298068e5261e89f2a5f756d1a5ae34cc4393aa40617b4f79430b51ba5732d2071673b0f5d08a8661c8de83ede9a25ef0d343f40af6ab23d81e2f9591ba61b7cb67e92b7b358553bb96d53fddb2538cbb94291ee330a7c5eca4a25f5dba21fa5e7c45f13849481a2dccf5d36ffe16c67fef970081ed135a8f52ffe5950efcbd0604a58aec7", &(0x7f0000000280)=""/115) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000300)={0x0, 0x8001, 0x0, [0x1000, 0x7, 0x8, 0x4, 0x5], [0x401, 0xfff, 0x1, 0x177b, 0x47bf, 0x8, 0x101, 0x3, 0x4, 0x6, 0x9, 0x8, 0x401, 0x4, 0x8, 0x3, 0xaa, 0x401, 0x4, 0x0, 0x3, 0x6, 0x16f, 0x2, 0x5, 0x4, 0x0, 0x6, 0x6, 0x7fffffff, 0x5, 0x1, 0x5f5ae6c1, 0xb915, 0x8000, 0x3, 0x3, 0x4, 0x100000000, 0x7, 0x2, 0xdd04, 0x7, 0x5, 0x0, 0x8000000000000, 0x20, 0x7, 0x83, 0x2, 0x20, 0x7fff, 0x5, 0x4, 0x7fff, 0x0, 0x8000, 0x9, 0x6, 0x40, 0x9, 0x7ff, 0xfffffffffffff001, 0x200, 0x6, 0x100, 0x5, 0x10001, 0x10001, 0x958, 0x9f2, 0x40, 0x7fff, 0x400, 0x3, 0x6, 0x1, 0x0, 0x81, 0x0, 0x2, 0x3, 0x0, 0x70, 0x226, 0x401, 0x8, 0xae5, 0x3, 0x0, 0x4, 0x81, 0x7fffffff, 0xe56, 0x2, 0xfffffffffffffff8, 0x6, 0x7, 0x2, 0x796, 0xdd8, 0x1000, 0xe00000, 0x0, 0x400, 0x8, 0x100, 0x5, 0x3, 0x10001, 0x2, 0x2, 0x1, 0x80000001, 0x200, 0x2, 0x80, 0xfffffffffffffff7, 0x200, 0x8, 0x6]}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000740)={'filter\x00', 0x84, "6764aa5b6d948221f45e516d5ce737d344bb7591a4475dc1f00456f46c7ce71dba147b6805d3c9382da9abe4e875b22c1c791357ce5879dd65c187bb1970205dc5c667b3cf9b722716588d44fa4c7f69d1b46de5d0550294a99545432fa23457ba7c4c1d06490eab6917078fca597cd399e80d773f71d93f6593079d586b5a708927ed1d"}, &(0x7f0000000800)=0xa8) r0 = open(&(0x7f0000000840)='./file0\x00', 0x44000, 0x144) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x7f, 0x0, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x700, 0x8000, 0x7, 0x1}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000d00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x2d8, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ' hash='}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ' hash='}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf0c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe01}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ' hash='}]}]}, @ETHTOOL_A_BITSET_VALUE={0x23, 0x4, "aa149487b5693627009edb39cc1d14d9e4a8854002f2127b2d39bc564c06db"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'*^\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9e}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xec42}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'enc='}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa0d9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc7, 0x4, "02e5748476989536c69ae84fa5f7f8bacf36d594feacb28e16c5990ee2a0c55a35f1f3418ab12d8390c2e6ad50225b5ef28d14b399bd6b63e02f469ce9885af4a9ed7adaa04c5c55db741a29d4ba7eb7a3cb6fadb7ffd440abf14a1600a33136cc82e53bde2ee1631402df38c0e24ba61c448412105ca09f32b3680bc45dbe334cb1f692b14d2d9f35efca179892313a0524a952db2ce9056d1fc1a070134cde178c16dc3a997304858fe67a6ad82e57a6963bee06be4f5aed8818c4adc079d42499b1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$RTC_UIE_ON(r0, 0x7003) mount(&(0x7f0000000d40)=@nullb, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='binder\x00', 0x40000, 0x0) r3 = accept4$unix(r0, &(0x7f0000000e00)=@abs, &(0x7f0000000e80)=0x6e, 0x0) getresgid(&(0x7f0000000f00), &(0x7f0000000f40)=0x0, &(0x7f0000000f80)) statx(r0, &(0x7f0000000fc0)='./file0\x00', 0x400, 0x40, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000000ec0)='system.posix_acl_default\x00', &(0x7f0000001100)={{}, {}, [{0x2, 0x0, 0xee00}, {0x2, 0x4, 0xee01}, {0x2, 0x3, 0xee01}, {0x2, 0x4, 0xee01}, {0x2, 0x5, 0xee01}, {0x2, 0x2}], {0x4, 0x4}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x0, r4}, {0x8, 0x5, r5}, {0x8, 0x2, 0xee00}, {0x8, 0x2}, {}], {0x10, 0x2}, {0x20, 0x3}}, 0x84, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001200)={{0x1, 0x1, 0x18, r3, {0x100, 0x10001}}, './file0\x00'}) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000001240)={0x1, 0x6}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x0, 0x9d, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80) 01:32:35 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x14082, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x1, 0x8, 0x0, 0x0, @time={0x401, 0x1}, {0x9, 0x5}, {0xe9, 0x20}, @control={0x8, 0x80, 0x2}}, {0x80, 0x3f, 0x0, 0x1, @tick=0x347, {0x81, 0x81}, {0x0, 0x5}, @note={0x3, 0x2, 0x7, 0x1, 0x3f}}], 0x38) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0x4}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x50001) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xdc, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xee}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x81}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x63}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x38e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x64ba}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8040840}, 0x800) ioctl(r0, 0xff, &(0x7f0000000740)="2c8a48ce7009f85db1479c0a927a9a0c67b8219a541a551b9d32d513f8ab7d9626aa834346d520c25a9b5bae66d97706233ef9b7b410067e79e8ebec408ad96de4052985563129056ea69799d2905ba7b8673014df29a19932b76a46be") ioctl$CDROMSEEK(r0, 