Warning: Permanently added '[localhost]:55511' (ECDSA) to the list of known hosts. 2025/04/29 16:16:20 fuzzer started 2025/04/29 16:16:21 dialing manager at localhost:36753 syzkaller login: [ 105.109361] cgroup: Unknown subsys name 'net' [ 105.209814] cgroup: Unknown subsys name 'cpuset' [ 105.234557] cgroup: Unknown subsys name 'rlimit' 2025/04/29 16:16:39 syscalls: 2214 2025/04/29 16:16:39 code coverage: enabled 2025/04/29 16:16:39 comparison tracing: enabled 2025/04/29 16:16:39 extra coverage: enabled 2025/04/29 16:16:39 setuid sandbox: enabled 2025/04/29 16:16:39 namespace sandbox: enabled 2025/04/29 16:16:39 Android sandbox: enabled 2025/04/29 16:16:39 fault injection: enabled 2025/04/29 16:16:39 leak checking: enabled 2025/04/29 16:16:39 net packet injection: enabled 2025/04/29 16:16:39 net device setup: enabled 2025/04/29 16:16:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/29 16:16:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/29 16:16:39 USB emulation: enabled 2025/04/29 16:16:39 hci packet injection: enabled 2025/04/29 16:16:39 wifi device emulation: enabled 2025/04/29 16:16:39 802.15.4 emulation: enabled 2025/04/29 16:16:39 fetching corpus: 0, signal 0/0 (executing program) 2025/04/29 16:16:41 starting 8 fuzzer processes 16:16:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd82, 0x80000000, 0x2, 0xafb, 0x6, 0x4}) r1 = socket$packet(0x11, 0x1, 0x300) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x10000, 0x10000, 0x5}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000000c0)={0xe8, "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"}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000300)) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000340)) r4 = creat(&(0x7f0000000740)='./file0\x00', 0x10) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000780)={0x20000000}) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f00000007c0)) r6 = syz_open_dev$rtc(&(0x7f0000000800), 0x8000, 0x8000) ioctl$RTC_UIE_OFF(r6, 0x7004) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000840)=0x8c90) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x200) recvmmsg$unix(r4, &(0x7f0000000e00)=[{{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/227, 0xe3}, {&(0x7f0000000a40)=""/196, 0xc4}, {&(0x7f0000000b40)=""/88, 0x58}, {&(0x7f0000000bc0)=""/194, 0xc2}, {&(0x7f0000000cc0)=""/5, 0x5}], 0x5, &(0x7f0000000d80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x1, 0x0, &(0x7f0000000e40)) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000e80)={0x400, 0x81, 0x5, 0x0, 0x0, [{{r7}, 0x4}, {{r6}, 0x4}, {{r8}, 0xffffffff}, {{r4}, 0x9}, {{r5}, 0x7dd}]}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x200000c0) 16:16:41 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x6, 0x9aeb, 0x5, 0xd45a, 0xffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1f}}, './file0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x1, 0x7, 0x8000}) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x44880) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f00000002c0)=0x39eaed80) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)=@v1={0x1000000, [{0x8001}]}, 0xc, 0x1) r5 = signalfd4(r1, &(0x7f00000003c0)={[0x5]}, 0x8, 0x800) write$P9_RLINK(r5, &(0x7f0000000400)={0x7, 0x47, 0x2}, 0x7) r6 = memfd_secret(0x0) getsockname$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x10) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000004c0)=0xfb, &(0x7f0000000500)=0x1) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x80000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) write$P9_RAUTH(r4, &(0x7f00000005c0)={0x14, 0x67, 0x1, {0x10, 0x2, 0x8}}, 0x14) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file1\x00') 16:16:41 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x3) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101a81, 0x0) r1 = dup(r0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8841) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000280)=0x5, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000300)=0x2) ioctl$TCFLSH(r0, 0x540b, 0x2) r4 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000340)=r4) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f00000003c0)) r6 = fsmount(r1, 0x0, 0x80) ioctl$CDROMREADTOCHDR(r6, 0x5305, &(0x7f0000000400)={0x3, 0x20}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000500)={0x2, 0x5, 0xb9, &(0x7f0000000440)=""/185}) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008004}, 0x20008004) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r7, &(0x7f0000000640)) 16:16:41 executing program 3: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$CDROM_GET_CAPABILITY(r0, 0x5331) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x604100, 0x0) ioctl$CDROMCLOSETRAY(r1, 0x5319) ioctl$CDROMPAUSE(r1, 0x5301) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff, 0x20, 0xb7, 0x20, 0xf800000000}, 0x48) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000100)={0x1, 0x200, 0x3, 0x8000000, 0xaebe, 0x8, 0xfff, 0x2, 0x100, 0x8, 0x5, 0x4, 0x4, 0x3db}) ioctl$CDROMSETSPINDOWN(r1, 0x531e, &(0x7f0000000140)=0xd) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0x1e, 0x1b, &(0x7f0000000180)="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"}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000600)={0x5, 0x30, [0x7, 0x5, 0x1, 0xff], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) ioctl$KDENABIO(r2, 0x4b36) mq_notify(r2, &(0x7f0000000680)={0x0, 0x23, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r2, {0x6, 0x401}}, './file0\x00'}) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000700)) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000740)={0x1, 