Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:63338' (ECDSA) to the list of known hosts. 2025/06/19 00:07:50 fuzzer started 2025/06/19 00:07:51 dialing manager at localhost:36157 syzkaller login: [ 93.365553] cgroup: Unknown subsys name 'net' [ 93.494053] cgroup: Unknown subsys name 'cpuset' [ 93.538219] cgroup: Unknown subsys name 'rlimit' 2025/06/19 00:08:08 syscalls: 2214 2025/06/19 00:08:08 code coverage: enabled 2025/06/19 00:08:08 comparison tracing: enabled 2025/06/19 00:08:08 extra coverage: enabled 2025/06/19 00:08:08 setuid sandbox: enabled 2025/06/19 00:08:08 namespace sandbox: enabled 2025/06/19 00:08:08 Android sandbox: enabled 2025/06/19 00:08:08 fault injection: enabled 2025/06/19 00:08:08 leak checking: enabled 2025/06/19 00:08:08 net packet injection: enabled 2025/06/19 00:08:08 net device setup: enabled 2025/06/19 00:08:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/19 00:08:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/19 00:08:08 USB emulation: enabled 2025/06/19 00:08:08 hci packet injection: enabled 2025/06/19 00:08:08 wifi device emulation: enabled 2025/06/19 00:08:08 802.15.4 emulation: enabled 2025/06/19 00:08:08 fetching corpus: 0, signal 0/0 (executing program) 2025/06/19 00:08:09 starting 8 fuzzer processes 00:08:09 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x5000)=nil, 0x4000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x2, 0x8, 0xefa, 0x4, 0x4, 0xcea8, 0x2}, &(0x7f0000000040)={0x1, 0x307, 0x9, 0x6, 0x4728, 0x1, 0x9, 0x3}, &(0x7f0000000080)={0x6, 0xc3, 0x4, 0x9, 0x5, 0x9, 0x2, 0x1f}, &(0x7f0000000100)={r1, r2/1000+60000}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x20004001) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000002c0)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfc8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x52}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x41) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0xa001, 0x0) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000540)) r5 = msgget$private(0x0, 0x21) msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000580)=""/15) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000600)={r6, r7/1000+60000}, 0x10) recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000640)=""/56, 0x38}, {&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000740)=""/6, 0x6}, {&(0x7f0000000780)=""/7, 0x7}, {&(0x7f00000007c0)=""/95, 0x5f}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/98, 0x62}, {&(0x7f00000018c0)=""/187, 0xbb}], 0x8, &(0x7f0000001a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001ac0)=""/105, 0x69}, {&(0x7f0000001b40)=""/29, 0x1d}, {&(0x7f0000001b80)=""/68, 0x44}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/169, 0xa9}, {&(0x7f0000002cc0)=""/200, 0xc8}], 0x6, &(0x7f0000002e40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002ec0)=""/49, 0x31}], 0x1, &(0x7f0000002f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x3, 0x8000, &(0x7f0000003080)={0x0, 0x3938700}) r11 = clone3(&(0x7f0000003340)={0x100012000, &(0x7f00000030c0), &(0x7f0000003100), &(0x7f0000003140), {0x1a}, &(0x7f0000003180)=""/131, 0x83, &(0x7f0000003240)=""/187, &(0x7f0000003300)=[0x0], 0x1, {r4}}, 0x58) mq_notify(r10, &(0x7f00000033c0)={0x0, 0x3a, 0x1, @tid=r11}) getsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000003400), &(0x7f0000003440)=0x10) pwritev2(r9, &(0x7f0000003ac0)=[{&(0x7f0000003480)="10daef6dbe384e20cc979e1d3c21aa57eea7c82532c5ff4b245821b7fa6fc8f19d0846fedf1586d9e7e4cc5dfbde29b9e04d23b47bf8d75c6d0fc681d5ce71ec2f07f363f56ba13dd9d5fb80c8d7e0ff1826dacd9fd957", 0x57}, {&(0x7f0000003500)="423f059ceb02d0ab6aced47b536c0b9cba1fbc3bf98c6d490532a8d01f316b9d05edabd4f0d89a678be8e13a05fd21a17e4f1d9e62b4c7d0427cdf80ae68685f186e05824934ea0792e94423c86e7ef4c7f1093ef92ec41365d48d2f4c560d523fce01016155f09047cb389b615d9dcad69f2f3addf39ef15d5c93ee3cc2aa032e92a744ac0f70a516c4426b7510b69655ba06c9bb84c796ed2d8b8782f5fe939be889c40689944668416e222b90451a42015bdb9e0adcab755b82f220f81a4d511745a0d71450513ed8f27abc7abb2a", 0xd0}, {&(0x7f0000003600)="596cb4f97c74cbed4c6c4fbcb91d3ebace1b2c093839a6d711dd43ab4ba1ee22521e12323a7af1ffec0446777f0ebfb2a4e2d5e35870bae6157040934ce056360595b9b89f2f4a05b70eb21824d4bb74a2df1a3e57c09f6b0fa7ad98beca8d084e0c48e847fd7f7a19eab1bdf5d9855d96a5129227f115ff9b8210ef081b086e3f981527ec3f26fcf114311850119d4a4d45045cd66c0fdd08f77e6fba9b29a874bff79f0b8bf81c8dcc9c41f58b3fde48a03bcbc4850362ffcdd757b70cada4cc6b5619f976a57563f29a2916f638461f0b4799c4", 0xd5}, {&(0x7f0000003700)="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", 0xfd}, {&(0x7f0000003800)="3ed2708ef008ff77404dd05bff9926a34919c527aab2f3b4e47937ec15fd0dd81cfaaec003476f00df7e35fb81801f32604c4a07bcc77dfb41ba0a3dcdb40ef44fcdc6351c8ec3947cc2f421135f7bc509ef06f2174a66769c1edbd69f9a560d3781420d02c1ccacc14686d9637d292b4a45271e2f2ce2ebb8724c22ba84711e3b5f1cbe9e0eda3333b3f0af35ca8b5ccddc4eafb4233c9eb5cb65f7a009e34e758617615f4d62f27a8c6c75c9cda9dfef62ce43957928453f137816aa26daa65e969742c1887e26", 0xc8}, {&(0x7f0000003900)="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", 0xfa}, {&(0x7f0000003a00)="41109023954ea6c007f32f4b479b4e7d1d6cd4f9a7003c4d5da7985ac6732782cd77c57b174b99b78f9d673261875e29cf4630114b4e968adde0590158b8a1e1d4418cfb848e129505fd018986721cee9432c4b9fdb2752e0afd3ebc2f6e67962871930cb0dcef7369fde4fd2709d1f4b4cc3b4437e4403a2693f6fbe9f42166b409275939", 0x85}], 0x7, 0x0, 0x7, 0x8) 00:08:09 executing program 1: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x8000, 0x64]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c084}, 