syzkaller login: [ 58.060831] sshd (239) used greatest stack depth: 24000 bytes left Warning: Permanently added '[localhost]:39070' (ECDSA) to the list of known hosts. 2024/10/22 22:45:48 fuzzer started 2024/10/22 22:45:49 dialing manager at localhost:45639 [ 77.769056] cgroup: Unknown subsys name 'net' [ 77.874612] cgroup: Unknown subsys name 'cpuset' [ 77.906604] cgroup: Unknown subsys name 'rlimit' 2024/10/22 22:46:14 syscalls: 2217 2024/10/22 22:46:14 code coverage: enabled 2024/10/22 22:46:14 comparison tracing: enabled 2024/10/22 22:46:14 extra coverage: enabled 2024/10/22 22:46:14 setuid sandbox: enabled 2024/10/22 22:46:14 namespace sandbox: enabled 2024/10/22 22:46:14 Android sandbox: enabled 2024/10/22 22:46:14 fault injection: enabled 2024/10/22 22:46:14 leak checking: enabled 2024/10/22 22:46:14 net packet injection: enabled 2024/10/22 22:46:14 net device setup: enabled 2024/10/22 22:46:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/22 22:46:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/22 22:46:14 USB emulation: enabled 2024/10/22 22:46:14 hci packet injection: enabled 2024/10/22 22:46:14 wifi device emulation: enabled 2024/10/22 22:46:14 802.15.4 emulation: enabled 2024/10/22 22:46:15 fetching corpus: 50, signal 15136/16967 (executing program) 2024/10/22 22:46:15 fetching corpus: 100, signal 28188/31595 (executing program) 2024/10/22 22:46:15 fetching corpus: 150, signal 40513/45230 (executing program) 2024/10/22 22:46:15 fetching corpus: 200, signal 45617/51700 (executing program) 2024/10/22 22:46:15 fetching corpus: 250, signal 51763/59078 (executing program) 2024/10/22 22:46:16 fetching corpus: 300, signal 58353/66710 (executing program) 2024/10/22 22:46:16 fetching corpus: 350, signal 61721/71223 (executing program) 2024/10/22 22:46:16 fetching corpus: 400, signal 67070/77499 (executing program) 2024/10/22 22:46:17 fetching corpus: 450, signal 69937/81473 (executing program) 2024/10/22 22:46:17 fetching corpus: 500, signal 73198/85712 (executing program) 2024/10/22 22:46:17 fetching corpus: 550, signal 75308/88825 (executing program) 2024/10/22 22:46:17 fetching corpus: 600, signal 78120/92550 (executing program) 2024/10/22 22:46:18 fetching corpus: 650, signal 81326/96545 (executing program) 2024/10/22 22:46:18 fetching corpus: 700, signal 83626/99737 (executing program) 2024/10/22 22:46:18 fetching corpus: 750, signal 85325/102353 (executing program) 2024/10/22 22:46:19 fetching corpus: 800, signal 87166/104976 (executing program) 2024/10/22 22:46:19 fetching corpus: 850, signal 88284/107028 (executing program) 2024/10/22 22:46:19 fetching corpus: 900, signal 91700/110965 (executing program) 2024/10/22 22:46:20 fetching corpus: 950, signal 93991/113916 (executing program) 2024/10/22 22:46:20 fetching corpus: 1000, signal 95964/116495 (executing program) 2024/10/22 22:46:20 fetching corpus: 1050, signal 97890/119007 (executing program) 2024/10/22 22:46:21 fetching corpus: 1100, signal 99348/121158 (executing program) 2024/10/22 22:46:21 fetching corpus: 1150, signal 100810/123327 (executing program) 2024/10/22 22:46:21 fetching corpus: 1200, signal 101951/125165 (executing program) 2024/10/22 22:46:22 fetching corpus: 1250, signal 102897/126828 (executing program) 2024/10/22 22:46:22 fetching corpus: 1300, signal 104604/129037 (executing program) 2024/10/22 22:46:22 fetching corpus: 1350, signal 106866/131645 (executing program) 2024/10/22 22:46:23 fetching corpus: 1400, signal 107905/133296 (executing program) 2024/10/22 22:46:23 fetching corpus: 1450, signal 108875/134895 (executing program) 2024/10/22 22:46:23 fetching corpus: 1500, signal 109934/136567 (executing program) 2024/10/22 22:46:24 fetching corpus: 1550, signal 111115/138326 (executing program) 2024/10/22 22:46:24 fetching corpus: 1600, signal 112192/139936 (executing program) 2024/10/22 22:46:24 fetching corpus: 1650, signal 113132/141413 (executing program) 2024/10/22 22:46:25 fetching corpus: 1700, signal 114299/143026 (executing program) 2024/10/22 22:46:25 fetching corpus: 1750, signal 115202/144468 (executing program) 2024/10/22 22:46:26 fetching corpus: 1800, signal 116560/146174 (executing program) 2024/10/22 22:46:26 fetching corpus: 1850, signal 117357/147484 (executing program) 2024/10/22 22:46:26 fetching corpus: 1900, signal 118703/149097 (executing program) 2024/10/22 22:46:27 fetching corpus: 1950, signal 119895/150604 (executing program) 2024/10/22 22:46:27 fetching corpus: 2000, signal 120816/151939 (executing program) 2024/10/22 22:46:28 fetching corpus: 2050, signal 121739/153260 (executing program) 2024/10/22 22:46:28 fetching corpus: 2100, signal 122302/154327 (executing program) 2024/10/22 22:46:28 fetching corpus: 2150, signal 123239/155684 (executing program) 2024/10/22 22:46:29 fetching corpus: 2200, signal 123999/156845 (executing program) 2024/10/22 22:46:29 fetching corpus: 2250, signal 124734/157987 (executing program) 2024/10/22 