Warning: Permanently added '[localhost]:1883' (ECDSA) to the list of known hosts. 2025/04/25 05:05:43 fuzzer started 2025/04/25 05:05:43 dialing manager at localhost:46629 syzkaller login: [ 93.133159] cgroup: Unknown subsys name 'net' [ 93.275239] cgroup: Unknown subsys name 'cpuset' [ 93.318459] cgroup: Unknown subsys name 'rlimit' 2025/04/25 05:06:08 syscalls: 2214 2025/04/25 05:06:08 code coverage: enabled 2025/04/25 05:06:08 comparison tracing: enabled 2025/04/25 05:06:08 extra coverage: enabled 2025/04/25 05:06:08 setuid sandbox: enabled 2025/04/25 05:06:08 namespace sandbox: enabled 2025/04/25 05:06:08 Android sandbox: enabled 2025/04/25 05:06:08 fault injection: enabled 2025/04/25 05:06:08 leak checking: enabled 2025/04/25 05:06:08 net packet injection: enabled 2025/04/25 05:06:08 net device setup: enabled 2025/04/25 05:06:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/25 05:06:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/25 05:06:08 USB emulation: enabled 2025/04/25 05:06:08 hci packet injection: enabled 2025/04/25 05:06:08 wifi device emulation: enabled 2025/04/25 05:06:08 802.15.4 emulation: enabled 2025/04/25 05:06:08 fetching corpus: 0, signal 0/0 (executing program) 2025/04/25 05:06:11 starting 8 fuzzer processes 05:06:11 executing program 0: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x8080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20040000}, 0x8005) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = getpid() ptrace$peeksig(0x4209, r1, &(0x7f0000000300)={0x3, 0x0, 0xa}, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a0, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x135, 0x2a, [@perr={0x84, 0x42, {0x5, 0x4, [@not_ext={{}, @device_b, 0xbe1, "", 0x7}, @not_ext={{}, @device_a, 0x3, "", 0xb}, @ext={{}, @broadcast, 0x8, @broadcast, 0x30}, @ext={{}, @device_a, 0x401, @device_a, 0x6}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @tim={0x5, 0xc4, {0x1, 0x7e, 0x7, "7ac159bd7dfa33067102588025317e219e7f115668a9a1d2af93ac22fd26631b917afa5bbd1cbe2d812080e753d65981c9cffa1e71fe28c44f7eee76ec0a2770c77241c8b186080cea5f89e06b6568df7c5c970e6eb3a522fc34adf4468c51ba0a4d31da47427b09ab2b21558e73873be0217fcd6a5bc29473a0ed950b830d3c4e8dc513f0fbfa46e54500fbdb5135939fd03fe701a4c87414cda55b21f43b5d43352f1b372ec7ca27da18a8a4e6a7214008aab751bf06685bde355e9bea833872"}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x7ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x800, 0x1, 0x20}}, @peer_mgmt={0x75, 0x6, {0x1, 0x7, @val=0x101, @void, @void}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7025d00a2592"}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40080}, 0x20010880) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0x100, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x43}}}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x337, 0x9, 0x1, 0x7f]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xdf0a, 0x3]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x378}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x101}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x66}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc1c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe9c8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fffffff}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1f9, 0x9, 0x0]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x535}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0xfff]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2ccd}]}]}, 0x100}}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x4004001) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e40), r3) clone3(&(0x7f0000001100)={0x8040000, &(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)=0x0, {0x2}, &(0x7f0000000f40)=""/118, 0x76, &(0x7f0000000fc0)=""/231, &(0x7f00000010c0)=[r1, r1], 0x2, {r2}}, 0x58) waitid(0x2, r5, &(0x7f0000001180), 0x2, &(0x7f0000001200)) setxattr$trusted_overlay_redirect(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), &(0x7f0000001340)='./file0\x00', 0x8, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001380), 0x208000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x9}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x814}, 0x1) 05:06:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004804}, 0x20000000) getpeername(r1, &(0x7f0000000340)=@ethernet={0x0, @remote}, &(0x7f00000003c0)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x8800) r5 = syz_open_dev$vcsn(&(0x7f0000000540), 0xc54, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', r3, 0x29, 0x80, 0x36, 0x2, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x10, 0x9}}) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x188, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x2}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "c5d1043cb09764e2b680bea056a43df466e19c7880da4f3d3ccea7c3d8871ed084323d233011ba50c98c5f2b6fb1f51d4adfe9c94b85213da2bb072e320fbc5c7999d67dd3b3204be9623ee3a2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x1b, 0x5, "7996cff7da57351d459258601279b7b72ed79a998fa4fe"}, @ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "b9e77abdb2c2f95d425df35c5d9ed02b1f78499dec73ddbe0d1baa4933d2448c12beeea53f51fcb0ef2fd67bd42b9979527736ecdd7558b54887574e1e125ace0b060ada9a26d2e7b25b0cddb33cba552cf068223ad87d26b19a0018eadae747f78d256058587087024d9a6ba8"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000040}, 0x4051) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r5) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x409c0}, 0x804) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6gre0\x00', r3, 0x2f, 0x80, 0x7, 0x5, 