Warning: Permanently added '[localhost]:58944' (ECDSA) to the list of known hosts. 2025/06/14 01:16:56 fuzzer started 2025/06/14 01:16:57 dialing manager at localhost:42061 syzkaller login: [ 92.174621] cgroup: Unknown subsys name 'net' [ 92.329805] cgroup: Unknown subsys name 'cpuset' [ 92.381520] cgroup: Unknown subsys name 'rlimit' 2025/06/14 01:17:14 syscalls: 2214 2025/06/14 01:17:14 code coverage: enabled 2025/06/14 01:17:14 comparison tracing: enabled 2025/06/14 01:17:14 extra coverage: enabled 2025/06/14 01:17:14 setuid sandbox: enabled 2025/06/14 01:17:14 namespace sandbox: enabled 2025/06/14 01:17:14 Android sandbox: enabled 2025/06/14 01:17:14 fault injection: enabled 2025/06/14 01:17:14 leak checking: enabled 2025/06/14 01:17:14 net packet injection: enabled 2025/06/14 01:17:14 net device setup: enabled 2025/06/14 01:17:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/14 01:17:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/14 01:17:14 USB emulation: enabled 2025/06/14 01:17:14 hci packet injection: enabled 2025/06/14 01:17:14 wifi device emulation: enabled 2025/06/14 01:17:14 802.15.4 emulation: enabled 2025/06/14 01:17:14 fetching corpus: 0, signal 0/0 (executing program) 2025/06/14 01:17:15 starting 8 fuzzer processes 01:17:15 executing program 0: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000080)='/'}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x9, "520a0d0e41ee8887be4a"}, 0xc, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x80800) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000300)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380)=[@sack_perm, @timestamp, @window={0x3, 0x8, 0x3f}, @timestamp, @sack_perm], 0x5) ioctl$int_out(r0, 0x6, &(0x7f00000003c0)) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000400)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0xee00, r2}}, './file0\x00'}) r4 = syz_mount_image$nfs4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2, 0x8, &(0x7f0000000980)=[{&(0x7f00000005c0)="a8b7461a1763e377be3001ea3120c5ae0cc83589e44f00bd2b9408c8f20fbf71b19bf1368210d99bcbfed69b9c8982ea5a30392801f8d1e0e87961701d375b7cdd67b572c3c344754de738a401db32da58e13c2b04327ef3119cd2636ab6f8e861dffafef184daffa8b18157d089651eab992a1eb155a77160ccc0c77e3c9410fb84db86591e77", 0x87, 0x2}, {&(0x7f0000000680), 0x0, 0x9}, {&(0x7f00000006c0)="396ec6b094d62665f0f644ecbb84bfbc58f763300144e23fd206405edcfd5d9052dc533b007789afd5b7185556188829cc91645479d2e58a3d767a30525a284317c2db699a5a2f13e4815740d2759a5d79fafabd7b1eda9cfcf5679e17f4037fe99703d546f1004f453271f8430d2db05a90", 0x72, 0x3}, {&(0x7f0000000740)="09d002a26eb969c7dea01ced881f087793458750026ae2a5f2d317ba81564a900631d83917c7165661f71376f6d2d762f72b5b3ffc5c0723fb396f03d9b1dac958cd821c5a64bdd690991f06d7590eda67766fc2100af1f1e7a3dfcf567b4a2341c1c1a389523184f12d3d5a8daccd533871f19826badb0d56180c62fca0a7a3", 0x80, 0x5}, {&(0x7f00000007c0)="1e690b73ced2bde5c9109d7d0e8fc7d3b427f64d6e", 0x15, 0x3}, {&(0x7f0000000800)="bf288d9374d89699c05fdf88af0e899c95f3a60460e781541daa2d626648842fce57e5589d31bbc7ca8f8f823d2d3c1f7d71aef68f4c3d3f3ea7c95e71d3209d", 0x40, 0x5}, {&(0x7f0000000840)="9d54acfa09e5a76b15978ff144d215facf5f911613e8c824a88709a4378cb2993859cb533cf63bf710271fb7ea142b5f0e5f5ff9aa48eb055512468dbfa62e851411ef29543e7409565fd419f3e4bac33e1f84962f7d3560996e61d09e752912bcc8514cf158500084c83672c8a14e4fca21f10979d389733fa54cf55af1ae1338e797498b0a94f35db2d90b620a20bc2b14f52a364f3e92a22bc027b3acee3f916ed219d802205a244fe7444d5a93b6", 0xb0, 0x7fffffff}, {&(0x7f0000000900)="b93a93f951a7399320d249f17ddb899d3bbd1a116d7380481a172f68eecdba23c6b4a4fbacd1474e14e5286af67644080b54b003d07a6b66d152fec12e23eac1d941e3e76455fdd116640cb954b6c0dc220a16d3c05d1cb1e137eccc0f26064813f52044212651fb46e941eccb001e7bc1103371c8f107130b3f5691b370", 0x7e, 0x3f}], 0x0, &(0x7f0000000a40)={[{}, {}, {')('}, {'y\x00'}, {'y\x00'}, {'y\x00'}, {'}'}, {'y\x00'}, {'9P2000.L'}], [{@pcr={'pcr', 0x3d, 0x37}}, {@obj_role={'obj_role', 0x3d, '&]'}}]}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000ac0)=0x1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x118, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x24}, @NL80211_ATTR_IE={0xd4, 0x2a, [@dsss={0x3, 0x1, 0x9}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random={0x6, 0xa0, "6ddcee39398e37c8d2cca1f950a014970e5aa36bb051e9ffe113f77f04af9d8aab56f6dc10c0c09bdb99c29c3bb9fa802ba27a6fa6744ca7345030ecd2a768d0a284b8d1a29bc194beef8fe9bc1946f21ae92ed3a132ede5b04c3d773246759ef26a3e40ad2df571cdb5bbabb03da8261885b7f09b4533bba48597b4ad4ad29edec8cb9a94156a7609f23a7ac2a96bb365064fca9c4bea426c136e220acfd0d5"}, @mic={0x8c, 0x10, {0xb15, "018d6cd41c86", @short="154ac18e1307336f"}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @chsw_timing={0x68, 0x4, {0xd52f, 0x8000}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000d00)) tee(0xffffffffffffffff, r1, 0x8, 0x8) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, 0x3f7, 0x2, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) 01:17:15 executing program 1: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logger_exec_t:s0\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x48001) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa292}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xec}, 0x1, 0x0, 0x0, 0x20040004}, 0x400c811) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9ebb}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xf9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}]}, 0x34}}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x90) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') symlinkat(&(0x7f0000000840)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00') r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24068814}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4a014) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x6c, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004000) openat$cgroup(r2, &(0x7f0000000d00)='syz0\x00', 0x200002, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000d40)) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c160}, 0x20040884) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000ec0)={0x7, 0x1b, 0x6}, 0x7) 01:17:15 executing program 2: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) bind(0xffffffffffffffff, &(0x7f0000000040)=@hci={0x1f, 0x1, 0x2}, 0x80) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'ip6_vti0\x00', 0x7}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000c00) r2 = accept(r0, &(0x7f0000000240)=@ax25={{0x3, @bcast}, [@bcast, @remote, @rose, @rose, @bcast, @remote, @null, @bcast]}, &(0x7f00000002c0)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x218, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x55, 0x1b}}}}, [@NL80211_ATTR_IE={0x1e9, 0x2a, [@dsss={0x3, 0x1, 0x18}, @fast_bss_trans={0x37, 0x9c, {0x9, 0x4, "c34bc50061a22a87b857f225c7b464a1", "2e163b84c689b22761b04dfde7aefe7b75dfc3d5496d93e684cfb28f1792e9ec", "3188ddcf2eebad9b1c447eb004d04e46a73013986a68f17bb68de3dead67e0e2", [{0x1, 0x23, "61120d8c7692774c57cc8ad4a48b7a5a4cc9bb30d6984f502c2465fe31bcd14d707a13"}, {0x2, 0xe, "786a899050d749aa03022a91a97a"}, {0x4, 0xc, "16ed2d7e8acacb691a1f3f37"}, {0x4, 0x5, "3b95f82c09"}]}}, @prep={0x83, 0x25, @ext={{}, 0x4, 0x1f, @broadcast, 0x569, @device_b, 0x7, 0x2558, @device_b, 0x5}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x81, 0x6c, 0x81}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xfa, 0x1, 0x0, 0x1, 0x20}}, @cf={0x4, 0x6, {0x6, 0x4, 0x8, 0x1}}, @peer_mgmt={0x75, 0x18, {0x0, 0xffff, @val=0x81, @val=0x40, @val="3b037707795bc971d6e4f5c5c95eeaf0"}}, @peer_mgmt={0x75, 0x6, {0x0, 0x80, @val, @void, @void}}, @random_vendor={0xdd, 0xda, "98ba4688c620a1ae757316ffb4eff5ee1c73b1e4214e705a4bd7f51ca87d31533ad38cbfb53be52fd700d6293456d737acf4a1f6202e62f00ddcd73006551342bbca7780c12a94f5acd66f33950bae8f62c7e0dd8deac896aa99da25b6ad4b9fe3d29ea9881cb9753ce66cfb1bf6ec48339eb7e2a5c662f5b3ad8fdbd1204513a10f28a036dfce7e133af089188b7b0024c5e53e8bc712455388f58cb89707fd246c3ec2d973afa9e8d72312a0f9f1492b3b1db3765f5fe8e69f44a9f47a481033e2e6401a3531b6d0d287b7f2ac72869d5495c941b31dafbe47"}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x218}}, 0x40000) connect(r2, &(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x2, 0x2, 0x3, 0x4}}, 0x80) r5 = open_tree(r0, &(0x7f0000000700)='./file0\x00', 0x800) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000026}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x158, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0xe}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x419}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xc}}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1578}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000b00)=@gcm_128={{0x303}, "06bb36d47749ddfe", "a0298a975a682818d19412668bb711ff", "711d1bf4", "877df638dc48bffd"}, 0x28) mount$bind(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x1002010, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000c00)=0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r1, 0x704, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004804) 01:17:15 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7c) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="51494a5b6b02e8179f46198bc7f098ef", 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x6f00}}, './file0\x00'}) syncfs(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mounts\x00') readv(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/88, 0x58}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/123, 0x7b}], 0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) statx(r0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000880)=""/78, 0x4e}], 0x1, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x1, 0x40010140, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2048000, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}], [{@euid_lt={'euid<', r4}}, {@dont_hash}, {@uid_lt={'uid<', 0xee01}}, {@pcr={'pcr', 0x3d, 0x27}}, {@obj_role={'obj_role', 0x3d, '-'}}, {@smackfshat={'smackfshat', 0x3d, 'mounts\x00'}}, {@obj_role={'obj_role', 0x3d, '\xbf-\\'}}, {@euid_eq={'euid', 0x3d, r5}}, {@uid_eq={'uid', 0x3d, r7}}]}}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x418, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x841) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f0000000bc0)=0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000c00)={0x10000005}) r10 = syz_open_procfs$userns(r6, &(0x7f0000000c40)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f0000000c80)={0x0, @aes256, 0x0, @desc1}) 01:17:15 executing program 4: sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x204, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x20008000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x92200, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x3b0, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_EXP={0xcc, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFQA_PAYLOAD={0xf6, 0xa, "02b52997409d028d781d0cd43168a0ee9d3429eaaaec1a120dfa935139ef72fa6810f27eeb2f676cff95d243a818d3532d645e473f5b33e9dfee698daa9b9989796691df260e60ff9d1b944e9a58bda2e936f7a8e9076ecd0115f85cd5677b0208fd3095ebf3394ff3e11f310b1ca852a92d850c421e4abf0ee21fd0902592c5a9eb0d5eb7cda604ffcdfeb8f7b28cb8ef456e1fcfc3ba6c14e43f47a46c4de2a1f4334893c4260375f814f75eb046cb1f63d79ad1caecf3c31f0c57118d09c4e3caea709ef39cdc90a69ee85dc54db65f07d5f69b3955036d09e817a189c2f79431a3ef193365adf945a0862f037c4a7664"}, @NFQA_CT={0x68, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFQA_CT={0x7c, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x29}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x4, 0x33}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}]}}, @CTA_LABELS_MASK={0x20, 0x17, [0x81, 0x8000, 0x0, 0x8, 0x720fb173, 0x9, 0x1]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x5}}, @NFQA_PAYLOAD={0x92, 0xa, "44cf65156392f817e8635111a4a5092d6dc9eda1be44dac8e7788a79c9e4f26f82c9875a0e27215c8868d3f30353eaa3a6d0028ee0078c12ffdb03c1f884d6c692a1d83235c4be296efc5c06e10765718e926890b307d76044d0322b3b986b857c930f2a7cec40097d912cc5ab3599d7341ef02002f1ca3d91773ad6600ddf193a48e37f9bec4150ae36727b636e"}, @NFQA_PAYLOAD={0x48, 0xa, "58931ecdf707087789bedfdd77db264c3b45ae258bccd056b242e238bc5aadc8eceb08d80641ebe63b81e35c0c69866524eba04164174303ad711269505f45285e7a4700"}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xeaa}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x40040c0}, 0x3d49f7b32094fc0e) r1 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x2, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008804}, 0xc0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000980)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x8, 0x0, {{0x20, 0x4, 0x2, 0x17, 0x80, 0x66, 0x0, 0x7f, 0x2f, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x14, 0x2, [{0x0, 0x5, "a16739"}, {0x6, 