Warning: Permanently added '[localhost]:7253' (ECDSA) to the list of known hosts. 2025/04/27 14:39:12 fuzzer started 2025/04/27 14:39:12 dialing manager at localhost:46629 syzkaller login: [ 94.022543] cgroup: Unknown subsys name 'net' [ 94.147672] cgroup: Unknown subsys name 'cpuset' [ 94.189728] cgroup: Unknown subsys name 'rlimit' 2025/04/27 14:39:31 syscalls: 2214 2025/04/27 14:39:31 code coverage: enabled 2025/04/27 14:39:31 comparison tracing: enabled 2025/04/27 14:39:31 extra coverage: enabled 2025/04/27 14:39:31 setuid sandbox: enabled 2025/04/27 14:39:31 namespace sandbox: enabled 2025/04/27 14:39:31 Android sandbox: enabled 2025/04/27 14:39:31 fault injection: enabled 2025/04/27 14:39:31 leak checking: enabled 2025/04/27 14:39:31 net packet injection: enabled 2025/04/27 14:39:31 net device setup: enabled 2025/04/27 14:39:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 14:39:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 14:39:31 USB emulation: enabled 2025/04/27 14:39:31 hci packet injection: enabled 2025/04/27 14:39:31 wifi device emulation: enabled 2025/04/27 14:39:31 802.15.4 emulation: enabled 2025/04/27 14:39:31 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 14:39:33 starting 8 fuzzer processes 14:39:33 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x80) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4c00c18}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4880) sendto(0xffffffffffffffff, &(0x7f00000002c0)="63d957f2b501142d2bba6a80e16310beb804fde22737b966fdb8de3cb848b772de0e9e8c8be45872c5decbddd71938fed8a54bbd1b4f6bf448553927054ed62a87d1eca0414b15e9898234006eaeebf58c078436049ac769202ba5ed9ff7770f833ff35b77b37e7ff99ba94ec82dbafced959a34463055dcfdafaf34e8d61f8493232e92ccfe2e5de72d09baa10b421417574dc08023050f00ed6b2bb5", 0x9d, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe07, 0x12}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000880}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000017c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x48, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x13}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7d420713bc0cc2caa5a7a6b086"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044095}, 0x408c0) r3 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_ima(r3, &(0x7f00000019c0), &(0x7f0000001a00)=@v2={0x3, 0x2, 0x10, 0x5da, 0x2d, "bc7404a139a7cbef604fd9ca1b7cae36f355e7e23d5a4de8ea1737d661a9387b402a71680e43ede3d8da5adcd0"}, 0x36, 0x2) lstat(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001b00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) link(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='./file0\x00') r5 = accept(r0, &(0x7f0000001bc0)=@isdn, &(0x7f0000001c40)=0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000001d80)={&(0x7f0000001c80), 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x4c, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x27}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000805}, 0x80c0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) accept$packet(r4, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001e80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001f40)={'ip6_vti0\x00', &(0x7f0000001ec0)={'ip6tnl0\x00', 0x0, 0x29, 0x9f, 0xba, 0x6, 0x1, @private0, @loopback, 0x10, 0x10, 0x2846, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002b40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000880}, 0xc, &(0x7f0000002b00)={&(0x7f0000002440)={0x694, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0xff, 0x5, 0xd2b1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdd83}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x4, 0x9, 0x9}, {0x1, 0x3, 0xce, 0x1}, {0x8, 0x1, 0x4, 0xffff712e}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3e}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x694}, 0x1, 0x0, 0x0, 0x844}, 0x0) 14:39:33 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fchmod(r0, 0x19c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "901c743e50cbc46f", "d66730b0a285f3deabcae97d8c2b99b6", "aac87f92", "b139e9a1dfe1f0e4"}, 0x28) sendmmsg$sock(r0, &(0x7f00000011c0)=[{{&(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)="a17368bf977dba7d37f1a341472426f7c7ef673f517b7877601048ade07a6dc6af115c0e469f50bc4fb8c1", 0x2b}, {&(0x7f0000000100)="31abb26123b378c5505b21402b6b385f86eaf5a5f81c7acd84a0da52e718de67bbe1fdbd4054d5a1bba3230e9ed4f45d3038d0c34d644f556f44bc60b7d8e8b111def01ddd4d0232b802d6a76cc65dce68028c0f15a042a356eb72ec8f0a715b9e06af17c4d034da2c004f1140b054a96fcbfc084d182af91474cf817e209748f81d048ebc46fc8a4303", 0x8a}, {&(0x7f00000001c0)="863fa20176906fa3356d91e4929402b1ba31b6b76f6d0c0ea98d021b1f0845c681299fa7a60666d6b4ccd7fedbb02cfc7c4f278152c8a24a479a8cf3a37997413963cfe2d5e45a6abcffe1d8266c603b78b6860779db7b24929d6543d401e40be2b6ac929aec3ff68d207bb2f3a6d32a24b14c94138637c1ab023a336b7065195fe44be888a93fe3c69e280b65459486d4711d06f010c76bf6b40e9b00165b5f5f116dc142fcb7883406d3844e16ce4866fd61ddee4984b3232c2f6228817da5ef113b04cc9a2e526a1dccf8cfdd1c52f20a58a8ed90b4329b778fef42e18330bd77d13245b4cebbd490410258e3b83605e450848e687c0c7f86ad", 0xfb}, {&(0x7f00000002c0)="a172ae9d5f3f380c2e9742d0cc252001f6c7728ba7fafd6c1ce16c65fd374b516cc13ada01aeae7111fe24e06be14d57d290e223f4270056715ae84c8bcae99a9cfd5632ace53a2b8421d2d38935c8dad288", 0x52}, {&(0x7f0000000340)="8a3829863c9af48df06842e19f8c437af68afcb5528cc34e07c9c8e090d6cc3438bd33a38ec6a3ca4331855de337d6ea3536f26727a630f6c89507fa4da6e7f8e8e298c89067d0f045705be5469819a048a763788603746f8bd3f1b99ca7833764883164f6d9af7e4ae55f5f7c28e06a278c00a693fac37cecb2e143f43e7a43e6b72dbee2cb306d28191009888a5291439d9388d0ad68fc2fc994c89c0f2532b32f02f42291764be5266682", 0xac}, {&(0x7f0000000400)="14885551b5e15bd5f5f1638d097a5b60ae3d2f55e97b997488cffbc76dbd2440f4aa860c82bd240fbce9a938e077339579075ec636e233ff0c6b305e9883e58b92bf2409a48985e160009a6a19bd949e2acaeac9e7ca1d5c178c34bfd558c8a90c231a", 0x63}, {&(0x7f0000000480)="a92cd820846bf49cd142faea64960b5edf8ede6d100e8e61b97573db3f230a575a9da1a6f45e82da325f583cfed93dafc2322499412c4834b075c9cecd3d03858f48a916b2d0975dfd1f211a2423880b2468b7448db7fd9c535315d151c828f117546272f1b88a832d74757eaec3c2529635f7e75c17fba3d88a63cb90f6118481f33cd26ead96ddfaa858825365ff7e85bb04fc4525f427ad7ce675b0e78b292964fb9afbf5aee8898d4003d2da05d90d8a371e73e132f98c9765", 0xbb}, {&(0x7f0000000540)="a85499666c58ad181960c87de8e23a3a3f1d35b3fffecb2d699dee04c7bebc2c810a727501644fe9959d6735102127a015230f32898d533bddc75bf4dd62d61861299bea81378d2b8648e470a3098f37893921a7632471f12d2f77d2f1a9", 0x5e}], 0x8, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x400}}], 