22:46:29 fetching corpus: 2300, signal 125418/159111 (executing program) 2024/10/22 22:46:30 fetching corpus: 2350, signal 126223/160296 (executing program) 2024/10/22 22:46:30 fetching corpus: 2400, signal 127048/161447 (executing program) 2024/10/22 22:46:30 fetching corpus: 2450, signal 127787/162534 (executing program) 2024/10/22 22:46:31 fetching corpus: 2500, signal 128610/163637 (executing program) 2024/10/22 22:46:31 fetching corpus: 2550, signal 129283/164637 (executing program) 2024/10/22 22:46:31 fetching corpus: 2600, signal 130230/165768 (executing program) 2024/10/22 22:46:31 fetching corpus: 2650, signal 130763/166677 (executing program) 2024/10/22 22:46:32 fetching corpus: 2700, signal 131326/167569 (executing program) 2024/10/22 22:46:32 fetching corpus: 2750, signal 132098/168584 (executing program) 2024/10/22 22:46:32 fetching corpus: 2800, signal 132641/169495 (executing program) 2024/10/22 22:46:33 fetching corpus: 2850, signal 133245/170395 (executing program) 2024/10/22 22:46:33 fetching corpus: 2900, signal 134072/171418 (executing program) 2024/10/22 22:46:33 fetching corpus: 2950, signal 134487/172263 (executing program) 2024/10/22 22:46:33 fetching corpus: 3000, signal 135012/173057 (executing program) 2024/10/22 22:46:33 fetching corpus: 3050, signal 135629/173916 (executing program) 2024/10/22 22:46:34 fetching corpus: 3100, signal 136479/174850 (executing program) 2024/10/22 22:46:34 fetching corpus: 3150, signal 136846/175590 (executing program) 2024/10/22 22:46:34 fetching corpus: 3200, signal 137382/176410 (executing program) 2024/10/22 22:46:35 fetching corpus: 3250, signal 137811/177181 (executing program) 2024/10/22 22:46:35 fetching corpus: 3300, signal 138295/177959 (executing program) 2024/10/22 22:46:35 fetching corpus: 3350, signal 140027/179103 (executing program) 2024/10/22 22:46:35 fetching corpus: 3400, signal 140485/179842 (executing program) 2024/10/22 22:46:36 fetching corpus: 3450, signal 141317/180659 (executing program) 2024/10/22 22:46:36 fetching corpus: 3500, signal 142152/181460 (executing program) 2024/10/22 22:46:36 fetching corpus: 3550, signal 142726/182170 (executing program) 2024/10/22 22:46:37 fetching corpus: 3600, signal 143211/182881 (executing program) 2024/10/22 22:46:37 fetching corpus: 3650, signal 144396/183747 (executing program) 2024/10/22 22:46:38 fetching corpus: 3700, signal 144752/184374 (executing program) 2024/10/22 22:46:38 fetching corpus: 3750, signal 145465/185035 (executing program) 2024/10/22 22:46:38 fetching corpus: 3800, signal 146135/185742 (executing program) 2024/10/22 22:46:39 fetching corpus: 3850, signal 146535/186342 (executing program) 2024/10/22 22:46:39 fetching corpus: 3900, signal 147147/186993 (executing program) 2024/10/22 22:46:39 fetching corpus: 3950, signal 147938/187662 (executing program) 2024/10/22 22:46:39 fetching corpus: 4000, signal 149032/188716 (executing program) 2024/10/22 22:46:40 fetching corpus: 4050, signal 149788/189335 (executing program) 2024/10/22 22:46:40 fetching corpus: 4100, signal 150215/189889 (executing program) 2024/10/22 22:46:40 fetching corpus: 4150, signal 150574/190414 (executing program) 2024/10/22 22:46:40 fetching corpus: 4200, signal 150933/190937 (executing program) 2024/10/22 22:46:41 fetching corpus: 4250, signal 151263/191459 (executing program) 2024/10/22 22:46:41 fetching corpus: 4300, signal 151728/191991 (executing program) 2024/10/22 22:46:41 fetching corpus: 4350, signal 152111/192497 (executing program) 2024/10/22 22:46:42 fetching corpus: 4400, signal 152391/193000 (executing program) 2024/10/22 22:46:42 fetching corpus: 4450, signal 153100/193533 (executing program) 2024/10/22 22:46:42 fetching corpus: 4500, signal 153485/194011 (executing program) 2024/10/22 22:46:42 fetching corpus: 4550, signal 153845/194524 (executing program) 2024/10/22 22:46:43 fetching corpus: 4600, signal 154226/194967 (executing program) 2024/10/22 22:46:43 fetching corpus: 4650, signal 154599/195466 (executing program) 2024/10/22 22:46:43 fetching corpus: 4700, signal 155133/195898 (executing program) 2024/10/22 22:46:43 fetching corpus: 4750, signal 155505/196325 (executing program) 2024/10/22 22:46:44 fetching corpus: 4800, signal 155961/196782 (executing program) 2024/10/22 22:46:44 fetching corpus: 4850, signal 156323/197226 (executing program) 2024/10/22 22:46:45 fetching corpus: 4900, signal 156656/197664 (executing program) 2024/10/22 22:46:45 fetching corpus: 4950, signal 157108/197984 (executing program) 2024/10/22 22:46:45 fetching corpus: 5000, signal 157543/197986 (executing program) 2024/10/22 22:46:45 fetching corpus: 5050, signal 157868/197986 (executing program) 2024/10/22 22:46:45 fetching corpus: 5100, signal 158401/197986 (executing program) 2024/10/22 22:46:45 fetching corpus: 5150, signal 158857/197986 (executing program) 2024/10/22 22:46:45 fetching corpus: 5200, signal 159353/197986 (executing program) 