Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:25376' (ECDSA) to the list of known hosts. 2025/05/24 07:25:16 fuzzer started 2025/05/24 07:25:16 dialing manager at localhost:46087 syzkaller login: [ 93.078900] cgroup: Unknown subsys name 'net' [ 93.217157] cgroup: Unknown subsys name 'cpuset' [ 93.265840] cgroup: Unknown subsys name 'rlimit' 2025/05/24 07:25:32 syscalls: 2214 2025/05/24 07:25:32 code coverage: enabled 2025/05/24 07:25:32 comparison tracing: enabled 2025/05/24 07:25:32 extra coverage: enabled 2025/05/24 07:25:32 setuid sandbox: enabled 2025/05/24 07:25:32 namespace sandbox: enabled 2025/05/24 07:25:32 Android sandbox: enabled 2025/05/24 07:25:32 fault injection: enabled 2025/05/24 07:25:32 leak checking: enabled 2025/05/24 07:25:32 net packet injection: enabled 2025/05/24 07:25:32 net device setup: enabled 2025/05/24 07:25:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 07:25:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 07:25:32 USB emulation: enabled 2025/05/24 07:25:32 hci packet injection: enabled 2025/05/24 07:25:32 wifi device emulation: enabled 2025/05/24 07:25:32 802.15.4 emulation: enabled 2025/05/24 07:25:32 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 07:25:35 starting 8 fuzzer processes 07:25:35 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x600}, {r0, 0x1000}, {0xffffffffffffffff, 0x8c}, {0xffffffffffffffff, 0x20}], 0x4, 0x200) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r1 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="7f6f0caba00b61951f0db775f7c7b93b86900302b4adb39590407b5d307097572439cd147dec493bcb1cbd4229341423e7f990eeadfcce4a7863267b631363beda28b93992934fff340c2153fffaa7b1411663f83bab7de9325e0b69cea4f44cb1f05f408261ecc87e56fdced04e", 0x6e, 0xc0000000000000}], 0x30a804, &(0x7f00000001c0)={[{@nodots}, {@dots}, {@fat=@gid={'gid', 0x3d, 0xee01}}, {@nodots}, {@nodots}, {@dots}, {@nodots}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\[.)+}\xbd'}}, {@dont_hash}, {@euid_gt={'euid>', 0xee00}}]}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0xdaa6, r1, &(0x7f0000000280)="7c76e75adea1aa6ad3a13bbc22eeb5d0370ead84e8fe54581ec15e544fef94535e036274b2cd784c43f735fd3dac691db97d7d5e8c9bbe0ac90856d8c0b840f896ba80073307f980ef99ef4229ed5e9afe0f81894cbbd1b22a24cf9a2c8f3b5713ed00aa080d503738421406a57d4db0eaae7f9bd8ec060810f956666a05d1b5d61f724622fc9dffbff35ad8", 0x8c, 0x1, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000380)="c1629f146c687e6917f0b95ac1719d5c44fa6e8c7860b4b7ad2743977aaa681956eaf0cc2023a60d984635f1f9cdf6499048b37a59415767b58f797a94e0a11c8e", 0x41, 0x7ff, 0x0, 0x1, r2}]) fcntl$notify(r0, 0x402, 0xa) write$P9_RLOCK(r2, &(0x7f0000000480)={0x8, 0x35, 0x2, 0x2}, 0x8) getdents(r2, &(0x7f00000004c0)=""/4096, 0x1000) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000014c0), 0x100080, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000006, 0x10010, r3, 0x2) execveat(r3, &(0x7f0000001500)='./file0\x00', &(0x7f00000017c0)=[&(0x7f0000001540)='\x00', &(0x7f0000001580)='-^\x00', &(0x7f00000015c0)='/dev/vcsu\x00', &(0x7f0000001600)=',*.^\x00', &(0x7f0000001640)='smackfsfloor', &(0x7f0000001680)='&$\x00', &(0x7f00000016c0)='\\[.)+}\xbd', &(0x7f0000001700)='defcontext', &(0x7f0000001740)='\x00', &(0x7f0000001780)='!\x00'], &(0x7f00000018c0)=[&(0x7f0000001840)='nodots', &(0x7f0000001880)='/dev/vcsu\x00'], 0x1000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) getpeername$unix(r4, &(0x7f0000001940)=@abs, &(0x7f00000019c0)=0x6e) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000001a00)=""/131) setxattr$trusted_overlay_upper(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), &(0x7f0000001b40)={0x0, 0xfb, 0x75, 0x3, 0x3f, "30dcbc8825f995653cc031622f9bdbf4", "703383e933faa1189e5f1ba9f69af0ac15d2036553b9e63b917851d239dbf6d25d49a2f438c4deb693a87423f14522eccdd23c469d77efaba07624623d2c1d9aa1e6d1a1ccf14ab27164aaf44d33add9d0fd3694fc2d30f4101761dfceb754fe"}, 0x75, 0x2) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000001bc0)) mount$bind(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x461, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000001cc0)={0x14, 0x11, 0x1, {0x40, 0x3}}, 0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)={0xc4, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000c0) 07:25:35 executing program 1: ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0xffff0000, 0x2, 0x7f}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x20}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}]}, 0x38}}, 0x4000000) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$CDROMRESUME(r1, 0x5302) ioctl$CDROM_SELECT_DISK(r1, 0x5322, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x7ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = pidfd_getfd(r4, r2, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000240)={0x40, 0x2, 0x7, 0x0, 0x0, [{{r1}}, {{r5}, 0x4}, {{r6}, 0x6}, {{r1}, 0x6}, {{r0}, 0x75120cb9}, {{r2}, 0x10000}, {{r1}, 0x80}]}) write$P9_RREADLINK(r2, &(0x7f0000000340)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x8, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x3f7, 