Warning: Permanently added '[localhost]:39022' (ECDSA) to the list of known hosts. 2025/05/31 03:12:15 fuzzer started 2025/05/31 03:12:16 dialing manager at localhost:34361 syzkaller login: [ 94.015560] cgroup: Unknown subsys name 'net' [ 94.142738] cgroup: Unknown subsys name 'cpuset' [ 94.180163] cgroup: Unknown subsys name 'rlimit' 2025/05/31 03:12:31 syscalls: 204 2025/05/31 03:12:31 code coverage: enabled 2025/05/31 03:12:31 comparison tracing: enabled 2025/05/31 03:12:31 extra coverage: enabled 2025/05/31 03:12:31 setuid sandbox: enabled 2025/05/31 03:12:31 namespace sandbox: enabled 2025/05/31 03:12:31 Android sandbox: enabled 2025/05/31 03:12:31 fault injection: enabled 2025/05/31 03:12:31 leak checking: enabled 2025/05/31 03:12:31 net packet injection: enabled 2025/05/31 03:12:31 net device setup: enabled 2025/05/31 03:12:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/31 03:12:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/31 03:12:31 USB emulation: enabled 2025/05/31 03:12:31 hci packet injection: enabled 2025/05/31 03:12:31 wifi device emulation: enabled 2025/05/31 03:12:31 802.15.4 emulation: enabled 2025/05/31 03:12:31 fetching corpus: 0, signal 0/0 (executing program) 2025/05/31 03:12:32 starting 8 fuzzer processes 03:12:32 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@empty, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'gretap0\x00', r2, 0x10, 0x700, 0x0, 0xd48, {{0x2a, 0x4, 0x0, 0x4, 0xa8, 0x66, 0x0, 0x81, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1d}, {[@end, @rr={0x7, 0xb, 0xcb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @generic={0x94, 0x6, "4d025e0e"}, @timestamp={0x44, 0x8, 0x3c, 0x0, 0x0, [0x1]}, @timestamp_addr={0x44, 0x3c, 0xc5, 0x1, 0x0, [{@private=0xa010100, 0x4}, {@private=0xa010101, 0x101}, {@empty, 0x2}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@loopback, 0xfffffffc}, {@local, 0x8}]}, @ssrr={0x89, 0xf, 0x50, [@multicast1, @remote, @broadcast]}, @rr={0x7, 0x7, 0x56, [@dev={0xac, 0x14, 0x14, 0x39}]}, @ssrr={0x89, 0x1b, 0x3f, [@dev={0xac, 0x14, 0x14, 0xf}, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @multicast2]}, @timestamp={0x44, 0xc, 0x42, 0x0, 0xe, [0x1, 0x0]}, @noop]}}}}}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xe7823045}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20002804}, 0x4008090) r5 = request_key(&(0x7f0000000580)='blacklist\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)='batadv0\x00', 0xfffffffffffffffe) syz_genetlink_get_family_id$team(&(0x7f0000000640), r4) epoll_pwait2(r4, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000700), &(0x7f0000000740), 0x8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000780)={r5, 0xd6, 0x28}, &(0x7f00000007c0)={'enc=', 'oaep', ' hash=', {'crc32\x00'}}, &(0x7f0000000840)="74796b8bd298e60c688eb9fca48fa2fd9c190a162dcbd1fe4eef5f66d8a6eaa5fd8c0eeaace07c1e75e7c9edead4d4d2492fdf1e27007de72809c2762061c7e0340c8c3ebbb86a4b66fd3e1efbebac1d470fb18bd748b32642c558807e48455203d2c2781fd795bee4744db86cafb3cc64128cca0bacefc2ad784bd94c56a3a659bb32ae93cf9cb2318e35b0e00c54494c3b7f8aaeaaf31f311beba24178dc07eda5dfbed706a93b46254eaebd210b57d739194eeb565d8c602db4c85e078d630a2e2f29373821135d2f319f146ee43f5b98338d3fe2", &(0x7f0000000940)=""/40) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000980)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) keyctl$read(0xb, r5, &(0x7f00000009c0)=""/147, 0x93) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x32}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24048000) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000b80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r0, {0xa0}}, './file0\x00'}) 03:12:32 executing program 0: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x728, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7a}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x352}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x334}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004804}, 0x1) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000880) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x30, 0x2a, [@mic={0x8c, 0x18, {0xb53, "80c4dbd1825c", @long="85a9a14c783683294eab28b75f772173"}}, @mic={0x8c, 0x10, {0xc62, "a092fa014e22", @short="834511bbe7da0e5d"}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x14, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3f, 0x5, 0x1ff}}, @ibss={0x6, 0x2, 0xa0d}, @ibss={0x6, 0x2, 0x7}]}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048041}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x640804}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2f0, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x294, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf14a}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffc01, @mcast1, 0x6}}]}, {0x258, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ALLOWEDIPS={0x238, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x3}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) socketpair(0x27, 0x800, 0x6, &(0x7f0000000b40)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000cc0)=0xe8) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000d80)={&(0x7f0000000b80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, r0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x127}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 03:12:32 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xec7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x7, 0x1f, 0xfff9, 0x2, 