2024/10/22 22:46:45 fetching corpus: 5250, signal 159579/197986 (executing program) 2024/10/22 22:46:46 fetching corpus: 5300, signal 160041/197986 (executing program) 2024/10/22 22:46:46 fetching corpus: 5350, signal 160848/197986 (executing program) 2024/10/22 22:46:46 fetching corpus: 5400, signal 161226/197986 (executing program) 2024/10/22 22:46:46 fetching corpus: 5450, signal 161475/197986 (executing program) 2024/10/22 22:46:47 fetching corpus: 5500, signal 161682/197986 (executing program) 2024/10/22 22:46:47 fetching corpus: 5550, signal 162084/197986 (executing program) 2024/10/22 22:46:47 fetching corpus: 5600, signal 162366/197986 (executing program) 2024/10/22 22:46:48 fetching corpus: 5650, signal 162901/197986 (executing program) 2024/10/22 22:46:48 fetching corpus: 5700, signal 163265/197986 (executing program) 2024/10/22 22:46:48 fetching corpus: 5750, signal 163624/197986 (executing program) 2024/10/22 22:46:49 fetching corpus: 5800, signal 164009/197986 (executing program) 2024/10/22 22:46:49 fetching corpus: 5850, signal 164460/197986 (executing program) 2024/10/22 22:46:49 fetching corpus: 5900, signal 164935/197986 (executing program) 2024/10/22 22:46:50 fetching corpus: 5950, signal 165360/197986 (executing program) 2024/10/22 22:46:50 fetching corpus: 6000, signal 165671/197987 (executing program) 2024/10/22 22:46:50 fetching corpus: 6050, signal 166068/197987 (executing program) 2024/10/22 22:46:51 fetching corpus: 6100, signal 166430/197987 (executing program) 2024/10/22 22:46:51 fetching corpus: 6150, signal 166753/197987 (executing program) 2024/10/22 22:46:52 fetching corpus: 6200, signal 166968/197987 (executing program) 2024/10/22 22:46:52 fetching corpus: 6250, signal 167422/197987 (executing program) 2024/10/22 22:46:52 fetching corpus: 6300, signal 167734/197987 (executing program) 2024/10/22 22:46:53 fetching corpus: 6350, signal 168075/197987 (executing program) 2024/10/22 22:46:53 fetching corpus: 6400, signal 168343/197987 (executing program) 2024/10/22 22:46:53 fetching corpus: 6450, signal 168756/197987 (executing program) 2024/10/22 22:46:54 fetching corpus: 6500, signal 169098/197987 (executing program) 2024/10/22 22:46:54 fetching corpus: 6550, signal 169293/197987 (executing program) 2024/10/22 22:46:54 fetching corpus: 6600, signal 169824/197987 (executing program) 2024/10/22 22:46:55 fetching corpus: 6650, signal 170089/197987 (executing program) 2024/10/22 22:46:55 fetching corpus: 6700, signal 170466/197987 (executing program) 2024/10/22 22:46:55 fetching corpus: 6750, signal 170767/197987 (executing program) 2024/10/22 22:46:56 fetching corpus: 6800, signal 170999/197987 (executing program) 2024/10/22 22:46:56 fetching corpus: 6850, signal 171221/197987 (executing program) 2024/10/22 22:46:56 fetching corpus: 6900, signal 171499/197987 (executing program) 2024/10/22 22:46:57 fetching corpus: 6950, signal 171764/197987 (executing program) 2024/10/22 22:46:57 fetching corpus: 7000, signal 171938/197987 (executing program) 2024/10/22 22:46:57 fetching corpus: 7050, signal 172252/197987 (executing program) 2024/10/22 22:46:58 fetching corpus: 7100, signal 172485/197987 (executing program) 2024/10/22 22:46:58 fetching corpus: 7150, signal 172867/197987 (executing program) 2024/10/22 22:46:58 fetching corpus: 7200, signal 173060/197987 (executing program) 2024/10/22 22:46:58 fetching corpus: 7250, signal 173310/197987 (executing program) 2024/10/22 22:46:59 fetching corpus: 7300, signal 173614/197987 (executing program) 2024/10/22 22:46:59 fetching corpus: 7350, signal 173857/197987 (executing program) 2024/10/22 22:46:59 fetching corpus: 7400, signal 174252/197987 (executing program) 2024/10/22 22:46:59 fetching corpus: 7450, signal 174517/197987 (executing program) 2024/10/22 22:46:59 fetching corpus: 7500, signal 174746/197987 (executing program) 2024/10/22 22:47:00 fetching corpus: 7550, signal 174969/197987 (executing program) 2024/10/22 22:47:00 fetching corpus: 7600, signal 175196/197987 (executing program) 2024/10/22 22:47:00 fetching corpus: 7650, signal 175316/197987 (executing program) 2024/10/22 22:47:00 fetching corpus: 7700, signal 175531/197987 (executing program) 2024/10/22 22:47:01 fetching corpus: 7750, signal 175740/197987 (executing program) 2024/10/22 22:47:01 fetching corpus: 7800, signal 175977/197987 (executing program) 2024/10/22 22:47:01 fetching corpus: 7850, signal 176295/197987 (executing program) 2024/10/22 22:47:02 fetching corpus: 7900, signal 176465/197987 (executing program) 2024/10/22 22:47:02 fetching corpus: 7950, signal 176689/197987 (executing program) 2024/10/22 22:47:02 fetching corpus: 8000, signal 176895/197987 (executing program) 2024/10/22 22:47:03 fetching corpus: 8050, signal 177112/197987 (executing program) 2024/10/22 22:47:03 fetching corpus: 8100, signal 177474/197987 (executing program) 2024/10/22 22:47:03 fetching corpus: 8150, signal 177673/197987 (executing