0x9, "25519871b3fd96"}]}, @timestamp={0x44, 0x8, 0x9, 0x0, 0x9, [0x80000001]}, @timestamp_addr={0x44, 0x44, 0x4c, 0x1, 0x0, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x7fffffff}, {@multicast2, 0x1}, {@remote, 0x3}, {@loopback, 0x1}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x8, [@dev={0xac, 0x14, 0x14, 0x15}]}]}}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f00000009c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/12, 0xc}], 0x1, &(0x7f0000000ac0)=""/241, 0xf1}, 0x8}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000bc0)=""/57, 0x39}, {&(0x7f0000000c00)=""/126, 0x7e}, {&(0x7f0000000c80)=""/21, 0x15}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x4, &(0x7f0000000d80)}, 0x9}], 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000ec0)={'ip6_vti0\x00', &(0x7f0000000e40)={'sit0\x00', 0x0, 0x0, 0x1, 0x6, 0x401, 0x1c, @loopback, @mcast1, 0x7800, 0x20, 0x10001, 0xfffffffc}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000010c0)={'sit0\x00', &(0x7f0000001040)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x80, 0x5, 0x1c, @private2, @local, 0x10, 0x20, 0x800, 0xb2}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001100)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001340)={'ip6tnl0\x00', &(0x7f00000012c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x7f, 0x80, 0x34, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, 0x8, 0x10, 0x1, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001400)={'ip6_vti0\x00', &(0x7f0000001380)={'ip6gre0\x00', 0x0, 0x4, 0x81, 0x38, 0x460c, 0x22, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8000, 0x5, 0x3f}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000014c0)={'ip6gre0\x00', &(0x7f0000001440)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0xa2, 0x8000, 0x40, @mcast1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x7800, 0x8000, 0x1, 0xa37}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000001580)={'sit0\x00', &(0x7f0000001500)={'sit0\x00', 0x0, 0x2f, 0x1, 0x9, 0x20, 0x40, @mcast1, @mcast2, 0x700, 0x20, 0x7, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001e40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e00)={&(0x7f00000015c0)={0x838, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x36ad}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xffff, 0x3f, 0xff}, {0x7f, 0x1, 0x1, 0x10001}, {0x9, 0x1f, 0x40, 0x101}, {0x4, 0x40, 0x9, 0x546}, {0xc27, 0x81, 0x7f, 0x10001}, {0x80, 0x0, 0xae, 0x1}, {0x3ff, 0x1, 0x4, 0x2}, {0x4, 0x7b, 0xff, 0x101}, {0x4, 0x80, 0xa8, 0x7f}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x29}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xcdb, 0xc0, 0x2, 0x2}, {0xfffe, 0x8, 0x8, 0x2}, {0x401, 0x20, 0xb7, 0xfb32}, {0x1, 0xfd, 0x4c, 0x1}, {0x80, 0x4, 0x1, 0x8001}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x81, 0x9, 0x2cf7813a}, {0x8, 0x2, 0xe4, 0x1}, {0x4, 0x8e, 0x4, 0x3}, {0x0, 0x3, 0x8, 0x3}, {0x8000, 0x0, 0x80}, {0x401, 0xf8, 0x3, 0x40}, {0x7fff, 0x7, 0x8, 0x991f}, {0xff, 0x5e, 0x4, 0xf0000000}, {0x3, 0xc0, 0x1f, 0x26d}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x2040000}, 0x4000) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e80), 0x400, 0x0) ioctl$sock_ifreq(r13, 0x8931, &(0x7f0000001ec0)={'macvlan1\x00', @ifru_addrs=@ax25={0x3, @rose}}) [ 110.282791] audit: type=1400 audit(1749863835.682:7): avc: denied { execmem } for pid=278 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:17:15 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb99}}, './file0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80000000}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7c1}], @chandef_params, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x36, 0x1}, {0x1b}, {0x30}, {0x1}, {0x1e}, {0x48}, {0x1, 0x1}, {0xc, 0x1}, {0x60}, {0x60}, {0x12}, {0xc}, {0x2}, {0x48, 0x1}, {0x3, 0x1}, {0x36}, {0x44}, {0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x1) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000580)={0x5dc, r2, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0xd}}}}, [@NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x6}, {0x2}, {0x5, 0x9}, {0x7, 0x5}, {0x6}, {0x2, 0xa}, {0x3, 0x7}, {0x2, 0x7}, {0x4, 0x2}, {0x2, 0x9}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x2}, {0x7, 0x3}, {0x7, 0x3}, {0x5, 0x9}, {0x6}, {0x4, 0x4}, {0x2, 0x3}, {0x1, 0x6}, {0x5}, {0x6, 0x9}, {0x3, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x6}, {}, {0x7, 0x1}, {0x6, 0x2}, {0x4}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x2}, {0x5, 0x4}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0x5}, {0x7, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x3, 0xa}, {0x7, 0x8}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x6}, {0x5, 0x6}, {0x4, 0x1}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x6}, {0x7, 0x2}, {0x4, 0x6}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x30, 0x24, 0xc, 0x12, 0x24, 0x3]}]}]}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x60, 0x2, 0xc, 0x0, 0x18, 0x4, 0x9, 0x18]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x1}, {0x6, 0x7}, {0x3, 0x9}, {0x6, 0xa}, {0x5, 0x2}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x4, 0x6c, 0xc, 0x36]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x0, 0x60, 0x48, 0x10, 0x24, 0xb, 0x6, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x2, 0xde8, 0x90b0, 0x7, 0x1, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb12, 0x4, 0x2, 0x2, 0x0, 0x0, 0x40]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x6}, {0x6, 0x6}, {0x5, 0x6}, {0x2, 0x2}, {0x4, 0x8}, {0x6, 0x3}, {0x7, 0x5}, {0x2}, {0x6, 0x5}, {0x3, 0xa}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x4}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x7}, {0x6, 0x8}, {0x6, 0x3}, {0x0, 0x7}, {0x4, 0x6}, {0x2, 0x3}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x36, 0x6c, 0x16, 0x16, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7ff, 0x0, 0x8, 0xffff, 0x1, 0x7fff, 0x5]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x0, 0x9, 0x12, 0x6, 0x4, 0x60, 0x6, 0x3, 0xc, 0x31, 0x18, 0x24, 0x16, 0x5, 0x5, 0x5, 0x4]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x6, 0x8, 0xffff, 0xd27a, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x3583, 0xd532, 0x4788, 0x2, 0x0, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x24, 0x18, 0x18, 0xb, 0x9, 0x30, 0x1b, 0x60, 0x1b, 0x6d6464d7002cef2d, 0x0, 0x6, 0x1b, 0x6, 0x60, 0x3, 0xb, 0x60, 0x9, 0x60, 0x5, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x340, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6, 