0x40040) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000200)={0xca8c, 0x80000000, 0x3, {0x6, 0x4d9}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c804) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000400)="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") r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x810) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xce}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xca}]}, 0x68}, 0x1, 0x0, 0x0, 0x8880}, 0x40) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x27}}}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', r4, 0x2f, 0xb, 0x0, 0x80000000, 0x6b, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x80, 0x2, 0x713}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000001d80)={'ip6_vti0\x00', &(0x7f0000001d00)={'ip6_vti0\x00', r4, 0x29, 0x3f, 0x8, 0x5, 0x34, @mcast1, @private2, 0x8000, 0x10, 0x1ff, 0x800}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000001ec0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x84, r5, 0x800, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008014}, 0x4040) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 00:08:09 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fchdir(r0) copy_file_range(r0, &(0x7f0000000040)=0x7, r0, 0x0, 0xf7b, 0x0) r1 = dup3(r0, r0, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x1, 0x70bd26, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44851}, 0x80) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) fcntl$setflags(r2, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)="c8c02ddce9e2d03f5607e19f427892fc750c9fbff9c4c849b71aaf582bbef973cfe00b0c514623a03c4d7a7b14f231bb182d91b8642c8a29e655f6ca84b8ef04f5dd15fd4a164b2811bf5e2f37f3a0aef4baa3239f66b8dca779cca075d919a4deb3846d002f90bb8ed163da1d9192ac15a36608369a76280dd3853803f197a79435475d44724aaeb40ab5c2adc40a33b3aba27ae4ae5c844232147e", 0x9c, r1}, 0x68) r3 = open$dir(&(0x7f0000000440)='./file0\x00', 0x0, 0x4) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000480)={{r3}, "26e07b924f0902b6f0b68d0066aeddc3b802632083ac987acb51b3abcfc15058156620535125300d86c4cdee8817a96e824dba1e742aff713441ff2fac1f0ad7385efd2d3f03882667c3a2f29a2cc361a67b79690ada152ebadd8601972910e114836eb671154b06fccbe6d3fd1e40d5ec5defb3e127806d59f559682dedfab00f36932c9baf4f2a917a5155808cf251caed8e93f20ee95ea01182fc046c322c211a40e80ff93523faf20d8ca48f084dc1ed1d167d1b70bad46748080c6340997fef417c3a2d62cdaa5efdbbe4e362dbccac2b65d1a5376677d03e82d8101ff9fd1bd22a081f21f0fce2d3b33226db5ddc8c276c9e14ec35be24eb7b67e54f100f9e39cbc54c91f89c5a85a50b72fe5d149cd69d77be6b3917ce0271e87368bba09cc02f41f3658635eaefeea9bba17b0206f99f925aeec4d63f7350ebc489af007c9821220170561da651fcfb245b873d69a2e961f688d74c657e74587869ab6250ff9b699b5c38765c90f8a824640c93d56d9261788c2792ec63c19ed43c5217f4d89e6b3c0d2a50fe707fd90ed68b24d53d790ba88e3a558e4577d8a9668a18f0202b5bb33bc54783e2c2530c4dd26e99ac3d5e1b98f41dbfbb5743bf3e61787fe790e65d277d0c1a8be8445addbcae7220fc9567be1b31d7e926a13ad92c5f849c305aafba35b08d1b6693976f4e31f1bb811fc2c2448f639ab05aabf27cd3b5a6cb4a51995936edb4a60939482a2ea130e6e069b3992f36d0aeb2dff8366006347e32ac05c87e8919b126f3292b6865a7f4e2ec95df6be3467430dbd0206e4ed19325c8164a7b10f6ae0e155fab2ea72f4ae14e698ee34448eb23a2de8168b8fcf2f264ad788eda65e523353b22aec57083480215288a2a0760baf87c7a72b429beb7918612eb60daecd84742bea0d1134dc86aae416c502d1d9fe3e50eea22037c7c93cff6fdf781dfa49b0a0c0692592a0571e2f5a2ce8479eb64ed6155dd501d53aa2295bf0493b87584952bbe6833c8b866cb80726583b9d63f0becf3419ebcabe4914f95832c69b3948ca41aee188e3e430d5a46338a1fd2c6c4906872d9cb7a55e6bd379def3f3f63f9b46af0cc24e7bb0c6dc17ff6c10a4ad3c8196f1e6a1342365df82cf1b59114bac5e28c6b052369137c99bc0cf1c146ed26463b8fb01303dd92c13e97789a0c39acac95ba6fa811fed46e668b5e935d266f496872f496734706e869ea545e22fff31e3e5674b05d9dc446914b4e598cf1dcbf6ef4b176ad884b127a18b01c5b747e816c53bb19a6565c515eb0c6b062f7433b38f3354f38c1cbe8bd4c2942fa6b23788d0b6573056b1c5b7c6bd9580d476d5c062ec3c661aa585233c72d9d50708137c26fb196dfd1b48123c5318db2d6ac1f97069e04c5911c7fe3e55cc8accb2fc230bba9653a1fe6dedafa0412191ea5943b1a73427a0955dd28f5de2b2098322a15af38e6134a047df2f433ff7dc472345181b3820e3819884d673b1be806813a3a6bb4d1d25d6835e15393f06a411a4a7ebcc6b4dd9ec40ab4239f8930941e1702bcaf72d6486cf65ceef2248d880c62526105c1426b34c2230d9498dc875410794f525d490c763db9179d3356585ffa52bd8821b6261b4e6042724282b759426662d79e0c8cf32f59ee498bec7be3cc520078842ff0d16c480cbedc100d26eb6b82d484b9c6a41031a970cc217cd4db757ffec9217dfaf6c0628f0f942ff533cc8976c5dc8a34835a94812619cae235618027431cf2bc145c109e79d071767e32e4cf09b207fd6cad018440aebbb552c6ac383d34301ddd5fba9ea01d262537ee651fe52470ac2362a2e0421982ed0f7a3302e209a80a0811aa69b794a882da6719391a4d8fab7e0b063e7b26d4f9c3d8f617986321f3eb614a07277c0f5c08620dfa0ac238e5f795d4f5664dc1fd90f1cd370459947f09e69c2d551d41f3fd2f7648c0ceaf2cb3b8e418de6ca5a1c42fe4639593a705a22f6fa8b2ee1c3beb6658e0f23433bfd85a5104b82fa9fd95d11676da7b9f4e32c6d28855c598287887c1a88a82035f38f7a7a01c027f578f5e5f1948cbbfaf0dfa860792cb159a1332ea2f5c66e6c48b420fbb1b0071ee64287e00234e279cae9c0ab0dd9b984b4f891d99cd9979441bc522c0007013acaf71683307ca7ef0bbb9d6447facd134425e2b203da9508b9a493913abe88a832b66b22c818f7dc2dfea8f3f31b29bbaaf7f2cc9e2b3bd2a2dcd42381b8e40c819e1061effab690e8e6468cfeb465697297e825b51b84900cee5665d204621a39722d64f751317160eec730016fe7feb124029b44a4e5d1171fe199bab1a8f75447fe2f957f9e7387a1bf40000e5eddfdb30e3b535f3fcdde6f6c35f13f30866b9a72c0dbd91f83d74fbfada354d4ec1005180894c22e795aa20b9f615ded1fb7ada8d83eaf6b6c682468c3f7da45790d0deb1bd635441fc682597ba5eea2b0fecd0bb0be682823424ceb4513ed25ab355c6ff1c0db04256f59ce5969c587e659e4f02a1c9be6be58d2784fed00e96ff183246