0x200, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6}, 0x20000800) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000540)={@rand_addr=' \x01\x00', @mcast1, @mcast2, 0x80000001, 0x5, 0x5, 0x400, 0x7, 0x102}) msgrcv(0xffffffffffffffff, &(0x7f00000005c0)={0x0, ""/126}, 0x86, 0x1, 0x0) r7 = dup3(r4, r2, 0x80000) r8 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r7, {0xee01}}, './file0\x00'}) lsetxattr$system_posix_acl(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [{0x2, 0x4}, {}, {0x2, 0x1, 0xee00}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x5}, {0x2, 0x1}, {0x2, 0x1, r8}, {}, {0x2, 0x0, r9}], {0x4, 0x5}, [{0x8, 0x5}, {0x8, 0x7, 0xffffffffffffffff}], {0x10, 0x5}}, 0x84, 0x2) 07:25:35 executing program 2: ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f0000000000)={0x3, 0x80}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"6ac5532fdd45258306a74a435ecd9d39", 0x0, r0, {0x3c, 0x2}, {0x3, 0x3}, 0x8, [0x4, 0x45ee9cca, 0xdcd, 0x7, 0x935, 0x3, 0x8000, 0x83c, 0x6, 0xfb85, 0x100000000, 0x43, 0x4, 0x9, 0x9, 0x5]}) ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000180)={0x4, 0x81, 0x4, 0x1, 0x7, 0xff}) fstat(0xffffffffffffffff, &(0x7f0000000c00)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000d00)=""/41, 0x29}, {&(0x7f0000000d40)=""/41, 0x29}, {&(0x7f0000000d80)=""/96, 0x60}, {&(0x7f0000000e00)=""/212, 0xd4}, {&(0x7f0000000f00)=""/33, 0x21}, {&(0x7f0000000f40)=""/179, 0xb3}, {&(0x7f0000001000)=""/204, 0xcc}], 0x7}, 0x92}], 0x1, 0x0, &(0x7f00000011c0)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000001200)=0x1, 0x4) ppoll(&(0x7f0000001240)=[{r1}], 0x1, &(0x7f0000001280), &(0x7f00000012c0), 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1, {0x51170c02db526b56}}, './file0\x00'}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r2, 0x5396, &(0x7f0000001340)={0x2, 0x1}) r3 = add_key$keyring(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000001380)='big_key\x00', &(0x7f00000013c0)={'syz', 0x1}, &(0x7f0000001400)='.%\'\x00', r3) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r4 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000014c0)={0xa32, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000010980)={{0x1, 0x1, 0x18, r1, {0x8, 0x9}}, './file1\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000109c0)={'syz_tun\x00'}) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000010a00)='wg2\x00', 0x4) 07:25:35 executing program 3: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x1, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048841}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r3, 0x108, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4004041) r4 = fork() ptrace(0x11, r4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x20000080) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) ptrace$getsig(0x4202, r4, 0x6, &(0x7f0000000940)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x1, 0x3f, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioprio_set$pid(0x3, 0x0, 0x2000) [ 111.366165] audit: type=1400 audit(1748071535.303:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:25:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'ip6_vti0\x00', {'vlan0\x00'}, 0x3}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x44}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xd, 0xff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x44) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xeb27375a4cb2dd13}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x2d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4070}, 0x4048000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4040040) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000480)) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000600)={0x0, @initdev, @empty}, &(0x7f0000000640)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x1, 0x7, 0x10, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7810, 0x7, 0x9c, 0xfffffde7}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xc0, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x23, 0x80000, 0x7, &(0x7f0000000880)={0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x16c, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xad600}]}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x16c}}, 0x4040080) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000b40)={0x3, &(0x7f0000000b00)=[{}, {}, {}]}) 07:25:35 executing program 5: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x5000)=nil], 0x0, &(0x7f0000000100)=[0x0], 0x4) mmap$perf(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x3c2e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bond_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x28, 0x8, 0x3, 0x6, 0xa9, 0x8, 0x3, 0x8, 0x6, 0x1f, 0x9, 0x0, 0x1, 0x77, 0x6, 0x1, [0x1000, 0x200]}}) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/91, 0x5b) r2 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x107040, 0x23) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000380)) fsetxattr$security_capability(r0, &(0x7f00000003c0), &(0x7f0000000400)=@v1={0x1000000, [{0x1db, 0x80}]}, 