Warning: Permanently added '[localhost]:59141' (ECDSA) to the list of known hosts. 2025/06/12 23:45:01 fuzzer started 2025/06/12 23:45:01 dialing manager at localhost:40113 syzkaller login: [ 97.579541] cgroup: Unknown subsys name 'net' [ 97.723953] cgroup: Unknown subsys name 'cpuset' [ 97.771778] cgroup: Unknown subsys name 'rlimit' 2025/06/12 23:45:24 syscalls: 2214 2025/06/12 23:45:24 code coverage: enabled 2025/06/12 23:45:24 comparison tracing: enabled 2025/06/12 23:45:24 extra coverage: enabled 2025/06/12 23:45:24 setuid sandbox: enabled 2025/06/12 23:45:24 namespace sandbox: enabled 2025/06/12 23:45:24 Android sandbox: enabled 2025/06/12 23:45:24 fault injection: enabled 2025/06/12 23:45:24 leak checking: enabled 2025/06/12 23:45:24 net packet injection: enabled 2025/06/12 23:45:24 net device setup: enabled 2025/06/12 23:45:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/12 23:45:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/12 23:45:24 USB emulation: enabled 2025/06/12 23:45:24 hci packet injection: enabled 2025/06/12 23:45:24 wifi device emulation: enabled 2025/06/12 23:45:24 802.15.4 emulation: enabled 2025/06/12 23:45:24 fetching corpus: 0, signal 0/0 (executing program) 2025/06/12 23:45:27 starting 8 fuzzer processes 23:45:27 executing program 1: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "c580f945d1f4634e672cf9290baebf262cd7e3d3e4c9a01d8fea51274031420482a7435aed1545e869d8acb346da54218247564e4a2837739db6c7f920821e3b9eb545944e"}, 0x49) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_FREE(r0, 0x3305) r2 = pidfd_getfd(r1, r0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r3 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000100)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x7f, 0xfffffffffffff001, 0x9, 0x8, 0x2, 0x7fffffff]}, &(0x7f0000000280)=0x78) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/92, 0x5c) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2bc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x8c, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3550, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c5dc8e98a90830d4b6c9f99638d4b8a5b08929c5277dd4fb0248b36f0e2357a"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6b5d}, @WGDEVICE_A_PEERS={0x1fc, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xb95, @mcast2, 0x6d}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f2c0ce1f4175be273a99c26a5c4e86532a802b484102e7c8213813c416f5bd0a"}]}, {0x15c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @loopback, 0x3}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0xec, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) recvfrom(r2, &(0x7f0000000780)=""/77, 0x4d, 0x2041, &(0x7f0000000800)=@pppoe={0x18, 0x0, {0x2, @link_local, 'geneve1\x00'}}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f452e94650"}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4010) r6 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/rfcomm\x00') ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000a00)=""/44) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000a40)={0x8, 0x8000, 0x6, 0x6, 0x49a}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000a80)) 23:45:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x58}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x804) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0x428, 0x3f3, 0x2, 0x70bd2c, 0x25dfdbfe, {0x3, 0x2, 0x3d, [0x4, 0x2, 0x800, 0x1ae, 0xe7, 0x99, 0x1, 0x8, 0x8, 0x800, 0xe7, 0x1, 0x1, 0x7fffffff, 0x3, 0xfffffbff, 0x1, 0x2, 0xffff0001, 0x8, 0x5, 0xd11, 0x40, 0x4, 0xb71, 0x76db, 0x7d, 0xffff, 0x8001, 0x4, 0x1, 0x7fff, 0x8, 0x6, 0xfffffff8, 0xd7, 0x3c61, 0x800, 0x4, 0x1, 0x1, 0x7, 0x4, 0x3, 0xc2, 0x10001, 0x1000, 0x6, 0x7, 0x10001, 0x9, 0x4, 0x20, 0x8, 0x8000, 0x400, 0x580000, 0x1, 0x400, 0x7, 0x3, 0x3, 0x4, 0x35ef], [0x4, 0xff, 0xe7ab, 0x8, 0xff, 0x4, 0x1, 0x1, 0xffff, 0x6, 0x80000000, 0xfffffffd, 0x6, 0x3, 0xd0, 0xd42, 0x9, 0x7fffffff, 0x4, 0x2, 0x18, 0x2, 0x8, 0x0, 0x5, 0x9, 0x3083, 0xffff, 0x5, 0x622f, 0x34a2, 0x5, 0x2, 0x4, 0xfff, 0x55, 0xa1, 0x3, 0x7, 0x28, 0x80, 0x8000, 0x9, 0x81, 0x2, 0x3, 0xf5b1, 0x5c6, 0xfffffffe, 0x5, 0x7, 0xd2f, 0xe3, 0x4, 0x4, 0x7, 0x7, 0x4, 0x1000, 0x10001, 0x10001, 0x6, 0x80000000, 0x9], [0x6, 0x401, 0x7, 0x87, 0x4, 0x3, 0x4, 0x6, 0x8, 0x674, 0x6, 0x20, 0x9, 0x0, 0x1ff, 0x0, 0x10000, 0x4, 0x1ff, 0xffffff7f, 0xbc2e, 0x80000001, 0x6, 0xb1, 0x1, 0xb7, 0x5, 0xfff, 0x2, 0x3, 0x7, 0xdd, 0x9, 0x8, 0x1f, 0x61a, 0x9, 0x400, 0x80000000, 0x7, 0x2, 0x80000001, 0xffffff12, 0x710e, 0x7, 0x8001, 0x8000, 0xc6, 0xfffffffa, 0x800000, 0x400, 0xfffff001, 0x3, 0x101, 0x81, 0x3, 0x8, 0x8, 0x3, 0x611b, 0x40, 0x0, 0x8, 0xfffffffa], [0x1, 0xb3, 0x3, 0x1d, 0x0, 0x10000, 0x1, 0xb425, 0x6, 0x9, 0x7, 0x8, 0x28f, 0xdaa, 0x6, 0xffffffff, 0x9, 0xfff, 0x8c49, 0x2, 0x3, 0x6, 0x5, 0x20, 0x0, 0x4, 0x1, 0x20, 0x4, 0xc33, 0x4, 0x7, 0x6, 0x3, 0x200, 0x8000, 0x7ff, 0x3f, 0x4, 0x40, 0x200, 0x0, 0x9, 0x1f, 0x3, 0xd174, 0x3, 0x10001, 0x6, 0x5, 0x1, 0x1, 0x8001, 0x7, 0xffff, 0x101, 0x0, 0x5f, 0x40, 0x10001, 0x0, 0x0, 0x7, 0x7], 0x8, ['nl80211\x00']}, ["", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x44800}, 0x1890) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x200, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xb4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x9c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffd}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e08f2ce252bbebe3eeea263d1159541b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x80, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d086f789eb89e70ce546b9a6db06e892"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xc9438ab16314e6db}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "371f57feb75d04d97d36d839fe45e855"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "da19526242d4117475bbf12e1e176ebc1b4cb77152ae59f0556c93e1d5773b24"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5dd3698de7a47238fac358e51f2aaf33"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r3 = socket(0x2, 0x800, 0xffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc4, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x25}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b80)={0x1e8, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffdbc2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_REG_RULES={0x180, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa33}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5b}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x101}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff5780}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x480}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x39}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x98800000}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20000040}, 0x40804) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000ec0)={'ip6_vti0\x00', &(0x7f0000000e40)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x87, 0xe4, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8000, 0x711, 0x80, 0x3f}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000f80)={'syztnl0\x00', &(0x7f0000000f00)={'sit0\x00', 0x0, 0x29, 0x3, 0x4b, 0x800, 0x3e, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0x8001, 0x62}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000010c0)={'syztnl2\x00', &(0x7f0000000fc0)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x6, 0xffff, {{0x37, 0x4, 0x1, 0x9, 0xdc, 0x65, 0x0, 0x4, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x5, 0x7, "9a32f133a8"}, {0x6, 0x9, "226e646285f215"}, {0x0, 0x9, "a715bd3b35bd06"}, {0x2, 0x7, "6ddcb183e3"}]}, @noop, @lsrr={0x83, 0xf, 0x98, [@multicast2, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x47, 0x3, 0x4, [{@local, 0x4}, {@loopback, 0x6}, {@local, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @ra={0x94, 0x4, 0x8}, @lsrr={0x83, 0x13, 0x93, [@remote, @remote, @broadcast, @broadcast]}, @rr={0x7, 0x27, 0x7d, [@multicast1, @local, @remote, @private=0xa010100, @remote, @local, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0xc, 0x19, 0x1, 0x1, [{@multicast1}]}, @lsrr={0x83, 0x1b, 0x4d, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010102, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000001180)={'syztnl1\x00', &(0x7f0000001100)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x80, 0x1, 0x8, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast2, 0x700, 0x8, 0x7, 0x6}}) getsockname(r1, &(0x7f00000011c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001240)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000012c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001a00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f0000001300)={0x6bc, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0xf7, 0xb7, 0xfffffff8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfc000000}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x40, 0x5, 0x1}]}}}]}}, {{0x8, 0x1, r10}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0x56, 0x3, 0xaa}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x289}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6f59}}, {0x8}}}]}}]}, 0x6bc}, 0x1, 0x0, 0x0, 0x4}, 0x20004801) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r5) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000001b40)={'syztnl0\x00', &(0x7f0000001ac0)={'ip6_vti0\x00', r9, 0x0, 0xff, 0x3, 0x2, 0x42, @loopback, @local, 0x8000, 0x80, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000002000)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x170, r13, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdf491bab697e8fd8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) 23:45:27 executing program 2: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x4, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x59}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x50}}, 0x800) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x184, 0x17, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x130, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9e8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x184}, 0x1, 0x0, 0x0, 0x8048080}, 0x84) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5c}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x0, 0x0, {0x3, 0x48, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3f, 0x9}}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_KEYS={0xac, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, "60d5"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xd, 0x4, "006f7aa4185c14f7c0"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "510e7532a7"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "61fa6b9bdb"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "88510e8bfe474d00ebe8341d80"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x100}}, 0x4020001) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000580)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000980)=0x2, 0x4) setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f00000009c0)="8760f577def117349638ced8c43f20ff162c1ce5b5cd2d04e77cf4a83e261b4e2a332e3a73b4fca7482a1cc947e388743753d42f778332770e0146bfb160f33a277c11f5ebd936ebc4ece72987858364a19aad1017", 0x55) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000a40)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x3f, 0x20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x10, 0x80000, 0x1}}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000d40), 0x3, 0x400200) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x2404c041) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048041}, 0xc094) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000fc0)={0x3, 0x10, [0x74a, 0x20, 0xb8, 0xffffffffffffff00], &(0x7f0000000f80)=[0x0, 0x0]}) r4 = perf_event_open(&(0x7f0000001040)={0x5, 0x80, 0xc, 0x6, 0x8, 0x8, 0x0, 0x1f, 0x40800, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_bp={&(0x7f0000001000), 0x5}, 0x20a8, 0x3, 0x3, 0x7, 0x101, 0x81, 0x5, 0x0, 0x9, 0x0, 0xc10}, 0x0, 0xa, r2, 0xa) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000001180)={0x1, 0x3, 0x1000, 0x56, &(0x7f00000010c0)="012bfeea1a0837679681902c92929a9490ab9fd5e42ecd78105ca4dec74776fa52f6415dd3a850f16a96367f4d21848ec629f733112dba980d1b808387c32e107b2a908b20cb0f16278e7ba5a04b222bbc53c8cde53b", 0x29, 0x0, &(0x7f0000001140)="d115d34875a94815837d1103120d51e54df3ec8d40af7a5c8cb1a3a81c9a600df227a971eac3dee75f"}) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000001340)={{r0}, 0x7, &(0x7f0000001300)=[0x5, 0x4, 0x80000000, 0x1, 0x9, 0x7ff, 0x200], 0x2, 