ececce6e8e216429a365fb80ada9c15cf441baa3464bfcd848a7dbdebd50b5dd77080bc4001c746cb659fc95d11b30a670e6d56fd2863e6bbc088c05befbfeb00fd106a9d6bb90e8a97da7fba95dd6b6c08f81d5275f8983077a476c5992fd42bb74e5bf3a79b0cdb51998eb8f6646430bbdf25865231c68d12f549c6add5eb9fc46e6a46644815a6f27d5deb0b8d1477c1957e7e73e31fdeadc225011c8c7a237cff677efd248f16027f64adfb3cd8985e3e1a2f17b474e0f1457d1cf2af1224e519a236a7f675e6bab22451bbfb54146510b5ae42bd7cd49a87a26167544b0ae3f19425b8e76d26d80e7d0ef856c3cd997acfe741dc8253b5b3480f7ed5ff88d23cd1da4dd34c8a0015065255d784b8eb7ac7d7c89a76cbb6e7a9693df93f1b85b277f2f895bb8f44819ca42e6ceb500c630a8729d27244951f147e55a38ca740a5f198a97a9ff6c2c1c39b4306332b8d94ff6648f92d468554edb3e0789f6f369df0d6f71989c2ff005ca97c04429c44bf1a79f2509f0fe68b5529b0e930f26bf7b1d86336654835f701cb64be37cb8a7b0f433caad5046b67d6c072f3a2c98346257b5cca58f1e31fec6e7349e17184be70d85dc4548085fa7e15d20dc82d3d340f313ef95e2fa29a3cd154e0cea7a4738d39d8573675e509901214ba36b773a4de841daee37e13db0e0dfbea2516e3f3856b657895007bacfa9d04106f589fc7f42a995d7be3a192d2ffbd17ae3e283da93a0ea6a74454558e036040e35afe3f9a9e6a12061caa6998a82639b9fd73bde5ca4fd3eacf6c6a3cc1f09e5eac3b108879e0f83bdc0a1cf57e5345dd993327645a7b21ca8d07bc31b51e676501f8648de18c9b8353a63d5fb85ff637e38ae0c26586c4ae1440bcec31a4c9dbc32d00ff2c41391bf49fafe866ecbb503f6fb2f4da4c49f225d10642f18b4fbf24dbe5186b0c3b356cdedb227cadde5fbbc1a0a8ab73e50ad0a659d5859e4765a8bfd0b228636a9fb62a04b3648a363e83fc62ba616305866124ec50eaa7308093160ec9e171ee0e38e332f4abaf2931f84ce21352772d8d914048dc2a9a761d92164b72829ff48e978fd04ae5c9eca8bd86b9f71bdf0e4e6d292eafd5aedf4c9347da645130748d620688a74a0eb465587bb3dddd4be6f6a0a45ccb0ffc71449dff07d3aea1ad0ab2cdd9692518b46bf826fb07da56634be19f522c644452ceafd60501a23db7abdaa20e1e979ca320407cb04c467bf3574a4b5fa69db19f11bda5f2d3cb0b4243e2a5dd511a9e8029e8363798190eb38da103b42e3e1a695290e5615b9e54dc30c4e794a195f7be7b3cc9db5b51543981bab1bc9f02e53d4d8649c2779fb50da809d0f2f35189e0e3ba57ca5aa478f26a86417f3e645dbb38aa7bae3b2d97c85dbc5826b7c598ef0c0b1e1551f69c46f26990c9f3679f51f2b53e626d702cc02f60b12cb74f647be792508713d046f4851491fdf62ce39209e5e195eb26153d3de0f765f004c67d86e116d5043cb876fa727ba6aabc04357bd8fd5a37eb7c3f551a7bb25ac6ea219828917473491746ad765fb8667d45781d0bc01b25a137c256fd847251e98bf280f6dd7f4f0058d50c002020118ed8700e2e70074eb668821001b3d3f7dcd76b8c856b9bcd239ee601a05cd29f41a8ed3c54f8bea179113a9f87cdf9228183f80295c849bbc6c01f6948712959cffd5cb063a147ccd7fce78d27f81164eef91d20c8771c380e646311e8b6cd24982b55b400bb46f69bed94e70a3629e62b2fadea986d6088776789ee2ec2ab1833154803e7f026705e31c1b3c134b346a145ff0dc465d71de1553790c5ba96a24596ca24976302af873ae6aaaf294562706322160648abf74e3b9b9e52cd5840a74547009cffd0c6762ab6afeda5604249e5363db8cb10acbf1909d0956347dce53d07c3ae740407034da5ee3d56aaae3059fe3593b5b736f4af762f701c3447f0b8c885d8c131d08f84d6370288d77a20434dc879d24dd49a9d5f22b45e7ee3f44e1bf97b9d4f3a6ec09998cf89c5f7b7f614e5535ff09907ec5d2c3ee9fa6d66e44297d8aad9fbe98e7bfa0b469fb0e6632d9d3d23fd8e48db5421c8779ebf267e0adac6cb5ad73340a855b7b607d7c328453dea38436ff55f6b35eabe64680084824edff9c90edd53a85ed5c374310ff18084ddc35b87d487b38c758dc3b62bee83754786dd76d2ef0d3171b8adf83c368a847c61bdb72879a57cfc2e57a9b02b9bdc91a483d99f068957f689851de98641421ea241d752cd1d1040b7a8c7e19be7fb7c2b2880d98f386a91c21a97316124aa143597d44df7c2ba703b5cd791c263d4273990dd4c31ed5726e61c390e6e3fb9acadc57e88f68f58b2b923937e55bf16c5d40a2950d9f2799e66b945de15e6448ae0009841b57e1ff887f0334d201310a57e7591c0ca335ab0a13be3e95975496557f9ea44ce9a7c1a2b581e9966614c1d4462a3e6caeb55d5ac6f6b8681fa904652887e76194248a29a555980b054aa2698e9cc812feef303e3d0f5ebf897181729b59fdefcbce0cfff1d343e6cb1e43615802374bc14db7486f2b2bf490f5bfc53beebdb3600f5f83eed461381ea8b3fc3585994bd60afa3261482d95e16343a023cfb4128f4b81a9191b823219a29423522a0092480ee5503fe5a0dd099ac51533909e6012ffe152874603e0b85bc1d16e51f1f34a261d3b59dcd3ab3d86a1cc320ef18d7c030247f36b37e557edca97d744ba93fa67cfe130b6d78a49367e1e680c9425aaa97dce633ae82d5e994c89ee713e5f793ab769336209d3b55a6d65ca57a4146f9b366e4f93c9cb1ef5e0aa728797f2b05ad04e1a57861d72eeb1e6b290d4145edafb4548063b9a27b762d958cf73f1fb211c268920d5f9595b7fa2731e1b8ee5c2ddcfe5147da3e907fc2e1259f1e4ae6b8376fbff3a75c09ff182393d90ec8eded4313461920ca13c617473af22c838bc8ac0006a06e68cfc4c383334da90fe35b5e078e25075bacf63df3110a4ef977ca7b8ed2a1b9b3b667fc9dbcf737bca0f66c18ca1a389155e1333eda0bf8e34291b6c320a096b880021ddace0d98b4a1ae903b6f4df8d6907a1e90accff5922fc6b9b98d1039cf978d7eeb44c718b64fe724a6eaed0960a00f830a675a487ac54c59e78d750fa77ffdda5063351ba8a203d6c36ac7e2f10f7ce06739e1ac2"}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001480)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000001500)={0x8, 0x28, '\x00', 0x0, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = openat(r1, &(0x7f0000001540)='./file0\x00', 0x602500, 0x0) readahead(r6, 0x3, 0x800) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000001580)=""/138, &(0x7f0000001640)=0x8a) open_by_handle_at(r5, &(0x7f0000001680)=@ceph_nfs_confh={0x10, 0x2, {0x7ff, 0x1f}}, 0x40) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000016c0)={0x0, 0x0, 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001700)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000001740)=0x10000, 0x4) 00:08:09 executing program 2: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x12}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x191}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x635}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x401, 0xf9, 0x3ff, 0x400, 0x1f80, 0x3]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8044) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0x81, 