0xc, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000440), &(0x7f0000000480)='system_u:object_r:restorecond_exec_t:s0\x00', 0x28, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl0\x00', r4, 0x29, 0x6, 0x7, 0x0, 0x41, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0x8, 0x8}}) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000006c0)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x23}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) setxattr$incfs_id(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f00000008c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) sendmsg$sock(r0, &(0x7f0000000b40)={&(0x7f0000000940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x4, 0x4, 0x3, 0x3}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="733db9e11293de25f969bc13d8f981c6d81fe2054f0bcb1abb9ed2d4159383253a5610ad01f9d359a4bfc86d87cf1d272b772e255ba07d96248c1eaf45232591fb53b58f72b32dff5ab89579dc528c817e29ca2fc1b78dbbabef7828a792fd757aa2aaa161badc381aff337b5353f7cb344249f51dd09eee27ab6a144e17fb861dd3bb52e8ebddeb53c557dd608d2f734ec6849dc2fb53ffb36564bb9f15ea44e6d42fd59abe0abe324aa4007ed95c5944de6aa0d205a5c5220e57574a5f81705b2b9057e569f3c0b753dc916a9b3269f3bb7b925b550cabf6c3886b662b66a0fb25c5bb11c57bb1686feeaf33", 0xed}], 0x1, &(0x7f0000000b00)=[@timestamping={{0x14}}], 0x18}, 0x24000884) 07:25:35 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffff, 0x20040) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='wlan1\x00') fcntl$notify(0xffffffffffffffff, 0x402, 0x28) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x0, @remote}}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5}}}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@dsss={0x3, 0x1, 0xac}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0xb, @void}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000200)={0x800, 0x800, 0x7, 0x0, 0x200000}) ioctl$CDROM_SELECT_DISK(r0, 0x5322, 0x855) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x101800, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{0x0, 0x8, 0x40000000, 0x6, 0x7, 0x0, 0x9, 0x4, 0x9, 0x3f, 0x7, 0x1ff, 0x0, 0x68, 0x3}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000340)={{r2, 0x7f, 0x100000000, 0x865, 0x0, 0x48d, 0xf17, 0x1, 0x81, 0x20, 0x3ff, 0x80000000, 0x0, 0x81, 0x5}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) r6 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0\x00'}) sendmsg$nl_xfrm(r6, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)=@getpolicy={0x1b0, 0x15, 0x400, 0x70bd2d, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e20, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x40, 0x67, 0x0, r7}, 0x6e6bba, 0x2}, [@sec_ctx={0x58, 0x8, {0x54, 0x8, 0x0, 0xff, 0x4c, "998c6ad84bcb9d114bc8526800b613d2e6367a7f741c595a3783ab03d717f5d2c8b184ca5238f3368aef7b287d55193d9a5d108735b3daa814776e6e481c2e01ed479aa5e24a5f3f408c0c9e"}}, @policy_type={0xa}, @policy_type={0xa}, @sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e21, 0x6, 0x4e22, 0x101, 0x2, 0xa0, 0x0, 0xff}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x32}, @in=@empty, {0x0, 0x7f, 0x9fc0, 0x4c, 0x7aea, 0x5, 0x40, 0x400}, {0x4, 0x7, 0xfff, 0x4}, {0x1ff, 0x8, 0xae}, 0x70bd2d, 0x0, 0xa, 0x4, 0x0, 0x10}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) 07:25:35 executing program 7: sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x74}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = accept$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', r4, 0x2f, 0x0, 0x9, 0xb, 0x34, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @empty}, 0x7889, 0x8049, 0xfffffff7, 0x6d}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa8, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x80c1) fchmod(r3, 0x100) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000007c0), 0x404080, 0x0) kcmp(0x0, 0x0, 0x4, r0, r8) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$BLKFRASET(r7, 0x1264, &(0x7f0000000900)=0x8001) r9 = socket(0x3, 0x1, 0x6) r10 = openat$incfs(r0, &(0x7f0000000a00)='.pending_reads\x00', 0x200, 0x40) io_submit(0x0, 0x1, &(0x7f0000000a80)=[&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5, 0x8, r9, &(0x7f0000000940)="c7f5845d8567090c1b7da20958c3372d4d2f1a03362fb996f3c07fb622216fc6b115050e7698d056424982d80d14b059407c470ca646ceeeb8f8cfc755e26fe9abb5e205fb5b63fff0b45b00d6cfa5eb26f98b6c85d0a5545f1e12a8c1ddb74c40a0328eb9dd31a37f77672f20bf7a3c4abe3815fcaca1d1b7fb1f4bf5536720873172cd62e8ea4cf0c001689cb8552fd65b981dfbb09517aa3365430c65d5b52d872abd78607ccd6d7bc056eb8a370e0d419b6751dbf4c5606d250daef48df7", 0xc0, 0x7fffffff, 0x0, 0x1, r10}]) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000ac0)={0xc42c, {{0x2, 0x4e22, @local}}}, 0x88) [ 