0x5, [0xd8, 0x3, 0x1, 0x10000]}) 23:45:27 executing program 3: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) r1 = eventfd2(0x3, 0x800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x109401, 0x0) r3 = timerfd_create(0x2, 0x80000) r4 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="265f86e278230a00acc1dca7e6604c2fa6e938fae54c41ee83fd32e0ce8c191b04cf59c0b010a25dc8ead3d1af00147d05fd0b46982ea703af815ea9ba2df5c90c4e40a54925ddaba4d8712c5928fb78da4c3fbc8ffa665cf519155cf445035266ebe815459fa258842fd05b3f4343b89775f73c1dfefc383aa6dd4c8639ef04", 0x80}], 0x10, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x401}}, {@nr_blocks={'nr_blocks', 0x3d, [0x39, 0x25, 0x38, 0x78, 0x33, 0x31, 0x0, 0x6d, 0x74, 0x37]}}, {@huge_within_size}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@mpol={'mpol', 0x3d, {'local', '=static', @void}}}], [{@subj_role={'subj_role', 0x3d, '&-]-['}}]}) r5 = syz_io_uring_setup(0x77e5, &(0x7f0000000280)={0x0, 0x164f, 0x0, 0x3, 0x2af}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x608080, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x2, 0xa7bc, 0x7, 0x0, 0x0, [{{r2}, 0x70}, {{r3}, 0x2}, {{r0}, 0xffffffff}, {{r4}, 0xba}, {{r0}, 0x8}, {{r5}, 0x7fffffff}, {{r6}, 0x1}]}) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c011) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000005c0)={0x8, {0x28, 0x7, 0x88, 0x1}}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x8802, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10008041) r9 = openat$incfs(r4, &(0x7f0000000740)='.log\x00', 0x40000, 0xa0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r9, 0x3304) socket$packet(0x11, 0x3, 0x300) fsetxattr$system_posix_acl(r4, &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x5}, [{0x2, 0x6, 0xee00}, {0x2, 0x5}], {0x4, 0x6}, [{0x8, 0x2, 0xee00}], {0x10, 0x6}}, 0x3c, 0x0) fdatasync(r7) r10 = pidfd_getfd(r9, r7, 0x0) ioctl$TIOCMBIS(r10, 0x5416, &(0x7f0000000800)=0x6) [ 122.941082] audit: type=1400 audit(1749771927.547:7): avc: denied { execmem } for pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:45:27 executing program 4: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0x0, 0xffffffff}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in=@empty, 0x4e20, 0xff, 0x4e21, 0x6, 0xa, 0x180, 0x0, 0x2b, r1, r3}, {0x0, 0x6, 0x3, 0x80000000, 0x7, 0x2, 0x2, 0x6}, {0x5, 0xfff, 0x8, 0x8}, 0x73, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x4d6, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x0, 0x0, 0x7f, 0x7, 0x2, 0x1000}}, 0xe8) r4 = signalfd4(r0, &(0x7f0000000440)={[0x6]}, 0x8, 0x80800) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "2931db5c326e02ab", "c5d30c8326e3dcd9a2dce8c620ae1799082f68ea6dfc1f1c103e434fdfd52ef0", "f8c69866", "553cf6b60860af1b"}, 0x38) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000004c0)={@loopback, @empty, r2}, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000500)={0x3, 'bridge0\x00', {0x1}, 0x78bb}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x3, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x515e13a6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x128, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49f33915}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x232938e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x447f33e3}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79ff655a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b674d89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ae075bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28c0ea87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cf6f508}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78c27c68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f7cde68}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x100}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xffffffc1}}, [""]}, 0x24}}, 0x20040894) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000980)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000a00)={0x0, 0xea60}, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x6) setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000ac0)=0x6, 0x4) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) 23:45:27 executing program 5: ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000000)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/17, 0x11}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000400), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000000580)=""/135, 0x87}], 0x2, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000000880)}], 0x2, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000940)=""/171, 0xab}, {&(0x7f0000000a00)=""/79, 0x4f}, {&(0x7f0000000a80)=""/166, 0xa6}, {&(0x7f0000000b40)=""/30, 0x1e}, {&(0x7f0000000b80)=""/251, 0xfb}, {&(0x7f0000000c80)=""/221, 0xdd}], 0x6}}, {{&(0x7f0000000e00)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000e80)=""/26, 0x1a}, {&(0x7f0000000ec0)=""/189, 0xbd}, {&(0x7f0000000f80)=""/135, 0x87}], 0x3, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f00000011c0)=""/164, 0xa4}, {&(0x7f0000001280)=""/140, 0x8c}, {&(0x7f0000001340)=""/51, 0x33}, {&(0x7f0000001380)=""/83, 0x53}, {&(0x7f0000001400)=""/194, 0xc2}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x6, &(0x7f0000002580)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x6, 0x20, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=""/4096}) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000003900)={0x1, "a9b9aaa441977d11ac4e0bf2b05e994a30429fc42300cc8927cd5238d71b5afabe2d82e49b01a6435a57b708317e5dff77d092d30f340c810d12a687757ef390a056e53c8826cbc724b6f5fea7b027ca156d10ceff1c042bbdd663e19e8e998ae31e4e400f3351452e3840fbaf4675555882bb099dad92c32089055e55f3586fcbc371a2d42503ae8a1b9d34398cc5d5dc666e6e76d0a8683ea228bf39d60ab2e211cf5db7ae251f2cd8a5bba53b9f02e537f23eea3cd539f545ce59dfcfce30d192fda571b21b32d258852046a3a33d0f70120506a821c41e0a628556ec411510c48ac82d4f3883a9c4f92b5bd9323a18634001c2f17606404ff4fc8e36c73585a4c8f5426d595e1e01938c41e1a5e966b7449879fa99051e27d8494d581b9efd4dfe6de187e85155abf33921da8bdfd42653a0d8be40fe656381a2b91691113b8ec5f0f45269f4cdcc70dcdf7e2e6c5a73041296e9c59a4f9d7263e5a978cfd61c1b7136ce21378c578b71c6a1a984c3f8d076a824d23efef7da1a0c3a04dbe99ace748e4a48a2b954488d0c5be870a58b290fa7ffda5e1e4026817fde3b29db917d9c5ae91b690ec04d950689dfeb5808f1ee0c45aa4a84094d94d394febb563552d96ca7b267c09b8f7e998ab5d6513456b263908798b480fc513ed31e8870ec0166b5496a525781f53d717a72e166721005acc091c5f1e9bd1cb29c5aa4"}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000003b40)) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000003bc0)=0x1) write$binfmt_script(r5, &(0x7f0000003c00)={'#! ', './file0', [{}, {0x20, 