0x18}}, {{&(0x7f0000000680)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)="d80cdf45926882fa0f834b67ec7314b54f3e5d0002f853799d7a1d381259936f23a17716ab16d97515ce7270800c6d48d468888cd205f456ee95e29894f84e9cc25918aaac7116eb68828cfd8cef5765a18ad1724564598778557138", 0x5c}, {&(0x7f0000000780)="f42ff69af000e5cbeb02f2f447d7eeffc29baae4e06fa714dd65d9a8aee0f95b71d7c9f4b5cc03786d009c8977e9ffb6d57073cf7e1da896407484068e8569b6a0a4b25ac08675c20aec8631e2c99393c978c2", 0x53}, {&(0x7f0000000800)="c1b04f1281bd5a27cad175c0007cbe6672dd8171f80523ed1a5cb638280a310db8c094fb9e24b97cfffbe8ab88d91a291611f4ad49de900c5d516860c4f0da506f9257c82f4bb7a08a5d6684fc176dc17ed63a02d504e702f55a4ef17737a92f5c4f4d186b9ad79bac496d7df84a801ba9c50f22c9523dbd7d4d3040669c617a41223755a3ade0808f9ace0149dc63ccf60f4bb18b36888cf27a29cf21b155a885aec5ad9aa7263fb9388c161754a0408267de17c0fe88eb7dc6b0f14f17b514236ed70f6aaa38d48fec9c16efc0b63137cf06f5ba3b1a9f9983df9f4c3f736390c5cb03359371d401fb59aefbd69b0e13ba1bc268c0d9", 0xf7}, {&(0x7f0000000900)}, {&(0x7f0000000940)="0adc13eb75418fa88a2e28ee87bb76f5a99668de4dd979767c58551d79baff4d417f904078b68efc302497ce4c5642d08d85096b60142d610b7d6694195bb12871bb5564552f2a6148dc5b3ac6", 0x4d}], 0x5, &(0x7f0000000a40)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x48}}, {{&(0x7f0000000ac0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000b40)}, {&(0x7f0000000b80)="d265c6339152ed9c54105233fe31c92c77aeaeaa7da7135845bdefd65276a113d9a5632e0b53afe751957c7403f097f3c1c91d4f5336ae6744bd2a80bd48f8029399546e87ca7318569893fb055834f910e17eedea516965c2cbee9983a682db2b4441d7c0049e7c93bb268ebe9bd753cf13ee354538b7f6ebe4797b2e4e903320602b679de4806d1bff679b327034a16d0850282f8a353d0ac2dfd7773484ef621d28b123665ad6183e7cbcb2b221255c51b18e5084f4020d8309ad785318731a234da4bdc9124eab2ea0acd49933f091e61d35be0d0be9f731186f41b55c441170ef033fb2781d837147cc", 0xec}, {&(0x7f0000000c80)="97597bd8ffe0fc4a7873ab72e404f24f594bab97f40b4ab31663523fdcb9180dbc68d161afdf1a2b08c56a2147e0470f5a39d400170a4198eea8b550479f81c258b46303c9b3086a1da8cf6bb677d8f47ff5b6236b40cb6e5897a10d779829e3d09d40e3c1ec7f15f433005da31dceab72b78d2fae2d50edcae004ed26ef2753625bbbdf10d909", 0x87}, {&(0x7f0000000d40)="89cb723f49d260dfc28e180467ea0c9e71933e28c8f5b673da98b77db43821ae9e6746b2f36fbc8ceace011a7fa1ea522e30b6e7e2debcc4f109c4c7122710084f0e82b16dee3cc4", 0x48}, {&(0x7f0000000dc0)="2e9cc367669e49d4b1aee789471c1ea752b89fad5dbee8bb6e3c590dedc5e7b0cf0b18e7fce3a659ffe9408a6c00f8ab79345b0e8561be21457a9ae0ed76f492ff2e3dc909b4232973002274f01af8ed37dbd83820ceb354091b238b23fdebbc60088be65d2abf5172418fecb5739bf06d6fce478525a6ed11dcb2725e3e83ff966d16a2b20b636501ac3786b9338845", 0x90}, {&(0x7f0000000e80)="08d7df6087609b15b53564747413d91b690486335cd4e6fb22216538ac5641a933", 0x21}, {&(0x7f0000000ec0)="409d903a2d08bee9ea6489f13397c4fece62d73d9329fd12e24eb3ce2fcac9f1518721cb8950c7481f82f1cd8fba42996c9ee7ed809e0ad7b95383e564b641c7b35c69bd0a0006c8cac9658fbacc2eddcc1d88c0be4fb22b1bc9e592af4bdf19772241e207ea7383bb8bd326bbadc45a1a2ca2ddc6163eed173b054923a9dcba1e8d83d9a2a894b11b12d40b744d011d71d4669ff7329e044417f3314b4d12619c7c8b733d973dbeb5b749298366c07b87ed3d0cb5724032a9ca6cf1831775990107ce85a15ca577dba2e68c52b9cdf1aa0b99740bed363e64fb", 0xda}, {&(0x7f0000000fc0)="4d25ef67575105833251279490c83c845b17bb1a9f6e577e879614538e3ee2e1d426ce14a3e34135f7217c42eeee3052e9d8177ac15fe8ef910b879df3cea69a02037b75a75756324a4c6952adbd0b66d1d7418a7a6af168c93388349f98e5009018e5b73b4a5aa40eceb90509404dc668a467b7dab0cb19c5df16a2d3aa67d74497a01d16f0e9a080", 0x89}, {&(0x7f0000001080)="82b3f23121de1e424017f855e1822b0170c4f4d459140a0d0e9b5e69b0e43f0796dcf09b51d992a1006c3f9d94b25878", 0x30}], 0x9, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}], 0x3, 0x24004860) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000001340)=@get={0x1, &(0x7f0000001280)=""/190, 0x4}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x200000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f00000013c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x4, 0x7, 0x10, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x701, 0x700, 0x8001}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001480)={r3, 0x1, 0x6, @multicast}, 0x10) sendmsg$sock(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000014c0)="26902027cd3da79c0ebb02e987c474b99e366c7b0a467b0f46b374d69643e4044715ddd4d7afca7a2bc5ddfe9c426602f45384129d92c01ae351e3bdfb122fa5630ba1481d2aa2adf23d53ae16f381a9f5fb1bfd74889d928a7c40a6dd198def0abe7640a35c7c21ddbdf4b041a227a2589f81f3171823f819748aa677030e09552d6bff2edd7270e49412a44b9c69a88ba20e603767702c08fd06fdca20dc5d1c", 0xa1}, {&(0x7f0000001580)="87", 0x1}, {&(0x7f00000015c0)="c51b734213d2e9c39dc59eab008626e030c584f7019f0dcceedcb75d335be0f6a899ec671ece96590142786cbbae1c1ee14d9d3cb5a5947e0edcd42c9c206eb4d03f10ef83693ad2c1cb80bf7e6c7907fff193be7f95cdc1ce276210618e672246b554", 0x63}, {&(0x7f0000001640)}, {&(0x7f0000001680)="7e0ea8bee19136dbf09dd60f56d8189c", 0x10}, {&(0x7f00000016c0)="9d868869fe77055daeaebda66430056edf5f4cbe49d15fe00218b80d594a86ce5f06e56ed7efb7b4953c9daa0f55746a7ba65f4246d83ee4c6fbaabcf34fa029cb2d8da7d3d842a84b44d168a0d6d83b20bafe50cc44953848e2bf3d92413f02d1e249", 0x63}, {&(0x7f0000001740)="a5ab8495464e214d834d82", 0xb}, {&(0x7f0000001780)="34d8696cb956a97843ea0cbf45776f0709f89957d75dc2ddc95c617eb3e0ca9f9daa2e379d98a1c88640298cb22fb907bb8b5d6e8ee9b3592f03981114186c4f4d9f202eb699b85aa14c3bf3c6adb1d101343b03fa853e7fc667ce7681ed117eb3c651c467729f60783b2d01a147a90d40aae0d12fcef8363b931dff3ba0edd78b4813a72f67c581c20af98b1b1156ec500030a96987962e4b6bd615f6af713b27342d7ded74d6141a35783383eb7e57c7ba2b04466b95daec375aeda1f1845e3d9dd3fce5f4dec33a307c42a823426dfe48c2c6a83bb548f260caaa70463dd45b47ae", 0xe3}], 0x8, &(0x7f0000001900)=[@mark={{0x14, 0x1, 0x24, 0x1f}}], 0x18}, 0x4000001) r4 = epoll_create(0x800) ioctl$int_in(r4, 0x5421, &(0x7f0000001980)=0xb7b2) write$9p(r2, &(0x7f00000019c0)="e309f9834a9f7671654dcd9c3f9d05db2f02a85d915b6fd9c43afa67083340a5d528d27c4531d5729cf308869b03c6ee868850e360446ccb204243fdafad735a36dab9cf073106", 0x47) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001a40), 0x80000, 0x0) r6 = signalfd(r5, &(0x7f0000001a80)={[0x1000]}, 0x8) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x88, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000001c40)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000001c80)={'filter\x00', 0x4}, 0x68) shmget(0x1, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f0000001d00)=0x4) 14:39:33 executing program 2: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@rand_addr=0x64010102, @in=@private=0xa010100, 0x4e21, 