0x5316, &(0x7f00000007c0)={0x1, 0x6, 0x8, 0x40, 0x3, 0x5}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000800)={0x0, 0x1ff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000001800)) ioctl$FIOCLEX(r0, 0x5451) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001840), 0x287140, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000001880)={0x1, 0x3}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bad7488df944a9a5d16cc91b1e"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_TYPE={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x24004051) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001a40), 0x500, 0x0) dup2(r3, r2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001a80), 0x4200) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001ac0)={"016ac8d603cb22e681d3b86a8a189541", 0x0, 0x0, {0x3, 0xff}, {0x4, 0x2}, 0xffffffffffffffe1, [0x80000000, 0x8, 0x8, 0x8, 0x1, 0x1, 0xffffffff, 0xda4, 0x5, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x101]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000001c00)) [ 120.295065] audit: type=1400 audit(1745544755.480:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:32:35 executing program 4: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x4) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000040) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000240), 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x2) fsmount(r3, 0x0, 0x8) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000300)) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096}) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000013c0)={0x7, 0x5, 0x9, 0x5, 0x4, "4cf69dd56c9746d68d1da97770637846060a63"}) r4 = syz_open_dev$vcsn(&(0x7f0000001400), 0x1, 0x107600) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000001440)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_KEY_SEQ={0xa, 0xa, "78549a02060a"}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "ce"}]}, 0x58}, 0x1, 0x0, 0x0, 0x46884}, 0x8000) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r3) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80283804}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, r7, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x81}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xc0}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 01:32:35 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0xe1, 0x9, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x7, 0x20, 0x1000, 0x56000000}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x38}}, 0x40080c1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c885}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000380)=@req={0x80000, 0x4, 0x5f, 0x20}, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000500)={{r0}, 0x2, &(0x7f00000004c0)=[0x4, 0x5], 0x1, 0x2, [0x7, 0x8, 0x6f72, 0xee]}) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1a8, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x24, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x11}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x2}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac0a, 0xfac11, 0xfac12, 0xfac06, 0xfac11, 0xfac09]}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}]]}, 0x1a8}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r6 = signalfd(r4, &(0x7f0000000900)={[0x7ff]}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x74, 0x2, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004000}, 0x64011) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000a80)=0x26, 0x4) recvfrom$packet(r0, &(0x7f0000000ac0)=""/68, 0x44, 0x20, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000bc0)={'ip6tnl0\x00', &(0x7f0000000b40)={'syztnl2\x00', r2, 0x2f, 0x0, 0x40, 0x9, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x8000, 0x5, 0x80}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', r2, 0x700, 0x8, 0x80000001, 0x80000001, {{0x31, 0x4, 0x2, 0x6, 0xc4, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0xb, "949ccf5992318e74cc"}, {0x7, 0x10, "a83aa6e45553208ecc70264b938f"}, {0x1, 0x11, "be98538ff22bf5608668f8fed437d8"}, {0x2, 0xc, "8ffaf8fbcd1c8bf193f2"}]}, @lsrr={0x83, 0x7, 0xf6, [@loopback]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xe4, 0x3, 0xd, [{@private=0xa010100, 0xc7d5}, {@broadcast, 0x401}, {@local, 0xe19}, {@multicast1}]}, @timestamp_prespec={0x44, 0x1c, 0x64, 0x3, 0xb, [{@multicast1, 0x3}, {@remote, 0xfffffff8}, {@rand_addr=0x64010101, 0x1}]}, @timestamp={0x44, 0x18, 0xa9, 0x0, 0xe, [0x80000001, 0x2d4, 0x1ff, 0x7fffffff, 0x4]}, @ssrr={0x89, 0xb, 0xb0, [@loopback, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000003980)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003940)={&(0x7f0000003680)={0x288, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x24000004}, 0x240400d4) 01:32:35 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000100)={0x81, 0x9, 0x6}) ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f0000000140)={0x4, 0x0, 0x9, 0x0, 0x6, 0x4}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000bc0)=0x2) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000c00)=0x3) r2 = syz_open_dev$mouse(&(0x7f0000000c40), 0x100000001, 0x4000) ioctl$CDROM_CLEAR_OPTIONS(r2, 0x5321, 0x12) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000001080)={0x1e8, 0x12, &(0x7f0000000c80)="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"}) r3 = open_tree(r2, &(0x7f00000010c0)='./file0\x00', 0x800) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000001100)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) write$binfmt_elf32(r3, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x25a, 0x38, 0x22c, 0x1, 0x4, 0x20, 0x1, 0x1f, 0x8, 0xf1e4}, [{0x6, 0xffff, 0xffff7fff, 0x0, 0x6, 0x1000, 0x29, 0x7}], "8ab2f10c69a263f7a97768531ee9703638fb6b53e1cd8b97aed7e94816e4cb5f4c9e7dd1425eb71238f86a57aefd163f372db9b9f96f9b7132e7a9ce2a8fcf043a610ce20cb36cd149aad4c558b71d52e5738d22dbeec6b55ff4e527ac8fe813b226a55938aef2b9f479b371017e4620ef254505e8e8c83675267cc5154da40e3148b62309e6a83f419ca599705703387890f5309a3e4c87988c429d06bdcfb9235eea70d23a7831d3387cb206", ['\x00', '\x00', '\x00']}, 0x405) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000001580)=""/204) r6 = accept(r0, &(0x7f0000001680)=@isdn, &(0x7f0000001700)=0x80) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001740)={r2, 0x7fff, 0x3ff, 0xc4f7}) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000001780)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000001800)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0xff) 01:32:35 executing program 7: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8e000003}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe4, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x487a8dd2}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xbd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffff8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xd1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000850) r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x880) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) r1 = openat$incfs(r0, &(0x7f0000000300)='.pending_reads\x00', 0x401, 0x41) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000340)=0x3) r2 = getpid() r3 = syz_open_dev$usbmon(&(0x7f0000000380), 0x4, 0x101002) kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, r3, &(0x7f00000003c0)={r0, r0, 0x1}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000400)={'ah\x00'}, &(0x7f0000000440)=0x1e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000a00)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000a40)=r4) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x0) write$P9_RUNLINKAT(r5, &(0x7f0000000ac0)={0x7, 0x4d, 0x1}, 0x7) recvmmsg$unix(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b00)=""/31, 0x1f}, {&(0x7f0000000b40)=""/141, 0x8d}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x3, &(0x7f0000001c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000001d80), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/84, 0x54}], 0x2, &(0x7f0000002ec0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000002f80)=""/147, 0x93}, {&(0x7f0000003040)=""/201, 0xc9}, {&(0x7f0000003140)=""/226, 0xe2}, {&(0x7f0000003240)=""/230, 0xe6}, {&(0x7f0000003340)=""/15, 0xf}, {&(0x7f0000003380)=""/248, 0xf8}], 0x6, &(0x7f0000003500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000004980)=[{&(0x7f0000003640)=""/45, 0x2d}, {&(0x7f0000003680)=""/240, 0xf0}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/209, 0xd1}, {&(0x7f0000004880)=""/198, 0xc6}], 0x5}}, {{&(0x7f0000004a00)=@abs, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000004a80)=""/85, 0x55}], 0x1, &(0x7f0000004b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x5, 0x4000, &(0x7f0000004d00)={0x77359400}) setsockopt(r6, 0x3, 0xfffffffb, &(0x7f0000004d40)="4d12a92ac7b1dc754c6d791bfdb36a39f78ba6dcf56c78c4176fa846f88ca1ab65ba29e876e5759a75ca16c8ba2244b4e1f6514bb4fa9b378ef4c2d0496acb402b344d0b4c92ff808227e5333b10e4ba4f570f960c1ef73843a2c352a09b24b92e7f14336db0c05870f4cee49b4ff4386beaf1ee53b8852c8cfcd3bfbbecfed266926bfe800c24b7d73cb67db436bbf961f58168ca5ce1b752cee6e782a438798ea0", 0xa2) faccessat2(r7, &(0x7f0000004e00)='./file1\x00', 0x240, 0x1a00) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f0000004e40)) syz_read_part_table(0x3, 0x2, &(0x7f0000004f40)=[{&(0x7f0000004e80)="2d61276484ab9af1ac906f97164232e60399008c1f20acfab8db7bbc342601e4b859a3e3f4", 0x25, 0x5}, {&(0x7f0000004ec0)="85fb31dd4882ff6c0a0299f5256e7e585f18cee13e70fb60577f4bf2812714a030c6a2ca5496dc8df10e966dfd5a7affaf3bf18a1e166fe2c427bc3ff2f0391d7cdde4e95406612f9ab3d933742f04", 0x4f, 0xfffffffffffffc01}]) getsockname$netlink(0xffffffffffffffff, &(0x7f0000004f80), &(0x7f0000004fc0)=0xc) [ 