program) 2024/10/22 22:47:04 fetching corpus: 8200, signal 177972/197988 (executing program) 2024/10/22 22:47:04 fetching corpus: 8250, signal 178267/197988 (executing program) 2024/10/22 22:47:04 fetching corpus: 8300, signal 178454/197988 (executing program) 2024/10/22 22:47:04 fetching corpus: 8350, signal 178746/197988 (executing program) 2024/10/22 22:47:04 fetching corpus: 8400, signal 179023/197988 (executing program) 2024/10/22 22:47:05 fetching corpus: 8450, signal 179365/197988 (executing program) 2024/10/22 22:47:05 fetching corpus: 8500, signal 179567/197988 (executing program) 2024/10/22 22:47:05 fetching corpus: 8550, signal 179792/197988 (executing program) 2024/10/22 22:47:05 fetching corpus: 8600, signal 180167/197988 (executing program) 2024/10/22 22:47:05 fetching corpus: 8650, signal 180408/197990 (executing program) 2024/10/22 22:47:05 fetching corpus: 8700, signal 180646/197990 (executing program) 2024/10/22 22:47:05 fetching corpus: 8750, signal 180900/197990 (executing program) 2024/10/22 22:47:05 fetching corpus: 8800, signal 181110/197990 (executing program) 2024/10/22 22:47:05 fetching corpus: 8850, signal 181329/197990 (executing program) 2024/10/22 22:47:06 fetching corpus: 8900, signal 181496/197990 (executing program) 2024/10/22 22:47:06 fetching corpus: 8950, signal 181725/197990 (executing program) 2024/10/22 22:47:06 fetching corpus: 9000, signal 181972/197990 (executing program) 2024/10/22 22:47:07 fetching corpus: 9050, signal 182163/197990 (executing program) 2024/10/22 22:47:07 fetching corpus: 9100, signal 182295/197990 (executing program) 2024/10/22 22:47:07 fetching corpus: 9150, signal 182529/197990 (executing program) 2024/10/22 22:47:08 fetching corpus: 9200, signal 182800/197990 (executing program) 2024/10/22 22:47:08 fetching corpus: 9250, signal 183019/197990 (executing program) 2024/10/22 22:47:08 fetching corpus: 9300, signal 183164/197990 (executing program) 2024/10/22 22:47:08 fetching corpus: 9350, signal 183400/197990 (executing program) 2024/10/22 22:47:08 fetching corpus: 9400, signal 183701/197990 (executing program) 2024/10/22 22:47:08 fetching corpus: 9450, signal 183859/197990 (executing program) 2024/10/22 22:47:09 fetching corpus: 9500, signal 184083/197990 (executing program) 2024/10/22 22:47:09 fetching corpus: 9550, signal 184334/197990 (executing program) 2024/10/22 22:47:09 fetching corpus: 9600, signal 184548/197990 (executing program) 2024/10/22 22:47:10 fetching corpus: 9650, signal 184755/197990 (executing program) 2024/10/22 22:47:10 fetching corpus: 9700, signal 184969/197990 (executing program) 2024/10/22 22:47:10 fetching corpus: 9750, signal 185135/197990 (executing program) 2024/10/22 22:47:11 fetching corpus: 9800, signal 185684/197990 (executing program) 2024/10/22 22:47:11 fetching corpus: 9850, signal 185874/197990 (executing program) 2024/10/22 22:47:11 fetching corpus: 9900, signal 186106/197990 (executing program) 2024/10/22 22:47:12 fetching corpus: 9950, signal 186311/197990 (executing program) 2024/10/22 22:47:12 fetching corpus: 10000, signal 186649/197990 (executing program) 2024/10/22 22:47:12 fetching corpus: 10050, signal 186955/197990 (executing program) 2024/10/22 22:47:12 fetching corpus: 10100, signal 187107/197990 (executing program) 2024/10/22 22:47:13 fetching corpus: 10150, signal 187524/197990 (executing program) 2024/10/22 22:47:13 fetching corpus: 10200, signal 187667/197990 (executing program) 2024/10/22 22:47:13 fetching corpus: 10250, signal 187814/197992 (executing program) 2024/10/22 22:47:13 fetching corpus: 10300, signal 188079/197992 (executing program) 2024/10/22 22:47:13 fetching corpus: 10350, signal 188337/197992 (executing program) 2024/10/22 22:47:14 fetching corpus: 10400, signal 188543/197992 (executing program) 2024/10/22 22:47:14 fetching corpus: 10450, signal 188666/197992 (executing program) 2024/10/22 22:47:14 fetching corpus: 10500, signal 188879/197992 (executing program) 2024/10/22 22:47:15 fetching corpus: 10550, signal 189018/197992 (executing program) 2024/10/22 22:47:15 fetching corpus: 10600, signal 189290/197992 (executing program) 2024/10/22 22:47:15 fetching corpus: 10650, signal 189519/197992 (executing program) 2024/10/22 22:47:16 fetching corpus: 10700, signal 189725/197992 (executing program) 2024/10/22 22:47:16 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/10/22 22:47:16 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/10/22 22:47:19 starting 8 fuzzer processes 22:47:19 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5657ea8474b29455}, 0x4000) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x100000, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000340)={0x0, 0xfffffffffffffffe}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) r5 = dup2(r4, r3) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000003c0)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000400)={{0x0, 0x6, 0x10001, 