0x15, "4b632375b5501b01"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x36}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="588d05bc6ce7"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ba0b4fe8f4a5"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7a3e11d89f5d"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x14010) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, &(0x7f0000000680)={0x2}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r6, @in_args={0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_MPATH(r8, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000014}, 0x80480c1) [ 110.268427] audit: type=1400 audit(1748661152.557:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:12:32 executing program 3: r0 = syz_io_uring_setup(0x7447, &(0x7f0000000000)={0x0, 0x8597, 0x1, 0x0, 0x48}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x3, 0x0, &(0x7f0000000100)="6219ec37bfc05d04897ad600a718661013cc4f5fa3e62c19eaa3ae4417a3481e93c1d998d1a30f1f58502029d2559ffff9d80930f2cd67f4578d8435d4b0baf1bd7b711f62a017a4d47275b1dfdd3b550499bc365992b83dcfe6fcf9dce06366025510dad0a45d79d166423e950304c2e173f23f7efd3b680608b1e5a340a3e6e67bd932840b99cd7716404a2b5bc8d2bbf2349ab668b830498701f7c97958a1bad6a0f2525961f93b4758723dbeb0d57c2dda3392f2200e11331ff99405cc2127cce33e557a453ba214bba123207ec0d54152dd79ab7b17603a8a9cd3e1dd5ceca82ff47812e3a62a1cf96f", 0x401, 0x0, 0x1}, 0x3) socketpair(0x6, 0xa, 0x2400000, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000002c0)={0x4b8, 0x13, 0x800, 0x70bd27, 0x25dfdbfe, {0x1f, 0x0, 0xc5, 0xb9, {0x4e20, 0x4e23, [0x9, 0x7, 0xffffff7f, 0x1f], [0x7, 0x6a1, 0x7, 0x5], 0x0, [0x4, 0x8]}, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "aef01861d3d6e85f8a0c130a9590bbc99d02a536761a531ce46cd1c6770feb85c9c4ea291ac3b7ee7030f23b7425c8c5ae6e6a1bfd870b11c70d36f7b75f82ad4bf1cf1cef19976c970bca0085c608e520f12e9c4bfd3cdad9bf6c02a5841c82f06d306d69773bd99f1d8dbc2cbba9d0d7f71a25e5c4eb69f76269f38bb31951aa6246605692d6beaae34412ee9e8dfcae90e20baabd89665edcd412d3294d27511e5a6516c9f3603b613953680aa0c6d171cae6d2025b7f6b8dec76934103bc1ea15619d1"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "22690a45a0f996b84c2ccc3a1803ab69b7b460f30e94fa7c76eb5497fed2c660f2499d0f82d3b8d1bff260ab9e7be9894e208c036bb6e2baa405f76cd95a8f721307ee5ed91e41a95530b9d2e23c6a707a0deaa1959941601e08dd5c92b2e87094a8ea012a04c700532f23749d92b1d3d822effefa49b907379213c8563c22d6"}, @INET_DIAG_REQ_BYTECODE={0x67, 0x1, "b3a90065761b8e3611646bba5b67fb387a5328d79255ae189770427fd25f5014e38e3f7f9c96356ea4eaafe3f89ee725523c56c8f97f8c8c17e12ac8cd05f6ca55dd5ec0911d73928bc0a1fe97cd8274c0738836c6b6f986c960156c17c06cdb4b3de2"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "48c11750d43dd105aba07d108f339efc8f891c5bc63b56b43d20e5bafa22d7991c7821135b962c3cdfb537e798828ce01a65a4f3c7f94bd071f0f32247be4963f1f2bc11659ee9a493051bb266a5ebe464ca2a9ed58ccedef46ce6af0a48440e655183d2e104a5db02d58a0f9383adf803f0d56395ddddcc52a538369af9cbec94ce61d37999c9ad6cef14e46a6d43409d4aea8c2dba8e7a8cfa252b"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "147cd64ed6a59a491cf9fc752404fdddb0c9422baf3a1ae95ee7516a582814ff0ca802378a066561e05ed4acbd4c558f6d3addd30b469ac20e99894a7b50e79a72cd7757fdb57f5d8b4667077cee73a35dbf8572a190b9f3cc069a899ab1da0bb9a65a1c6a44c304bdcc592fb5789363e7fc15bfa6c868149408c3a8"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "ee9dfa01988232d459871e8529ff83cbd1e4fd8b18b3c70a10e5a9defe75cabbbdbb5a8631ab445b2ce7851ad4bcd98e14c11e54327f7caff369620986bae3fcfbde124d68748f4fb950e83ea51d9eaf9f1c1ca8876b8d3e6f879241f38067c1b72cdcaf92b29881d4a97c9ea4658e533424"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "706ed9f92358eeef839994e90aff0e2c1a0a2f8e83b5d14436a830120f0ac429e49e0bbe465dfbb9a79ebd62228b7e06d252955cf0"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "1db83939024dd2a607065dc6ff4da629476970ccc1431c67de04919ad74392e533c7e3c946a2ce03b568c6cb3451db21b92729354bd8f9d9af95684b3843f051d8e9aeb3a1c4f816dbcad0b9aff6944c33df493e5dd5c99e4f9f3c34a9030c108c8c5923316b260a93469d87b99288de835579c93322d15284293b58ab4c6261d187d149ca41cd83cddceb0dadcce5c6c9f5af900be29266f292a216aa385292506d4e2f897191e905b6c731f946cc58fc5ebe5326c0fc67aca698742fbb03fc4e9f86d5df401d0d6d906177f3f21dc9ca4ab2a8"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x4b8}}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x58}}, 0x800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000980)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000a00), r3) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000b40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b80)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000c80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000cc0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000d80)={'sit0\x00', &(0x7f0000000d00)={'syztnl2\x00', 0x0, 0x4, 0xf9, 0x1, 0xce17, 0x16, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8, 0x10, 0x9, 0xb9}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000f00)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x3f, 0x8, 0x66, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x7a6, 0x8, 0x9}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001000)={0xa40, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x67e}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x30000}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x28c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x1, 0xad, 0x10001}, {0x1, 0x2, 0x4, 0x200}, {0x2, 0xff, 0x8, 0x4000000}, {0x4bba, 0x4, 0x2, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r11}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1000, 0x1, 0x1d, 0x1ff}, {0x2, 0x6, 0x20, 0xd89}, {0x800, 0x5, 0x40, 0xc37}, {0x9, 0xc8, 0x1, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x1f, 0x0, 0x1, 