121.773494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.777954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.779566] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.788913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.794133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.838917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.841168] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.843764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.849360] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.860228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.909694] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.911529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.913898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.917435] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.919249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.923876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.925902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.936620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.938683] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.943252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.960853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.971141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.984167] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 121.989015] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 121.992419] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 121.997101] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.001052] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.003283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.007378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.009877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.023990] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.029251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.033389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.033461] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.043095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.046845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.053601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.073464] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.102217] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.104400] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.861579] Bluetooth: hci0: command tx timeout [ 123.924799] Bluetooth: hci1: command tx timeout [ 123.988915] Bluetooth: hci2: command tx timeout [ 124.053031] Bluetooth: hci7: command tx timeout [ 124.117799] Bluetooth: hci5: command tx timeout [ 124.119011] Bluetooth: hci3: command tx timeout [ 124.119645] Bluetooth: hci4: command tx timeout [ 124.180809] Bluetooth: hci6: command tx timeout [ 125.908928] Bluetooth: hci0: command tx timeout [ 125.972903] Bluetooth: hci1: command tx timeout [ 126.038071] Bluetooth: hci2: command tx timeout [ 126.102787] Bluetooth: hci7: command tx timeout [ 126.164978] Bluetooth: hci4: command tx timeout [ 126.165873] Bluetooth: hci3: command tx timeout [ 126.166663] Bluetooth: hci5: command tx timeout [ 126.229836] Bluetooth: hci6: command tx timeout [ 127.957145] Bluetooth: hci0: command tx timeout [ 128.022314] Bluetooth: hci1: command tx timeout [ 128.084987] Bluetooth: hci2: command tx timeout [ 128.148889] Bluetooth: hci7: command tx timeout [ 128.213601] Bluetooth: hci4: command tx timeout [ 128.214419] Bluetooth: hci5: command tx timeout [ 128.215232] Bluetooth: hci3: command tx timeout [ 128.276842] Bluetooth: hci6: command tx timeout [ 130.004808] Bluetooth: hci0: command tx timeout [ 130.068933] Bluetooth: hci1: command tx timeout [ 130.132947] Bluetooth: hci2: command tx timeout [ 130.196793] Bluetooth: hci7: command tx timeout [ 130.261151] Bluetooth: hci5: command tx timeout [ 130.261650] Bluetooth: hci3: command tx timeout [ 130.262587] Bluetooth: hci4: command tx timeout [ 130.324992] Bluetooth: hci6: command tx timeout [ 184.512158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.527567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.528418] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.532572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.539427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.547267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.564360] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.566211] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.569556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.571229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.573250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.574925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.577074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.584268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.585615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.585967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.589901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.592302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.595368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.613344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.678931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.695426] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.702338] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.714341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.728147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.730240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.743196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.743468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 