0x28}}}}, ["", ""]}, 0x28}}, 0x890) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x102, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0xd, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x40081) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xac, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x77b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa63}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc59}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf3bb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r3, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x4000001) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000b40)=0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000c40)={'erspan0\x00', &(0x7f0000000bc0)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x8, 0x1, {{0x18, 0x4, 0x0, 0x2, 0x60, 0x66, 0x0, 0x5, 0x29, 0x0, @loopback, @local, {[@cipso={0x86, 0xf, 0x2, [{0x0, 0x3, "dd"}, {0x2, 0x6, "5e42a186"}]}, @ssrr={0x89, 0x17, 0xaf, [@broadcast, @broadcast, @local, @broadcast, @rand_addr=0x64010101]}, @timestamp={0x44, 0x24, 0x58, 0x0, 0x3, [0x4a74, 0x1ff, 0x6, 0xfffffffd, 0x7, 0x1, 0x1000, 0x7f]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000e00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x108, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x108}}, 0x44014000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x68, r3, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x94d, 0x6e}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x8010) pipe2(&(0x7f0000000f80)={0xffffffffffffffff}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x29}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x9ffba23a2b3f1659) 00:08:09 executing program 3: sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000040) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000140)=r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x6) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000280)={0x200, 0x1, 0x1, 0x7fffffff, 0x1, 0x6}) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KDSKBLED(r4, 0x4b65, 0xd7d) getsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000340)=""/244, &(0x7f0000000440)=0xf4) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000480)={0x2, "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"}) mkdirat$cgroup(r4, &(0x7f00000006c0)='syz0\x00', 0x1ff) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000700)={{0xa, 0x4e24, 0x80000001, @mcast2, 0x800}, {0xa, 0x4e22, 0xfffffff9, @private1, 0x2}, 0x0, [0x0, 0x400, 0x1, 0x80, 0x6, 0x7fff, 0x7, 0xfffffda1]}, 0x5c) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000780)=0x9) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c805}, 0x40000) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000008c0)) [ 111.602620] audit: type=1400 audit(1750291689.959:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:08:09 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="6fa668907723a62b4d4e021f88b48d4a6b3bed1c6f184ea211fa45c07da219", 0x1f}, 0x1, 0x0, 0x0, 0x20004000}, 0x88004) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0xf3f) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="d9497d29c271a70761b39d7c76bc8e17", 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) r2 = accept4(r1, 0x0, &(0x7f0000000200), 0x80000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xb8a4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8001) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0xe, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1f}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004014}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd_index=0x3, 0x2, 0x0, 0x0, 0xc, 0x1, {0x1}}, 0x8) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00'}, {0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x902}, 0xb1, [0x101, 0x2, 0x4, 0x3, 0x0, 0x503, 0x77, 0x8]}, 0x5c) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000640), 0x101002, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x0, 0x1, 0x70bd28, 0x3, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = syz_open_dev$hidraw(&(0x7f0000000800), 0x3, 0x200000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r6, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x800) getresgid(&(0x7f0000000980)=0x0, &(0x7f00000009c0), &(0x7f0000000a00)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, r7}}, './file0\x00'}) 00:08:09 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x72}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1c1}]}, 0x54}, 0x1, 0x0, 0x0, 0x82}, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x114, r1, 0x800, 0x70bd28, 0xfb22, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x40}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x1}, {0x5}}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000400)={0x1, 0x0, 0x2, 0x0, 0x0, [{{r2}, 0x4c4e}, {{r0}, 0x20}]}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x11) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x6802, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7d}, @void, @val={0xc, 0x99, {0xffffff81, 0x64}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x8014) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000700)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000740)={0x4, 0x2, {0x0, 0x3, 0x7, 0x3}, 0x10000}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff000000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000900)) tgkill(0x0, 0x0, 0xb) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x400400, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44894}, 