0x5}, {0x7c89, 0xd4, 0x75, 0x8f5}, {0x9, 0x2f, 0xc5, 0xffffffe1}, {0x5, 0xde, 0x99, 0x5}, {0x1, 0x0, 0x1, 0xfff}, {0x3, 0xe9, 0xd0}, {0x7ff, 0x3, 0x0, 0x77e}, {0xffc0, 0x1, 0x4, 0x6}, {0x5, 0x80, 0x7, 0x800}]}}}]}}, {{0x8, 0x1, r13}, {0x4}}]}, 0xa40}, 0x1, 0x0, 0x0, 0x40c4800}, 0x800) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r0, {0xa1f}}, './file0/../file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r14, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1eb}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000001c40)={'batadv_slave_0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c80), 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) 03:12:32 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11204100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xc418}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffd}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x100}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xa8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x35}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xbd}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x124}, 0x1, 0x0, 0x0, 0x60000c00}, 0x20040001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r5, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1d0, 0x15, 0x4, 0x70bd2a, 0x25dfdbfb, {0x9, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "e9446aaf89d0cc16914c2e77d0871cf514bbc0671df7b31e464bce1475d0926aa71a4ddfdfca5c42c9057e65c5453f9147633615d111487eb98d0820c990977d9db3e107e88cec4b0b4de440a6935edf8605a43f01d6c8f92dab1b9b5eac47b5bfaf6b2ce2109789e72f12dafde5d3ddc54ee66b155c50c6cb28767a6296a7a1b979f4292fe1ab3be386114dc7d078915864db8702959005407d8fe3caef1b1c2c8471d4d7dc31d8ab58c322fb297981d62228109b3d6d06ef3539cb7be2e58c992139af0e165b303ac88dd4deebb6"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "920776681b856aab9ed77493474c5a83e680feb35b8d9d5a4dc9942744a17d93e8825d71d9ea2e8dfbf19522be76fb2be91b34abfe242f57d450bd472f73a83b3160d4ef92c62d9b4a1516b5f4633bf9a0cbc6d75014f4a71e5356329b09796d9a5097f43cf1f99044ffaa6f8bc314b9b3e8a05f8f8187b442155f1cf364123647e229ce1de88c994c839dc777b46298bee90b58c247c8614387a34e528867a33fc952fd7c9f883f63e9700a9cc5890216f789d5fcbaf08ff9e8f5d4146689cc6d2f3a662985380c13ae575f48e8f592154c661440f4f8233cb28fb6961d04fc6424fa2f"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4001}, 0x4008811) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xe0, 0x15, 0x100, 0x70bd27, 0x25dfdbfd, {0x6, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "dc4825acc15b2007471716ae743bf53d753a7c5544c5beae9011fea486a2eee2035d7475fc94b913b641985887ded25a4bdc305726d6bc99f3ad2ebe9c326732008193577be165ce7ff430d340b1979a4b95b016de1d8380277686a8b61c4f15b8b83a884a692bcb6bf3355d0387eacc5b0e791130db53a46af1723e22c2ff1594ed0c2941f47b660bc585acd9ed5a81316ab667bd0b9ab91de496f5dfaa90e5db1db500f1a6fdc4ae970323f947194f7574fbe586c6927faf61a66d583caf8f5f31527f9f"}]}, 0xe0}}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4e}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4841}, 0x801) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r6) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r9, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x30}}, 0x8084) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x6d}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cd}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4c001) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x6}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) 03:12:32 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x6000000a}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x9}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x10002009}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc4, 0x39}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20020010}, 0x4000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x1f1001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = epoll_create(0x6) epoll_pwait2(r2, &(0x7f0000000240)=[{}, {}, {}], 0x3, &(0x7f0000000280), &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x17, {0x5d, 0xbd, 0x7, 0x91}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1e5}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x401}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4, 0x1f}}]}, @NL80211_ATTR_PBSS={0x4}]}, 0x64}}, 0x4008000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000440)={0x20001004}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, @in_args={0x1}}, './file0\x00'}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000500)={0xc0000000}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x4) io_uring_setup(0x139c, &(0x7f0000000540)={0x0, 0xe667, 0x2, 0x0, 0x2cc, 0x0, r3}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x40) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000640)=@conn_svc_rsp={0x0, 0x0, 0xa, "85f7529a", {0x3, 0x2, 0x0, 0x2, 0x542, 0x67, 0x9}}) 03:12:32 executing program 6: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x80) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r0, 0xc392d920db5733b0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x1c}}, 0x10c1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}}, 0xc031) syz_io_uring_setup(0x2c11, &(0x7f0000000880)={0x0, 0xd0ee, 0x2, 0x2, 0x322}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000009c0), r4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000fc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a00)={0x578, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x53c, 0x8, 0x0, 0x1, [{0x2a4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x288, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5, 