Warning: Permanently added '[localhost]:30855' (ECDSA) to the list of known hosts. 2025/04/25 21:40:06 fuzzer started 2025/04/25 21:40:07 dialing manager at localhost:46629 syzkaller login: [ 93.637156] cgroup: Unknown subsys name 'net' [ 93.772542] cgroup: Unknown subsys name 'cpuset' [ 93.820305] cgroup: Unknown subsys name 'rlimit' 2025/04/25 21:40:21 syscalls: 2214 2025/04/25 21:40:21 code coverage: enabled 2025/04/25 21:40:21 comparison tracing: enabled 2025/04/25 21:40:21 extra coverage: enabled 2025/04/25 21:40:21 setuid sandbox: enabled 2025/04/25 21:40:21 namespace sandbox: enabled 2025/04/25 21:40:21 Android sandbox: enabled 2025/04/25 21:40:21 fault injection: enabled 2025/04/25 21:40:21 leak checking: enabled 2025/04/25 21:40:21 net packet injection: enabled 2025/04/25 21:40:21 net device setup: enabled 2025/04/25 21:40:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/25 21:40:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/25 21:40:21 USB emulation: enabled 2025/04/25 21:40:21 hci packet injection: enabled 2025/04/25 21:40:21 wifi device emulation: enabled 2025/04/25 21:40:21 802.15.4 emulation: enabled 2025/04/25 21:40:21 fetching corpus: 0, signal 0/0 (executing program) 2025/04/25 21:40:23 starting 8 fuzzer processes 21:40:23 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48091) r1 = add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="8d7d4df2602b1b49a9b92acb46d1539df27be6ce6f3642bf0c12509464ef685c", 0x20, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000200)={0x0, 0x0, r1}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001300)={&(0x7f0000001240)={'blake2s-256\x00'}, &(0x7f0000001280)="2bc4bd3c0ca08544b601e92a664ddfc0c8766041ffd2075781f446601e194accd067903bab8ab6b0f5a3950e94fe516b69370491e33173ed24a10395f0db3c4c04b63d", 0x43}) ptrace$setregs(0xd, 0xffffffffffffffff, 0x2, &(0x7f0000001340)="0e593a7b94a2fab70755b7742c5bfb941de012335a26b367") r2 = dup(0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x5000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000001880)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001840)={&(0x7f00000014c0)={0x368, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0xb0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xac, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff81}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x1f8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x8c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_ID={0xb4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c8960253e3f55bcb1bf7a641dd1b4473d5588691e0c06b7230e1a1021924724a"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cf692e057b333a53815e481f40616977"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a459642e5ced3be0e1e2fa9f96f6dcfdc5462c3a8de7996704cbe9d554e5986d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6459c418edf693e83bc97e6055c79e05e3e504671d08d81e02768c4b3c90e21d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x55}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x30, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d36ca7c77475f7797e9be773673574c0dea9dbbeca499179738f39568d91d417"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x3c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a275360fc65916f9a8b63f3667e89644"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7a2b8f05c02969d29a0a846d73763bcb"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x368}, 0x1, 0x0, 0x0, 0x4008134}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000018c0)={0x2, 0x7a5}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001900)='/sys/power/pm_trace_dev_match', 0x50000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000001940)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000001980)) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8011) r6 = syz_open_dev$vcsn(&(0x7f0000001ac0), 0x80000000, 0x1a3100) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x34, r7, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x29}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4003}, 0x4000014) r8 = io_uring_setup(0x74e9, &(0x7f0000001c40)={0x0, 0x2f18, 0x34, 0x2, 0x326}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612) 21:40:23 executing program 1: sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x412, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8001) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0xfffffffffffffffd, 0x4) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x11, 0x2, {0x1, 0x1}}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x42}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xb4}}, 0x40001) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3206b69579"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c5fb8f650b"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4051}, 0xc880) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x20004084) r1 = signalfd(0xffffffffffffffff, &(0x7f00000005c0)={[0x5]}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000600)={0x0, r1, 0x0, 0x0, 0x3, 0xfffffffffffffffa}) write$P9_RATTACH(r1, &(0x7f0000000640)={0x14, 0x69, 0x2, {0x80, 0x2, 0x2}}, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}}, 0x110) r5 = open_tree(r1, &(0x7f0000000940)='./file0\x00', 0x1800) ioctl$SCSI_IOCTL_SYNC(r5, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) [ 109.262614] audit: type=1400 audit(1745617223.114:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:40:23 executing program 4: getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') r1 = open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xa6600, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2041}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0xd20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8905) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_MASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}}, 0x4004020) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000540)) fdatasync(r1) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000580)={0x0, 0x0, {0x2, 0x0, 0xc, 0x3, 0x3d}, 0x7}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000600)) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x61}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x40) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000740), 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1fc, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8dc}, 