0x10) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xd0, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xa8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xe}]}, 0xd0}, 0x1, 0x0, 0x0, 0x90}, 0x400d) sendmsg$DEVLINK_CMD_RELOAD(r0, 0xfffffffffffffffc, 0x4001) 00:08:10 executing program 7: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x800, 0x1f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c001) r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x6, 0x100800) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000240)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x83801) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f00000002c0)) r4 = open_tree(r2, &(0x7f0000000300)='./file0\x00', 0x1800) r5 = dup2(r4, r2) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000340)={0x10001, 0x6, 0x562c5e14, 0x4, 0xb, "8b6c925b89647924d7c69378a8a7cf5d6fc2de"}) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000380)={0x400, 0x1, 0x0, [{0x4, 0x100000001, 0x2, 0x5e, 0x40, 0xf8, 0x8}]}) umount2(&(0x7f0000000400)='./file0\x00', 0x3) r6 = dup3(r4, r3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000440)={@mcast1, 0x8, 0x1, 0x0, 0xa, 0x6, 0x7}, &(0x7f0000000480)=0x20) r7 = accept4$inet6(r2, 0x0, &(0x7f00000004c0), 0x80800) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000500)) bind$unix(0xffffffffffffffff, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x9}}, './file0\x00'}) ioctl$VT_WAITACTIVE(r8, 0x5607) [ 113.049227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.055426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.059551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.073492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.087487] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.133876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.137662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.140269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.143163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.148436] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.152277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.164283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.172098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.175039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.178833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.185314] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.200068] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.226007] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.230416] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.231113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.233299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.241444] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.246332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.248572] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.256576] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.260331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.264958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.266524] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.271373] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.278020] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.281879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.296731] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.303212] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.306409] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.312302] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.313034] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.316154] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.316475] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.332664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.371738] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.190868] Bluetooth: hci0: command tx timeout [ 115.252881] Bluetooth: hci2: command tx timeout [ 115.316963] Bluetooth: hci4: command tx timeout [ 115.317583] Bluetooth: hci1: command tx timeout [ 115.380025] Bluetooth: hci6: command tx timeout [ 115.380623] Bluetooth: hci5: command tx timeout [ 115.381382] Bluetooth: hci3: command tx timeout [ 115.445556] Bluetooth: hci7: command tx timeout [ 117.238141] Bluetooth: hci0: command tx timeout [ 117.301988] Bluetooth: hci2: command tx timeout [ 117.363949] Bluetooth: hci4: command tx timeout [ 117.364373] Bluetooth: hci1: command tx timeout [ 117.428974] Bluetooth: hci3: command tx timeout [ 117.429382] Bluetooth: hci5: command tx timeout [ 117.429817] Bluetooth: hci6: command tx timeout [ 117.493096] Bluetooth: hci7: command tx timeout [ 119.284337] Bluetooth: hci0: command tx timeout [ 119.348998] Bluetooth: hci2: command tx timeout [ 119.412968] Bluetooth: hci1: command tx timeout [ 119.413863] Bluetooth: hci4: command tx timeout [ 119.477218] Bluetooth: hci6: command tx timeout [ 119.478920] Bluetooth: hci5: command tx timeout [ 119.479724] Bluetooth: hci3: command tx timeout [ 119.540961] Bluetooth: hci7: command tx timeout [ 121.333898] Bluetooth: hci0: command tx timeout [ 121.398617] Bluetooth: hci2: command tx timeout [ 121.461177] Bluetooth: hci4: command tx timeout [ 121.461629] Bluetooth: hci1: command tx timeout [ 121.524868] Bluetooth: hci3: command tx timeout [ 121.525305] Bluetooth: hci6: command tx timeout [ 121.525707] Bluetooth: hci5: command tx timeout [ 121.589072] Bluetooth: hci7: command tx timeout [ 172.956020] syz-executor.1 (283) used greatest stack depth: 24512 bytes left [ 