0x3, 0x4}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}, {0x294, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x288, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}]}]}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x578}, 0x1, 0x0, 0x0, 0x20000044}, 0x4002) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001000)={{0x1, 0x1, 0x18, r5, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x7}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xe1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1000}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x20}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x1000) 03:12:32 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x80000000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3d}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x44010) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x50090008}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r4, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0/file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x400, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {}, 0x2c, {[{@access_user}], [{@smackfsfloor}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x400c330d, &(0x7f0000000580)={0xfffffffffffff001, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r9, {0x80000000}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r10, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44040) [ 111.611287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.617925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.622114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.622648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.625603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.626452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.637577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.644089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.644973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.657468] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.728079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.745310] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.750301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.773322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.792408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.858254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.862473] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.869068] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.871859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.880200] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.884273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.886433] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.892126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.958713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.979189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.990502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.996918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.001218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.003941] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.024339] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.039946] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.044353] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.049844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.053252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.066138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.067823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.087089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.111372] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 112.133398] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.153581] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.680652] Bluetooth: hci0: command tx timeout [ 113.745192] Bluetooth: hci1: command tx timeout [ 113.872861] Bluetooth: hci2: command tx timeout [ 113.936839] Bluetooth: hci4: command tx timeout [ 114.063859] Bluetooth: hci3: command tx timeout [ 114.127812] Bluetooth: hci6: command tx timeout [ 114.192610] Bluetooth: hci5: command tx timeout [ 114.255841] Bluetooth: hci7: command tx timeout [ 115.728660] Bluetooth: hci0: command tx timeout [ 115.792776] Bluetooth: hci1: command tx timeout [ 115.919803] Bluetooth: hci2: command tx timeout [ 115.983853] Bluetooth: hci4: command tx timeout [ 116.113800] Bluetooth: hci3: command tx timeout [ 116.176851] Bluetooth: hci6: command tx timeout [ 116.240451] Bluetooth: hci5: command tx timeout [ 116.303833] Bluetooth: hci7: command tx timeout [ 117.777340] Bluetooth: hci0: command tx timeout [ 117.840610] Bluetooth: hci1: command tx timeout [ 117.967868] Bluetooth: hci2: command tx timeout [ 118.032068] Bluetooth: hci4: command tx timeout [ 118.160312] Bluetooth: hci3: command tx timeout [ 118.223930] Bluetooth: hci6: command tx timeout [ 118.288510] Bluetooth: hci5: command tx timeout [ 118.353341] Bluetooth: hci7: command tx timeout [ 119.824130] Bluetooth: hci0: command tx timeout [ 119.889035] Bluetooth: hci1: command tx timeout [ 120.015994] Bluetooth: hci2: command tx timeout [ 120.080841] Bluetooth: hci4: command tx timeout [ 120.209400] Bluetooth: hci3: command tx timeout [ 120.273001] Bluetooth: hci6: command tx timeout [ 120.336880] Bluetooth: hci5: command tx timeout [ 120.400079] Bluetooth: hci7: command tx timeout [ 171.941480] syz-executor.3 (283) used greatest stack depth: 24640 bytes left [ 