'syz1\x00'}, {}], 0xa, "26e2fcc7cd4eb8615364ca"}, 0x1e) write(r0, &(0x7f0000003c40)="0932d692e92083511d300bdccce29cbab0d726041745a913fb71e95a8f22c27ef4a91275e03e7202574904df90638d219c68b145dd6b784f682c95b5ff0c986a397cab7b6ddea8", 0x47) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x20, 0x1, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x20000010) r9 = socket$inet(0x2, 0x5, 0x80000001) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000003dc0)={'nat\x00', 0x66, "3f12b452b535dd03a8faeedf5b77365db2a9f580412f137b2c55f335d0c8b4d1dfbd9d97a56357529e40db7f03547814410448f2191ad942ded29094d25f433d6d5effc640af6bddd3d006aa3258f7a4b4127b1c6b641edc495fc29b261432e406b4eadb2823"}, &(0x7f0000003e80)=0x8a) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x11) r10 = openat$cgroup(r7, &(0x7f0000003fc0)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004040)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x9}, 0x20000000) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000004140), 0x60580, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r11, &(0x7f0000004240)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000894) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000043c0)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004380)={&(0x7f00000042c0)={0x94, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 23:45:27 executing program 7: ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000040)={0x132260bb}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000080)) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000000c0)="b57ebbc23dcdf2507038ba4c837baa7adc7f0f3308d65a3d5926d6d4991149280e64404aef1d2fcad01685d5fa0c61e17e815422877e4a259d765c3fc7854fa6678baf804d961f839bc80870eba903b229f68d7c1a3020034dab790a1862e4c3741634da06438d027da52b68fb6690cf7226ff5e6b6aa1e5906af390a6e3fc551dc627d7f0f2a3367218a4a82a4318e87213fcf5749f94803286860f97cd7cec6011234ac9cae87e51bff4c208c607db7ee58ed56ffc5d426ee66949eee4f8f8deb92ff56d0ea294f60da513c8fcc3d1958be89f7f12c66e7185750a26f4fcbb807fb8db9bc2fe480b44ee3c25b7cc84cc905ed5dc1d19d0579ebec2b61beca2") fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x53}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ab006d4ee0dc77794d9d65"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) fsetxattr$security_evm(0xffffffffffffffff, 0xfffffffffffffffe, &(0x7f00000003c0)=@sha1={0x1, "66c9ce823878ac036b30a506388ef83cbfa95e53"}, 0x15, 0x3) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000400)={0x0, 0x1000, 0x100000}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000440)=0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x1) fdatasync(0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x301c83, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSBRK(r1, 0x5427) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000600)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000e40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000680)={0x758, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "cc81ab2e06291e9b50a953e3070254"}, @ETHTOOL_A_BITSET_MASK={0xee, 0x5, "6a7d75c7709b31d7f3678cc0ea18931af8db4b168872dbcb085719ad096686e42b8e1c0109e20b20e3439e196f86eb901884bbdcd4d1f19b60d69f32e917cacb32b1bff32732a54b986b414340cd6fbd8f9d7b8663e1d845538dd6a89cc5f1f5057b1401e47f6a21856a8f457de2cda1498ff23e19c02f07e2af2708e7cdd0b3bc8cc17291a3f6a7632ba4ab398eb263c3cfde25004691cc5e118647b1ff59d7dceb9674f6ff23b6b31ee1108f571124a5711ffc200990ddbab0643b32c9d5e444e10994f346667f7a4204a5e4b2ab160e3f4df4cf2257d108c95638e3372715bf59048d715e61b09b66"}, @ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "7432b5f8d3fd8c982b642b8646ce4894f8df260e2f68063a9348cfcc3bcda54af61a303f68d5df174a7fffa721212ec479a1f834739adaa69de9bfeefd7a306920945d0c63ddf56f86ad112051e832effb482ac21563c92e5a0935f3349fa741fd6b1fdd7fd3be1071c886e7af5a67df9e04415cf73b58897b04411f6859198f1e634e84f460b9837c85f1a31d1105ddbe91e391a92e116fd997abdfc190b5b8a8c736a258e9795a229f8ff3356847e0e2edf05117dc502fbe0db66d7f770f67dc3b3b1fd27370c54935c92d52480222051e1c6ea5b2e01911c6dcb18c2daac6e3b82aa146ac6e6c6c58f7c5c6e9a09fd71a"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf947}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x824a}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "08ed01b31e8e64a979a44aa183afc6b6575fd87b47c7355b6f074ad83af1495cf89d658b3b831c2cc8237b7a6bfe34"}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[-/^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffbf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xc5*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "ad52e0f2dae4f34432d3f74815f2283ff222ea7a7350ada6f2d7257f243711a807be64d0f47e7e01c678297880d4545c7a38e56c9c7b2e869f0bf1b7a823fa2823fe1155c0afb0778d05a6e70086a43abcb2ee6dbcadf0110fc0eea24ec8aa5707289b88f7ce0f15de4fe627fb5572e03f3ce5d8057bd3b517ba84cc1a861ef33bdac6996eaf870d9de7e6f789e13ddd7d7e217d16b2d177fe480e4d7add8c8bf3cc84ee32b93a38fcb50a0ff0644a689a0fa3bd36a006415f650cca02999698ea5dd06b1869522d057723"}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "352218b28f7faca9"}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.:/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-.@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@)&\xb0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbd32}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\f$\\!