0x0, 0x48, 0x1, 0x30, 0x12, 0x2, 0x7a, 0x60, 0x1b, 0x6, 0x2, 0x18, 0x18, 0x2, 0xc, 0x16, 0x35705259ea9086e1, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x5d, 0x101, 0x1, 0x0, 0x5, 0x4]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x60, 0xb, 0x1, 0x4]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0xa}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x2}, {0x3, 0x5}, {0x7}, {0x6, 0x4}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x7, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x2, 0x8}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {0x4, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x6}, {0x2}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x8}, {0x6, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0x1}, {0x7, 0x7}, {0x3, 0x5}, {0x7, 0x7}, {0x3, 0x4}, {0x6, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x0, 0x12, 0x6, 0x36, 0x1b, 0x60, 0x60, 0x36, 0x1, 0x36, 0x16, 0xb, 0x1b, 0x1b, 0x6c, 0x1, 0x60, 0x4, 0x6b, 0x4, 0x12, 0x18, 0x2, 0x1b]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x2}, {0x3, 0x1}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x6, 0x4}, {0x0, 0x5}, {0x6, 0xa}, {0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x16}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x3, 0x4}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x3, 0x7}, {0x7, 0x5}, {0x6, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x5}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x4, 0x4}, {0x0, 0x8}, {0x1}, {0x0, 0x4}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x2}, {0x7}, {0x5}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x8}, {0x4}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x8}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x4}, {0x3}, {0x0, 0xa}, {}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x7, 0x8}, {}, {0x1}, {0x3, 0x4}, {0x3, 0x2}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0xa}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x6}, {0x7, 0x7}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x4}, {0x1}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x5}, {0x7, 0x2}, {0x3, 0x9}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0x8}, {0x1, 0x4}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x8}, {0x0, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x2}, {0x1, 0x1}, {0x5, 0x9}, {0x1}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x6, 0x48, 0x2, 0x16, 0x3, 0x24, 0x5, 0xb, 0x24, 0x5, 0x16, 0x48, 0x0, 0x60, 0xb, 0xf, 0x34, 0x3, 0xc, 0x3, 0x48, 0x4, 0x1b, 0x1, 0xc, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x9, 0xfff, 0x0, 0x0, 0x5]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x3}, {0x1, 0x9}, {0x7, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x1}, {0x0, 0x7}, {0x6, 0x5}, {0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x8}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x8}, {0x6}, {0x6, 0x2}, {0x3, 0x8}, {0x7, 0x9}, {}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x6, 0x3}, {0x6, 0x1}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x7}, {0x1, 0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x5}, {0x1, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0xc, 0x1, 0x24]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1f, 0xce, 0x5, 0x7ff, 0x7, 0xffff, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xca, 0x3, 0x5, 0x7, 0x3, 0x7, 0x3]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x24, 0x6c, 0x30]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2, 0x6, 0x9f, 0x0, 0x2, 0x7fff, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x70, 0x1f, 0x6c, 0x30, 0xe9, 0x60, 0xb, 0xc, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x1, 0x400, 0xaa, 0x8, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa08, 0x7, 0x6, 0x87ee, 0x4, 0x9, 0x3, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x16, 0x16, 0xb, 0x18, 0x5, 0x6c, 0x30, 0x1, 0x60, 0x6, 0x48, 0x6, 0x6, 0x6, 0x12, 0x9, 0x36, 0x3, 0x12]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x36, 0x48, 0x1b, 0x30, 0x4, 0x5, 0x30, 0xb, 0x4d, 0x12, 0x1, 0x9, 0x6, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5494, 0x5, 0x3f, 0x6, 0x20, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf4d, 0x65, 0x4, 0x3ff, 0x2, 0x6, 0x6317]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x2}, {0x3, 0x3}, {0x2, 0x8}, {0x4, 0xa}, {0x6}, {0x1, 0x7}, {0x6, 0x4}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0xa}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x9}, {0x6, 0x2}, {0x2}, {0x1, 0xa}, {0x2, 0x9}, {0x3, 0x5}, {0x2, 0x9}, {0x6, 0x4}, {0x5, 0x4}, {0x5, 0x8}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x2}, {0x3, 0x2}, {0x5}, {0x1, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0xc, 0x6, 0xb, 0x6, 0x16, 0x6c, 0x4, 0x2, 0x1b, 0x9, 0x16, 0x18, 0x1, 0x6c, 0x6c, 0x16, 0xb, 0x6c, 0x36, 0xb, 0xc, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0xa}, {0x1, 0xa}, {0x2, 0x3}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x2}, {0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x6, 0x1, 0x20, 0x100, 0x9, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x100, 0x2, 0x7, 0x7, 0x5, 0x1264]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x9}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x6c, 0x12, 0x6, 0x6, 0x12, 0x60, 0x30, 0x36, 0x0, 0x1, 0x36, 0x36, 0x1b, 0x24, 0x36, 0x60, 0x4, 0x6, 0x48, 0x48, 0x6c, 0x9, 0x18, 0xb, 0x7e, 0xb, 0x30, 0x6c, 0x3, 0x18, 0x14]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1ff, 0x401, 0x9b0, 0x7, 0x9, 0x800, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x400, 0x4, 0x5, 0x1, 0x5, 0x3, 0xffaf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8e36, 0xf801, 0x8, 0x8, 0xdbe, 0x5ee, 0x6]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x34, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x4, 0x5, 0xb, 0x3, 0x1, 0x30, 0x1, 0x4, 0x6c, 0x3, 0x1b, 0x12, 0x1e, 0xc, 0x9, 0x4]}]}]}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x44040000}, 0x8000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3dd}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x8000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) fgetxattr(r4, &(0x7f0000000d40)=@random={'system.', '*[\x00'}, &(0x7f0000000d80)=""/213, 