0x963, 0x7, 0x9f6, 0x7, 0x200, 0x3, 0x6, 0x0, 0x4be8, 0x5, 0x5, 0x800000000000000}, 0x8, [0x0]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000480)) r7 = openat(r5, &(0x7f00000004c0)='./file0\x00', 0x40, 0x10) r8 = dup3(r6, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) openat(r9, &(0x7f0000000540)='./file0\x00', 0x10001, 0xc0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$mouse(&(0x7f0000000580), 0x1, 0xa000) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0xdfceeb80ded46c04, 0x0) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r11) 22:47:19 executing program 2: prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) 22:47:19 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x0, 0x1, 0x8}, 0x9}}, 0x18) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000140)={{r3}, 0x3, &(0x7f0000000100)=[0x4, 0x2, 0x6], 0x8a2, 0x7, [0x9, 0x200, 0x81, 0xfffffffffffffff9]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/ipc\x00') r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x6) write$P9_RVERSION(r1, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0x3, 0x6, '9P2000'}, 0x13) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000300)={0xffffff00}, 0x4) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/pid_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x0, 0xee01}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r1, &(0x7f00000003c0)={0x10000010}) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x5, r5, r0) poll(&(0x7f0000000400)=[{r1, 0x2}, {r3, 0x1102}], 0x2, 0x0) write$9p(r3, &(0x7f0000000440)="512e90532f4e0d0db77897ff9f83e8a6c8050ff26bf30b2b419e5efc438ca632363fe9eb3e360d", 0x27) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x80040, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f00000004c0)) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000540)) 22:47:19 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x100, 0x74) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x104, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x880) fadvise64(r0, 0x4, 0xfffffffffffffffb, 0x4) r1 = socket$netlink(0x10, 0x3, 0x5) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000810) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) poll(&(0x7f0000000280)=[{r0, 0x8}, {r2, 0x2a0}, {r1, 0x80}], 0x3, 0x7fff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x50080, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) preadv2(r3, &(0x7f0000002380)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/31, 0x1f}], 0x3, 0xfa23, 0x80000000, 0x16) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000007, 0x12, r1, 0x5b9dc000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002500)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r5}, 0x10001) r6 = openat$cgroup_ro(r4, &(0x7f0000002540)='memory.swap.current\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000025c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2808}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24040080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), r6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000002a00)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000029c0)={&(0x7f0000002740)={0x254, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x3, 0x0, 0x9, 0x9, 0x8000, 0x800, 0x81]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x9, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x4}, {0x2, 0x3}, {0x5, 0x5}, {0x7, 0x2}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x4}, {0x6, 0x9}, {0x5, 0x7}, {0x2, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x7}, {0x3, 0x2}, {0x0, 0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x5}, {0x4, 0x9}, {0x0, 0x7}, {0x3, 0xa}, {0x4, 0x7}, {0x2, 0x5}, {0x6, 0x8}, {0x1, 0x5}, {0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x8}, {0x5, 0x6}, {0x7, 0x8}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x2}, {0x4, 0x7}, {0x6, 0x5}, {0x1, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x4}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0x4}, {0x4, 0x9}, {0x6, 0x4}, {0x1}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x5, 0x5}, {0x5, 0xa}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x5}, {0x0, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1, 0x1, 0x40, 0x100, 0x200, 0x8000, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x993, 0x200, 0xb0, 0x1000, 0x8000, 0x7, 0x401]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x30, 0x78, 0x30, 0x9, 0x6c, 0xc, 0x3, 0x4, 0x60, 0x6d, 0x18, 0x3, 0x0, 0x2, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0xc, 0x18, 0x2, 0xc, 0x1b, 0x6, 0x9, 0x24, 0xb, 0x4, 0x1b, 0xb, 0x6, 0x4, 0xb, 0xb, 0x60, 0x3, 0x1b, 0x0, 0x2, 0x1b, 0x0, 0x2, 0x1, 0x1b, 0x6, 0x1, 0xc, 0x6c]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x6}, {0x3, 0xa}, {0x6, 0x7}, {0x2, 0xa}, {0x4, 0x3}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x1}, {0x0, 