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x758}, 0x1, 0x0, 0x0, 0x4048940}, 0x4000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e80)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000001ec0)={0x3, 0x100000000, 0x1000, &(0x7f0000000ec0)=""/4096}) 23:45:27 executing program 6: lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', 'E[\x00'}, &(0x7f0000000080)='}\x00', 0x2, 0x2) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000004c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001600)=""/174, 0xae}, 0x1000}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000001740)=""/100, 0x64}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/230, 0xe6}, {&(0x7f00000028c0)}, {&(0x7f0000002900)=""/208, 0xd0}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/189, 0xbd}], 0x7, &(0x7f0000003b40)=""/241, 0xf1}, 0xe3}, {{&(0x7f0000003c40)=@un=@abs, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000003cc0)=""/226, 0xe2}, {&(0x7f0000003dc0)=""/154, 0x9a}, {&(0x7f0000003e80)=""/79, 0x4f}, {&(0x7f0000003f00)=""/155, 0x9b}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {0xfffffffffffffffd}], 0x6, &(0x7f0000005040)=""/83, 0x53}, 0xffffffff}], 0x3, 0x41, &(0x7f0000005180)={0x0, 0x989680}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000051c0)={{0xa, 0x4e22, 0x6, @remote, 0xb12}, {0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x42}, 0x3}, 0x7, [0x80, 0x4f65, 0x0, 0x2, 0x5, 0x80000001, 0x1, 0x800]}, 0x5c) move_mount(0xffffffffffffff9c, &(0x7f0000005240)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000005280)='./file0\x00', 0x0) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f00000052c0)="d898601940ae33794db0fa73f7137e2fd0007c5ac34afb1ef6ef095ef34e8ac0b75296b1a349abf2274d24e3c6e1c41d98b18fe764fc160d79dfd4ae00b32159bb1f511ffe08fb0572fcc3aa3f8f28c93544d09e8a27bbcf05b06a941fdcbc5551581bc244104253eacaebc68b28b04df45931c13a36f25a571da3113db22e41c7c8134f0b7c7c1953b26c9618fbb803c52332157be349751bbee0481caaa890655832fecee96fbff558fe5cef1bc05235decde6a813fd77578bd7883a8d44fe4ff41f319f0ae7c70c2489678b301475ff9202f1891fb3b19d1df8bc86fd1063d11a792726f4a8821ed5a12807", 0xed) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000053c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000054c0)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x7b6711bcc2eee72b}, 0xc, &(0x7f0000005480)={&(0x7f0000005440)={0x1c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000040) lsetxattr$trusted_overlay_opaque(&(0x7f0000005500)='./file0\x00', &(0x7f0000005540), &(0x7f0000005580), 0x2, 0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000005640), 0x101081, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000005680)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000aaa000/0x2000)=nil, &(0x7f000071c000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000a07000/0x2000)=nil, &(0x7f0000f12000/0x3000)=nil, &(0x7f0000535000/0x3000)=nil, &(0x7f00000055c0)="faf9bbf09b393d920210f82fb15d8e8b99e431717a40d7802d5787b52919ebadef80f34a2e9b81be17c2604e45862ab4148f9ae41b19489989ac384294d1d4d5df6e947ba3eb97cd44723c15f36face2c4f3044313d18f56eb691e63d1025cd3cdaec093cd5a1b8b965c44d8", 0x6c, r2}, 0x68) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000006a00)={'ip6tnl0\x00', &(0x7f0000006980)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x1, 0xc2, 0x10, @empty, @local, 0x40, 0x8000, 0x5, 0x200}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000006ac0)={'tunl0\x00', &(0x7f0000006a40)={'syztnl0\x00', r3, 0x10, 0x8, 0xa5, 0x1, {{0x16, 0x4, 0x0, 0x5, 0x58, 0x66, 0x0, 0x1, 0x29, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x27, 0xde, [@multicast2, @rand_addr=0x64010102, @remote, @multicast1, @empty, @multicast2, @local, @rand_addr=0x64010100, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0x6a, [@loopback, @multicast1, @loopback, @local, @broadcast, @empty]}]}}}}}) dup(r2) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000006b00), &(0x7f0000006b40)='./file0/file0\x00', 0xe, 0x2) pipe(&(0x7f0000006b80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000006bc0)={r4, 0x1, 0x6, @broadcast}, 0x10) r7 = dup3(r2, r6, 0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000006c00)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000006d00)={&(0x7f0000006c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006cc0)={&(0x7f0000006c80)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 124.616458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.619866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.622878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.636657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.646255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.704200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.708627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.713594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.725463] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.737387] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.741365] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.743746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.747161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.775246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.792508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.796422] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.802156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.824665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.826883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.829302] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.836476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.841522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.845177] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.854243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.858395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.862582] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.866257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.873501] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.876178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.881824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.884530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.892052] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.892496] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.909663] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.913479] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.917424] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.951256] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 124.979144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 125.046843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 125.095513] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 