0xd5) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001000)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x801) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001140)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) getsockname$netlink(r0, &(0x7f0000001280), &(0x7f00000012c0)=0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000001300)) 01:17:15 executing program 7: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24048800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x24000090) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x8010) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008000}, 0x8844) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x94, r1, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7d, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x89, 0x40}}, @mesh_chsw={0x76, 0x6, {0x6, 0xd5, 0x1a, 0x6}}, @prep={0x83, 0x25, @ext={{}, 0x7f, 0x1, @device_a, 0x3fe, @device_b, 0x6, 0x80000000, @device_a, 0x8}}, @measure_req={0x26, 0x3f, {0x0, 0x5, 0x0, "b74c590f5aaef77bc6418fe993a46dd2a7be219f3349377a82a29564d1685684d5ae20cbdb6bca4c0f3735356b96c1cf506b02c4b49b90f0d1f3b0e0"}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x40040cd) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000900), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r5 = syz_io_uring_complete(0x0) sendto(r5, &(0x7f0000000b00)="231cc80279002e60ae132beee0b603ee3ba18f112eecfd6db662aec558d472d3c7fea7a315b79ab59331303120a572dd3101f375", 0x34, 0x4008051, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003780)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000003600)=[{{&(0x7f0000000b40), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000bc0)=""/205, 0xcd}, {&(0x7f0000000cc0)=""/44, 0x2c}, {&(0x7f0000000d00)=""/220, 0xdc}, {&(0x7f0000000e00)=""/11, 0xb}, {&(0x7f0000000e40)=""/184, 0xb8}], 0x5, &(0x7f0000000f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001000)=""/131, 0x83}, {&(0x7f00000010c0)=""/95, 0x5f}, {&(0x7f0000001140)=""/229, 0xe5}, {&(0x7f0000001240)=""/98, 0x62}, {&(0x7f00000012c0)=""/96, 0x60}, {&(0x7f0000001340)=""/127, 0x7f}, {&(0x7f00000013c0)=""/246, 0xf6}, {&(0x7f00000014c0)=""/154, 0x9a}], 0x8, &(0x7f0000001600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001740)=""/205, 0xcd}, {&(0x7f0000001840)=""/88, 0x58}, {&(0x7f00000018c0)=""/98, 0x62}, {&(0x7f0000001940)=""/42, 0x2a}, {&(0x7f0000001980)=""/240, 0xf0}, {&(0x7f0000001a80)=""/101, 0x65}], 0x6, &(0x7f0000001b80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001c40)=""/21, 0x15}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000003040)=[{&(0x7f0000001e40)=""/201, 0xc9}, {&(0x7f0000001f40)=""/160, 0xa0}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/44, 0x2c}], 0x4, &(0x7f0000003080)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000003100)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003180)=""/186, 0xba}, {&(0x7f0000003240)=""/187, 0xbb}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/186, 0xba}, {&(0x7f0000003440)=""/68, 0x44}, {&(0x7f00000034c0)=""/36, 0x24}], 0x6, &(0x7f0000003580)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x6, 0x2000, &(0x7f00000037c0)={r6, r7+10000000}) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x40, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x2400c841) bind$802154_raw(r9, &(0x7f0000003900)={0x24, @none={0x0, 0x2}}, 0x14) 01:17:16 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xc40, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="dd8ee91edc772a5814d89e0064", 0xd, 0x4001, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7f}, 0x1c) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000140)=0x7) fstatfs(r0, &(0x7f0000000180)=""/83) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x32, @remote, 0x4e24, 0x4, 'rr\x00', 0x16, 0x6, 0x54}, 0x2c) recvmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000003c0)=""/194, 0xc2}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/143, 0x8f}], 0x4, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x140) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x68ef}}, './file0\x00'}) r16 = pidfd_getfd(r12, r5, 0x0) ioctl$SCSI_IOCTL_SYNC(r16, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r14, 0x4004f506, &(0x7f0000000840)=0x1) accept(r11, &(0x7f0000000880)=@hci, &(0x7f0000000900)=0x80) ioctl$TIOCL_BLANKSCREEN(r12, 0x541c, &(0x7f0000000940)) sendmsg$NL80211_CMD_CONNECT(r15, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="ed624fecab15"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x2404c810) clone3(&(0x7f0000000d40)={0x0, &(0x7f0000000a80)=0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00), {0x5}, &(0x7f0000000b40)=""/231, 0xe7, &(0x7f0000000c40)=""/145, &(0x7f0000000d00)=[r7, r6, r6, r8, r8, r7, r4, 0xffffffffffffffff, r7, r7], 0xa, {r13}}, 0x58) read(r17, &(0x7f0000000dc0)=""/218, 0xda) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000081580)={0x8, [], 0xd8, "d00acf2809a8cb"}) [ 111.797903] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.801190] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.805106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.817430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.825244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.872394] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.879101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.882409] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.894457] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.897755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.902868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.904691] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.911111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.917692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.923945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.925384] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.930092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.949145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.955413] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.974984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.999935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.008302] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.012375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.022843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.029718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.038502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.040876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.044701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.121358] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.131853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.138088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.149398] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.179212] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.199044] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.212704] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.217408] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.226090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.247022] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.266063] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 