0x1}, {0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x1}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x8}, {}, {0x2, 0x4}, {0x6}, {0x3}, {0x2, 0x2}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x6}, {0x4, 0x9}, {0x2, 0x2}, {0x2, 0x3}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0x5}, {0x4}, {0x4}, {0x1}, {0x4}, {0x6, 0x6}, {0x6, 0x9}, {0x4}, {0x6, 0xa}, {0x1, 0x9}, {0x5, 0x5}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x4, 0x6}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x4}, {0x5, 0x2}, {0x3, 0x2}, {0x4, 0xa}, {0x6, 0x6}, {0x5}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x9}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x9, 0x8, 0x3, 0x0, 0x40, 0x9]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x3}, {0x1, 0x5}, {0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x7}, {0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x4}, {0x5, 0x2}, {0x2, 0x7}, {0x3, 0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0xe, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x81, 0x9, 0x1f, 0x4, 0x2, 0xfffb, 0x7f]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f1b, 0x5, 0x9, 0x1, 0x101, 0x8, 0x2, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x91af, 0x8, 0x3f, 0x40, 0xffff, 0x100, 0x40]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0xb]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x4}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0xa}, {0x5, 0xa}, {0x0, 0x2}, {0x4, 0x3}, {0x3, 0xa}, {0x2, 0x2}, {0x5, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x6, 0x7}, {0x2, 0x5}, {0x7, 0x9}, {0x6, 0x4}, {0x7}, {0x0, 0xa}]}]}]}]}, 0x254}}, 0x4000040) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000002a40)={0x8, 0xffffffffffff810a, 0x1, 0x7, 0x1, [0x61e6, 0x0, 0x0, 0x5]}) [ 167.706850] audit: type=1400 audit(1729637239.583:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:47:19 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x4000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0xea, 0x401, 0x0, 0x8000, 0x8, [{0x1, 0x80000000, 0x7, '\x00', 0x140a}, {0x1, 0xcb, 0x7, '\x00', 0x88}, {0x20, 0x8001, 0x8, '\x00', 0x8a}, {0x0, 0x200, 0xd7fe, '\x00', 0x80}, {0x3, 0x2, 0x20, '\x00', 0x6}, {0x8001, 0x9, 0x2}, {0xd1d, 0x4, 0x7ff, '\x00', 0x104}, {0x5, 0xd88, 0x7}]}) dup(r0) r1 = timerfd_create(0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$incfs(r2, &(0x7f0000000240)='.pending_reads\x00', 0x180, 0x2) r4 = clone3(&(0x7f0000000580)={0x80020200, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, {0xd}, &(0x7f0000000340)=""/235, 0xeb, &(0x7f0000000440)=""/225, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa, {r2}}, 0x58) fcntl$setown(r3, 0x8, r4) openat(r3, &(0x7f0000000600)='./file0\x00', 0x44201, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) clone3(&(0x7f0000000840)={0x80000, &(0x7f0000000640)=0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0), {0x13}, &(0x7f0000000700)=""/90, 0x5a, &(0x7f0000000780)=""/25, &(0x7f00000007c0)=[r5, r6, r4, 0xffffffffffffffff, r4, 0x0], 0x6, {r7}}, 0x58) openat(r3, &(0x7f00000008c0)='./file0\x00', 0x400000, 0x80) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x9900) ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f0000000940)=0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000980)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) openat$cgroup_ro(r10, &(0x7f00000009c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r11 = fsmount(r10, 0x0, 0xa) ioctl$MON_IOCX_GET(r11, 0x40189206, &(0x7f0000000b00)={&(0x7f0000000a00), &(0x7f0000000a40)=""/188, 0xbc}) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/partitions\x00', 0x0, 0x0) openat(r12, &(0x7f0000000b80)='./file1\x00', 0x200, 0x10) 22:47:19 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x104) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f00000000c0)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000140)=""/155) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x1) r3 = dup3(r0, r2, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x7c, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/157, 0x9d, 0x1, 0x29}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/168, 0xa8, 0x0, 0x1d}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f0000000440)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @dead_binder_done, @increfs={0x40046304, 0x3}, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x3}], 0xdd, 0x0, &(0x7f0000000500)="fdbe5ef14f4f9eebbdee9157ddc4c8edb05558d93bbc2c3999d2d3e9b6e81cbf1573dfab166986f903b833f06dbef356258aee5c53d1f7d548c6229004064bdad60560babed20449b6b66a50d51b7475a427f09e38998e7dbcb937e17fdc97d2f4f6f9576330e9ec373e26dc40eb6c93053a95dabd40b0a442f8dd1f4240d21eba227b0dba28a0214fe57a26b5be592cb919b6cc11ad81abd69f93ac01376da2a99b09d111e7cc3ef7916d31db3b30d03108073d1ecfedab8cedb3c798eda3eba8644a7b16ee4528e74a864c716a92ddd6cb48122e32ec17313ddf4f68"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000740)={0x7ff, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {{0xa, 