0x7}) accept4$packet(r1, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14, 0x800) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900), 0x2a2002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000940)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000800)="5a9fa950efbbce9c025f2f19013cbb2659ed91c10cb58bf47983026d7e9b240dfbdf4b6dce6a4466c641c6197ee9bf872345a894afaf5ca33eb4a2ee0bc8e41e4c6b783cd2d93914647e67e1fe90dbcf0c73f4ad54c0cf863f23307fefb68ea1007dd0b58ec09eae914382a26f3f9651c020b1aa60be22fa43b3c89f28ace03a36769708fc4acf159288c0bff3bbd0f0eabf098defea8bb332233923e12b4edc56cef9f86807025c0acbc1ca835a7ab4c83f85c85ace1091c1eec58ce9883ddccee6d21248166f7bfe9daaac05e932679d8f5c0663efe0fe1cbfb77e6525d740c36d4fa9b81d5f", 0xe7, r4}, 0x68) [ 125.466459] audit: type=1400 audit(1745943401.808:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:16:41 executing program 6: r0 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x4, 0x1ff, 0x3, 0x9, 0xa6, 0x7, 0x2, 0x6}}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) r2 = accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x40, 0x200, 0x2}, 0x18) sync_file_range(r4, 0x8, 0xdb, 0x7) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000240)) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/212, 0xd4}], 0x3, 0xcb5, 0xebc) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000480)={0x3b, 0x1b, '\x00', [@generic={0x20, 0xc3, "6409920ee369226a668a4e91ac5c7f20ca63ab1f8d0d5f97fe37d0aa74ffda60fb2cad41dec4f4845ce77436807431a77f7592595f46e23e5245a1dab19109e12a7d5e7effea3d75b46bc6b87346097c84a9f11b20537c079580cfb1a6d78a58a4b8783032470bfb319a00f6fe40a85d8b32496f97c44d6c0c8d7c33a2445549f4f6dac413b34810f974d5d2d2794ea7fb22c3fcde86e02a4b3de009490fec84658647efd7a3430921877f2c6d1d60561b527137c0dce731b924bc19db4a2050ce941f"}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}]}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, {0x3}}, './file1\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', &(0x7f0000000600)={0xa0000, 0x1, 0xd}, 0x18) copy_file_range(r5, &(0x7f0000000640)=0x9, 0xffffffffffffffff, &(0x7f0000000680)=0x2, 0x4, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f00000006c0)={'syzkaller0\x00', 0xffff}) getsockname(r6, &(0x7f0000000700)=@alg, &(0x7f0000000780)=0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff}}, './file0\x00'}) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f0000000800)={0x8}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000840)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000008c0)={'veth0_to_batadv\x00', {0x2, 0x0, @initdev}}) 16:16:41 executing program 4: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x51) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x37fc, 0x1}}}}, ["", "", ""]}, 0x28}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0xa01, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}}, 0x48001) r3 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x6, 0x20000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x198, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x148, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc975}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd68}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xab2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb32b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40085}, 0x800) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/netlink\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x46}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfff, 0x32}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40080) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, 0xfffffffffffffffe) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000840)={{0x0, 0x40, 0x2, 0x4, 0x81, 0xcd, 0x8, 0xffff0000, 0x7, 0x9, 0x47a, 0x6, 0x5, 0x6, 0x9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000900)={{r7, 0x431, 0x4, 0xfffffffffffff562, 0x2a, 0x72, 0xcfb1000000, 0x8, 0x40, 0x6, 0x80, 0x100, 0x7, 0xffff, 0x5}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000009c0)) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000a00)={0x6, 0x2, 0xeb, 0x2, 0x8, 0x2}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r8, 0x4a6f85380edce136, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) 16:16:41 executing program 5: r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x81, 0x4, 0xc}, 0x18) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0xaf, 0x6a7, 0x30, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x20, 0x1, 0x3, 0x8}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x9e0, r1, 0x200, 0x8, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x9ac, 0x8, 0x0, 0x1, [{0x6d4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6c, @remote, 0x20}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x1d4, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7af, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x45c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x2d4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xad3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast2, 0x400}}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x9e0}, 0x1, 0x0, 0x0, 