0x2b, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x3ff}}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x4800) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) connect$inet(r0, &(0x7f0000000bc0)={0x2, 0x4e22, @loopback}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000c40), &(0x7f0000000c80)=0x14) 05:06:11 executing program 2: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/iommu_groups', 0x40, 0x40) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x1c}}, 0x40000) vmsplice(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="f8b16ab316b5a98a5f110c150da674e3fd9f18047eb19c45573881ebfd4a52f7649823f74000f0d6b1e1657e50b641eddae80bd77f90a5d18af685dbda560f74e8ee0506fda27db4aac2f32c5ced0f8302cd9f", 0x53}, {&(0x7f0000000200)="48716248355c8183c5b9d7b55c858c6bcd1aff058540164e354a081fc2004afdd37f8be23caf18586885e746f7ae0d9680ab8ca34b669c7f5f9d79ea2a1cb3c9597fccc28d1c0bb8972f5f2012176925dad9ef813421d18c507e346e824c796d4bad920c17de8fc63e57f07b0e30e5b5722a70c40ef47992cd", 0x79}, {&(0x7f0000000280)="1b7b46c2fd42f23a28e61088604c0326aeb70c4cca1909bfdbf9c2bea925f80fbb81adef7fbed3812a88638fbe33eb2043c569b4402fc2380a0be405357c863fff120ac3f13c194955ad09c2c0820e9c68c7a2b2a4af9ad1c7413322703c09ba4903cac044dc05ec2076ddc2703ae0d1beabcb17aa13d2c2d813b2f10d20b91ff7f38c2eff4bf895f07751", 0x8b}, {&(0x7f0000000340)="9e2433bca3c2b2e5e1f2ffb01efe78890d94f180505234c9c73847b14a9987c30dd65c633ee3976a2881583d536c5903b0ff5fa67b78fdf48ca30017d963dce8ee3e1b49630e4de4f8345f4d6e1afb1af429ddec16a0e65e4887ef2dfabfc9dac6ca385546b727d7b5650a8ea78525e5ebbd247bf1a6d2ce3c5de0fd020f7fa0c2cd7ed9354e133f952936ba2d3e323c1276e0f00138d76211b5", 0x9a}, {&(0x7f0000000400)="519ce667df28a351939294c91aa7326dbe67f14e23614ea8835735d243dfd4070177bdb6953a477cde4c05e0279080e2ca7efd35bc8a6a35cb5f4e1fad9015b3ed85572c47d13ce17cf7c10fdf295eac33fd963ce60a67f0e022cfc3d230b016424506d123d30ea836b95e5d04abfd1dc5aa743ab628", 0x76}, {&(0x7f0000000480)="070a1e62defcfb71f5dd22318c32804029e5ab2cb698678b8761ab18aedcf4e3b52161ad5c329463e142f1b5055c49f92ca8b680cf5d04e9e6dfb58eba17c3ab", 0x40}, {&(0x7f00000004c0)="2d91e0d034d4d3d050ae6957e3bae663cdc7067c2f09d2f988ca83531936b3b9f11422e6100a0d2be36c3211", 0x2c}, {&(0x7f0000000500)="7287c37c7c62adf98bedea32a28fcedf0222454172c56d915d258e4a16db11c6e345d70922c6cfd155e92ca1109d4125a1e1f836f8ac15576c5c5447031baec8f9e0385866d45ee648d210810a7a213e3f090da00842168124e47396b700e4", 0x5f}], 0x8, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x10000, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000680)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000006c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000700)={0x4dee89d1, 0x0, {0x2, 0x1, 0x0, 0x3, 0x6}, 0x7}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000007c0)={0xffffffffffffffff, 0x1, 0x6, 0x3, 0x3ff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000800)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000840)=0x80000001, 0x4) ioctl$FITHAW(r1, 0xc0045878) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000dc0)={{'\x00', 0x2}, {0xfffffffffffffffe}, 0xc0, 0x0, 0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0/file0\x00', &(0x7f0000000a00)="0db396c360104e6cfb5700a4c4d94769a816d4ea862d0efc2a4fc7576e024d3dd1b45a176ebb5a15ead75069a855bd35f751c943a7a12aeaa316e6cfefbf3b2b9bb89ee181afc38128da20d426e012f4f4513fe57158aed543e79d26659d2e5732e1ec1c0ce50c9044c3cb7083047013e7d3e1d7b81c5fd1d0a387c738ff2af1bef9f9c0a0a0f4a5423fe82f42b0b368a46887a5e49d2715d9ef00d2bd9a1f6610928b90eb2ee89fce56b0c72bbde381c2e9b73f355c72e9565a9d14df000d9ef94ed59dfdbcd8adb735004dccdc4e8550eb50e054463bf54fb3e37442996389309cb853e495e5dd21648260adc912615fd26fa53c5fc4614009ba751352487202232ddd5ddf5c07d93bd697bf0061e831c4b47a2c6e0bf5bfcfb412232ac110e7d5760fb5c966778918bb2d412581f9b0ece56bfd7789392aa1230f36ee26f313caec3c154f54dc9f63f42e87ff61b9f6ffc98e835d9567934846cdd3be4c484ce7175d14432551699dbf638e9807f2d12680e4a4f11fcd9e68654f0be5ed19a5721c26fcf7c357f2f51e0b4b3be9745098708b2143ccd3552189a611aa73846761f435270348a62779f3f3e966f00b6f777d10ef1f4017075d97c38238486d696cf91d1e37cf118736b4e7b017a644eb3a3f4964121e486113a4e0af86175f2a3ae9893aa21aafc7199f840ade27a2fc8ad42c49", 0x1f5, 0x0, &(0x7f0000000c00)={0x2, 0xd8, {0x0, 0xc, 0x13, "61c259eaa64da8598f6239a29ca8ef2f96c71a", 0xb8, "d140e793c5552042b87655c0b705365d005217704bb39d126340f88c80b94c2bfa946b149ab4d24cd46e18e24e3d504ea7604b4f265f2c1e41ce2d85976f3fa7cfe88b8f0f87877020a2d0acfc996e6d8cc32a9fd2c991bf93ec0aa71a27f45e20d19d8a23404fa030f52d65dcd5d8a72c3dee9fff060aa4efd20ea5c81ae56a6eb5c3c726e1676ed9c40eca8766852cee7af13be4c4f5ad76f5b087249f67d6a747658ed6d98c8ec4a0589118be22ec5c9489f5fbaf84db"}, 0xce, "1ac8f34c2f404a43b13a7e09a0b50efdece7da09653ee5fadfea59b861884943e69162efbcc8b2e0cd2762b7f49ec8eb5d1e29443735881abf5b310e0fac2ea5add044431cd35d8ddeb6014b8ffd39bcce2fa46614438e6f3ea46b720c55430542310f3d5522ade1a65eac410351f6d88291f00aeae8e34d7801fa78d636cf341be1f4af9c22be4c9caa1387a035d8b6e280ce097262d4ac466aec1660c347b762d00ee4cb322107f098aac8886073a60f35682b0fcad5308667f19ac9685c5e3653e6d686c58c973a66293831ab"}, 0x1b2}) openat$cgroup_devices(r0, &(0x7f0000000e40)='devices.deny\x00', 0x2, 0x0) r4 = epoll_create1(0x0) fchown(r4, 0xee00, 0xee00) 05:06:11 executing program 3: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x400) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) process_mrelease(r1, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000100)={0x0, 0x7, 0x800, 0x4, 0xc, "c8f01295bedda979b9549b559d79a5baa05713"}) fcntl$notify(r0, 0x402, 0x80000000) fspick(r1, &(0x7f0000000140)='./file0\x00', 0x1) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000180)={0x8000, 0x20, 0xee}) r2 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10, 