0x44000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) 21:40:23 executing program 3: sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x32040c0}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x4, 0x70bd25, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048800}, 0x4000) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000140)=0x28) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x21c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x26}, @NL80211_NAN_FUNC_SERVICE_INFO={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a55b4d6bf02d"}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x81}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x8, 0xe, 0x0, 0x1, [{0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0xe8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xd0, 0xd, 0x0, 0x1, [{0xc9, 0x0, "64bd642bca2cba98892a2e6aa482d570c2488305b8f5266ffa8618bea3f2f35600f30534cf7013e0eb8600461e2828dcc25780b12422df173ce7dbdc0ddb4ba5ce7eff45a80f4ddac96fbee0de237702054b614f30c3175335aa4c8a63b98eacf05da79b427d73a473d126a25b54091ad9892671172ebc06e7a1bf9f3e47988003ef84c6ca140c52cfbf9ff89f8ce8ddb5eb4693b0c79e7849f98e556e758a7ec55ab74e3b9bc77ed14fc7904fef62daf51be0d9cb77391710db1838d2bb7083257ed2b333"}]}]}, @NL80211_ATTR_NAN_FUNC={0xdc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0xc4, 0xd, 0x0, 0x1, [{0xbe, 0x0, "f9695e0818bfb61138b6d35c5e75246a319d0107de02e84ae7af51f7afbcf469a6e90ec0d2d41a10acbb71f108286149891851f7d2891a9fbaca1adfd44a5ecf45835b92a5ae026d6733617ce3bfb636a7c1104c3ff036cc95f5568b65a50e348ab8d56d285db3a80d5cb955865fb0828b5918dec40b59e2392a35107361fb78660be4a722a8be312c2d1be9fa7b2cc29f3b9b6449a8c88b786870f89f22029fb695d15ed055162e87db8d7e8e6aa11a16c9f507295d27eb484c"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20010}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x1, 0x2, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x800) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000005c0)={'icmp6\x00'}, &(0x7f0000000600)=0x1e) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000640), 0x4600, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz1\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000012) write$P9_RSETATTR(r2, &(0x7f0000000780)={0x7, 0x1b, 0x1}, 0x7) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r2) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe7e9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x225f}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1918001}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x138, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5c}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c812ea86212efc61d4f72417f9d9e18ae6379e1a987aa992"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e61b7890f839bcc1458418cfe07d6c32b5eef0d2a1450a9"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "edc65461e15eb3764b7e1fd120b1716465f9e0ebb9aa8324"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'hsr0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x138}, 0x1, 0x0, 0x0, 0x4081}, 0x800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, 0x1, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CT={0x4c, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x128}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8000) recvmsg$unix(r2, &(0x7f0000001480)={&(0x7f0000000d80), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000e00)=""/109, 0x6d}, {&(0x7f0000000e80)=""/120, 0x78}, {&(0x7f0000000f00)=""/170, 0xaa}, {&(0x7f0000000fc0)=""/67, 0x43}, {&(0x7f0000001040)=""/84, 0x54}, {&(0x7f00000010c0)=""/237, 0xed}, {&(0x7f00000011c0)=""/215, 0xd7}, {&(0x7f00000012c0)=""/134, 0x86}], 0x8, &(0x7f0000001400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x2000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r2) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x18, r6, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001600), 0x2, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xcb}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) 21:40:23 executing program 5: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x40000, 0x2) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3fa, 0x10, 0x70bd29, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x60000d0) write$rfkill(r0, &(0x7f00000001c0)={0xff, 0x0, 0x2, 0x0, 0x1}, 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000200)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x88000, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x3f7, 0x4, 0x70bd29, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4001) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000380)=[@mss={0x2, 0x3}, @sack_perm, @sack_perm, @timestamp, @mss={0x2, 0x6}, @window={0x3, 0xdb04, 0x3}, @mss={0x2, 0x400}, @sack_perm, @mss={0x2, 0x3ff}], 0x9) getsockname$unix(r1, &(0x7f0000000400), &(0x7f0000000480)=0x6e) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) pread64(r2, &(0x7f0000000500)=""/222, 0xde, 0x8041) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) fcntl$setsig(r0, 0xa, 0x2b) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x20000004) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x9, 0x2}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4001) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000a00)={0x8, 0x80000001, 0x1, 'queue1\x00', 0x4}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000b00)={0x0, 0x1, r1, 0x97, 0x80000}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 21:40:23 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4102, 0x0) fcntl$setlease(r0, 0x400, 0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000040)={0xffffffc1, {{0xa, 0x4e23, 0x5, @mcast2, 0x10000}}}, 0x88) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000100)=0x8ad4, 0x4) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101002, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x64c}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000000) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000280)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000300)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x2, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000500)={0x2, 0x51}) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000540)=""/40, &(0x7f0000000580)=0x28) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002a80), 0x400000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000002ac0)={@in6={{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}}, 