0x40815}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000cc0)={0x103c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x48}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x800}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100c, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "a3c95bb51711a71a077382e5ac5bdfd2e350296c8295afc0103f8acb38f5f5b5460f61cf4c1a02e343289d07a95cb4b8f2acd52dd273a62a890fa51284a8b87c2573e3ade5041d5934ca3c14962ebe35fcb7b5aafcaff1705e951a60b3869ea7ae23fe2c75d26b795ec311860d9d5badc8785d8206f6a9c5da388eefcabb707fc4f90daed5b985fe801284eb87068070c1c28105559ec94dfd4f04f47edbaded3dccee44d3d77a8068513bbafc51d47926a9b27cd7a0ac462c71e3f80750a71a1acd2b52a9ff3620c1f14f828e511906e4756e13ecd278173e7ed60e7ebc9045196e4fff751caf33f608009dc52c344b9ea2cf7edaa0a054753f7700f16becdc06d54c51b29a3a168525488cdc6c3f39ac5e19db6d988c4462d7b7265c5ecaa11d176ae98b191c04d4c640a19a566e8af62947e6f4d52d7fd665320f83ca8d9ffb05cc19481de198d58f796a330c7f9c625ca4076ce433d0ab536fb8edaa5a90c83ee8ff87ce480c277577b45aba541d47593fe22492f71dc0c768187bf9772d0cb433f35d94804024beee887160fefc0c19a2e36c20f232ee8d9473668468004dc9d72fc8765e4cbdfc13bbcdf6ab6b55ffb784f4273839cc88fa4f02f7d7793d414619ae69ed7fd77f65e2e1dcc6f555f878089b3a557f2128ecfcbd30153509fd676599d5fcb09a8154f4e473e2dae9815ae5d8a1484e754ab29bea85873e5d8d4d498bf31458f745dbf10b59044cdfc808d73c6ee24a2e854ddbd4973b74cfdf3a942a35c708ae9c9ce04f28a1fb71888d8efc12708dbe9d631526eb558a0ec63627d496085c879e1be8dde3f230fadcb60ef15e1826553de1e2f738472365bd11bb1914fe3b442e381b13cd7c3de0f1aa6a95378e594bb240b0aa4f6f9a2da9298bfc26753a465ecf12752fb26adae1e2056704be0950c9d072312add246ff0c688e7897a27fc2aa22aa224b965b80373d3debae7bde1d85cc6426b9e5a8f542b2d575fa096fdde0f07ec5da49ff19bc44d0f572fc8b8656e309d515c8aee62a64ec12139d692a61373023ea0d7f78a02bc036222faff9e76d3d091601fa7d8c62dbc5222b09fb004aeecbefeade80f0925ea383a41cadb3de341b2731f1a0a1ab2d7728ea33c7e07db2ded9d1fea3ef32766a24c068785aa1a9cdf6ebb6ac18702abab466695be3b29425a37f32cdd4511c775eb7e9cff9f0c53c9c0f806472d68a92c759e4b9dc9be4f3772f4817f997f53a6586112fc559479de6f9a544ada3684b23b631f8b53db0718da66c4758f1d6129a54ca0786e52dc02cfad6fa7fb2b23489c9498c933037fb1c6408113f8336c1b5a267a6be28fd5fcb581a3a003faa127c70e32598db7809689e6b4ce364fc04f7d615d65f68a00648bb154258e21e190985486a6eee0909c4e69a39145126fb4532763261a7af86b3feea0cfbacb3361aee0f6125a43c97cfdb51e5f5cba54f48bee3999ff06a5c3373bee2f29b78fd7b711c02fbe1ec008a7c8179213b6ec2cf2b0cc287ac50c4322a71d51a38cfc6353e688db798e8d7eba583dc4a660a4f3f9bbb0485925aec99994807a26d005dccee3c377f0aa6558169fc00e1e6ad78c77a42398799d558aab41d3bb14c3b41baf07fdafdda4bd1bdae023e1d9d648f440f90083a179c65ca2e82cfa9c64b46a852debbb614b36cf33ca8a25b6ec8a3c6ff1d17aab2b3bc6d42cfd93ce11476b569e54b287f65d523a95734e0b9932308012c173093707f030b78fdd5a32763689c3c02d776cbab3ce6593362af526a09ae81d56191f0a6dc0bd5a6a1a2d9ce9db50520551bc9fb1d1f7f214a299861b1f90b853d99caf68d68c0a4a8cb419f58b88cc48a0ec634a6329d6b37c390fbea06f762f5f5b701d92962abde1d5d825028456e09c7d03ad1a1a32200ea6ee1f5d5285feae4a20ee9e613003f163b2c6a4996cb4f746e4ac7781a48a9f11083f1e98bf005b325cd97730aadbc0f5dd662fb3232b74a78bf3aa957fc6e37b660022368ca7c97a842cd644a2abe485828e5ad6b73cace4d4fd4fcfc5720c64da9fe8212c8ac8b515f6c73911b88e5f18ffdaba8f9b38fa63adba55ab961222b8a0cd699ba94701d5ccec8fe04d848f4b6d93a09e144e104fe157f52c1ffbbb5c1b822a3c2e7f546e89603e0d8e614e3ec23433b2515999d0d0ad41d1529d8748f60f55bb359526b954337498f50f44c04d2951e9450b5a33394e8a5b409a4d039757e9eec3d3a150effcb74e65d45dc9a8122616650ff0f7bf86362870d0508a2b4c65ab705a94e8439cbbe9eceb41089d005465e04178c61ea4bdc18dbe46583eb5de326bba9d091ce866b1cd422fe9bf50dec87d1f1b3a04a18ec3bd92ad22d016fcdc9df080eaae9ac7e72252dfdeb9e7aa12063657f93f841408480b89787b490a1e11625aad6d92d049ec421141a882ab991c342e0d2b9588482f2366ec8fa4fd5308398e840eee8e11c059c63e67a7ca18784e041cafad1071b924cd848b679423408e146cf2ca84efc984af25e2486de69d7ab523a253eb64c37bec8aadb406ad5d7d955fa5fcabd4a064e4f39e956307422cf378f3eaa7c3a48f41744160ebc4f27c124a64f0dd68b57310838d5a1716662f8e551e5590ee795bfafe6491307d2f851a5eb87de0a0429e6c39657b9f6bfc2df946b93b8ed08c85725c272db8a73f7df1e09daaae074e41d83ce3c68227d3571ee76d45be192d0651ed892fc70e27d89038cc9bcc4ca4936ad224556ddc781bf42d05c9cce7f5c941ff3c0b6da8c150564697a1b417faacbe501c14b6be1557460725ef365ae9fd4a515f4141acf44e9107855b4064092500cd1b43c729c7afc5812fa46e54f43bc0c7609e3472e1f3d331f3f44fbb563fa65bde611fd0cf246312bcc18ff6fc2d5f4e0e0375f7af528facebdb64a3f32394eb646843a2e658e1431afba842e6c31c84c007300d4f4301bf6583caf44833daaf08e1ffff1203ccf4a1591dfd6371cf2c05b8964696bb9e17b55d621e4fc799bd32974382d6c956ea0cfa4e333dc9e76249bb37d40122e64d7a2ed384dfd045bf867817feb399b02a2f2806efa29b456f93ccb546fa75a80de4249424ee8bd0f9ffaf452d1d17d04fbf03c33d1cf51d951f8a00de360d0338cac1b3b9d337d1de0091714dea391774ea546241d64104fc05fb472179b26162ef8ba0039c18e60aa23e09bfcc108996a9141ffef7b648d0e4181f6519489a731cf68b90a7d41979ae0bb03ba839ec12b507fd98c6dfb722a5e98031322ad2d0a48c0a7b380d6e08d1ba9d912cdd60ba42742394c6590f239062bb4cdc74ddf032a80c689cad02842c8a20a95c5360b16d75f4841915b866179c043f8e2770bebe2549e6811296b175739e33c04cdf406ba0c1259a3b5247713945a0006c28fbe7b7ceef9722bd85f7adc37a00f49bda3721f2781321458620713d0a7ac5e3141b0c90bb62b21ed3c9abe31b7588cac76374120e7fe889348b302c75b2377589cca0a306db892f8311bef6fd0b3053bd7358913f3e4593f90cb839b0cbdb1ab41f995cb083ae7de8c388221b79979acea8aea4ce09ee0670396a4c31975c4855317560c39161896d2551f498800e769f3de9de805ae9d456851bb3718cfe7f83b3691ff845842fd4375ba895887931f7c0dae7f479835fce49136691e0bee5e51682d92cbac7262b67578b83fba1f60c94a0fd01a45c74622261fd019c2f8454a5bd314ac3c07097c8376dd463f1392d7f4e1b4513e060a5b5ea6b4d8650f8cb1cd044b4492e27b6afb4dc2cf8e1af43f690fab5b3b4a77d8d28ba12be01b4015d02163aabedd04d671f714f0d46ba856e3809f32c32df248b60f179d714a08024c69362d618a6bcccceb2033e082281831bd3e1d0c2eb783e4893f81ff17dcdeb47dc711084051a7123b6ec497c0649dc2588ff4bc91d11b578ce1c9021a57ff23dd29259dae8061f7e97694868ac0859f5b27db8aef7a8f7262f2ba583464061f0a2b2b82bc8d4e7f6699daba3736ad816abf5394a8135cf7f7d2148eadb208260de840c5f8d010c52d232a269548efa3580d0e303980b4387bca5cb961512032031a5d6bdd5226ed39ca53b89423a5ca256f7297be216804868a0fe35c2deba89ca545382e8325f