0x800) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x40600, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x9, 0x1}}, './file0\x00'}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000300)=0x3e) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000380)=0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)) ioctl$CDROMSETSPINDOWN(r3, 0x531e, &(0x7f0000000400)=0xb) r7 = accept4$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14, 0x80800) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f00000004c0)={{0x7, 0x6}, 0x100, './file0\x00'}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x40) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000640)={0x2, 0x0, 0x12}) 05:06:11 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400602, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x94040, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) syz_open_dev$rtc(&(0x7f0000000140), 0xffff, 0x484803) r2 = socket(0x2b, 0x5, 0xfe60) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$P9_RSETATTR(r3, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, 0x3, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0xff, 0x40, 0x20, 0x40, 0x0, 0x7ff, 0x90, 0x3, 0x100]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f00000003c0)="0a22409a9d154388b2c26566a92c190b9581acb06bbd2b98adcf00f5706e8d6a6fe7e2caf7e810d3ec7e17e7", 0x2c) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x93, 0xab, 0x8, 0x0, 0x1, 0x2, 0x3, 0xeac4, 0x33d, 0x40, 0x32b, 0x1d2d, 0xffff, 0x38, 0x2, 0x3dcc, 0x8001, 0xbb}, [{0x1, 0x5, 0x80000001, 0x0, 0x20, 0x4, 0x8001, 0x3}], "7c422aa45a1a769d535d40f09fcfb9f9515678efab165a482784e4d7ec5c0efbc3b8e15ba43f3e1f522e8d7121424e7ff53121e949de40b2c22281c230a0f2cbd1502e5726adc6068e52a536c7535356509727fe7552fcc3934f88b709b1d3fb63e4c63f4e5eacb42661896ffb97fbbd0faab99230ccb3c0dc8ff56cc762f820d7415de5d4f7f9fe841be33db6d14e303108b2fb858442e30740dc36858f787ad0f48348a06a63455386fa310f97fd64eca32733", ['\x00', '\x00']}, 0x32c) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000740)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x8, {0x2, 0x4e20, @multicast1}, 'bridge0\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0xb, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xc, 0x1, 'bridge0\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '/dev/sr0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004890}, 0x814) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f00000008c0)={0x6, 'geneve1\x00', {0x6}, 0xfff}) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x18220, 0x0) [ 120.708035] audit: type=1400 audit(1745557571.482:7): avc: denied { execmem } for pid=277 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:06:11 executing program 5: ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x8, 'veth0_macvtap\x00', {'batadv0\x00'}, 0x2c89}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x400000}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @vsock, 0x1, 0x0, 0x0, 0x0, 0xf29b, &(0x7f0000000080)='batadv0\x00', 0x1, 0xfffffffffffffffe, 0x8}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', r1, 0x2f, 0x6, 0x6, 0x7, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x1, 0x7800, 0x1, 0x29f7}}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r3, &(0x7f0000000400)="0e2c962e6e76fd16bae631e41e547f21a5656727455f9bfd802a8a56d5023b5ddd876e03bc557ed236a73b7705dfd9e4c804045c04f925abc7c886ad15a3bed39b19ca73404354be145d2fb6bf5dc043f50d4f1f1696909813a4ddb2a3602e8afcb2fc34032d6fddee06e4b485459d1034", 0x71, 0x40, &(0x7f0000000480)=@l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0x80) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000580)=0x0) lsetxattr$security_capability(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f00000005c0)=@v3={0x3000000, [{0x400, 0x5}, {0x1328, 0x6c70bbe5}], r4}, 0x18, 0x3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe5ec}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x487}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x47c}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x14000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x68}, 0x1, 0x0, 0x0, 0x10040081}, 0x48040) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000780)={0x6, 0x2, 0xfffffbff, 0x5, 0x3, 0x100}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000840)={'ip_vti0\x00', r2, 0x20, 0x20, 0x1ff, 0x8, {{0x2f, 0x4, 0x3, 0x3, 0xbc, 0x64, 0x0, 0x1f, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@cipso={0x86, 0x6c, 0x1, [{0x6, 0xf, "88b300602e863ad2244d31f724"}, {0x7, 0xf, "b41950085d9cf9aca4893fada1"}, {0x0, 0x10, "53ea44cf7cf36f472356a6c98cdc"}, {0x7, 0x4, "2b90"}, {0x7, 0x12, "091ee3328da81b5b86a31b42e70da36a"}, {0x0, 0xf, "a78b44a6e8e114247cddf125bc"}, {0x0, 0x3, 'X'}, {0x2, 0xb, "53cd0e874e81fbd30f"}, {0x1, 0x5, "72a691"}]}, @ssrr={0x89, 0x17, 0x85, [@private=0xa010100, @broadcast, @loopback, @local, @empty]}, @timestamp={0x44, 0x8, 0x4c, 0x0, 0x7, [0x400]}, @rr={0x7, 0xb, 0x43, [@broadcast, @private=0xa010102]}, @generic={0x0, 0x10, "8af7a6eebfd34574cb9eceaf08a0"}]}}}}}) getpeername$packet(r0, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800c010}, 0x8804) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xf0, 0xa, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'IPVS\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xffffffffffffd578}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'IPVS\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044040}, 0x4800) r8 = signalfd(r3, &(0x7f0000000d80)={[0x4]}, 0x8) connect$802154_dgram(r8, &(0x7f0000000dc0)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) 05:06:11 executing program 6: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x9, 0x9, 0x7f, 0xa8, 0x2, 0x7}) ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x1) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0xa, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="03bce547d1f5"}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = memfd_secret(0x80000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffff831}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000101}, 0x440d0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40000, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000d00)={0x1, 0x6, 0x6}) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x74, 0x2, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x108}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x51) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x8, 0x0, 0x2}, [@NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x84) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001240)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f0000000fc0)={0x204, 0x0, 0x900, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x46687237}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4008882}, 0xc840) fsetxattr(r1, &(0x7f0000001280)=@known='com.apple.system.Security\x00', &(0x7f00000012c0)='Q.931\x00', 0x6, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x98, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004004}, 0x40001) setsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f00000014c0)="30b2e8b7d6f72d8d816bf284a08939588df587394faff1617ff3c9df5cd8f429ca94a566dcd66b5fa47020054c81bc3e16682b3c6dbbd575920feb2cb600f6c433", 0x41) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001580)={r3, r4/1000+60000}, 0x10) r5 = accept4(r0, &(0x7f00000015c0)=@nfc_llcp, &(0x7f0000001640)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000016c0)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001700)={@private0, 0x0}, &(0x7f0000001740)=0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000018c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xdc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) 05:06:11 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x3) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x400}, @NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x16, 0x12, 0x77, 0x30, 0x30, 0x0, 0x5, 0x9, 0x4, 0x4, 0xb, 0x2f, 0x5, 0x60, 0xb, 0xc, 0x16, 0x16, 0x60, 0x16, 0x9, 0x6]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x3}, {0x5, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0xa}, {0x7, 0x6}, {0x1, 0x5}, {0x5, 0x2}, {}, {0x6, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0xa}, {0x4, 0x9}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0x5}, {0x3}, {0x4, 0x5}, {0x0, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x3}, {0x6, 0x7}, {0x5, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x5}, {0x5, 0x6}, {0x6, 0x8}, {0x6, 0x9}, {}, {0x7, 0x5}, {0x2}, {0x5, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0xa}, {0x2, 0x6}, {0x1, 0x7}, {0x2, 0xa}, {0x6, 0x1}, {0x6, 0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x4}, {0x3, 0x4}, {0x1}, {0x2, 0xa}, {0x5, 0x3}, {}, {0x4, 0x4}, {0x5}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x9, 0x7f, 0x3, 0x9, 0x5, 0xfffe]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x5}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x4}, {0x5, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x9}, {0x5, 0x9}, {0x0, 0x9}, {0x6}, {0x6, 0x2}, {0x5, 0x1}, {0x6}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0x4}, {0x2, 0x2}, {0x6, 0x6}, {0x5}, {0x1, 0x3}, {0x3, 0xa}, {0x4, 0x5}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x6, 0x5f, 0x3, 0x13, 0x1b, 0x16, 0x4, 0x2, 0x18, 0xc, 0x30, 0xb, 0x36, 0x2]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x6}, {0x1, 0x8}, {0x5, 0x6}, {0x3, 0x3}, {0x3}, {0x2, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x6, 0x6}, {0x1, 0x4}, {0x4, 0x5}, {0x5, 0x4}, {0x2, 0x8}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x4, 0x9}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x4}, {0x6, 0x7}, {0x2, 0x2}, {0x6, 0x2}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x400, 0xfffc, 0x5, 0xfffe, 0x0, 0x2, 0x100]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x0, 0x50, 0x2, 0x4, 0x1e, 0x24, 0xb, 0x48, 0x60, 0x9fb2e474c44de2bc, 0x3, 0x1, 0x5, 0x1e, 0x3, 0xb, 0x9, 0x2, 0x0, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x6, 0x4, 0x0, 0x1, 0x48, 0xc, 0x12, 0x6c, 0x17, 0x1, 0x48, 0xb, 0x20, 0x0, 0x4, 0x16, 0x12, 0x24, 0x12, 0x16, 0x6c, 0x1b, 0xb, 0x1e, 0x48, 0x36]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x24, 0x18, 0x6c, 0x24, 0x3, 0xb, 0x18, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7ff, 0x0, 0x1, 0x9, 0x9, 0xfffb, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff, 0x5, 0x200, 0xffff, 0x5, 0x455, 0x40]}}]}]}]}, 0x1d8}}, 0x8008900) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt(r1, 0x40, 0x65d, &(0x7f00000005c0)="c76d78be0c14bb794db2bc17", 0xc) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000640), r1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x29, 0x3f, 0x0, 0x8, 0x42, @dev={0xfe, 0x80, '\x00', 0x41}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x10, 0x27, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001c80)={'ip6tnl0\x00', &(0x7f0000001c00)={'sit0\x00', 0x0, 0x2f, 0x7, 0x20, 0x8, 0x51, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x40, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001cc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000003080)={'ip6_vti0\x00', &(0x7f0000003000)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x20, 0x7, 0x62, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x7800, 0x7800, 0x101, 0xffffff12}}) r8 = accept4$packet(r1, &(0x7f00000030c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003100)=0x14, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000031c0)={'erspan0\x00', &(0x7f0000003140)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x67, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x6c, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x5}]}, @generic={0x5b569a4c99d065f, 0x9, "1a2da1a6973fb3"}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003280)={'erspan0\x00', &(0x7f0000003200)={'erspan0\x00', 0x0, 0x8000, 0x8, 0x8, 0x6, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0x7, [{@empty, 0x4}, {@rand_addr=0x64010100, 0x6}]}, @timestamp_prespec={0x44, 0x24, 0xea, 0x3, 0x4, [{@broadcast, 0x1}, {@loopback, 0x5df}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast2, 0x6}]}, @generic={0x89, 0x7, "b93c3674d3"}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003900)={&(0x7f0000000600), 0xc, &(0x7f00000038c0)={&(0x7f00000032c0)={0x5d8, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xa8, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8001, 0x5f, 0x1, 0xaf8a}, {0xded, 0x6, 0x7f, 0xfffffce7}, {0x5, 0xff, 0x4}, {0x3, 0x8, 0x0, 0xffffffff}, {0x8, 0x5, 0x0, 0x7}, {0x1, 0x1, 0x80, 0x7ff}, {0x81, 0xff, 0x12, 0xffff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000003940)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000003980)={{0x1, 0x1, 0x18, r8, {0x3}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r12, 0xc0305302, &(0x7f00000039c0)={0x7, 0x1, 0xb1c, 0x0, 0x7, 0x2}) [ 122.140961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.148141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.151140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.163131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.173936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.212215] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.237871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.251935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.267723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.274847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.276246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.288678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.303811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.311450] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.327646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.341307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.347977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.363614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.379860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.396163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.445790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.455262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.461143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.471009] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.475128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.488116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.495899] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.496157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.505897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.505990] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.507974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.511212] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.513935] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.515011] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.523248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.537308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.544655] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.545109] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.559983] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.602138] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 124.212907] Bluetooth: hci0: command tx timeout [ 124.339964] Bluetooth: hci1: command tx timeout [ 124.404511] Bluetooth: hci2: command tx timeout [ 124.468454] Bluetooth: hci3: command tx timeout [ 124.595517] Bluetooth: hci5: command tx timeout [ 124.659556] Bluetooth: hci6: command tx timeout [ 124.660586] Bluetooth: hci4: command tx timeout [ 124.723433] Bluetooth: hci7: command tx timeout [ 126.259718] Bluetooth: hci0: command tx timeout [ 126.389442] Bluetooth: hci1: command tx timeout [ 126.451428] Bluetooth: hci2: command tx timeout [ 126.516716] Bluetooth: hci3: command tx timeout [ 126.646383] Bluetooth: hci5: command tx timeout [ 126.707571] Bluetooth: hci4: command tx timeout [ 126.710488] Bluetooth: hci6: command tx timeout [ 126.772738] Bluetooth: hci7: command tx timeout [ 128.308422] Bluetooth: hci0: command tx timeout [ 128.435521] Bluetooth: hci1: command tx timeout [ 128.500664] Bluetooth: hci2: command tx timeout [ 128.564406] Bluetooth: hci3: command tx timeout [ 128.692659] Bluetooth: hci5: command tx timeout [ 128.756440] Bluetooth: hci6: command tx timeout [ 128.756559] Bluetooth: hci4: command tx timeout [ 128.820446] Bluetooth: hci7: command tx timeout [ 130.357418] Bluetooth: hci0: command tx timeout [ 130.484772] Bluetooth: hci1: command tx timeout [ 130.548763] Bluetooth: hci2: command tx timeout [ 130.612448] Bluetooth: hci3: command tx timeout [ 130.740419] Bluetooth: hci5: command tx timeout [ 130.803529] Bluetooth: hci4: command tx timeout [ 130.804393] Bluetooth: hci6: command tx timeout [ 130.867463] Bluetooth: hci7: command tx timeout [ 182.297735] syz-executor.7 (287) used greatest stack depth: 23960 bytes left [ 