175.637000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.640514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.646979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.660142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.665379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.747525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.757663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.762717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.763108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.772042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.772229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.774653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.778158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.780686] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.781724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.826308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.848166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.854247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.855882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.873235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.878551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.883382] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.886956] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.892472] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.904059] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.906537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.918381] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.931337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.943348] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.955356] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.959408] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.963315] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.965205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.981213] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.982976] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.029275] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.030685] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.032681] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.037379] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.039456] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.716884] Bluetooth: hci0: command tx timeout [ 177.843895] Bluetooth: hci1: command tx timeout [ 177.844221] Bluetooth: hci2: command tx timeout [ 177.971872] Bluetooth: hci5: command tx timeout [ 178.035867] Bluetooth: hci4: command tx timeout [ 178.035914] Bluetooth: hci3: command tx timeout [ 178.099835] Bluetooth: hci6: command tx timeout [ 178.227894] Bluetooth: hci7: command tx timeout [ 179.764812] Bluetooth: hci0: command tx timeout [ 179.892892] Bluetooth: hci2: command tx timeout [ 179.892921] Bluetooth: hci1: command tx timeout [ 180.020804] Bluetooth: hci5: command tx timeout [ 180.083903] Bluetooth: hci4: command tx timeout [ 180.084841] Bluetooth: hci3: command tx timeout [ 180.149843] Bluetooth: hci6: command tx timeout [ 180.277082] Bluetooth: hci7: command tx timeout [ 181.812065] Bluetooth: hci0: command tx timeout [ 181.940179] Bluetooth: hci1: command tx timeout [ 181.942820] Bluetooth: hci2: command tx timeout [ 182.067858] Bluetooth: hci5: command tx timeout [ 182.132007] Bluetooth: hci3: command tx timeout [ 182.132054] Bluetooth: hci4: command tx timeout [ 182.196334] Bluetooth: hci6: command tx timeout [ 182.324201] Bluetooth: hci7: command tx timeout [ 183.860807] Bluetooth: hci0: command tx timeout [ 183.988137] Bluetooth: hci2: command tx timeout [ 183.988376] Bluetooth: hci1: command tx timeout [ 184.115843] Bluetooth: hci5: command tx timeout [ 184.180127] Bluetooth: hci3: command tx timeout [ 184.180859] Bluetooth: hci4: command tx timeout [ 184.244998] Bluetooth: hci6: command tx timeout [ 184.373820] Bluetooth: hci7: command tx timeout [ 238.018259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.021545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.024190] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.030055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.034170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.082599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.090550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.093492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.105646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.109656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.205402] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.212641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.215244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.221873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.228728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.229155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.233391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.238213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.254160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.266215] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.304618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.311533] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.316414] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.332341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.333439] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.342232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.354748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.364383] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.364580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.374009] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.374962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.399278] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.416070] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.419143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.421246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.423107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.429188] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.449087] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.463320] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.485343] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.052974] Bluetooth: hci0: command tx timeout [ 240.180863] Bluetooth: hci1: command tx timeout [ 240.307865] Bluetooth: hci2: command tx timeout [ 240.436972] Bluetooth: hci4: command tx timeout [ 240.437712] Bluetooth: hci3: command tx timeout [ 240.499985] Bluetooth: hci5: command tx timeout [ 240.564856] Bluetooth: hci7: command tx timeout [ 240.628839] Bluetooth: hci6: command tx timeout [ 242.099941] Bluetooth: hci0: command tx timeout [ 242.228821] Bluetooth: hci1: command tx timeout [ 242.356868] Bluetooth: hci2: command tx timeout [ 242.484945] Bluetooth: hci4: command tx timeout [ 242.485408] Bluetooth: hci3: command tx timeout [ 242.549817] Bluetooth: hci5: command tx timeout [ 242.612870] Bluetooth: hci7: command tx timeout [ 242.676845] Bluetooth: hci6: command tx timeout [ 244.148852] Bluetooth: hci0: command tx timeout [ 244.275922] Bluetooth: hci1: command tx timeout [ 244.403824] Bluetooth: hci2: command tx timeout [ 244.531852] Bluetooth: hci3: command tx timeout [ 244.532300] Bluetooth: hci4: command tx timeout [ 244.595859] Bluetooth: hci5: command tx timeout [ 244.659998] Bluetooth: hci7: command tx timeout [ 244.723869] Bluetooth: hci6: command tx timeout [ 246.196209] Bluetooth: hci0: command tx timeout [ 246.324833] Bluetooth: hci1: command tx timeout [ 246.453193] Bluetooth: hci2: command tx timeout [ 246.581867] Bluetooth: hci4: command tx timeout [ 246.582339] Bluetooth: hci3: command tx timeout [ 246.644907] Bluetooth: hci5: command tx timeout [ 246.707834] Bluetooth: hci7: command tx timeout [ 246.773263] Bluetooth: hci6: command tx timeout [ 300.502193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.509287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.512482] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.529963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.542591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.561983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.568284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.576255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.584444] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.592523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.617689] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.621971] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.625596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.635290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.639866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.700664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.709273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.719270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.730654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.746328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.824901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.844299] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.847945] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.851371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.859893] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.867424] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.869129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.878072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.899350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.917029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.926398] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.951460] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.959227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.986580] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.009097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.215411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.221324] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.226375] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.250513] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.257222] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.580932] Bluetooth: hci0: command tx timeout [ 302.644504] Bluetooth: hci1: command tx timeout [ 302.709874] Bluetooth: hci2: command tx timeout [ 302.836912] Bluetooth: hci3: command tx timeout [ 302.965318] Bluetooth: hci4: command tx timeout [ 303.093156] Bluetooth: hci6: command tx timeout [ 303.156307] Bluetooth: hci5: command tx timeout [ 303.349516] Bluetooth: hci7: command tx timeout [ 304.628009] Bluetooth: hci0: command tx timeout [ 304.691857] Bluetooth: hci1: command tx timeout [ 304.756311] Bluetooth: hci2: command tx timeout [ 304.884193] Bluetooth: hci3: command tx timeout [ 305.012158] Bluetooth: hci4: command tx timeout [ 305.139998] Bluetooth: hci6: command tx timeout [ 305.204859] Bluetooth: hci5: command tx timeout [ 305.396078] Bluetooth: hci7: command tx timeout [ 306.676473] Bluetooth: hci0: command tx timeout [ 