0x7f, 0x4e23, 0x0, 0x2, 0xa0, 0x80, 0x3a, 0x0, 0xee01}, {0xb, 0x7, 0x7, 0x0, 0x3f, 0x2, 0x5, 0x3}, {0xffffffff, 0x101, 0x0, 0xffff}, 0x7f, 0x6e6bbf, 0x0, 0x1, 0x2}, {{@in=@broadcast, 0x4d5, 0x6c}, 0x2, @in=@multicast2, 0x3505, 0x0, 0x2, 0x8, 0x8, 0x1}}, 0xe8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x4, 0x4) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000200)={0x0, 0xff, 0x6, 0x1}) setsockopt$inet6_buf(r0, 0x29, 0x45, &(0x7f0000000600)="2fd17898", 0x4) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000640)) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x104, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x2000c0c4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x9}}}}, [@NL80211_ATTR_CSA_IES={0x4, 0xb9, 0x0, 0x1, [@beacon_params]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x64}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x50}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) getsockopt$inet6_int(r0, 0x29, 0x8a, &(0x7f0000000900), &(0x7f0000000940)=0x4) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x38}}, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$int_out(r2, 0x2, &(0x7f0000000a80)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ac0), 0x202983, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0xc000) recvfrom$inet6(r1, &(0x7f0000000c00)=""/252, 0xfc, 0x10320, &(0x7f0000000d00)={0xa, 0x4e22, 0x1, @local, 0x8000}, 0x1c) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x10000) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000d40)={0x7, 0x8ce8, 0x1, 0x6, 0x8, [{0x2, 0x100, 0x10000, '\x00', 0x2800}, {0x0, 0x100000000000000, 0x9a, '\x00', 0x80}, {0x1, 0xff, 0x2, '\x00', 0xb00}, {0x1000, 0x4, 0x9, '\x00', 0xc00}, {0x9, 0x5, 0x4, '\x00', 0x6}, {0x9, 0xbf1, 0x0, '\x00', 0x800}, {0x4, 0xfffffffffffffe00, 0x3, '\x00', 0x100}, {0x0, 0x26df, 0xfffffffffffffff7, '\x00', 0x128e}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, 0x0, 0x37bffb86e25499b2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c015}, 0x14040000) [ 114.585044] audit: type=1400 audit(1745764773.633:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:39:33 executing program 3: sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x2, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffa4b}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f27}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x100}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}]}, 0x84}, 0x1, 0x0, 0x0, 0x48000}, 0x18000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x4a8a00) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x138, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff0000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x25}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) readahead(r1, 0x6, 0x9) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x98, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:default_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x10000080) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008011}, 0x8080) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000840)={@rand_addr=' \x01\x00', 0x1, 0x0, 0xff, 0xa, 0x187a}, &(0x7f0000000880)=0x20) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000008c0)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7c1d8edc) r3 = open(&(0x7f0000000900)='./file0\x00', 0x408000, 0x20) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000940)={0x56, 0x5, 0x0, {0x40, 0x2}, {0x9, 0x2}, @cond=[{0x8001, 0x800, 0x5, 0xfff, 0x2, 0x9fa3}, {0x574b, 0x4, 0x7f, 0xfffb, 0x1, 0x3f}]}) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x12c, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2a000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xbb3}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf06f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x400}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, 0x0, 0x304, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "159b5afbcc428594fbfb099d2700a174d967dc93fe4989e3"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20020004}, 0xc000) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x88, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}]}, 0x88}}, 0x4800) 14:39:33 executing program 5: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000240)={0x1, 0x7, 0xd09f, 0x8000, 0x19, "b5ab3c5a816eb66a382bcfda123196e2d34419"}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000280)=""/37) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x7, 0x1ff, {{0xb, 0x4, 0x0, 0x1, 0x2c, 0x65, 0x0, 0xf8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @dev, {[@lsrr={0x83, 0xf, 0xb2, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @rr={0x7, 0x7, 0xe2, [@broadcast]}]}}}}}) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@allocspi={0x104, 0x16, 0x300, 0x70bd2c, 0x25dfdbfe, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x7, 0x4e22, 0x7, 0x2, 0x0, 0x20, 0x33, r0, 0xee01}, {@in6=@loopback, 0x4d6, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0xd174, 0x9, 0xb1e, 0x8, 0x80000001, 0x91b, 0x378, 0x3}, {0x75a, 0x9, 0x5}, {0x8, 0x301, 0x5}, 0x70bd2c, 0x3504, 0x8, 0x0, 0x6, 0x11}, 0xc45, 0x80000000}, [@offload={0xc, 0x1c, {r2, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa8, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x34}, @void, @val={0xc, 0x99, {0x1, 0x29}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x4e, 0xc5, "4e87981eea3e632c456594cd8a5dce7af625e8d1a83bb59390b40603574197f03b9283f0a17592b43f2adb794d5e7d7700efc6f089ff1d20c0ccc76d22ef3c431b638889a27df343bb41"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7e}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}, @NL80211_ATTR_VENDOR_DATA={0x10, 0xc5, "f4784d7452398ff6316d7bad"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8885}, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800)=0xe, 0x800) preadv2(r4, &(0x7f0000000f40)=[{&(0x7f0000000840)=""/159, 0x9f}, {&(0x7f0000000900)=""/25, 0x19}, {&(0x7f0000000940)=""/209, 0xd1}, {&(0x7f0000000a40)=""/136, 0x88}, {&(0x7f0000000b00)=""/122, 0x7a}, {&(0x7f0000000b80)=""/140, 0x8c}, {&(0x7f0000000c40)=""/212, 0xd4}, {&(0x7f0000000d40)=""/245, 0xf5}, {&(0x7f0000000e40)=""/162, 0xa2}, {&(0x7f0000000f00)=""/28, 0x1c}], 0xa, 0x2, 0x7, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001000)={r1, 0x9, 0x7, 0x80000000}) ioctl$CDROMPLAYMSF(r5, 0x5303, &(0x7f0000001040)={0x4, 0xf7, 0x65, 0x2, 0x6, 0xfb}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001080), 