0x0, 0x0, 0x3, 0x0, "5896796aae09a8ed99697b063c4bb34a74fbd019b8428b744905aa3210f312477ad2a83bccc00ef7368b9bb665355db8f568e58a95ff9312c99742fdff5f30c7fed2fecc22e6c199204c0e0a2d742ae9"}, 0xd8) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000002bc0)={'xfrm0\x00', {0x2, 0x0, @empty}}) 21:40:23 executing program 7: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff43}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x42807768}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x60841}, 0x4000) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x240000c0}, 0x20000000) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x8, 0x1) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x65c900, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "0f270914eb"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}]}, 0x48}}, 0x81) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000000700)={0x77b, 0xba, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r8 = syz_open_dev$vcsn(&(0x7f000000bb80), 0x3ff, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f000000bc00), r6) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f000000bcc0)={&(0x7f000000bbc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f000000bc80)={&(0x7f000000bc40)={0x1c, r9, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}}, 0x40004) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f000000bd00), &(0x7f000000bd80)=0x68) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f000000bec0)={&(0x7f000000bdc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000be80)={&(0x7f000000be00)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x55}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xbdd5a36261086247}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x801) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f000000c000)={&(0x7f000000bf00), 0xc, &(0x7f000000bfc0)={&(0x7f000000bf40)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r8}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x8000) 21:40:23 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x82382, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x9, 0x5}, 0x10) fcntl$addseals(r0, 0x409, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e4, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEYS={0x1cc, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "22bc1a6b89b3783bd23dea2417ca9a"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c684d55f8c"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x7, 0x4, "6767a3"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2ea66ebe017208af28b7d088c3"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "417e6f6f85"}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7b722964ad"}, @NL80211_KEY_SEQ={0xe, 0x4, "3b72806c73bc5e753a0f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "da5a2048eeaf89c8c9b764546c"}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "696e7e96f62c22206365cee7c8"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "55ef0bdca6"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000850}, 0x4) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000380)) ioctl$FICLONE(r0, 0x40049409, r0) lseek(r0, 0x10000, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x1f, 0x48, 0x4, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x40, 0x20, 0xb5b4, 0x8}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000005) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xe97e66a25f8d2613}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9ab, 0xd}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x29, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x7f}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x4}}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x142}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4004c04) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000700)) r3 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x41}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048005}, 0x84) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syncfs(r3) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000009c0)={0x400, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "220a39c0728490"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000019c0)={{0x0, 0x10001, 0x7f, 0x5, 0xb7c, 0x0, 0x1, 0x4, 0x20, 0x2000, 0x4, 0x4, 0x400, 0x3, 0x100}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006eac0)={0x200, [{}, {r5}, {r6}], 0x44, "e4ec08a2294bef"}) [ 110.452762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.459721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.462555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.468688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.478686] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.724063] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.730051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.733158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.742741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.748882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.788305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.794758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.797853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.806148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.833704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.845893] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.849404] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.854449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.856837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.862457] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.872030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.896877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.898626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.921980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.926741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.958055] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 