126.752712] Bluetooth: hci0: command tx timeout [ 126.880200] Bluetooth: hci2: command tx timeout [ 126.880754] Bluetooth: hci1: command tx timeout [ 127.009064] Bluetooth: hci4: command tx timeout [ 127.009583] Bluetooth: hci3: command tx timeout [ 127.072099] Bluetooth: hci7: command tx timeout [ 127.072656] Bluetooth: hci5: command tx timeout [ 127.137403] Bluetooth: hci6: command tx timeout [ 128.800040] Bluetooth: hci0: command tx timeout [ 128.929320] Bluetooth: hci1: command tx timeout [ 128.929755] Bluetooth: hci2: command tx timeout [ 129.056110] Bluetooth: hci4: command tx timeout [ 129.056541] Bluetooth: hci3: command tx timeout [ 129.120323] Bluetooth: hci7: command tx timeout [ 129.120749] Bluetooth: hci5: command tx timeout [ 129.184077] Bluetooth: hci6: command tx timeout [ 130.848244] Bluetooth: hci0: command tx timeout [ 130.976083] Bluetooth: hci2: command tx timeout [ 130.976511] Bluetooth: hci1: command tx timeout [ 131.105172] Bluetooth: hci4: command tx timeout [ 131.105600] Bluetooth: hci3: command tx timeout [ 131.168062] Bluetooth: hci7: command tx timeout [ 131.168486] Bluetooth: hci5: command tx timeout [ 131.232317] Bluetooth: hci6: command tx timeout [ 132.896773] Bluetooth: hci0: command tx timeout [ 133.024060] Bluetooth: hci1: command tx timeout [ 133.024493] Bluetooth: hci2: command tx timeout [ 133.152573] Bluetooth: hci3: command tx timeout [ 133.153028] Bluetooth: hci4: command tx timeout [ 133.217019] Bluetooth: hci7: command tx timeout [ 133.217442] Bluetooth: hci5: command tx timeout [ 133.280253] Bluetooth: hci6: command tx timeout [ 187.318452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.322395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.326076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.334748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.340581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.515206] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.524072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.525522] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.526820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.529841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.531742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.537669] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.539721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.542691] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.545824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.593689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.608391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.628750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.630363] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.633949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.641530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.643352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.645456] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.647328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.648943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.649786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.658493] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.663598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.669406] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.687384] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.724309] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.742832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.756073] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.772780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.820532] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.823310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.834647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.836460] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.840330] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.853904] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.425101] Bluetooth: hci0: command tx timeout [ 189.600239] Bluetooth: hci1: command tx timeout [ 189.665051] Bluetooth: hci2: command tx timeout [ 189.728132] Bluetooth: hci5: command tx timeout [ 189.792499] Bluetooth: hci4: command tx timeout [ 189.793134] Bluetooth: hci3: command tx timeout [ 189.920165] Bluetooth: hci6: command tx timeout [ 189.984322] Bluetooth: hci7: command tx timeout [ 191.456062] Bluetooth: hci0: command tx timeout [ 191.648117] Bluetooth: hci1: command tx timeout [ 191.714059] Bluetooth: hci2: command tx timeout [ 191.776408] Bluetooth: hci5: command tx timeout [ 191.840290] Bluetooth: hci3: command tx timeout [ 191.840750] Bluetooth: hci4: command tx timeout [ 191.969433] Bluetooth: hci6: command tx timeout [ 192.033992] Bluetooth: hci7: command tx timeout [ 193.505794] Bluetooth: hci0: command tx timeout [ 193.696050] Bluetooth: hci1: command tx timeout [ 193.760253] Bluetooth: hci2: command tx timeout [ 193.824300] Bluetooth: hci5: command tx timeout [ 193.888392] Bluetooth: hci3: command tx timeout [ 193.888825] Bluetooth: hci4: command tx timeout [ 194.016303] Bluetooth: hci6: command tx timeout [ 194.080062] Bluetooth: hci7: command tx timeout [ 195.552046] Bluetooth: hci0: command tx timeout [ 195.744052] Bluetooth: hci1: command tx timeout [ 195.808198] Bluetooth: hci2: command tx timeout [ 195.872110] Bluetooth: hci5: command tx timeout [ 195.936181] Bluetooth: hci4: command tx timeout [ 195.936631] Bluetooth: hci3: command tx timeout [ 196.064087] Bluetooth: hci6: command tx timeout [ 196.128147] Bluetooth: hci7: command tx timeout [ 