0x4e23, 0x3ff, @empty, 0x6}}}, 0x108) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000880)={{0x2, 0x4e21, @local}, {0x300, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x8, {0x2, 0x4e24, @private=0xa010100}, 'bridge_slave_0\x00'}) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x401}}, [""]}, 0x24}}, 0x80) open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x80, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x400}}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x85) preadv2(r4, &(0x7f0000000c00)=[{&(0x7f0000000b80)=""/125, 0x7d}], 0x1, 0x0, 0x80000000, 0x17) r5 = syz_open_dev$mouse(&(0x7f0000000c40), 0x6, 0x4000) fremovexattr(r5, &(0x7f0000000c80)=@random={'os2.', '\'\x00'}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x20040800) 22:47:19 executing program 7: sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe3b}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3aa0}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8bc4}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004020}, 0x4000) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4004840) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000004c0)={0x42, 0x80, 0x97f4, 0x2, 0x3ff}) sendmsg$nl_netfilter(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x130, 0x13, 0x9, 0x101, 0x70bd2d, 0x25dfdbfd, {0x3}, [@generic="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", @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x79, 0x0, 0x0, @pid}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb4, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7e, 0xbe, "d242697119db0f10668e106c50e465ec61f2ab42e049578cb03812a96d56eb0ce62c4ca51949ccb1bd9991bff07595eb2acd4865433acd8004830d3e71993604788648f3ced2ac072eacf374f5bcf6f6ec4e07e9e0c05055e0ccd0e016f185f3cdee9e09ddf0f5f0a16c1d068658301208ee602b9da904b46bd6"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x592c2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xde1, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}}, 0x801) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x1cc, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0xc5, 0x2a, [@random_vendor={0xdd, 0x1d, "c1769a2939bea3cecba0bdbdd5897245687fbccf163a15292b71b41caa"}, @tim={0x5, 0x6a, {0x7, 0x54, 0x40, "968d75eef251e39babb2536e33691236ac1ebd497238bb2e74f22c736aa4f8078665af57554e3a25245341c91a35c85147c19254d30d6524ea6d4a2d3ee50d0d9a03cf8b37478b175117f4a6fb33c11fdaf8566c971b94ed7c8c3a3b3a31d531409f9a3db09a75"}}, @peer_mgmt={0x75, 0x14, {0x1, 0x9, @void, @void, @val="424b84a8b880b1e873c4f0bd2c4d7504"}}, @erp={0x2a, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @perr={0x84, 0xf, {0x4, 0x1, [@not_ext={{}, @device_b, 0x3f, "", 0x8}]}}, @supported_rates={0x1, 0x7, [{0x60, 0x1}, {}, {0x4, 0x1}, {0x78}, {0x5, 0x1}, {0x12, 0x1}, {0x2, 0x1}]}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0xae, 0x2a, [@cf={0x4, 0x6, {0x3a, 0x4, 0x3, 0x20}}, @gcr_ga={0xbd, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @channel_switch={0x25, 0x3, {0x1, 0xb0, 0x5}}, @measure_req={0x26, 0xb, {0x6, 0x4, 0x3f, "bf271e751b5dc29d"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x7b, {0x5, 0x1, "4e95bd041ed8e3cae736544d6b293d68", "8c9d56b012552e4eb113708aa8998a062a3064af9e1787ed5d65d1a0daa4708e", "89b3ca1678b3021f65edc8429c28d51047ddb91476f0508778bd54079ba77996", [{0x2, 0x27, "2c26caa230aa94bca804234c400ab57f9d9195dd03e9be621c6daab5df0b1bcabbbb2b8cea095d"}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40c0}, 0x81) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r1) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r7, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000800) r8 = accept$inet6(r4, &(0x7f0000000ec0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000f00)=0x1c) pread64(r8, &(0x7f0000000f40)=""/166, 0xa6, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000001000)={{{@in6=@private0, @in6=@mcast1}}}, &(0x7f0000001100)=0xe8) 22:47:19 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x8}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xf7}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x84000}, 0x4040000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x3260809c}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3f}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3f}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa8, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21949490}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e037aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x225c69ff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15fa0e86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4523d0a3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bc015f9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5518fa4b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cb9d060}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x8008) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r4) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x124, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb286}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000004}, 