113.037944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.040745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.044183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.052278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.054358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.059198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.068467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.073097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.079883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.082965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.092208] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.094191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.100942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.114027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.116514] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.119581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.121056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.127102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.128484] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.150109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.159222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.162210] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.162360] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.171271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.173716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.175816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.176121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.178975] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.212883] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.219484] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.262726] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.265266] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.265557] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.268842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.278988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.285027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.305189] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.329064] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.336509] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.343815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.170130] Bluetooth: hci1: command tx timeout [ 115.232170] Bluetooth: hci4: command tx timeout [ 115.232219] Bluetooth: hci0: command tx timeout [ 115.295741] Bluetooth: hci2: command tx timeout [ 115.295911] Bluetooth: hci3: command tx timeout [ 115.360712] Bluetooth: hci5: command tx timeout [ 115.360755] Bluetooth: hci7: command tx timeout [ 115.424015] Bluetooth: hci6: command tx timeout [ 117.215787] Bluetooth: hci1: command tx timeout [ 117.279802] Bluetooth: hci0: command tx timeout [ 117.279977] Bluetooth: hci4: command tx timeout [ 117.343660] Bluetooth: hci3: command tx timeout [ 117.344768] Bluetooth: hci2: command tx timeout [ 117.407996] Bluetooth: hci5: command tx timeout [ 117.408169] Bluetooth: hci7: command tx timeout [ 117.473353] Bluetooth: hci6: command tx timeout [ 119.264046] Bluetooth: hci1: command tx timeout [ 119.328014] Bluetooth: hci4: command tx timeout [ 119.328046] Bluetooth: hci0: command tx timeout [ 119.391746] Bluetooth: hci2: command tx timeout [ 119.392190] Bluetooth: hci3: command tx timeout [ 119.455958] Bluetooth: hci5: command tx timeout [ 119.457474] Bluetooth: hci7: command tx timeout [ 119.520694] Bluetooth: hci6: command tx timeout [ 121.312861] Bluetooth: hci1: command tx timeout [ 121.375660] Bluetooth: hci0: command tx timeout [ 121.376766] Bluetooth: hci4: command tx timeout [ 121.440641] Bluetooth: hci3: command tx timeout [ 121.441098] Bluetooth: hci2: command tx timeout [ 121.504692] Bluetooth: hci7: command tx timeout [ 121.504712] Bluetooth: hci5: command tx timeout [ 121.567874] Bluetooth: hci6: command tx timeout [ 175.285441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.287864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.291215] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.298146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.301542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.405700] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.427356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.431034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.434626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.441074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.444205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.452461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.455206] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.461350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.466018] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.480462] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.492342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.508719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.510714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.515929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.524400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.529313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.533140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.536263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.540551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.638558