0x8200, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), r5) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0xa4, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x16}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4008850) accept4$packet(r5, &(0x7f0000001280), &(0x7f00000012c0)=0x14, 0x100800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r6) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x88, r8, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x9e, 0x51}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x40, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @local}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x8}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x88}}, 0x4008040) 14:39:33 executing program 4: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x200, 0x70bd25, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x801) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)={0x3b0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x210, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0xced09f8844bb8fd8, 0x24, 0x3d, 0x60, 0x6, 0x16, 0x3, 0x9, 0x16, 0x2, 0x12, 0x18, 0x5, 0x16, 0x1b, 0x4, 0x16, 0xb]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x7}, {0x7, 0xa}, {0x6, 0x7}, {0x1, 0x1}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0xa}, {0x2}, {0x1}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {0x7, 0x9}, {0x5, 0x3}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x4, 0x9}, {0x7, 0x4}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x7}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x7}, {0x5, 0x3}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x9}, {0x2, 0x3}, {0x2, 0x1}, {0x3, 0x6}, {0x1, 0x6}, {0x2, 0x1}, {0x5, 0x8}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x5, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0x9}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x81, 0x39, 0x2, 0x8, 0x0, 0x7, 0x40]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x81, 0x3, 0x81, 0x7, 0x9, 0x401]}}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x9}, {0x3, 0x4}, {0x6, 0x4}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x9, 0x48, 0x24, 0x6]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x6}, {0x2, 0x2}, {0x4, 0x8}, {0x7, 0x6}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x3, 0xa}, {0x2, 0x3}, {0x6, 0x4}, {0x0, 0x3}, {}, {0x7, 0x3}, {0x1, 0x2}, {0x7, 0xa}, {0x6, 0x4}, {0x6}, {0x4, 0x8}, {0x7, 0xa}, {0x7, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x6, 0x6}, {0x3, 0x5}, {0x4, 0x9}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x9}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x9}, {0x5, 0x6}, {0x5, 0x9}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf8ed, 0x6, 0x400, 0xff64, 0x9, 0xfff, 0x8]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xcd, 0x1000, 0xfffe, 0x8000, 0x7, 0x1ff, 0x100]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x3}, {}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x7}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x8}, {0x4, 0x8}, {0x2}, {0x0, 0x4}, {0x3, 0x4}, {0x5, 0x3}, {0x3, 0x3}, {0x5, 0x8}, {0x4, 0x2}, {0x3, 0x3}, {0x2, 0x7}, {0x4}, {0x6, 0x7}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0x2}, {0x4, 0x8}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x6, 0x9}, {0x3, 0xa}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x7, 0x3}, {0x6}, {0x1, 0x4}, {0x3}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x4}, {0x7, 0x4}, {0x4, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x2}, {0x7, 0x9}, {0x2, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x9}, {0x4, 0x4}, {0x4, 0x3}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f0, 0x3, 0xff3e, 0x1000, 0x401, 0x3, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1deb, 0xfffb, 0x0, 0x453, 0x1, 0xfaba, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x8}, {0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x1}, {0x7}, {0x3, 0x5}, {0x3, 0x9}, {0x5, 0x5}, {0x3, 0x5}, {0x7, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x18c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xb2d, 0x1, 0xae48, 0x0, 0x3f, 0x440, 0x6275]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5, 0x7, 0x7fff, 0x200, 0x8001, 0xbe, 0x2]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x2, 0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x4}, {0x2, 0x3}, {0x2, 0x9}, {0x7, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x5}, {0x7, 0xa}, {0x5, 0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x4, 0x9}, {}, {0x1}, {0x0, 0x1}, {0x7}, {0x5, 0xa}, {0x5, 0x5}, {0x4, 0xa}, {0x4, 0x8}, {0x1, 0x3}, {0x1, 0xa}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x4}, {0x1, 0x2}, {0x4, 0x5}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x5}, {0x0, 0x1}, {0x7, 0x4}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x1, 0x4, 0x0, 0x7f, 0x3ff, 0x200]}}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a3, 0x1000, 0x1ff, 0xfff9, 0x80, 0x928b, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x48, 0x9, 0x1b, 0x6, 0x24, 0x1, 0x4, 0x3, 0x6, 0x16, 0x2, 0x1, 0x9, 0x12, 0x4, 0x4, 0x1b, 0x9, 0x16, 0x5, 0x48, 0x5, 0x2, 0x16, 0x18, 0x1, 0x36, 0x36]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x36, 0x9, 0xa, 0x6, 0x24, 0xc, 0xb, 0x48, 0x48, 0x6c, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff, 0x200, 0x7, 0x1, 0x3ff, 0x40, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x8}, {0x6, 0x9}, {0x6, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x2}, {0x2, 0x7}, {0x5, 0x8}, {0x1, 0x5}, {}, {0x1, 0x1}, {0x4, 0x2}, {0x1}, {0x6, 0x2}, {0x0, 0x7}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x6, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x5, 0x9}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x8}, {0x4, 0x5}, {0x0, 0x1}, {0x5, 0x9}, {0x4, 0x9}, {0x7, 0x3}, {0x2, 0x4}, {0x2, 0xa}, {0x3, 0x9}, {}, {0x6, 0x9}, {0x5, 0x3}, {0x5}, {0x5}, {0x5, 0x10}, {0x7, 0x7}, {0x3, 0x7}, {0x5, 0x4}, {0x2, 0x5}, {0x3, 0x4}, {0x6, 0x1}, {0x6}, {0x2, 0xa}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x1}, {0x6}, {0x7, 0xa}, {0x2, 0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0xa}, {0x2, 0x1}, {0x6, 0x1a}, {0x5, 0x7}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0xa}, {0x6, 0x9}, {0x4, 0x6}, {}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x4000}, 0x24004040) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51}}, './file0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000840)={@mcast1, 0x0}, &(0x7f0000000880)=0x14) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x100, 0x70bd25, 0x813, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x48005) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x80}, 0x1, 0x0, 0x0, 