249.542837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.549369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.554535] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.564785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.568139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.569926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.574493] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.577384] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.598543] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.621939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.739770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.744463] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.749271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.753561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.755698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.761326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.767881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.788421] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.790559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.799641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.809849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.814819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.841200] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.894559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.897946] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.921555] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.926395] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.941868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.968730] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.972788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.975450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.981280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.985481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.987265] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.995236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.015899] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.017463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.025852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.035846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.039820] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.617176] Bluetooth: hci0: command tx timeout [ 251.680055] Bluetooth: hci1: command tx timeout [ 251.936132] Bluetooth: hci3: command tx timeout [ 252.000183] Bluetooth: hci2: command tx timeout [ 252.129352] Bluetooth: hci6: command tx timeout [ 252.130673] Bluetooth: hci5: command tx timeout [ 252.193547] Bluetooth: hci7: command tx timeout [ 252.194110] Bluetooth: hci4: command tx timeout [ 253.665125] Bluetooth: hci0: command tx timeout [ 253.729016] Bluetooth: hci1: command tx timeout [ 253.986200] Bluetooth: hci3: command tx timeout [ 254.049045] Bluetooth: hci2: command tx timeout [ 254.177162] Bluetooth: hci5: command tx timeout [ 254.177613] Bluetooth: hci6: command tx timeout [ 254.241109] Bluetooth: hci4: command tx timeout [ 254.241533] Bluetooth: hci7: command tx timeout [ 255.714104] Bluetooth: hci0: command tx timeout [ 255.777917] Bluetooth: hci1: command tx timeout [ 256.033022] Bluetooth: hci3: command tx timeout [ 256.097115] Bluetooth: hci2: command tx timeout [ 256.225347] Bluetooth: hci6: command tx timeout [ 256.225800] Bluetooth: hci5: command tx timeout [ 256.288603] Bluetooth: hci7: command tx timeout [ 256.289069] Bluetooth: hci4: command tx timeout [ 257.760556] Bluetooth: hci0: command tx timeout [ 257.825053] Bluetooth: hci1: command tx timeout [ 258.081021] Bluetooth: hci3: command tx timeout [ 258.145427] Bluetooth: hci2: command tx timeout [ 258.272124] Bluetooth: hci5: command tx timeout [ 258.272604] Bluetooth: hci6: command tx timeout [ 258.336268] Bluetooth: hci4: command tx timeout [ 258.336695] Bluetooth: hci7: command tx timeout [ 311.668919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.674188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.677263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.684823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.691638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.821604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.833587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.836533] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.849703] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.853352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.937931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.941783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.956597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.967386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.973888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.169460] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.176386] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.189432] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.191172] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.191411] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.196323] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.197887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.212348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.212634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.215351] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.223043] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.224230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.237878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.254803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.261380] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.346449] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.359283] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.363730] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.388878] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.399862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.407940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.418255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.418579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.427398] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.432110] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.760059] Bluetooth: hci0: command tx timeout [ 313.888366] Bluetooth: hci1: command tx timeout [ 314.016222] Bluetooth: hci2: command tx timeout [ 314.336127] Bluetooth: hci5: command tx timeout [ 314.401273] Bluetooth: hci4: command tx timeout [ 314.528085] Bluetooth: hci7: command tx timeout [ 314.593129] Bluetooth: hci3: command tx timeout [ 314.721071] Bluetooth: hci6: command tx timeout [ 315.809169] Bluetooth: hci0: command tx timeout [ 315.937353] Bluetooth: hci1: command tx timeout [ 316.065482] Bluetooth: hci2: command tx timeout [ 316.384397] Bluetooth: hci5: command tx timeout [ 316.449437] Bluetooth: hci4: command tx timeout [ 316.578019] Bluetooth: hci7: command tx timeout [ 316.640148] Bluetooth: hci3: command tx timeout [ 316.769058] Bluetooth: hci6: command tx timeout [ 317.856889] Bluetooth: hci0: command tx timeout [ 317.985109] Bluetooth: hci1: command tx timeout [ 318.113102] Bluetooth: hci2: command tx timeout [ 318.433198] Bluetooth: hci5: command tx timeout [ 318.497282] Bluetooth: hci4: command tx timeout [ 318.625436] Bluetooth: hci7: command tx timeout [ 318.688023] Bluetooth: hci3: command tx timeout [ 318.816258] Bluetooth: hci6: command tx timeout [ 319.904037] Bluetooth: hci0: command tx timeout [ 320.034201] Bluetooth: hci1: command tx timeout [ 320.161099] Bluetooth: hci2: command tx timeout [ 320.481041] Bluetooth: hci5: command tx timeout [ 320.545035] Bluetooth: hci4: command tx timeout [ 320.673028] Bluetooth: hci7: command tx timeout [ 320.737235] Bluetooth: hci3: command tx timeout [ 320.865189] Bluetooth: hci6: command tx timeout [ 374.008019] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.011194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.018096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.028823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.039370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.063892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.073929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.086931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.096309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.099751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.342542] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.348427] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.356799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.366303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.379214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.414832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.425467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.437457] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.457921] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.462072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.539024] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.555361] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.587947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.598784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.613380] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.621261] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.625805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.654507] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.669160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.676933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.708299] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.726843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.771275] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.801237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.820767] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.117307] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.182567] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.185428] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.199530] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.202652] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.096261] Bluetooth: hci0: command tx timeout [ 376.160039] Bluetooth: hci1: command tx timeout [ 376.480100] Bluetooth: hci2: command tx timeout [ 376.544077] Bluetooth: hci3: command tx timeout [ 376.928072] Bluetooth: hci6: command tx timeout [ 376.992679] Bluetooth: hci5: command tx timeout [ 377.056330] Bluetooth: hci4: command tx timeout [ 377.312295] Bluetooth: hci7: command tx timeout [ 378.146045] Bluetooth: hci0: command tx timeout [ 378.208018] Bluetooth: hci1: command tx timeout [ 378.528022] Bluetooth: hci2: command tx timeout [ 378.592162] Bluetooth: hci3: command tx timeout [ 378.977629] Bluetooth: hci6: command tx timeout [ 379.041205] Bluetooth: hci5: command tx timeout [ 379.104244] Bluetooth: hci4: command tx timeout [ 379.360333] Bluetooth: hci7: command tx timeout [ 380.192301] Bluetooth: hci0: command tx timeout [ 380.257540] Bluetooth: hci1: command tx timeout [ 380.576127] Bluetooth: hci2: command tx timeout [ 380.640169] Bluetooth: hci3: command tx timeout [ 381.024039] Bluetooth: hci6: command tx timeout [ 381.088208] Bluetooth: hci5: command tx timeout [ 381.152209] Bluetooth: hci4: command tx timeout [ 381.409292] Bluetooth: hci7: command tx timeout [ 382.240987] Bluetooth: hci0: command tx timeout [ 382.305039] Bluetooth: hci1: command tx timeout [ 382.625094] Bluetooth: hci2: command tx timeout [ 382.690385] Bluetooth: hci3: command tx timeout [ 383.073212] Bluetooth: hci6: command tx timeout [ 383.136176] Bluetooth: hci5: command tx timeout [ 383.201358] Bluetooth: hci4: command tx timeout [ 383.457040] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:50:30 Registers: info registers vcpu 0 RAX=0000000056770614 RBX=00000000d660dabc RCX=0000000000001003 RDX=000000007a8ed694 RSI=090000a913100cc1 RDI=00000000d660dabc RBP=0000000000000001 RSP=00007ffd297b8910 R8 =00007ffd297b8a50 R9 =00007f248e5dd440 R10=00007f248e3f81a0 R11=0000000000000007 R12=00007f248e28c2dc R13=00007f248e2916f8 R14=0000000000000009 R15=00007f248e5a3510 RIP=00007f248e5bb33c RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f248e099540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f248e572000 CR3=000000003183e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000000000000006c77 XMM04=65726874705f5f0074696e695f6b636f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff81b2132d RCX=ffff88806cf089cc RDX=1ffff1100d9e115a RSI=ffffffff85c1cc40 RDI=ffffffff81b2132d RBP=ffff88806cf08ad0 RSP=ffff88806cf08a50 R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b4cd R11=0000000000025a42 R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff888017360000 R15=ffff88800e23f000 RIP=ffffffff8142fb1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f482ebfe028 CR3=0000000030039000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000