537c982be70b3a3f40650b0e5852b7196b00b8a0d5d1e1ec03f99663b538d408add217661eb2217651862f4f6453e7ea6c5e00777e0479abb71e8b05c3e454982994b2c5b6550c21e5ec2d9e286017f6116eb27067030a39520b6b048d48e32502c293ecbbccb5efddbfef92560b258cae2d31b22d9121566ce1ebb26a9ce6bc989443a55be809f3054b517be30e73364cf449a1bef179a9fcfb8e06e7320967ee233b5bf840ba98f230e0f74c24d48d20a63479c657920335c62fa3b73244bdf29af7b9e2b884ce272ee77213d0c66b58836a8febbf86045af912326c70be5c371f3cb4423652fce2a18b8eaa145a3e214528a4bb0cf6a47b9a9b7c594f1a7228def119302d82b8a17d43d7b2503245c5e45c5611cd21bd196d20d33583b90fa5eefc5997e26682e9049df3d7185b3505af6e46eb7358dfa79c4aefc0fb1b1f5840c2f2b1ab84c7c7fc316b66689a3e03771a02be8171dd6599355bc6df0fccd23d67931faaf99a3308be1fab0ad60be0148195a1bc29b705186bdc62a47344fefe3b786cb2ff5960600d1e918f2746ae126b5846db0dcf8767226a229fdb41e8503251c44075957cdecc51f25f7051fae6432dd9c62c0274634165fd6696f8440df0b17f1034b88b3512f8c0c8e7bd8b0e2a185f61abc1a1ba88c25b19ef4502c2ccd23cf3187bb7d8b1c02a1568e48c63c4c0fb8297439e9459b7567ffc51a8bff0cc1725e50c4f71d4e5fd8e1f99f04a26dbf450afe396258aa364b35c8417f887c6ab9fc7563ee950236b40c640cc4aba936faae586b38edb5bc9fa862fd2aaebf88925cffa359fc6c5d2d77b6487f83ff8b48f650d911b4fb45499c8edba9ca3020df9c1b14271a78dad7ef87acd8ade3d650196fc94ca6b73587f1384ddf77aa048c3337b3e3467cf304a8edfa3ff76b97de65eb677ec66d102e52751da60d822ad53fcf2bbb4054aca3a95ecb09bc09a54ce7ac7a0e7e2599ad58572148ed3fef98eb50ac164f5977022f3452676bf1d42a067a19977e77d94a7858051cfb486016855b10df2366bd1ce4f3c3a4b648bc4b59c157746df99f3337d5608c7bebd01b51b8a737f8ca5db2b0c1df8dd38b724aa281bd37e158b18424c1133e7040994781fd7127e989d732b1fb5088188728631a4224f501cbd93299cfe5f08fffcc9c1a6c7283e1d856f2439a774fb4fa6047fc94b94d01c1f14ec49a44278116f253747068bd4f3020486de8dd217f2b4cf2fb7da1e6244dc10678d9d69cae4761fcb83800131be428bb3b518344c3e6613a0a2db17882428cb4c69e72065f1276401ad25b2a957cc3a9d242bc9f56296a31e30628cf010cb2ada07682a172fe0444d69aecf5e078d6470e16587952374bb2246ba222d41583be367f24462ee2cd041fac701a795780dbced3392bd27fb610f37dc182f5c580aac0f388d6c9d28cc394b19f34397d1f96385773d4bf497832eb890edb4e4890c7224502ae88eb7c75863b450e677d55400ffd7205e00636b403ac0929a40f3b763712277d554c4659fad5bfa011146d2fb0e296124c9fa7e6004445b81f573056c75e16665c766cbea8b19bd68b619ae348539ef685406c0d51bde2c16"}}]}]}, 0x103c}, 0x1, 0x0, 0x0, 0x4845}, 0x880) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000002040)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001dc0)={0x218, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x81}]}]}, @NL80211_ATTR_REG_RULES={0x168, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x55aa}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x48}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc673}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffd}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xdc54}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfc}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x218}, 0x1, 0x0, 0x0, 0xe179066255eea4e2}, 0x4000040) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000002080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r0) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x74, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TESTDATA={0x42, 0x45, "99cd9facd3dd9e32e21dbc79fe1d33fb0e299e5d1dae123e71d48ea91b24224fac793afb22229e1a005307cfb07972ee9f65694be44d33baa1f68d735aa1"}, @NL80211_ATTR_TESTDATA={0x11, 0x45, "f693377292cf0f223c3e79f390"}]}, 0x74}}, 0x24000010) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), r4) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002380)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000002480)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000002600)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000025c0)={&(0x7f00000024c0)={0xd0, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000002640), 0xfe00000000000000, 0x541402) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002680)={0x2, 0x0, {0xde, @usage=0x4, 0x0, 0x1000, 0x401, 0x8001, 0x5, 0x1, 0x404, @usage, 0x5, 0x8f, [0x1ff, 0x0, 0x54db, 0x92b5, 0x2, 0x8001]}, {0x8, @usage=0x5, 0x0, 0xffff, 0x5, 0x8001, 0x100000001, 0x8, 0xa, @struct={0x7}, 0x1f, 0xb1f2, [0x0, 0xff, 0x1f, 0x5d2, 0x8, 0x5]}, {0x1, @struct={0x10001, 0x8}, 0x0, 0x6463, 0x80000001, 0x5, 0x9, 0x1, 0x88, @struct={0x7, 0x101}, 0xad, 0xf8e, [0x2, 0x1b7b, 0x2276, 0x0, 0x8000, 0x1]}, {0x1, 0xffffffff, 0x348}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000034c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000038c0)={0x1, 0x6, {0x65, @usage=0x3, r9, 0x94, 0x32, 0x7fffffff, 0x0, 0x1ff, 0x40, @struct={0xab0, 0x5}, 0xdf, 0x10000, [0x5, 0xfffffffffffffffe, 0x1, 0x9, 0x2c5dc978, 0x7c]}, {0x1, @struct={0xca, 0x3ff}, 0x0, 0x1, 0x100000000, 0x3ff, 0x4, 0x7ff, 0xd6, @struct={0x3, 0x40}, 0x101, 0x81, [0x1f, 0x6, 0x2, 0x2, 0x7, 0x1ff]}, {0x2, @usage=0xff, r10, 0x7, 0xfffffffffffffffb, 0xf201, 0x542b, 0x4ff, 0x11, @struct={0x7fffffff, 0x7fffffff}, 0x9, 0x3f, [0x1, 0x8, 0x8, 0x27, 0x1, 0x5]}, {0x2, 0x4, 0x4}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003d00), r0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f0000003e40)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x48, r11, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5}]}, 0x48}}, 0x44040) 16:16:41 executing program 7: ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x80, 0x20, 0x5, 0x9, {{0x17, 0x4, 0x1, 0xb, 0x5c, 0x66, 0x0, 0x8, 0x4, 0x0, @private=0xa010100, @multicast2, {[@cipso={0x86, 0x47, 0x3, [{0x1, 0xa, "2b9c791c25cdadb7"}, {0x0, 0xe, "3a6e278eb3597721bbe9542b"}, {0x0, 0x7, "2a61d46b03"}, {0x5, 0x2}, {0x0, 0x12, "9e4a6deb183197d9c1843d7b784ff014"}, {0x2, 0x2}, {0x5, 