0xc045}, 0x5) syz_genetlink_get_family_id$smc(&(0x7f0000000b00), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x13c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000d40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x44004004}, 0x48014) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000ec0)={@private1, 0xb159, 0x1, 0x0, 0x8, 0x5}, 0x20) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r1, 0x4893f000) sendmsg$FOU_CMD_GET(r3, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000154}, 0x20054) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) personality(0x8) 14:39:33 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = accept(r0, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x8, 0x84, 0x1, 0x3, 0x2, 0x3, 0x2, 0x2ac, 0x40, 0x3c7, 0x80000000, 0x4, 0x38, 0x2, 0x0, 0x7, 0xfff}, [{0x1, 0x8000, 0x0, 0x80000000, 0x4, 0x5, 0x7, 0xd10c}, {0x60000000, 0x5, 0x6, 0x7fff, 0x2, 0x4, 0x1, 0x9}], "82b79b24602efabe4c637906367bf3b5ae2eb640b3e4e6b2e486ba5cf42ab5e34830853e13069ab1a34efb8205c777f302e144933d859e69a91803afb4336d6543fa397e8d790e4bce29c0306edf77c62ded53fb76b68921f287811cc05e0dea888d70167ab4822b5c62fb080c156b89bc085c705704fad72a879453250502b0047223d139d75c", ['\x00', '\x00', '\x00']}, 0x437) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{}, 0x285, 0x8, 0x7}) r2 = dup(r1) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0xff, 0x3, 0x30, 0x400, 0x2}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000005c0)={{0x2, 0x2, 0x8, 0x0, 0x3ff}, 0x9, 0x200, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0xe2c, 0x7, 0x4}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000006c0)={0xffff, 0x40, 0x6e, 0x401, 0xe, "73dd73a782c1fe70deaf13fc843efb65f21224"}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_STATX={0x15, 0x5, 0x0, r4, &(0x7f0000000740), &(0x7f0000000840)='./file0\x00', 0x200, 0x4000, 0x1}, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000900)={0x8, 0xffff0001, 0x0, 0x6d2a4c07, 0x1b, "034e664738d8789effc6e5bd2d70e913640524"}) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000d40)={0x1, 0x1, 0x12, 0x9, 0x1a5, &(0x7f0000000940)}) execveat(r5, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000ec0)=[&(0x7f0000000dc0)=')-\x00', &(0x7f0000000e00)='\xd3\\\xac^*\x00', &(0x7f0000000e40)='.}(,\x00', &(0x7f0000000e80)='id0\x00'], &(0x7f0000001080)=[&(0x7f0000000f00)='.r%-\x00', &(0x7f0000000f40)='id0\x00', &(0x7f0000000f80)='//-\x00', &(0x7f0000000fc0)='timer0\x00', &(0x7f0000001000)='\x00', &(0x7f0000001040)='timer0\x00'], 0x100) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000001100)={0x7, 0x30, '\x00', 0x0, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000001140)="2616efaaa74a1f9e5e1c912fde70bcf3adddfe4a24c89f6d70844a550266c9c097e969c8e5f90479ae310f6509c85ac22bbd79fdcc199cd0dba445c91eeb0051a2704e78", 0x44) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000011c0)) r6 = socket$packet(0x11, 0x0, 0x300) fcntl$addseals(r6, 0x409, 0x4) 14:39:33 executing program 7: keyctl$describe(0x6, 0x0, &(0x7f0000000000)=""/212, 0xd4) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x54b080, 0x8, 0x1b}, 0x18) r1 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="88c18b897e56b1faa557d9dbf2e47d405ce65128cb461ce71063babae489f472c250dfcde9c268f0c6b7b2aaea64f860b30b8550e8f434b5529f418703abb79480406fe5f99081db8cbccdc80be770a821911b852f5f794f2a79928975516f74214a16e98f9edd599db84f53c973911a57c63c9e7e06adef2ef639263a53cedf7e4543b3f0003e7615a82634c446a8e95a94e92c1af4a363c3325eb450dc3c215c1c35c1ca99cf3e", 0xa8, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r1) r2 = fsopen(&(0x7f00000002c0)='nfsd\x00', 0x1) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000340)={&(0x7f0000000300)=""/26, 0x1a, 0x6, 0x1000}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/cgroup\x00') ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) keyctl$instantiate(0xc, r1, &(0x7f00000003c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'syz', 0x20, 0x2, 0x20, [0x62, 0x65, 0x0, 0x64]}, 0x31, 0x0) r4 = dup(r2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000440)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4a, 0x23}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x58d7, 0x6b}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc080}, 0x480c0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000580)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x0, 0xff, 0x8, 0x401, 0x2}, &(0x7f00000005c0)=0x20) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000600)={0x8001, 0x4, 0x9, 0x9}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x104, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x83eb5ec5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x652}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x398}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xbb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x922}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x0, 0x5, 0x1ff, 0x80000001, 0x9, 0xff, 0x2, 0x1]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffff69}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x24040100) fchdir(r3) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000840)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x8, 0x86ec, 0x50, @private0, @empty, 0x7, 0x8000, 0x3, 0x12ae2c16}}) [ 115.974519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.983652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.987426] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.002622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.006549] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.050364] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.053753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.062661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.073514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.081592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.109477] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.114206] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.116377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.129321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.168308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.216257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.219728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.236392] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.262349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.275393] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.296696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.300662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