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.644349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.653378] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.663155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.672157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.877495] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.915369] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.951284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.952816] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.963148] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.970019] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.994374] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.995902] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.029946] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.033079] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.376672] Bluetooth: hci0: command tx timeout [ 177.503884] Bluetooth: hci1: command tx timeout [ 177.567690] Bluetooth: hci2: command tx timeout [ 177.633235] Bluetooth: hci4: command tx timeout [ 177.633503] Bluetooth: hci3: command tx timeout [ 177.759709] Bluetooth: hci5: command tx timeout [ 178.143740] Bluetooth: hci7: command tx timeout [ 178.207752] Bluetooth: hci6: command tx timeout [ 179.424791] Bluetooth: hci0: command tx timeout [ 179.551772] Bluetooth: hci1: command tx timeout [ 179.615684] Bluetooth: hci2: command tx timeout [ 179.679839] Bluetooth: hci4: command tx timeout [ 179.680036] Bluetooth: hci3: command tx timeout [ 179.808187] Bluetooth: hci5: command tx timeout [ 180.191763] Bluetooth: hci7: command tx timeout [ 180.256962] Bluetooth: hci6: command tx timeout [ 181.471749] Bluetooth: hci0: command tx timeout [ 181.600651] Bluetooth: hci1: command tx timeout [ 181.664818] Bluetooth: hci2: command tx timeout [ 181.727751] Bluetooth: hci4: command tx timeout [ 181.728536] Bluetooth: hci3: command tx timeout [ 181.856671] Bluetooth: hci5: command tx timeout [ 182.240475] Bluetooth: hci7: command tx timeout [ 182.303733] Bluetooth: hci6: command tx timeout [ 183.520824] Bluetooth: hci0: command tx timeout [ 183.648052] Bluetooth: hci1: command tx timeout [ 183.711967] Bluetooth: hci2: command tx timeout [ 183.776456] Bluetooth: hci3: command tx timeout [ 183.777020] Bluetooth: hci4: command tx timeout [ 183.903715] Bluetooth: hci5: command tx timeout [ 184.288720] Bluetooth: hci7: command tx timeout [ 184.352826] Bluetooth: hci6: command tx timeout [ 237.811971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.815284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.818362] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.829080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.833353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.938967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.941966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.943843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.945998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.953744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.957176] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.960741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.965767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.973232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.975861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.072465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.097340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.113769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.124103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.124735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.132709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.136555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.143826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.183764] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.191352] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.194563] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.197235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.205061] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.214116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.217855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.221780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.234889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.235787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.267261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.281300] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.286511] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.291907] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.304214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.310919] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.329049] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.904892] Bluetooth: hci0: command tx timeout [ 240.031721] Bluetooth: hci1: command tx timeout [ 240.031795] Bluetooth: hci2: command tx timeout [ 240.223788] Bluetooth: hci3: command tx timeout [ 240.223784] Bluetooth: hci4: command tx timeout [ 240.288664] Bluetooth: hci6: command tx timeout [ 240.352680] Bluetooth: hci7: command tx timeout [ 240.352772] Bluetooth: hci5: command tx timeout [ 241.954707] Bluetooth: hci0: command tx timeout [ 242.079878] Bluetooth: hci2: command tx timeout [ 242.080645] Bluetooth: hci1: command tx timeout [ 242.272489] Bluetooth: hci3: command tx timeout [ 242.272985] Bluetooth: hci4: command tx timeout [ 242.336003] Bluetooth: hci6: command tx timeout [ 242.399677] Bluetooth: hci7: command tx timeout [ 242.399723] Bluetooth: hci5: command tx timeout [ 243.999799] Bluetooth: hci0: command tx timeout [ 244.127875] Bluetooth: hci1: command tx timeout [ 244.127905] Bluetooth: hci2: command tx timeout [ 244.319711] Bluetooth: hci4: command tx timeout [ 244.319744] Bluetooth: hci3: command tx timeout [ 244.385615] Bluetooth: hci6: command tx timeout [ 244.447721] Bluetooth: hci7: command tx timeout [ 244.448174] Bluetooth: hci5: command tx timeout [ 246.047899] Bluetooth: hci0: command tx timeout [ 246.175815] Bluetooth: hci2: command tx timeout [ 246.176836] Bluetooth: hci1: command tx timeout [ 246.367695] Bluetooth: hci3: command tx timeout [ 246.367715] Bluetooth: hci4: command tx timeout [ 246.431844] Bluetooth: hci6: command tx timeout [ 246.495657] Bluetooth: hci5: command tx timeout [ 246.495759] Bluetooth: hci7: command tx timeout [ 300.147763] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.153157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.157059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.168328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.173392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.362834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.368211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.371408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.383480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.387452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.396687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.404116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.406426] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.427116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.432274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.440890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.451185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.494082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.508054] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.517851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.553794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.562071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.584145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.589889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.605248] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.607515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.622017] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.627230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.627507] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.634510] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.638637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.651682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.666154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.677347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.686211] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.777208] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.813157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.817064] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.850056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.912151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.240665] Bluetooth: hci0: command tx timeout [ 302.495784] Bluetooth: hci2: command tx timeout [ 302.496504] Bluetooth: hci1: command tx timeout [ 302.687911] Bluetooth: hci3: command tx timeout [ 302.752873] Bluetooth: hci5: command tx timeout [ 302.815828] Bluetooth: hci4: command tx timeout [ 302.879805] Bluetooth: hci6: command tx timeout [ 303.072717] Bluetooth: hci7: command tx timeout [ 304.288638] Bluetooth: hci0: command tx timeout [ 304.544676] Bluetooth: hci2: command tx timeout [ 304.545146] Bluetooth: hci1: command tx timeout [ 304.737028] Bluetooth: hci3: command tx timeout [ 304.800906] Bluetooth: hci5: command tx timeout [ 304.865221] Bluetooth: hci4: command tx timeout [ 304.929031] Bluetooth: hci6: command tx timeout [ 305.120772] Bluetooth: hci7: command tx timeout [ 306.336621] Bluetooth: hci0: command tx timeout [ 306.592781] Bluetooth: hci2: command tx timeout [ 306.593235] Bluetooth: hci1: command tx timeout [ 306.784858] Bluetooth: hci3: command tx timeout [ 306.850624] Bluetooth: hci5: command tx timeout [ 306.911839] Bluetooth: hci4: command tx timeout [ 306.976021] Bluetooth: hci6: command tx timeout [ 307.169619] Bluetooth: hci7: command tx timeout [ 308.384690] Bluetooth: hci0: command tx timeout [ 308.640817] Bluetooth: hci1: command tx timeout [ 308.641287] Bluetooth: hci2: command