0xc, "d14708638f38ff225a11"}]}]}}}}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004081}, 0x480d1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x3706c6d6918e28c4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x5555555555550101}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x64}}, 0x40010) r5 = syz_io_uring_complete(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000400)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r6, 0x4, 0x40, 0x0, 0x5, 0x2c, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x80, 0x4, 0xce}}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x30}}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r9, 0x200, 0x70bd29, 0xfffffffc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x83}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xb3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) ioctl$TCSBRK(r5, 0x5409, 0x8) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000008c0)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000009c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000b00)=0xe8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000d40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x194, r10, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) [ 127.028986] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.030618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.031992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.037763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.039257] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.042597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.045617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.047989] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.056878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.059032] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.060550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.062657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.064078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.065962] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.067442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.068879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.071259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.072378] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.074790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.077128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.078105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.080630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.084358] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.087762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.089871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.092820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.093550] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.094974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.097217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.097952] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.100569] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.104489] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.106379] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.125575] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.128554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.136760] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.137787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.146324] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.165669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.176370] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.131048] Bluetooth: hci6: command tx timeout [ 129.194566] Bluetooth: hci5: command tx timeout [ 129.195245] Bluetooth: hci4: command tx timeout [ 129.195941] Bluetooth: hci1: command tx timeout [ 129.196374] Bluetooth: hci0: command tx timeout [ 129.196619] Bluetooth: hci3: command tx timeout [ 129.197044] Bluetooth: hci2: command tx timeout [ 129.258379] Bluetooth: hci7: command tx timeout [ 131.178426] Bluetooth: hci6: command tx timeout [ 131.242405] Bluetooth: hci3: command tx timeout [ 131.242550] Bluetooth: hci1: command tx timeout [ 131.242866] Bluetooth: hci0: command tx timeout [ 131.243335] Bluetooth: hci4: command tx timeout [ 131.243754] Bluetooth: hci5: command tx timeout [ 131.244147] Bluetooth: hci2: command tx timeout [ 131.307671] Bluetooth: hci7: command tx timeout [ 133.227918] Bluetooth: hci6: command tx timeout [ 133.290443] Bluetooth: hci5: command tx timeout [ 133.290493] Bluetooth: hci3: command tx timeout [ 133.290904] Bluetooth: hci1: command tx timeout [ 133.291345] Bluetooth: hci4: command tx timeout [ 133.291754] Bluetooth: hci0: command tx timeout [ 133.292148] Bluetooth: hci2: command tx timeout [ 133.354371] Bluetooth: hci7: command tx timeout [ 135.275459] Bluetooth: hci6: command tx timeout [ 135.338771] Bluetooth: hci2: command tx timeout [ 135.339436] Bluetooth: hci0: command tx timeout [ 135.339900] Bluetooth: hci4: command tx timeout [ 135.340393] Bluetooth: hci1: command tx timeout [ 135.340839] Bluetooth: hci3: command tx timeout [ 135.341333] Bluetooth: hci5: command tx timeout [ 135.403168] Bluetooth: hci7: command tx timeout [ 