110.967310] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.983015] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.986770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.998943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.003233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.016159] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.026548] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.056086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.062626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.109877] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.128840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.142515] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.170703] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.177869] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.535553] Bluetooth: hci0: command tx timeout [ 112.791739] Bluetooth: hci1: command tx timeout [ 112.919851] Bluetooth: hci2: command tx timeout [ 113.047287] Bluetooth: hci4: command tx timeout [ 113.047327] Bluetooth: hci3: command tx timeout [ 113.111464] Bluetooth: hci5: command tx timeout [ 113.175300] Bluetooth: hci6: command tx timeout [ 113.303369] Bluetooth: hci7: command tx timeout [ 114.584301] Bluetooth: hci0: command tx timeout [ 114.840487] Bluetooth: hci1: command tx timeout [ 114.969493] Bluetooth: hci2: command tx timeout [ 115.095706] Bluetooth: hci4: command tx timeout [ 115.097232] Bluetooth: hci3: command tx timeout [ 115.161246] Bluetooth: hci5: command tx timeout [ 115.223621] Bluetooth: hci6: command tx timeout [ 115.352009] Bluetooth: hci7: command tx timeout [ 116.632307] Bluetooth: hci0: command tx timeout [ 116.887369] Bluetooth: hci1: command tx timeout [ 117.016272] Bluetooth: hci2: command tx timeout [ 117.143620] Bluetooth: hci3: command tx timeout [ 117.144610] Bluetooth: hci4: command tx timeout [ 117.208605] Bluetooth: hci5: command tx timeout [ 117.271485] Bluetooth: hci6: command tx timeout [ 117.399967] Bluetooth: hci7: command tx timeout [ 118.679291] Bluetooth: hci0: command tx timeout [ 118.935712] Bluetooth: hci1: command tx timeout [ 119.063573] Bluetooth: hci2: command tx timeout [ 119.191367] Bluetooth: hci3: command tx timeout [ 119.191627] Bluetooth: hci4: command tx timeout [ 119.255293] Bluetooth: hci5: command tx timeout [ 119.320289] Bluetooth: hci6: command tx timeout [ 119.447347] Bluetooth: hci7: command tx timeout [ 170.815736] syz-executor.6 (283) used greatest stack depth: 25024 bytes left [ 170.897939] syz-executor.4 (282) used greatest stack depth: 24648 bytes left [ 173.460628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.471523] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.479778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.487783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.490946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.510785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.513766] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.515149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.516266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.518998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.520286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.520981] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.522400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.523899] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.528731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.530300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.535009] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.536040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.537864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.539059] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.540923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.547653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.556742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.563957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.581729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.645125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.648083] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.651030] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.656440] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.660074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.749624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.759863] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.762906] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.786707] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.789931] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.854098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.855997] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.873757] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.927044] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.937007] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.575320] Bluetooth: hci3: command tx timeout [ 175.639423] Bluetooth: hci4: command tx timeout [ 175.639600] Bluetooth: hci1: command tx timeout [ 175.640215] Bluetooth: hci0: command tx timeout [ 175.831770] Bluetooth: hci2: command tx timeout [ 175.960319] Bluetooth: hci5: command tx timeout [ 176.024288] Bluetooth: hci7: command tx timeout [ 176.088301] Bluetooth: hci6: command tx timeout [ 177.625370] Bluetooth: hci3: command tx timeout [ 177.687379] Bluetooth: hci1: command tx timeout [ 177.687833] Bluetooth: hci0: command tx timeout [ 177.688418] Bluetooth: hci4: command tx timeout [ 177.879337] Bluetooth: hci2: command tx timeout [ 178.007261] Bluetooth: hci5: command tx timeout [ 178.071265] Bluetooth: hci7: command tx timeout [ 178.135255] Bluetooth: hci6: command tx timeout [ 179.671577] Bluetooth: hci3: command tx timeout [ 179.737255] Bluetooth: hci4: command tx timeout [ 179.737731] Bluetooth: hci0: command tx timeout [ 179.738157] Bluetooth: hci1: command tx timeout [ 179.927262] Bluetooth: hci2: command tx timeout [ 180.055546] Bluetooth: hci5: command tx timeout [ 180.119433] Bluetooth: hci7: command tx timeout [ 180.184429] Bluetooth: hci6: command tx timeout [ 181.719253] Bluetooth: hci3: command tx timeout [ 181.783477] Bluetooth: hci1: command tx timeout [ 181.783940] Bluetooth: hci0: command tx timeout [ 181.784427] Bluetooth: hci4: command tx timeout [ 181.975354] Bluetooth: hci2: command tx timeout [ 182.103456] Bluetooth: hci5: command tx timeout [ 182.167395] Bluetooth: hci7: command tx timeout [ 182.231270] Bluetooth: hci6: command tx timeout [ 