184.648473] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.656963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.659606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.669084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.677881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.843592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.864176] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.867942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.882138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.887795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.974032] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.016597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.028453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.039957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.052923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.055084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.059264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.065566] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.078017] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.080400] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.099053] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.104857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.112220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.117198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.142983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.149873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.163115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.170871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.171167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.191854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.323694] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.345736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.380283] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.420922] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.432940] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.550587] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.559860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.573817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.669912] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.683492] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.739436] Bluetooth: hci0: command tx timeout [ 186.931577] Bluetooth: hci1: command tx timeout [ 187.188452] Bluetooth: hci5: command tx timeout [ 187.252629] Bluetooth: hci4: command tx timeout [ 187.317497] Bluetooth: hci3: command tx timeout [ 187.444128] Bluetooth: hci2: command tx timeout [ 187.571748] Bluetooth: hci6: command tx timeout [ 187.956755] Bluetooth: hci7: command tx timeout [ 188.787474] Bluetooth: hci0: command tx timeout [ 188.980387] Bluetooth: hci1: command tx timeout [ 189.236700] Bluetooth: hci5: command tx timeout [ 189.299664] Bluetooth: hci4: command tx timeout [ 189.364398] Bluetooth: hci3: command tx timeout [ 189.492363] Bluetooth: hci2: command tx timeout [ 189.619412] Bluetooth: hci6: command tx timeout [ 190.004579] Bluetooth: hci7: command tx timeout [ 190.836452] Bluetooth: hci0: command tx timeout [ 191.028425] Bluetooth: hci1: command tx timeout [ 191.285252] Bluetooth: hci5: command tx timeout [ 191.347420] Bluetooth: hci4: command tx timeout [ 191.411763] Bluetooth: hci3: command tx timeout [ 191.540380] Bluetooth: hci2: command tx timeout [ 191.667419] Bluetooth: hci6: command tx timeout [ 192.051589] Bluetooth: hci7: command tx timeout [ 192.885637] Bluetooth: hci0: command tx timeout [ 193.075639] Bluetooth: hci1: command tx timeout [ 193.331551] Bluetooth: hci5: command tx timeout [ 193.395397] Bluetooth: hci4: command tx timeout [ 193.459680] Bluetooth: hci3: command tx timeout [ 193.588959] Bluetooth: hci2: command tx timeout [ 193.717144] Bluetooth: hci6: command tx timeout [ 194.099427] Bluetooth: hci7: command tx timeout [ 247.114866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.119285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.134052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.142954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.147434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.266422] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.273298] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.287793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.297313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.310042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.374610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.385110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.387814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.404069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.410866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.441641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.450810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.456249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.477697] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.481295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.574237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.578183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.580218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.586225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.589741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.671698] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 247.677022] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.705730] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.735888] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 247.741015] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 