184.749040] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.751378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 184.754269] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 184.754314] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.763153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 184.769791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 184.772130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.846039] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 184.858368] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 184.864144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 184.876078] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 184.889555] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.644987] Bluetooth: hci3: command tx timeout [ 186.710974] Bluetooth: hci0: command tx timeout [ 186.711331] Bluetooth: hci1: command tx timeout [ 186.711853] Bluetooth: hci2: command tx timeout [ 186.836860] Bluetooth: hci5: command tx timeout [ 186.837524] Bluetooth: hci4: command tx timeout [ 186.900829] Bluetooth: hci6: command tx timeout [ 186.966611] Bluetooth: hci7: command tx timeout [ 188.694120] Bluetooth: hci3: command tx timeout [ 188.757749] Bluetooth: hci1: command tx timeout [ 188.758213] Bluetooth: hci0: command tx timeout [ 188.758637] Bluetooth: hci2: command tx timeout [ 188.884993] Bluetooth: hci4: command tx timeout [ 188.885438] Bluetooth: hci5: command tx timeout [ 188.949698] Bluetooth: hci6: command tx timeout [ 189.013217] Bluetooth: hci7: command tx timeout [ 190.740822] Bluetooth: hci3: command tx timeout [ 190.806336] Bluetooth: hci2: command tx timeout [ 190.806838] Bluetooth: hci0: command tx timeout [ 190.806876] Bluetooth: hci1: command tx timeout [ 190.935801] Bluetooth: hci5: command tx timeout [ 190.936609] Bluetooth: hci4: command tx timeout [ 190.997962] Bluetooth: hci6: command tx timeout [ 191.061845] Bluetooth: hci7: command tx timeout [ 192.789901] Bluetooth: hci3: command tx timeout [ 192.852858] Bluetooth: hci1: command tx timeout [ 192.853793] Bluetooth: hci2: command tx timeout [ 192.853840] Bluetooth: hci0: command tx timeout [ 192.980920] Bluetooth: hci4: command tx timeout [ 192.981953] Bluetooth: hci5: command tx timeout [ 193.044948] Bluetooth: hci6: command tx timeout [ 193.108914] Bluetooth: hci7: command tx timeout [ 244.773955] syz-executor.4 (2849) used greatest stack depth: 24384 bytes left [ 246.702544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.705272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.710966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.729029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.740297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.771432] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.773546] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.783160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.786953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.788888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.791664] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.806545] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.809699] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.814878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.819586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.963066] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.966416] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.967034] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.969823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.977143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.980194] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.980405] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.015225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.056086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.064161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.087079] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.095803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.129489] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.151602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.170357] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.176430] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 247.207125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 247.218856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 247.286523] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 247.293566] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.426262] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 247.462699] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 247.483267] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 247.518930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 247.572204] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.853951] Bluetooth: hci2: command tx timeout [ 248.854859] Bluetooth: hci0: command tx timeout [ 248.917769] Bluetooth: hci1: command tx timeout [ 249.045981] Bluetooth: hci3: command tx timeout [ 249.172845] Bluetooth: hci4: command tx timeout [ 249.237824] Bluetooth: hci5: command tx