.303589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.309600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.314083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.316352] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.318237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.336596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.340644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.346330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.350022] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.355186] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.367001] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.374654] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.379425] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.389735] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.395103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.399149] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.402774] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.415236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.059342] Bluetooth: hci0: command tx timeout [ 118.185890] Bluetooth: hci1: command tx timeout [ 118.314198] Bluetooth: hci3: command tx timeout [ 118.315057] Bluetooth: hci2: command tx timeout [ 118.377938] Bluetooth: hci4: command tx timeout [ 118.505991] Bluetooth: hci7: command tx timeout [ 118.506933] Bluetooth: hci6: command tx timeout [ 118.507488] Bluetooth: hci5: command tx timeout [ 120.106314] Bluetooth: hci0: command tx timeout [ 120.234506] Bluetooth: hci1: command tx timeout [ 120.363371] Bluetooth: hci3: command tx timeout [ 120.364552] Bluetooth: hci2: command tx timeout [ 120.425933] Bluetooth: hci4: command tx timeout [ 120.554174] Bluetooth: hci5: command tx timeout [ 120.555322] Bluetooth: hci6: command tx timeout [ 120.556219] Bluetooth: hci7: command tx timeout [ 122.154281] Bluetooth: hci0: command tx timeout [ 122.282886] Bluetooth: hci1: command tx timeout [ 122.410903] Bluetooth: hci3: command tx timeout [ 122.411391] Bluetooth: hci2: command tx timeout [ 122.475952] Bluetooth: hci4: command tx timeout [ 122.602185] Bluetooth: hci6: command tx timeout [ 122.602670] Bluetooth: hci7: command tx timeout [ 122.603338] Bluetooth: hci5: command tx timeout [ 124.203100] Bluetooth: hci0: command tx timeout [ 124.333030] Bluetooth: hci1: command tx timeout [ 124.461031] Bluetooth: hci2: command tx timeout [ 124.461516] Bluetooth: hci3: command tx timeout [ 124.521883] Bluetooth: hci4: command tx timeout [ 124.651056] Bluetooth: hci6: command tx timeout [ 124.651547] Bluetooth: hci5: command tx timeout [ 124.652283] Bluetooth: hci7: command tx timeout [ 176.179948] syz-executor.1 (286) used greatest stack depth: 24232 bytes left [ 178.570234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.575193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.583310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.585547] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.597260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.599355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.602633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.612917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.615578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.623751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.635319] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.637955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.649054] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.659100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.666159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.675999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.681303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.683873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.723431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.723717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.733682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.739355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.749578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.759742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.760391] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.769656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.770244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.776482] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.777374] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.780487] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.784082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.801465] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.805009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.808199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.810412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.826581] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.858893] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.862540] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.867209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.868580] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.715076] Bluetooth: hci0: command tx timeout [ 180.778171] Bluetooth: hci2: command tx timeout [ 180.779080] Bluetooth: hci1: command tx timeout [ 180.842185] Bluetooth: hci3: command tx timeout [ 180.905928] Bluetooth: hci4: command tx timeout [ 180.906882] Bluetooth: hci6: command tx timeout [ 180.969949] Bluetooth: hci5: command tx timeout [ 180.970884] Bluetooth: hci7: command tx timeout [ 182.761942] Bluetooth: hci0: command tx timeout [ 182.826151] Bluetooth: hci1: command tx timeout [ 182.826955] Bluetooth: hci2: command tx timeout [ 182.889898] Bluetooth: hci3: command tx timeout [ 182.954830] Bluetooth: hci6: command tx timeout [ 182.955283] Bluetooth: hci4: command tx timeout [ 183.018072] Bluetooth: hci5: command tx timeout [ 183.018535] Bluetooth: hci7: command tx timeout [ 184.809922] Bluetooth: hci0: command tx timeout [ 184.874010] Bluetooth: hci1: command tx timeout [ 184.874468] Bluetooth: hci2: command tx timeout [ 184.939888] Bluetooth: hci3: command tx timeout [ 185.003387] Bluetooth: hci6: command tx timeout [ 185.003976] Bluetooth: hci4: command tx timeout [ 185.065909] Bluetooth: hci5: command tx timeout [ 185.066364] Bluetooth: hci7: command tx timeout [ 186.858044] Bluetooth: hci0: command tx timeout [ 186.922044] Bluetooth: hci2: command tx timeout [ 186.922491] Bluetooth: hci1: command tx timeout [ 186.986009] Bluetooth: hci3: command tx timeout [ 187.049943] Bluetooth: hci4: command tx timeout [ 187.050384] Bluetooth: hci6: command tx timeout [ 187.113937] Bluetooth: hci7: command tx timeout [ 187.114373] Bluetooth: hci5: command tx timeout [ 241.035691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.039304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.043780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.052387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.061556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.157928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.162164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.173567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.179557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.183260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.223286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.229492] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.240883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.243328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.247283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.249499] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.256121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.264337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.271156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.274517] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.349741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.357081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.359647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.368659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.375482] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.375838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.420516] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.426076] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.428361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.453579] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.463935] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.473292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.475322] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.477940] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.498057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.499768] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.510045] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.513766] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.577363] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.595557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.113911] Bluetooth: hci0: command tx timeout [ 243.243984] Bluetooth: hci1: command tx timeout [ 243.371257] Bluetooth: hci2: command tx timeout [ 243.372700] Bluetooth: hci3: command tx timeout [ 243.433972] Bluetooth: hci4: command tx timeout [ 243.561954] Bluetooth: hci7: command tx timeout [ 243.639892] Bluetooth: hci5: command tx timeout [ 243.689997] Bluetooth: hci6: command tx timeout [ 245.162120] Bluetooth: hci0: command tx timeout [ 245.290125] Bluetooth: hci1: command tx timeout [ 245.417911] Bluetooth: hci3: command tx timeout [ 245.417952] Bluetooth: hci2: command tx timeout [ 245.481880] Bluetooth: hci4: command tx timeout [ 245.610219] Bluetooth: hci7: command tx timeout [ 245.673980] Bluetooth: hci5: command tx timeout [ 245.737882] Bluetooth: hci6: command tx timeout [ 247.211255] Bluetooth: hci0: command tx timeout [ 247.339101] Bluetooth: hci1: command tx timeout [ 247.465980] Bluetooth: hci3: command tx timeout [ 247.466040] Bluetooth: hci2: command tx timeout [ 247.530096] Bluetooth: hci4: command tx timeout [ 247.658068] Bluetooth: hci7: command tx timeout [ 247.722006] Bluetooth: hci5: command tx timeout [ 247.786099] Bluetooth: hci6: command tx timeout [ 249.258360] Bluetooth: hci0: command tx timeout [ 249.385915] Bluetooth: hci1: command tx timeout [ 249.515400] Bluetooth: hci3: command tx timeout [ 249.515570] Bluetooth: hci2: command tx timeout [ 249.579837] Bluetooth: hci4: command tx timeout [ 249.706889] Bluetooth: hci7: command tx timeout [ 249.771211] Bluetooth: hci5: command tx timeout [ 249.835836] Bluetooth: hci6: command tx timeout [ 303.292395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.298773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.305490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.319707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.327352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.445930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.456577] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.469401] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.488298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.500024] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.562594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.572718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.574933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.583589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.588699] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.650502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.657552] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.665841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.686289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.731323] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.750374] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.765015] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.770365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.800540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.819980] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.835662] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.839089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.857424] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.863280] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.866482] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.867883] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.897369] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.910191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.944661] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.945452] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.972139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.986323] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.986534] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.041266] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.081321] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.386897] Bluetooth: hci0: command tx timeout [ 305.579138] Bluetooth: hci1: command tx timeout [ 305.707108] Bluetooth: hci2: command tx timeout [ 305.898243] Bluetooth: hci4: command tx timeout [ 305.899470] Bluetooth: hci3: command tx timeout [ 306.090210] Bluetooth: hci7: command tx timeout [ 306.091081] Bluetooth: hci5: command tx timeout [ 306.154874] Bluetooth: hci6: command tx timeout [ 307.435015] Bluetooth: hci0: command tx timeout [ 307.627162] Bluetooth: hci1: command tx timeout [ 307.755365] Bluetooth: hci2: command tx timeout [ 307.946913] Bluetooth: hci3: command tx timeout [ 307.947415] Bluetooth: hci4: command tx timeout [ 308.138923] Bluetooth: hci5: command tx timeout [ 308.139428] Bluetooth: hci7: command tx timeout [ 308.203374] Bluetooth: hci6: command tx timeout [ 309.482914] Bluetooth: hci0: command tx timeout [ 309.675078] Bluetooth: hci1: command tx timeout [ 309.802850] Bluetooth: hci2: command tx timeout [ 309.995007] Bluetooth: hci4: command tx timeout [ 309.995510] Bluetooth: hci3: command tx timeout [ 310.187829] Bluetooth: hci7: command tx timeout [ 310.188365] Bluetooth: hci5: command tx timeout [ 310.251185] Bluetooth: hci6: command tx timeout [ 311.530965] Bluetooth: hci0: command tx timeout [ 311.722880] Bluetooth: hci1: command tx timeout [ 311.851869] Bluetooth: hci2: command tx timeout [ 312.041880] Bluetooth: hci3: command tx timeout [ 312.042327] Bluetooth: hci4: command tx timeout [ 312.234919] Bluetooth: hci5: command tx timeout [ 312.235372] Bluetooth: hci7: command tx timeout [ 312.298078] Bluetooth: hci6: command tx timeout [ 365.758589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.767051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.771332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.785055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.793683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.913309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.920561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.922716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.937240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.942579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.018639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.027160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.038325] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.050374] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.060325] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.119554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.123632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.129660] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.141103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.172270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.175627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.178636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.201898] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.206234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.209218] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.213955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.218170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.221028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.222999] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.239153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.241671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.244449] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.245778] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.250921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.254587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.256723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.282471] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.301474] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.351472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.370405] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.851178] Bluetooth: hci0: command tx timeout [ 368.041921] Bluetooth: hci1: command tx timeout [ 368.169904] Bluetooth: hci2: command tx timeout [ 368.362909] Bluetooth: hci6: command tx timeout [ 368.362933] Bluetooth: hci4: command tx timeout [ 368.555129] Bluetooth: hci5: command tx timeout [ 368.809891] Bluetooth: hci7: command tx timeout [ 369.129882] Bluetooth: hci3: command tx timeout [ 369.898128] Bluetooth: hci0: command tx timeout [ 370.091891] Bluetooth: hci1: command tx timeout [ 370.217972] Bluetooth: hci2: command tx timeout [ 370.410054] Bluetooth: hci6: command tx timeout [ 370.410593] Bluetooth: hci4: command tx timeout [ 370.602988] Bluetooth: hci5: command tx timeout [ 370.859458] Bluetooth: hci7: command tx timeout [ 371.177915] Bluetooth: hci3: command tx timeout [ 371.945933] Bluetooth: hci0: command tx timeout [ 372.138204] Bluetooth: hci1: command tx timeout [ 372.265905] Bluetooth: hci2: command tx timeout [ 372.458032] Bluetooth: hci4: command tx timeout [ 372.458484] Bluetooth: hci6: command tx timeout [ 372.651887] Bluetooth: hci5: command tx timeout [ 372.906093] Bluetooth: hci7: command tx timeout [ 373.225998] Bluetooth: hci3: command tx timeout [ 373.995310] Bluetooth: hci0: command tx timeout [ 374.186921] Bluetooth: hci1: command tx timeout [ 374.313909] Bluetooth: hci2: command tx timeout [ 374.508122] Bluetooth: hci6: command tx timeout [ 374.508166] Bluetooth: hci4: command tx timeout [ 374.700120] Bluetooth: hci5: command tx timeout [ 374.955110] Bluetooth: hci7: command tx timeout [ 375.277491] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 14:44:41 Registers: info registers vcpu 0 RAX=ffffffff86c113cf RBX=0000000000000001 RCX=ffffffff86c113ca RDX=0000000000000002 RSI=0000000000000007 RDI=ffffffff86756740 RBP=ffff88803645f360 RSP=ffff88803645f298 R8 =ffffffff86c113a6 R9 =0000000000000001 R10=000000000003b0c2 R11=00000000000c245b R12=ffff88803645f368 R13=ffff88803645f350 R14=ffff88803645f349 R15=ffff88803645f308 RIP=ffffffff81350c4c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc8d4e951f0 CR3=000000002f7f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8173714b RDX=ffff888015f2d340 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88803442f698 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000003 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c735c8 R15=0000000000000dc0 RIP=ffffffff81737202 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f45f52c6540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fca52ab0000 CR3=0000000026812000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000