173.981670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.983947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.991488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.006145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.013522] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.103968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.106133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.111198] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.115957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.118332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.267241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.272688] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.282079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.296595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.309177] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.324558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.331149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.334003] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.337041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.339194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.428535] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.440804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.444924] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.446696] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.450971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.454306] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.456110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.461379] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.474432] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.476045] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.478473] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.483717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.494207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.497021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.498791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.503437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.515320] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.529436] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.531252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.536866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.080979] Bluetooth: hci0: command tx timeout [ 176.143855] Bluetooth: hci1: command tx timeout [ 176.399985] Bluetooth: hci2: command tx timeout [ 176.400562] Bluetooth: hci3: command tx timeout [ 176.591927] Bluetooth: hci4: command tx timeout [ 176.592574] Bluetooth: hci6: command tx timeout [ 176.593124] Bluetooth: hci5: command tx timeout [ 176.655885] Bluetooth: hci7: command tx timeout [ 178.128804] Bluetooth: hci0: command tx timeout [ 178.191817] Bluetooth: hci1: command tx timeout [ 178.448028] Bluetooth: hci3: command tx timeout [ 178.448509] Bluetooth: hci2: command tx timeout [ 178.640102] Bluetooth: hci5: command tx timeout [ 178.640578] Bluetooth: hci6: command tx timeout [ 178.641836] Bluetooth: hci4: command tx timeout [ 178.703973] Bluetooth: hci7: command tx timeout [ 180.175841] Bluetooth: hci0: command tx timeout [ 180.240097] Bluetooth: hci1: command tx timeout [ 180.495887] Bluetooth: hci2: command tx timeout [ 180.496366] Bluetooth: hci3: command tx timeout [ 180.689151] Bluetooth: hci5: command tx timeout [ 180.689637] Bluetooth: hci6: command tx timeout [ 180.690875] Bluetooth: hci4: command tx timeout [ 180.751810] Bluetooth: hci7: command tx timeout [ 182.223869] Bluetooth: hci0: command tx timeout [ 182.288604] Bluetooth: hci1: command tx timeout [ 182.544207] Bluetooth: hci3: command tx timeout [ 182.544322] Bluetooth: hci2: command tx timeout [ 182.735873] Bluetooth: hci6: command tx timeout [ 182.735916] Bluetooth: hci4: command tx timeout [ 182.736413] Bluetooth: hci5: command tx timeout [ 182.799941] Bluetooth: hci7: command tx timeout [ 236.443451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.446907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.455453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.465611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.471192] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.646432] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.651133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.653070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.656907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.659035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.691977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.693475] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.694907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.705922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.709270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.776858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.787372] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.800434] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.805106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.807078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.808537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.816011] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.820119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.836558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.839046] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.963324] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.968675] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.971986] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.985688] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.994116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.018722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.048606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.049631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.062606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.126333] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.136940] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.157514] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.217497] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.226383] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.306420] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.544151] Bluetooth: hci0: command tx timeout [ 238.672040] Bluetooth: hci1: command tx timeout [ 238.737949] Bluetooth: hci2: command tx timeout [ 238.863842] Bluetooth: hci3: command tx timeout [ 238.927925] Bluetooth: hci4: command tx timeout [ 239.055833] Bluetooth: hci6: command tx timeout [ 239.375963] Bluetooth: hci7: command tx timeout [ 239.376003] Bluetooth: hci5: command tx timeout [ 240.591955] Bluetooth: hci0: command tx timeout [ 240.720332] Bluetooth: hci1: command tx timeout [ 240.783911] Bluetooth: hci2: command tx timeout [ 240.912037] Bluetooth: hci3: command tx timeout [ 240.977881] Bluetooth: hci4: command tx timeout [ 241.104994] Bluetooth: hci6: command tx timeout [ 241.423934] Bluetooth: hci5: command tx timeout [ 241.424556] Bluetooth: hci7: command tx timeout [ 242.641836] Bluetooth: hci0: command tx timeout [ 242.767841] Bluetooth: hci1: command tx timeout [ 242.831872] Bluetooth: hci2: command tx timeout [ 242.960812] Bluetooth: hci3: command tx timeout [ 243.025815] Bluetooth: hci4: command tx timeout [ 243.152821] Bluetooth: hci6: command tx timeout [ 243.473895] Bluetooth: hci7: command tx timeout [ 243.474083] Bluetooth: hci5: command tx timeout [ 244.688870] Bluetooth: hci0: command tx timeout [ 244.816051] Bluetooth: hci1: command tx timeout [ 244.879841] Bluetooth: hci2: command tx timeout [ 245.008907] Bluetooth: hci3: command tx timeout [ 245.073821] Bluetooth: hci4: command tx timeout [ 245.199863] Bluetooth: hci6: command tx timeout [ 245.520031] Bluetooth: hci5: command tx timeout [ 245.520087] Bluetooth: hci7: command tx timeout [ 299.175116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.183123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.188105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.195261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.200318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.248804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.258363] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.262578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.270229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.273812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.441128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.454471] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.461624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.467530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.471922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.498709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.508566] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.525126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.534049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.539180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.569402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.574229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.596207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.627322] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.635045] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.637711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.686056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.693656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.738439] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.785521] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.915410] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.938292] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.947343] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.949380] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.958049] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.989149] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.027146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.029692] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.033508] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.059965] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.263973] Bluetooth: hci0: command tx timeout [ 301.329806] Bluetooth: hci1: command tx timeout [ 301.519886] Bluetooth: hci2: command tx timeout [ 301.583917] Bluetooth: hci3: command tx timeout [ 301.776174] Bluetooth: hci4: command tx timeout [ 301.967919] Bluetooth: hci5: command tx timeout [ 302.159939] Bluetooth: hci7: command tx timeout [ 302.161149] Bluetooth: hci6: command tx timeout [ 303.311878] Bluetooth: hci0: command tx timeout [ 303.376141] Bluetooth: hci1: command tx timeout [ 303.568389] Bluetooth: hci2: command tx timeout [ 303.632143] Bluetooth: hci3: command tx timeout [ 303.823851] Bluetooth: hci4: command tx timeout [ 304.016212] Bluetooth: hci5: command tx timeout [ 304.208325] Bluetooth: hci7: command tx timeout [ 304.209331] Bluetooth: hci6: command tx timeout [ 305.359944] Bluetooth: hci0: command tx timeout [ 305.424236] Bluetooth: hci1: command tx timeout [ 305.615920] Bluetooth: hci2: command tx timeout [ 305.680126] Bluetooth: hci3: command tx timeout [ 305.871875] Bluetooth: hci4: command tx timeout [ 306.064984] Bluetooth: hci5: command tx timeout [ 306.257897] Bluetooth: hci6: command tx timeout [ 306.258690] Bluetooth: hci7: command tx timeout [ 307.408944] Bluetooth: hci0: command tx timeout [ 307.471970] Bluetooth: hci1: command tx timeout [ 307.663982] Bluetooth: hci2: command tx timeout [ 307.728085] Bluetooth: hci3: command tx timeout [ 307.920141] Bluetooth: hci4: command tx timeout [ 308.112198] Bluetooth: hci5: command tx timeout [ 308.304034] Bluetooth: hci7: command tx timeout [ 308.304533] Bluetooth: hci6: command tx timeout [ 361.576645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.581940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.587539] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.596026] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.607225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.759987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.764185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.769847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.779221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.787320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.836511] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.862593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.868370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.883407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.901631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.922960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.927347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.931190] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.960036] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.961722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.976344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.978045] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.032605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.083661] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.091985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.110147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.112074] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.118592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.123278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.142592] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.174051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.187140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.193041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.206434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.232274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.240571] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.261885] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.306695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.317594] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.326603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.664060] Bluetooth: hci0: command tx timeout [ 363.856938] Bluetooth: hci1: command tx timeout [ 363.986840] Bluetooth: hci2: command tx timeout [ 364.113129] Bluetooth: hci4: command tx timeout [ 364.241149] Bluetooth: hci3: command tx timeout [ 364.368959] Bluetooth: hci5: command tx timeout [ 364.432823] Bluetooth: hci7: command tx timeout [ 364.496032] Bluetooth: hci6: command tx timeout [ 365.711891] Bluetooth: hci0: command tx timeout [ 365.905125] Bluetooth: hci1: command tx timeout [ 366.031833] Bluetooth: hci2: command tx timeout [ 366.159847] Bluetooth: hci4: command tx timeout [ 366.288178] Bluetooth: hci3: command tx timeout [ 366.416798] Bluetooth: hci5: command tx timeout [ 366.480789] Bluetooth: hci7: command tx timeout [ 366.543828] Bluetooth: hci6: command tx timeout [ 367.760095] Bluetooth: hci0: command tx timeout [ 367.951891] Bluetooth: hci1: command tx timeout [ 368.079857] Bluetooth: hci2: command tx timeout [ 368.207881] Bluetooth: hci4: command tx timeout [ 368.335826] Bluetooth: hci3: command tx timeout [ 368.464169] Bluetooth: hci5: command tx timeout [ 368.527870] Bluetooth: hci7: command tx timeout [ 368.592480] Bluetooth: hci6: command tx timeout [ 369.807835] Bluetooth: hci0: command tx timeout [ 370.000037] Bluetooth: hci1: command tx timeout [ 370.127824] Bluetooth: hci2: command tx timeout [ 370.255860] Bluetooth: hci4: command tx timeout [ 370.383965] Bluetooth: hci3: command tx timeout [ 370.513482] Bluetooth: hci5: command tx timeout [ 370.577403] Bluetooth: hci7: command tx timeout [ 370.639819] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:17:34 Registers: info registers vcpu 0 RAX=ffffffff87a5eb08 RBX=ffff888026639b80 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff88802663a628 RDI=ffff88802663a600 RBP=ffff88802663a5d8 RSP=ffff88806ce088d0 R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802663a628 R13=873d0e13b074236a R14=0000000000000000 R15=0000000000000002 RIP=ffffffff8151992f RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f74e142a1f0 CR3=000000001cb6f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000000c3 RBX=000000000000b6d2 RCX=1ffff110012c070c RDX=000000000000720a RSI=0000000000000001 RDI=ffff888009603860 RBP=ffff888009603780 RSP=ffff8880308bfc38 R8 =000000000003e400 R9 =000000000000b6d2 R10=00000000000000f9 R11=0000000000000001 R12=ffff888009603848 R13=ffff88800960385c R14=ffff888009603801 R15=0000000000000001 RIP=ffffffff814cff13 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f20e1e7f8e0 CR3=0000000032c81000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000