247.779781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.798776] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 247.802884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 247.903846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.907887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.938073] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 247.960873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 247.964409] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 247.973752] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 247.977273] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 249.203627] Bluetooth: hci0: command tx timeout [ 249.395657] Bluetooth: hci1: command tx timeout [ 249.524626] Bluetooth: hci3: command tx timeout [ 249.526522] Bluetooth: hci2: command tx timeout [ 249.652447] Bluetooth: hci4: command tx timeout [ 249.908477] Bluetooth: hci6: command tx timeout [ 249.974407] Bluetooth: hci5: command tx timeout [ 250.163695] Bluetooth: hci7: command tx timeout [ 251.251608] Bluetooth: hci0: command tx timeout [ 251.444500] Bluetooth: hci1: command tx timeout [ 251.571549] Bluetooth: hci2: command tx timeout [ 251.572610] Bluetooth: hci3: command tx timeout [ 251.699448] Bluetooth: hci4: command tx timeout [ 251.955441] Bluetooth: hci6: command tx timeout [ 252.020523] Bluetooth: hci5: command tx timeout [ 252.211663] Bluetooth: hci7: command tx timeout [ 253.299766] Bluetooth: hci0: command tx timeout [ 253.491393] Bluetooth: hci1: command tx timeout [ 253.619443] Bluetooth: hci3: command tx timeout [ 253.619996] Bluetooth: hci2: command tx timeout [ 253.747404] Bluetooth: hci4: command tx timeout [ 254.003581] Bluetooth: hci6: command tx timeout [ 254.067431] Bluetooth: hci5: command tx timeout [ 254.259744] Bluetooth: hci7: command tx timeout [ 255.347482] Bluetooth: hci0: command tx timeout [ 255.539494] Bluetooth: hci1: command tx timeout [ 255.667560] Bluetooth: hci2: command tx timeout [ 255.667643] Bluetooth: hci3: command tx timeout [ 255.798591] Bluetooth: hci4: command tx timeout [ 256.051411] Bluetooth: hci6: command tx timeout [ 256.115434] Bluetooth: hci5: command tx timeout [ 256.308412] Bluetooth: hci7: command tx timeout [ 309.712590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.719075] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.722291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.736895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.742608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.020104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.026139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.028972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.038282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.042736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.121151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.126142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.141975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.160005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.180166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.258069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.271806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.273589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.278612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.288039] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.290981] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.300585] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.307583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.318562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.325707] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.332089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.345168] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.359036] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.362500] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.377841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.382764] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 310.384252] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.390940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.422078] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.440169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.442599] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.452886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.461742] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.464504] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.480810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.798720] Bluetooth: hci0: command tx timeout [ 312.115847] Bluetooth: hci1: command tx timeout [ 312.308398] Bluetooth: hci2: command tx timeout [ 312.435649] Bluetooth: hci3: command tx timeout [ 312.436199] Bluetooth: hci5: command tx timeout [ 312.563653] Bluetooth: hci6: command tx timeout [ 312.564534] Bluetooth: hci7: command tx timeout [ 312.627576] Bluetooth: hci4: command tx timeout [ 313.843653] Bluetooth: hci0: command tx timeout [ 314.163708] Bluetooth: hci1: command tx timeout [ 314.355478] Bluetooth: hci2: command tx timeout [ 314.483426] Bluetooth: hci3: command tx timeout [ 314.486500] Bluetooth: hci5: command tx timeout [ 314.611799] Bluetooth: hci6: command tx timeout [ 314.611822] Bluetooth: hci7: command tx timeout [ 314.675514] Bluetooth: hci4: command tx timeout [ 315.892382] Bluetooth: hci0: command tx timeout [ 316.211407] Bluetooth: hci1: command tx timeout [ 316.404473] Bluetooth: hci2: command tx timeout [ 316.532440] Bluetooth: hci5: command tx timeout [ 316.532908] Bluetooth: hci3: command