112.276406] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.877185] Bluetooth: hci0: command tx timeout [ 114.005122] Bluetooth: hci3: command tx timeout [ 114.068629] Bluetooth: hci1: command tx timeout [ 114.069176] Bluetooth: hci2: command tx timeout [ 114.132790] Bluetooth: hci5: command tx timeout [ 114.260817] Bluetooth: hci4: command tx timeout [ 114.325666] Bluetooth: hci6: command tx timeout [ 114.389625] Bluetooth: hci7: command tx timeout [ 115.925195] Bluetooth: hci0: command tx timeout [ 116.052699] Bluetooth: hci3: command tx timeout [ 116.116909] Bluetooth: hci1: command tx timeout [ 116.117369] Bluetooth: hci2: command tx timeout [ 116.180638] Bluetooth: hci5: command tx timeout [ 116.309302] Bluetooth: hci4: command tx timeout [ 116.372679] Bluetooth: hci6: command tx timeout [ 116.438598] Bluetooth: hci7: command tx timeout [ 117.972796] Bluetooth: hci0: command tx timeout [ 118.101110] Bluetooth: hci3: command tx timeout [ 118.165690] Bluetooth: hci2: command tx timeout [ 118.166134] Bluetooth: hci1: command tx timeout [ 118.228709] Bluetooth: hci5: command tx timeout [ 118.356672] Bluetooth: hci4: command tx timeout [ 118.421020] Bluetooth: hci6: command tx timeout [ 118.484732] Bluetooth: hci7: command tx timeout [ 120.020977] Bluetooth: hci0: command tx timeout [ 120.148723] Bluetooth: hci3: command tx timeout [ 120.212918] Bluetooth: hci1: command tx timeout [ 120.213805] Bluetooth: hci2: command tx timeout [ 120.276711] Bluetooth: hci5: command tx timeout [ 120.406153] Bluetooth: hci4: command tx timeout [ 120.468675] Bluetooth: hci6: command tx timeout [ 120.533022] Bluetooth: hci7: command tx timeout [ 174.243793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.245267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.247800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.255269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.259234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.329238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.334740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.334831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.337246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.342630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.352673] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.373663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.383005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.384132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.387622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.388943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.396129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.408946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.413586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.415290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.522781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.532350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.537313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.567159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.576126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.648835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.660029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.678824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.682480] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.690798] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.731935] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.758815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.781478] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.805336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.829180] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.835823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.845003] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.849961] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.871334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.875861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.340683] Bluetooth: hci0: command tx timeout [ 176.468661] Bluetooth: hci1: command tx timeout [ 176.469385] Bluetooth: hci2: command tx timeout [ 176.725043] Bluetooth: hci3: command tx timeout [ 176.726811] Bluetooth: hci5: command tx timeout [ 176.788818] Bluetooth: hci6: command tx timeout [ 176.917089] Bluetooth: hci4: command tx timeout [ 177.045624] Bluetooth: hci7: command tx timeout [ 178.389004] Bluetooth: hci0: command tx timeout [ 178.516717] Bluetooth: hci2: command tx timeout [ 178.517347] Bluetooth: hci1: command tx timeout [ 178.774776] Bluetooth: hci3: command tx timeout [ 178.775351] Bluetooth: hci5: command tx timeout [ 178.836999] Bluetooth: hci6: command tx timeout [ 178.964793] Bluetooth: hci4: command tx timeout [ 179.095682] Bluetooth: hci7: command tx timeout [ 180.437365] Bluetooth: hci0: command tx timeout [ 180.564937] Bluetooth: hci2: command tx timeout [ 180.565394] Bluetooth: hci1: command tx timeout [ 180.821755] Bluetooth: hci5: command tx timeout [ 180.822252] Bluetooth: hci3: command tx timeout [ 180.885848] Bluetooth: hci6: command tx timeout [ 181.012959] Bluetooth: hci4: command tx timeout [ 181.140653] Bluetooth: hci7: command tx timeout [ 182.485592] Bluetooth: hci0: command tx timeout [ 182.613580] Bluetooth: hci1: command tx timeout [ 182.614064] Bluetooth: hci2: command tx timeout [ 182.871579] Bluetooth: hci3: command tx timeout [ 182.872079] Bluetooth: hci5: command tx timeout [ 182.932854] Bluetooth: hci6: command tx timeout [ 183.060906] Bluetooth: hci4: command tx timeout [ 183.189646] Bluetooth: hci7: command tx timeout [ 