timeout [ 249.429829] Bluetooth: hci7: command tx timeout [ 249.684882] Bluetooth: hci6: command tx timeout [ 250.901170] Bluetooth: hci2: command tx timeout [ 250.901800] Bluetooth: hci0: command tx timeout [ 250.964871] Bluetooth: hci1: command tx timeout [ 251.093050] Bluetooth: hci3: command tx timeout [ 251.221203] Bluetooth: hci4: command tx timeout [ 251.286752] Bluetooth: hci5: command tx timeout [ 251.476992] Bluetooth: hci7: command tx timeout [ 251.734771] Bluetooth: hci6: command tx timeout [ 252.948817] Bluetooth: hci0: command tx timeout [ 252.949649] Bluetooth: hci2: command tx timeout [ 253.013153] Bluetooth: hci1: command tx timeout [ 253.141772] Bluetooth: hci3: command tx timeout [ 253.269851] Bluetooth: hci4: command tx timeout [ 253.334803] Bluetooth: hci5: command tx timeout [ 253.524958] Bluetooth: hci7: command tx timeout [ 253.780815] Bluetooth: hci6: command tx timeout [ 254.998019] Bluetooth: hci2: command tx timeout [ 254.998482] Bluetooth: hci0: command tx timeout [ 255.061067] Bluetooth: hci1: command tx timeout [ 255.188972] Bluetooth: hci3: command tx timeout [ 255.318886] Bluetooth: hci4: command tx timeout [ 255.380789] Bluetooth: hci5: command tx timeout [ 255.573072] Bluetooth: hci7: command tx timeout [ 255.829443] Bluetooth: hci6: command tx timeout [ 308.974785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.977638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.987232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.001216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.008191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.169159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.173526] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.175957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.180689] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.185842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.322326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.331697] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.340362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.350247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.352668] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.362988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.370617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.378170] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.385586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.388283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.478441] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.487193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.501453] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.503197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.547329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.563562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.567102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.588554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.594325] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.599991] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.616869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.622590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.645245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.713983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.735349] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.853969] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 309.856665] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.869054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.898591] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.903095] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.060830] Bluetooth: hci0: command tx timeout [ 311.252810] Bluetooth: hci1: command tx timeout [ 311.444820] Bluetooth: hci2: command tx timeout [ 311.444871] Bluetooth: hci3: command tx timeout [ 312.084903] Bluetooth: hci7: command tx timeout [ 312.085210] Bluetooth: hci4: command tx timeout [ 312.086429] Bluetooth: hci5: command tx timeout [ 312.341217] Bluetooth: hci6: command tx timeout [ 313.108838] Bluetooth: hci0: command tx timeout [ 313.301085] Bluetooth: hci1: command tx timeout [ 313.492904] Bluetooth: hci2: command tx timeout [ 313.492940] Bluetooth: hci3: command tx timeout [ 314.132910] Bluetooth: hci4: command tx timeout [ 314.132959] Bluetooth: hci7: command tx timeout [ 314.135749] Bluetooth: hci5: command tx timeout [ 314.390374] Bluetooth: hci6: command tx timeout [ 315.157909] Bluetooth: hci0: command tx timeout [ 315.349990] Bluetooth: hci1: command tx timeout [ 315.540943] Bluetooth: hci2: command tx timeout [ 315.541006] Bluetooth: hci3: command tx timeout [ 316.180867] Bluetooth: hci5: command tx timeout [ 316.181228] Bluetooth: hci7: command tx timeout [ 316.181330] Bluetooth: hci4: command tx timeout [ 316.436897] Bluetooth: hci6: command tx timeout [ 317.205143] Bluetooth: hci0: command tx timeout [ 317.396912] Bluetooth: hci1: command tx timeout [ 317.590751] Bluetooth: hci2: command tx timeout [ 317.590914] Bluetooth: hci3: command tx timeout [ 318.228847] Bluetooth: hci7: command tx timeout [ 