tx timeout [ 308.833318] Bluetooth: hci3: command tx timeout [ 308.896944] Bluetooth: hci5: command tx timeout [ 308.961483] Bluetooth: hci4: command tx timeout [ 309.024853] Bluetooth: hci6: command tx timeout [ 309.215659] Bluetooth: hci7: command tx timeout [ 362.748320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.756025] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.764369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.774423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.781126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.876459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.881711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.899330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.918234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.926415] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.932343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.937831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.942154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.953058] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.958182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.193322] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.205496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.212125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.236745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.243256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.307024] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.316130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.320952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.337051] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.348033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.437915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.461175] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.488450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.514198] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.519166] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.521389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.530367] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.532440] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.564190] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.569644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.576382] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.584960] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.631167] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.637988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.665212] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.832853] Bluetooth: hci0: command tx timeout [ 364.960616] Bluetooth: hci1: command tx timeout [ 365.024912] Bluetooth: hci2: command tx timeout [ 365.343964] Bluetooth: hci3: command tx timeout [ 365.408314] Bluetooth: hci4: command tx timeout [ 365.663656] Bluetooth: hci5: command tx timeout [ 365.728657] Bluetooth: hci7: command tx timeout [ 365.791807] Bluetooth: hci6: command tx timeout [ 366.879673] Bluetooth: hci0: command tx timeout [ 367.008441] Bluetooth: hci1: command tx timeout [ 367.071810] Bluetooth: hci2: command tx timeout [ 367.392596] Bluetooth: hci3: command tx timeout [ 367.455699] Bluetooth: hci4: command tx timeout [ 367.712702] Bluetooth: hci5: command tx timeout [ 367.776236] Bluetooth: hci7: command tx timeout [ 367.839984] Bluetooth: hci6: command tx timeout [ 368.927649] Bluetooth: hci0: command tx timeout [ 369.055825] Bluetooth: hci1: command tx timeout [ 369.120819] Bluetooth: hci2: command tx timeout [ 369.439815] Bluetooth: hci3: command tx timeout [ 369.503702] Bluetooth: hci4: command tx timeout [ 369.759901] Bluetooth: hci5: command tx timeout [ 369.823688] Bluetooth: hci7: command tx timeout [ 369.887670] Bluetooth: hci6: command tx timeout [ 370.975667] Bluetooth: hci0: command tx timeout [ 371.103640] Bluetooth: hci1: command tx timeout [ 371.167729] Bluetooth: hci2: command tx timeout [ 371.488191] Bluetooth: hci3: command tx timeout [ 371.551889] Bluetooth: hci4: command tx timeout [ 371.807707] Bluetooth: hci5: command tx timeout [ 371.871950] Bluetooth: hci7: command tx timeout [ 371.936609] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:30:45 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806ce31850 RBP=ffffffff85c1d1c0 RSP=ffff88802fcbfc18 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffffffff818ce870 RIP=ffffffff8151b09e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc8fa293540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005578bf4ffc70 CR3=000000002a898000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1d1c0 RBP=ffffffff85c1d1c0 RSP=ffff888014a1f8e8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b67d R11=000000000001245a R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff888014a1f9d0 RIP=ffffffff8151af57 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc551300540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc0878dda8 CR3=0000000014b40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000