236.992095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.995783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.000766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.007268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.011835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.175510] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.179807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.185209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.191202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.195783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.196148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.199771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.200664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.206818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.209290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.282677] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.298954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.303367] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.329646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.335941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.351142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.361090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.381000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.429399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.459726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.528878] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.532100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.546730] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.551686] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.557855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.560655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.569479] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.573486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.575720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.582477] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.666855] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.689666] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.700909] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.753424] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.773796] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.061623] Bluetooth: hci0: command tx timeout [ 239.252826] Bluetooth: hci2: command tx timeout [ 239.252948] Bluetooth: hci1: command tx timeout [ 239.508605] Bluetooth: hci3: command tx timeout [ 239.572624] Bluetooth: hci4: command tx timeout [ 239.636869] Bluetooth: hci5: command tx timeout [ 239.701783] Bluetooth: hci6: command tx timeout [ 239.956903] Bluetooth: hci7: command tx timeout [ 241.108699] Bluetooth: hci0: command tx timeout [ 241.300915] Bluetooth: hci1: command tx timeout [ 241.303695] Bluetooth: hci2: command tx timeout [ 241.556778] Bluetooth: hci3: command tx timeout [ 241.620815] Bluetooth: hci4: command tx timeout [ 241.685068] Bluetooth: hci5: command tx timeout [ 241.749635] Bluetooth: hci6: command tx timeout [ 242.005381] Bluetooth: hci7: command tx timeout [ 243.156624] Bluetooth: hci0: command tx timeout [ 243.348861] Bluetooth: hci2: command tx timeout [ 243.349000] Bluetooth: hci1: command tx timeout [ 243.604659] Bluetooth: hci3: command tx timeout [ 243.669799] Bluetooth: hci4: command tx timeout [ 243.732611] Bluetooth: hci5: command tx timeout [ 243.797487] Bluetooth: hci6: command tx timeout [ 244.053400] Bluetooth: hci7: command tx timeout [ 245.204613] Bluetooth: hci0: command tx timeout [ 245.396633] Bluetooth: hci2: command tx timeout [ 245.398019] Bluetooth: hci1: command tx timeout [ 245.652911] Bluetooth: hci3: command tx timeout [ 245.717592] Bluetooth: hci4: command tx timeout [ 245.781618] Bluetooth: hci5: command tx timeout [ 245.845574] Bluetooth: hci6: command tx timeout [ 246.102394] Bluetooth: hci7: command tx timeout [ 298.992170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.001214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.006039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.022735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.029922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.129092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.141937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.145775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.156150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.160864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.264026] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.266893] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.272264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.280012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.286659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.348508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.362213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.390500] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.395981] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.398986] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.403100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.419673] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.429942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.434075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.438305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.440439] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.474116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.477262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.483273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.491493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.679422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.680590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.688183] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.690673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.698195] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.702086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.720231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.736864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.739982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.741872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.077882] Bluetooth: hci0: command tx timeout [ 301.204706] Bluetooth: hci1: command tx timeout [ 301.332608] Bluetooth: hci2: command tx timeout [ 