306.740209] Bluetooth: hci1: command tx timeout [ 306.803948] Bluetooth: hci2: command tx timeout [ 306.931898] Bluetooth: hci3: command tx timeout [ 307.060428] Bluetooth: hci4: command tx timeout [ 307.189100] Bluetooth: hci6: command tx timeout [ 307.251894] Bluetooth: hci5: command tx timeout [ 307.444171] Bluetooth: hci7: command tx timeout [ 308.723921] Bluetooth: hci0: command tx timeout [ 308.787834] Bluetooth: hci1: command tx timeout [ 308.852184] Bluetooth: hci2: command tx timeout [ 308.980206] Bluetooth: hci3: command tx timeout [ 309.107855] Bluetooth: hci4: command tx timeout [ 309.236577] Bluetooth: hci6: command tx timeout [ 309.301077] Bluetooth: hci5: command tx timeout [ 309.492884] Bluetooth: hci7: command tx timeout [ 363.404190] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.407230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.411532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.425718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.433592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.664160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.669211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.674187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.683717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.688211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.752438] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.753335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.756652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.759618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.762203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.772031] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.774075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.783415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.814391] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.817603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.819719] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.826250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.838169] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.843067] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.843902] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.874720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.879324] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.883601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.896449] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.936730] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.938649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.941269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.947492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.955549] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.962862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.965544] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.965992] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.985475] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.990593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.006713] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.494140] Bluetooth: hci0: command tx timeout [ 365.748018] Bluetooth: hci1: command tx timeout [ 365.875878] Bluetooth: hci3: command tx timeout [ 365.876958] Bluetooth: hci6: command tx timeout [ 365.939887] Bluetooth: hci2: command tx timeout [ 366.067890] Bluetooth: hci4: command tx timeout [ 366.068550] Bluetooth: hci5: command tx timeout [ 366.132875] Bluetooth: hci7: command tx timeout [ 367.540561] Bluetooth: hci0: command tx timeout [ 367.796954] Bluetooth: hci1: command tx timeout [ 367.924183] Bluetooth: hci6: command tx timeout [ 367.924654] Bluetooth: hci3: command tx timeout [ 367.988810] Bluetooth: hci2: command tx timeout [ 368.115896] Bluetooth: hci5: command tx timeout [ 368.116385] Bluetooth: hci4: command tx timeout [ 368.179880] Bluetooth: hci7: command tx timeout [ 369.588093] Bluetooth: hci0: command tx timeout [ 369.844879] Bluetooth: hci1: command tx timeout [ 369.972820] Bluetooth: hci3: command tx timeout [ 369.973310] Bluetooth: hci6: command tx timeout [ 370.036837] Bluetooth: hci2: command tx timeout [ 370.163923] Bluetooth: hci4: command tx timeout [ 370.164399] Bluetooth: hci5: command tx timeout [ 370.228184] Bluetooth: hci7: command tx timeout [ 371.636016] Bluetooth: hci0: command tx timeout [ 371.892833] Bluetooth: hci1: command tx timeout [ 372.020053] Bluetooth: hci3: command tx timeout [ 372.020507] Bluetooth: hci6: command tx timeout [ 372.084931] Bluetooth: hci2: command tx timeout [ 372.212204] Bluetooth: hci5: command tx timeout [ 372.212663] Bluetooth: hci4: command tx timeout [ 372.275831] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:13:19 Registers: info registers vcpu 0 RAX=00000000ffffffff RBX=0000000000000000 RCX=bde53094b5b1327e RDX=00000000db688f6a RSI=000000000b6dc639 RDI=00000000d61cd15b RBP=ffffffff85c1cc40 RSP=ffff88806ce08968 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff8151b063 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2f3a618260 CR3=000000000da94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff8678d9dc RDX=1ffff1100d9e1159 RSI=0000000000000001 RDI=ffff88806cf08ac8 RBP=ffffea0000222f00 RSP=ffff88806cf08a08 R8 =ffffffff8678d9e0 R9 =0000000000000000 R10=000000000003b53d R11=000000000000031f R12=ffff888028c17818 R13=ffff88806cf08ac0 R14=ffff888028c17818 R15=ffff88806cf08a78 RIP=ffffffff81354bc6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f25a9f0b620 CR3=0000000026037000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000