tx timeout [ 316.659389] Bluetooth: hci6: command tx timeout [ 316.660416] Bluetooth: hci7: command tx timeout [ 316.723392] Bluetooth: hci4: command tx timeout [ 317.940453] Bluetooth: hci0: command tx timeout [ 318.259713] Bluetooth: hci1: command tx timeout [ 318.451397] Bluetooth: hci2: command tx timeout [ 318.579576] Bluetooth: hci3: command tx timeout [ 318.580041] Bluetooth: hci5: command tx timeout [ 318.707401] Bluetooth: hci7: command tx timeout [ 318.707868] Bluetooth: hci6: command tx timeout [ 318.771395] Bluetooth: hci4: command tx timeout [ 372.037045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.044078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.048233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.056946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.063068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.243733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 372.246521] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 372.254952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 372.264199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 372.271727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.441236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.452191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.455081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.461533] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.463175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.469606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.481476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.484899] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.496273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.500001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.549043] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.557743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.610286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.637677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.640563] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 372.646074] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.653616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.655587] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 372.663074] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.666491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 372.690306] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 372.693270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.700032] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.719560] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 372.724304] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 372.731085] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 372.753119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.754586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.795272] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 372.830015] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 374.133139] Bluetooth: hci0: command tx timeout [ 374.324089] Bluetooth: hci1: command tx timeout [ 374.579796] Bluetooth: hci3: command tx timeout [ 374.643737] Bluetooth: hci2: command tx timeout [ 374.835461] Bluetooth: hci4: command tx timeout [ 374.900019] Bluetooth: hci6: command tx timeout [ 374.963457] Bluetooth: hci5: command tx timeout [ 375.027413] Bluetooth: hci7: command tx timeout [ 376.179517] Bluetooth: hci0: command tx timeout [ 376.371608] Bluetooth: hci1: command tx timeout [ 376.627646] Bluetooth: hci3: command tx timeout [ 376.691726] Bluetooth: hci2: command tx timeout [ 376.883751] Bluetooth: hci4: command tx timeout [ 376.947459] Bluetooth: hci6: command tx timeout [ 377.012387] Bluetooth: hci5: command tx timeout [ 377.075449] Bluetooth: hci7: command tx timeout [ 378.227628] Bluetooth: hci0: command tx timeout [ 378.420624] Bluetooth: hci1: command tx timeout [ 378.675639] Bluetooth: hci3: command tx timeout [ 378.740734] Bluetooth: hci2: command tx timeout [ 378.931647] Bluetooth: hci4: command tx timeout [ 378.996711] Bluetooth: hci6: command tx timeout [ 379.059397] Bluetooth: hci5: command tx timeout [ 379.123588] Bluetooth: hci7: command tx timeout [ 380.275653] Bluetooth: hci0: command tx timeout [ 380.468491] Bluetooth: hci1: command tx timeout [ 380.723420] Bluetooth: hci3: command tx timeout [ 380.787548] Bluetooth: hci2: command tx timeout [ 380.979384] Bluetooth: hci4: command tx timeout [ 381.043396] Bluetooth: hci6: command tx timeout [ 381.107530] Bluetooth: hci5: command tx timeout [ 381.171602] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:11:11 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800f333810 RCX=ffff88800d24d3c0 RDX=1ffff11001e66704 RSI=ffff88800d24d3c0 RDI=ffff88800f333820 RBP=ffff888015708090 RSP=ffff88800961f988 R8 =ffff88806ce36f80 R9 =0000000000000000 R10=000000000001ec00 R11=0000000000000003 R12=ffff88800f333810 R13=ffff88800f333811 R14=ffff88806ce370f8 R15=ffff88800d24d3c0 RIP=ffffffff814894d9 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005644c33db1b0 CR3=000000002a3ac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888027d6f910 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff888027d6f8f0 RDI=ffff88806cf31850 RBP=ffff888027d68000 RSP=ffff888027d6f518 R8 =0000000000000001 R9 =ffff888027d6f5c8 R10=000000000003b0c2 R11=0000000000024837 R12=ffff888027d6f501 R13=ffff888027d6f5d0 R14=ffff888027d6f8f0 R15=ffff888027d6f588 RIP=ffffffff813512fe RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe207f35540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe208120620 CR3=000000002f3e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000