318.229029] Bluetooth: hci5: command tx timeout [ 318.230148] Bluetooth: hci4: command tx timeout [ 318.485019] Bluetooth: hci6: command tx timeout [ 371.373171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.378261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.383469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.393477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.402684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.830839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.840277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.846860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.857770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.866288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.889894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.900081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.913251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.922204] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.931347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.938544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.951834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.954584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.978143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.995297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.082478] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.085803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.090409] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.097584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.101926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.370290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.387306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.420266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.426157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.429466] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.708272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 372.712898] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 372.730739] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 372.758286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 372.765395] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.972211] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 372.975549] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 372.979486] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 372.986382] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 372.993596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.460975] Bluetooth: hci0: command tx timeout [ 373.972990] Bluetooth: hci1: command tx timeout [ 374.037787] Bluetooth: hci3: command tx timeout [ 374.038470] Bluetooth: hci2: command tx timeout [ 374.420784] Bluetooth: hci5: command tx timeout [ 374.870973] Bluetooth: hci6: command tx timeout [ 374.933103] Bluetooth: hci4: command tx timeout [ 375.188928] Bluetooth: hci7: command tx timeout [ 375.508773] Bluetooth: hci0: command tx timeout [ 376.021096] Bluetooth: hci1: command tx timeout [ 376.085014] Bluetooth: hci3: command tx timeout [ 376.085516] Bluetooth: hci2: command tx timeout [ 376.469758] Bluetooth: hci5: command tx timeout [ 376.916838] Bluetooth: hci6: command tx timeout [ 376.981736] Bluetooth: hci4: command tx timeout [ 377.237909] Bluetooth: hci7: command tx timeout [ 377.556796] Bluetooth: hci0: command tx timeout [ 378.068934] Bluetooth: hci1: command tx timeout [ 378.132986] Bluetooth: hci2: command tx timeout [ 378.133485] Bluetooth: hci3: command tx timeout [ 378.517027] Bluetooth: hci5: command tx timeout [ 378.967001] Bluetooth: hci6: command tx timeout [ 379.028814] Bluetooth: hci4: command tx timeout [ 379.287781] Bluetooth: hci7: command tx timeout [ 379.605875] Bluetooth: hci0: command tx timeout [ 380.116964] Bluetooth: hci1: command tx timeout [ 380.181027] Bluetooth: hci3: command tx timeout [ 380.181464] Bluetooth: hci2: command tx timeout [ 380.564766] Bluetooth: hci5: command tx timeout [ 381.012790] Bluetooth: hci6: command tx timeout [ 381.076913] Bluetooth: hci4: command tx timeout [ 381.333341] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:37:43 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff813508dd RDI=fffffbfff0b83758 RBP=ffffffff85c1bac0 RSP=ffff888034587338 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b0c2 R11=000000000001f486 R12=0000000000000002 R13=ffffffff813508dd R14=0000000000000000 R15=ffff888034587440 RIP=ffffffff81add504 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff7e97f7310 CR3=000000002ead0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87a255c8 RBX=ffff888032765340 RCX=0000000000000200 RDX=b1a50b675e9e944f RSI=ffff888032765dc0 RDI=ffff888032765dc0 RBP=0000000000000000 RSP=ffff88802ac673b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000c2454 R12=ffff888032765dc0 R13=0000000000000000 R14=0000000000000001 R15=ffff888032765d98 RIP=ffffffff81516759 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f426319d540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4263410000 CR3=0000000031f78000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000