189.569898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.574640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.575957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.584629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.595351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.621510] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.632804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.635563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.640041] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.642176] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.695099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.701884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.703783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.711861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.721158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.770599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.774585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.776602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.779506] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.783040] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.784794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.788533] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.796976] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.813649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.817589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.818196] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.821578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.821999] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.832768] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.833301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.842106] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.843314] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.858846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.864266] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.869607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.872449] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.890575] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.892958] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.899132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.901413] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.659332] Bluetooth: hci0: command tx timeout [ 191.722378] Bluetooth: hci1: command tx timeout [ 191.787632] Bluetooth: hci2: command tx timeout [ 191.850621] Bluetooth: hci3: command tx timeout [ 191.982299] Bluetooth: hci6: command tx timeout [ 191.982409] Bluetooth: hci5: command tx timeout [ 191.982985] Bluetooth: hci4: command tx timeout [ 191.983546] Bluetooth: hci7: command tx timeout [ 193.706369] Bluetooth: hci0: command tx timeout [ 193.770561] Bluetooth: hci1: command tx timeout [ 193.834645] Bluetooth: hci2: command tx timeout [ 193.899218] Bluetooth: hci3: command tx timeout [ 194.026557] Bluetooth: hci7: command tx timeout [ 194.028210] Bluetooth: hci4: command tx timeout [ 194.028338] Bluetooth: hci5: command tx timeout [ 194.029667] Bluetooth: hci6: command tx timeout [ 195.754381] Bluetooth: hci0: command tx timeout [ 195.818423] Bluetooth: hci1: command tx timeout [ 195.882625] Bluetooth: hci2: command tx timeout [ 195.946416] Bluetooth: hci3: command tx timeout [ 196.074406] Bluetooth: hci6: command tx timeout [ 196.074923] Bluetooth: hci5: command tx timeout [ 196.075446] Bluetooth: hci7: command tx timeout [ 196.075912] Bluetooth: hci4: command tx timeout [ 197.802684] Bluetooth: hci0: command tx timeout [ 197.866377] Bluetooth: hci1: command tx timeout [ 197.931631] Bluetooth: hci2: command tx timeout [ 197.994618] Bluetooth: hci3: command tx timeout [ 198.123383] Bluetooth: hci4: command tx timeout [ 198.123417] Bluetooth: hci7: command tx timeout [ 198.123841] Bluetooth: hci6: command tx timeout [ 198.124238] Bluetooth: hci5: command tx timeout [ 252.281128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.287862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.291687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.305351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.310102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.431741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.437158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.439188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.440935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.444617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.447126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.450178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.457162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.492624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.502954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.511009] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.514022] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.516008] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.536583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.539032] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.542616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.549331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.551476] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.554859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.556990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.562202] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.565320] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.567251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.569815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.571717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.674796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.678745] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.682542] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.702615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.706216] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.712004] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.716654] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.729249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.779471] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.785441] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.442415] Bluetooth: hci0: command tx timeout [ 254.507584] Bluetooth: hci2: command tx timeout [ 254.570397] Bluetooth: hci1: command tx timeout [ 254.635375] Bluetooth: hci5: command tx timeout [ 254.826449] Bluetooth: hci4: command tx timeout [ 254.826909] Bluetooth: hci3: command tx timeout [ 254.954463] Bluetooth: hci7: command tx timeout [ 254.954516] Bluetooth: hci6: command tx timeout [ 256.490870] Bluetooth: hci0: command tx timeout [ 256.555680] Bluetooth: hci2: command tx timeout [ 256.618783] Bluetooth: hci1: command tx timeout [ 256.682676] Bluetooth: hci5: command tx timeout [ 256.874644] Bluetooth: hci3: command tx timeout [ 256.874858] Bluetooth: hci4: command tx timeout [ 257.002619] Bluetooth: hci7: command tx timeout [ 257.003259] Bluetooth: hci6: command tx timeout [ 258.538670] Bluetooth: hci0: command tx timeout [ 258.602625] Bluetooth: hci2: command tx timeout [ 258.666394] Bluetooth: hci1: command tx timeout [ 258.731224] Bluetooth: hci5: command tx timeout [ 258.922398] Bluetooth: hci4: command tx timeout [ 258.922935] Bluetooth: hci3: command tx timeout [ 259.050362] Bluetooth: hci6: command tx timeout [ 259.051563] Bluetooth: hci7: command tx timeout [ 260.586763] Bluetooth: hci0: command tx timeout [ 260.650367] Bluetooth: hci2: command tx timeout [ 260.716024] Bluetooth: hci1: command tx timeout [ 260.778409] Bluetooth: hci5: command tx timeout [ 260.970592] Bluetooth: hci3: command tx timeout [ 260.971581] Bluetooth: hci4: command tx timeout [ 261.098505] Bluetooth: hci7: command tx timeout [ 261.098547] Bluetooth: hci6: command tx timeout [ 314.499814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.504047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.505618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.510471] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.513155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.679789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.684692] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.688369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.698359] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.701225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.773202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.784816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.787841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.808695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.813204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.870941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.879542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.880984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.893631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.898691] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.941066] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.948925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.963569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.971632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.975626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.018167] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.026130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.028039] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.035980] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.038667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.169024] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.177778] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.179751] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.183093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.200056] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.222554] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.223945] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.231155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.232730] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.251602] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.586634] Bluetooth: hci0: command tx timeout [ 316.778465] Bluetooth: hci1: command tx timeout [ 316.842437] Bluetooth: hci2: command tx timeout [ 316.972362] Bluetooth: hci3: command tx timeout [ 317.099483] Bluetooth: hci4: command tx timeout [ 317.483287] Bluetooth: hci5: command tx timeout [ 317.610598] Bluetooth: hci7: command tx timeout [ 317.740053] Bluetooth: hci6: command tx timeout [ 318.635397] Bluetooth: hci0: command tx timeout [ 318.826669] Bluetooth: hci1: command tx timeout [ 318.890373] Bluetooth: hci2: command tx timeout [ 319.019451] Bluetooth: hci3: command tx timeout [ 319.146337] Bluetooth: hci4: command tx timeout [ 319.530364] Bluetooth: hci5: command tx timeout [ 319.659351] Bluetooth: hci7: command tx timeout [ 319.786367] Bluetooth: hci6: command tx timeout [ 320.684425] Bluetooth: hci0: command tx timeout [ 320.874801] Bluetooth: hci1: command tx timeout [ 320.938381] Bluetooth: hci2: command tx timeout [ 321.068694] Bluetooth: hci3: command tx timeout [ 321.195371] Bluetooth: hci4: command tx timeout [ 321.578859] Bluetooth: hci5: command tx timeout [ 321.706375] Bluetooth: hci7: command tx timeout [ 321.834362] Bluetooth: hci6: command tx timeout [ 322.731373] Bluetooth: hci0: command tx timeout [ 322.924313] Bluetooth: hci1: command tx timeout [ 322.986385] Bluetooth: hci2: command tx