235.573162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.578346] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.581165] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.587594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.592036] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.883772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.887754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.893579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.903062] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.907302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.010966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.030577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.034562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.049646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.064487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.148570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.152376] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.162921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.172769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.177921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.222783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.246472] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.258247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.263874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.274553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.289830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.293956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.295054] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.297090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.299084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.305439] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.307447] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.313130] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.316620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.321131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.323249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.372977] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.388028] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.395072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.397678] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.655533] Bluetooth: hci0: command tx timeout [ 237.977291] Bluetooth: hci1: command tx timeout [ 238.104621] Bluetooth: hci2: command tx timeout [ 238.295327] Bluetooth: hci3: command tx timeout [ 238.423433] Bluetooth: hci5: command tx timeout [ 238.488417] Bluetooth: hci7: command tx timeout [ 238.489006] Bluetooth: hci4: command tx timeout [ 238.552242] Bluetooth: hci6: command tx timeout [ 239.703479] Bluetooth: hci0: command tx timeout [ 240.025255] Bluetooth: hci1: command tx timeout [ 240.151484] Bluetooth: hci2: command tx timeout [ 240.343286] Bluetooth: hci3: command tx timeout [ 240.472245] Bluetooth: hci5: command tx timeout [ 240.536582] Bluetooth: hci4: command tx timeout [ 240.537015] Bluetooth: hci7: command tx timeout [ 240.600225] Bluetooth: hci6: command tx timeout [ 241.753208] Bluetooth: hci0: command tx timeout [ 242.073464] Bluetooth: hci1: command tx timeout [ 242.200242] Bluetooth: hci2: command tx timeout [ 242.391442] Bluetooth: hci3: command tx timeout [ 242.520512] Bluetooth: hci5: command tx timeout [ 242.584288] Bluetooth: hci7: command tx timeout [ 242.584726] Bluetooth: hci4: command tx timeout [ 242.647835] Bluetooth: hci6: command tx timeout [ 243.800545] Bluetooth: hci0: command tx timeout [ 244.119275] Bluetooth: hci1: command tx timeout [ 244.248497] Bluetooth: hci2: command tx timeout [ 244.440270] Bluetooth: hci3: command tx timeout [ 244.567256] Bluetooth: hci5: command tx timeout [ 244.632788] Bluetooth: hci4: command tx timeout [ 244.633263] Bluetooth: hci7: command tx timeout [ 244.696428] Bluetooth: hci6: command tx timeout [ 298.160921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.164762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.166059] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.169706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.171653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.176745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.185888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.192046] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.195477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.202831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.277130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.288951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.303623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.303763] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.310328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.316895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.323402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.332490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.337386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.356494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.399350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.401607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.402776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.406841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.410147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.551053] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.607118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.629518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.633875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.641754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.656666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.661616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.683701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.694815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.702931] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.706831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.712250] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.729652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.739621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.748710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.247472] Bluetooth: hci1: command tx timeout [ 300.248675] Bluetooth: hci0: command tx timeout [ 300.375443] Bluetooth: hci2: command tx timeout [ 300.439638] Bluetooth: hci4: command tx timeout [ 300.440433] Bluetooth: hci3: command tx timeout [ 300.759631] Bluetooth: hci5: command tx timeout [ 300.887409] Bluetooth: hci6: command tx timeout [ 300.888853] Bluetooth: hci7: command tx timeout [ 302.295466] Bluetooth: hci0: command tx timeout [ 302.296437] Bluetooth: hci1: command tx timeout [ 302.423829] Bluetooth: hci2: command tx timeout [ 302.488623] Bluetooth: hci4: command tx timeout [ 302.489607] Bluetooth: hci3: command tx timeout [ 302.807678] Bluetooth: hci5: command tx timeout [ 302.937463] Bluetooth: hci6: command tx timeout [ 302.938384] Bluetooth: hci7: command tx timeout [ 304.343396] Bluetooth: hci0: command tx timeout [ 304.343873] Bluetooth: hci1: command tx timeout [ 304.471578] Bluetooth: hci2: command tx timeout [ 304.536215] Bluetooth: hci4: command tx timeout [ 304.536651] Bluetooth: hci3: command tx timeout [ 304.855251] Bluetooth: hci5: command tx timeout [ 304.983289] Bluetooth: hci6: command tx timeout [ 304.983735] Bluetooth: hci7: command tx timeout [ 306.391492] Bluetooth: hci0: command tx timeout [ 306.391973] Bluetooth: hci1: command tx timeout [ 306.519236] Bluetooth: hci2: command tx timeout [ 306.583835] Bluetooth: hci3: command tx timeout [ 306.584438] Bluetooth: hci4: command tx timeout [ 306.903249] Bluetooth: hci5: command tx timeout [ 307.031404] Bluetooth: hci6: command tx timeout [ 307.031850] Bluetooth: hci7: command tx timeout [ 360.307409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.314852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.317826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.324282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.330033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.461376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.464731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.467014] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.473921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.479885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.554751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.566847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.571768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.587695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.595744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.619583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.645828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.658550] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.691800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.704858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.760724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.769391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.791630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.796642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.799764] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.803439] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.813026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.841760] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.853945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.857739] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.887781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.896287] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.900618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.904301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.910727] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.917605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.934735] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.991126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.994103] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.007698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.392387] Bluetooth: hci0: command tx timeout [ 362.520612] Bluetooth: hci1: command tx timeout [ 362.647820] Bluetooth: hci2: command tx timeout [ 362.839812] Bluetooth: hci3: command tx timeout [ 363.032623] Bluetooth: hci4: command tx timeout [ 363.096998] Bluetooth: hci6: command tx timeout [ 363.097026] Bluetooth: hci7: command tx timeout [ 363.160240] Bluetooth: hci5: command tx timeout [ 364.439721] Bluetooth: hci0: command tx timeout [ 364.567413] Bluetooth: hci1: command tx timeout [ 364.696322] Bluetooth: hci2: command tx timeout [ 364.887267] Bluetooth: hci3: command tx timeout [ 365.079389] Bluetooth: hci4: command tx timeout [ 365.143475] Bluetooth: hci6: command tx timeout [ 365.146403] Bluetooth: hci7: command tx timeout [ 365.207396] Bluetooth: hci5: command tx timeout [ 366.488246] Bluetooth: hci0: command tx timeout [ 366.615260] Bluetooth: hci1: command tx timeout [ 366.746349] Bluetooth: hci2: command tx timeout [ 366.935258] Bluetooth: hci3: command tx timeout [ 367.128424] Bluetooth: hci4: command tx timeout [ 367.192937] Bluetooth: hci7: command tx timeout [ 367.193458] Bluetooth: hci6: command tx timeout [ 367.255266] Bluetooth: hci5: command tx timeout [ 368.537231] Bluetooth: hci0: command tx timeout [ 368.663255] Bluetooth: hci1: command tx timeout [ 368.791558] Bluetooth: hci2: command tx timeout [ 368.985225] Bluetooth: hci3: command tx timeout [ 369.175251] Bluetooth: hci4: command tx timeout [ 369.239259] Bluetooth: hci6: command tx timeout [ 369.239307] Bluetooth: hci7: command tx timeout [ 369.303414] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 21:45:25 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff81b3b4ab RCX=ffff88802b6c790c RDX=1ffff110056d8f42 RSI=ffffffff85c1bac0 RDI=ffffffff81b3b4ab RBP=ffff88802b6c7a10 RSP=ffff88802b6c7990 R8 =0000000000000001 R9 =ffff88802b6c79f8 R10=000000000003b0c2 R11=00000000000231aa R12=ffff88802b6c7a80 R13=0000000000000000 R14=ffff88802c2d9bc0 R15=0000000000000000 RIP=ffffffff8142facd RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f71aafd18b0 CR3=0000000015d08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000354 RBX=ffff888026039bc0 RCX=0000000000000200 RDX=a8e511cbb90e89b5 RSI=ffff88802603a640 RDI=ffff88802603a618 RBP=0000000000000000 RSP=ffff888038c07880 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000c3d1a R12=ffff88802603a640 R13=0000000000000000 R14=0000000000000001 R15=ffff88802603a618 RIP=ffffffff81511bd3 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f71e34b5090 CR3=000000002ca1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000