301.525697] Bluetooth: hci4: command tx timeout [ 301.525801] Bluetooth: hci5: command tx timeout [ 301.588788] Bluetooth: hci3: command tx timeout [ 301.844996] Bluetooth: hci7: command tx timeout [ 301.846087] Bluetooth: hci6: command tx timeout [ 303.124610] Bluetooth: hci0: command tx timeout [ 303.252803] Bluetooth: hci1: command tx timeout [ 303.380712] Bluetooth: hci2: command tx timeout [ 303.572618] Bluetooth: hci5: command tx timeout [ 303.573820] Bluetooth: hci4: command tx timeout [ 303.636607] Bluetooth: hci3: command tx timeout [ 303.893157] Bluetooth: hci6: command tx timeout [ 303.893282] Bluetooth: hci7: command tx timeout [ 305.172640] Bluetooth: hci0: command tx timeout [ 305.300657] Bluetooth: hci1: command tx timeout [ 305.428737] Bluetooth: hci2: command tx timeout [ 305.620640] Bluetooth: hci4: command tx timeout [ 305.620665] Bluetooth: hci5: command tx timeout [ 305.684734] Bluetooth: hci3: command tx timeout [ 305.940629] Bluetooth: hci7: command tx timeout [ 305.940754] Bluetooth: hci6: command tx timeout [ 307.222155] Bluetooth: hci0: command tx timeout [ 307.349191] Bluetooth: hci1: command tx timeout [ 307.476670] Bluetooth: hci2: command tx timeout [ 307.668652] Bluetooth: hci5: command tx timeout [ 307.669309] Bluetooth: hci4: command tx timeout [ 307.733630] Bluetooth: hci3: command tx timeout [ 307.988604] Bluetooth: hci6: command tx timeout [ 307.988627] Bluetooth: hci7: command tx timeout [ 361.576158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.581201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.588127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.597730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.603236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.654924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.659199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.661754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.672337] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.684280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.912203] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.939387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.946087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.952275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.956730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.967497] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.980456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.997299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.001182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.011160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.014980] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.019515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.027045] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.028835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.036402] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.041208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.043828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.050333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.061183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.064717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.078048] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.119007] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.123861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.166419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.183148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.228656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.232256] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.236977] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.338265] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.409779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.668645] Bluetooth: hci0: command tx timeout [ 363.733386] Bluetooth: hci1: command tx timeout [ 364.116814] Bluetooth: hci3: command tx timeout [ 364.244773] Bluetooth: hci2: command tx timeout [ 364.244850] Bluetooth: hci5: command tx timeout [ 364.436633] Bluetooth: hci6: command tx timeout [ 364.500655] Bluetooth: hci7: command tx timeout [ 364.628627] Bluetooth: hci4: command tx timeout [ 365.716700] Bluetooth: hci0: command tx timeout [ 365.780686] Bluetooth: hci1: command tx timeout [ 366.164851] Bluetooth: hci3: command tx timeout [ 366.293073] Bluetooth: hci5: command tx timeout [ 366.293102] Bluetooth: hci2: command tx timeout [ 366.487828] Bluetooth: hci6: command tx timeout [ 366.551578] Bluetooth: hci7: command tx timeout [ 366.677628] Bluetooth: hci4: command tx timeout [ 367.766592] Bluetooth: hci0: command tx timeout [ 367.828656] Bluetooth: hci1: command tx timeout [ 368.213697] Bluetooth: hci3: command tx timeout [ 368.340606] Bluetooth: hci2: command tx timeout [ 368.341774] Bluetooth: hci5: command tx timeout [ 368.533543] Bluetooth: hci6: command tx timeout [ 368.596575] Bluetooth: hci7: command tx timeout [ 368.724957] Bluetooth: hci4: command tx timeout [ 369.812829] Bluetooth: hci0: command tx timeout [ 369.876583] Bluetooth: hci1: command tx timeout [ 370.261082] Bluetooth: hci3: command tx timeout [ 370.388828] Bluetooth: hci5: command tx timeout [ 370.388930] Bluetooth: hci2: command tx timeout [ 370.582703] Bluetooth: hci6: command tx timeout [ 370.645707] Bluetooth: hci7: command tx timeout [ 370.772747] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 01:22:25 Registers: info registers vcpu 0 RAX=ffffffff86c2725d RBX=0000000000000001 RCX=ffffffff86c27258 RDX=dffffc0000000000 RSI=0000000000000000 RDI=1ffffffff0d84e4b RBP=ffff88802d2273d0 RSP=ffff88802d227308 R8 =ffffffff86c2725c R9 =0000000000000000 R10=000000000003b4ed R11=00000000000c441c R12=ffff88802d2273d8 R13=ffff88802d2273c0 R14=ffff88802d2273b9 R15=ffff88802d227378 RIP=ffffffff813540ce RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2ca668f028 CR3=000000000d089000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000988e3cf4 RBX=ffff888039843700 RCX=00000000ed9b0d95 RDX=000000000b6079cf RSI=ffff888039844180 RDI=00000000dab44b10 RBP=ffff888039844158 RSP=ffff88803897ec08 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888039844180 R13=00000000f8fb8764 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff815192a4 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff0844a34a1 CR3=000000000f805000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000