timeout [ 323.115586] Bluetooth: hci3: command tx timeout [ 323.242556] Bluetooth: hci4: command tx timeout [ 323.627629] Bluetooth: hci5: command tx timeout [ 323.756611] Bluetooth: hci7: command tx timeout [ 323.883712] Bluetooth: hci6: command tx timeout [ 377.569501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.571254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.572487] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.575183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.577034] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.670940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.680750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.697643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.719850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.725421] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.734550] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.737202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.740936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.742836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.744054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.746821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.747726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.748179] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.751054] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.752700] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.764412] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.773094] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.782578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.791574] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.796035] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.816971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.822114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.825747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.838745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.845036] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.136616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.142619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.161752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.195255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.269744] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.271942] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.285845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.295751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 378.326672] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.366882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.690638] Bluetooth: hci0: command tx timeout [ 379.819399] Bluetooth: hci1: command tx timeout [ 379.882440] Bluetooth: hci3: command tx timeout [ 379.883637] Bluetooth: hci4: command tx timeout [ 379.946471] Bluetooth: hci5: command tx timeout [ 379.947984] Bluetooth: hci2: command tx timeout [ 380.470344] Bluetooth: hci7: command tx timeout [ 380.522430] Bluetooth: hci6: command tx timeout [ 381.738377] Bluetooth: hci0: command tx timeout [ 381.866486] Bluetooth: hci1: command tx timeout [ 381.931015] Bluetooth: hci3: command tx timeout [ 381.932047] Bluetooth: hci4: command tx timeout [ 381.994388] Bluetooth: hci5: command tx timeout [ 381.994889] Bluetooth: hci2: command tx timeout [ 382.506467] Bluetooth: hci7: command tx timeout [ 382.570638] Bluetooth: hci6: command tx timeout [ 383.786773] Bluetooth: hci0: command tx timeout [ 383.914364] Bluetooth: hci1: command tx timeout [ 383.978395] Bluetooth: hci4: command tx timeout [ 383.978891] Bluetooth: hci3: command tx timeout [ 384.042393] Bluetooth: hci2: command tx timeout [ 384.042880] Bluetooth: hci5: command tx timeout [ 384.554414] Bluetooth: hci7: command tx timeout [ 384.618669] Bluetooth: hci6: command tx timeout [ 385.834380] Bluetooth: hci0: command tx timeout [ 385.962853] Bluetooth: hci1: command tx timeout [ 386.026589] Bluetooth: hci3: command tx timeout [ 386.027086] Bluetooth: hci4: command tx timeout [ 386.090377] Bluetooth: hci5: command tx timeout [ 386.090890] Bluetooth: hci2: command tx timeout [ 386.602681] Bluetooth: hci7: command tx timeout [ 386.666471] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 16:21:50 Registers: info registers vcpu 0 RAX=ffffffff812bfaf8 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888009617f01 RSI=ffff888009617f28 RDI=ffff8880096178a8 RBP=ffff8880096178a8 RSP=ffff8880096177e0 R8 =ffffffff867c5304 R9 =ffff888009617890 R10=000000000003b124 R11=000000000000ac74 R12=ffff8880096178b0 R13=ffff888009617898 R14=ffff888009617f30 R15=ffff888009617850 RIP=ffffffff813513d0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5648000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f23c6d26260 CR3=000000002fbad000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000001000000010000000000000000 XMM02=ff0000000000ff00000000000000ff00 XMM03=000000000000000000ff000000000000 XMM04=000000ff0000000000ff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888038924200 RBX=ffff88802f09f6e8 RCX=ffff88802f09f544 RDX=0000000000000002 RSI=ffffffff85c1bac0 RDI=ffff888038924200 RBP=ffffffff85c1bac0 RSP=ffff88802f09f538 R8 =0000000000000001 R9 =ffff88802f09f680 R10=000000000003b124 R11=00000000000043ac R12=ffffffff81350bc2 R13=0000000000000206 R14=ffff888038923780 R15=0000000000000002 RIP=ffffffff815182db RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5748000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f09a8712e60 CR3=000000000e340000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000ff000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000