0x8014) r7 = creat(&(0x7f0000000a80)='./file0\x00', 0x1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x2008804}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xd1\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1c}]}, 0x38}, 0x1, 0x0, 0x0, 0x48}, 0x800) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000f80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1a0, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xcdc}, @ETHTOOL_A_EEE_MODES_OURS={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xae, 0x5, "2eb4172a10d1039ad3cf29a3e0d45985a2ec0a9d1fdd6b01ea15c1671e8d6cdac89e8a5371543b994a8abc690f9ffb77487a63375dce1e42a64179ad2db2a4bbbae37714373262430886d4c43b715802bc1f99e34a97346d8cf4f02ad0c1be1fc531eb768c0f02fc9008f4192c757c31f28bc8a79fc58bc856d3253efa72360828127dd23b94912fb5048fddde56c989b83e720d5251fbe5b087b0fb0ed8ff77868973cd5d807afb9ab3"}, @ETHTOOL_A_BITSET_MASK={0x24, 0x5, "c44d48e68ef63dc688210cddbaa8f851159de0e3df02756c32bd98d7ca59b706"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc63}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9ac}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1a0}}, 0x4) [ 169.089621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.095092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.096230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.099588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.101542] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.103075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.241406] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.244146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.245310] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.246625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.248896] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.250481] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.251782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.256707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.258124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.269331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.280524] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.282847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.283210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.285218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.287286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.287780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.289817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.291058] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.291363] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.292598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.293732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.296404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.298156] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.299311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.300485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.301606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.303559] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.305639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.306860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.307845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.317800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.317888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.321180] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.322263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.331162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.332522] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.333877] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 169.335409] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 169.336413] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 169.341382] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.343682] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 169.344825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.118043] Bluetooth: hci0: command tx timeout [ 171.307068] Bluetooth: hci3: command tx timeout [ 171.372073] Bluetooth: hci4: command tx timeout [ 171.372094] Bluetooth: hci2: command tx timeout [ 171.372429] Bluetooth: hci1: command tx timeout [ 171.435219] Bluetooth: hci5: command tx timeout [ 171.435992] Bluetooth: hci6: command tx timeout [ 171.437022] Bluetooth: hci7: command tx timeout [ 173.163040] Bluetooth: hci0: command tx timeout [ 173.355008] Bluetooth: hci3: command tx timeout [ 173.420184] Bluetooth: hci4: command tx timeout [ 173.420730] Bluetooth: hci1: command tx timeout [ 173.421257] Bluetooth: hci2: command tx timeout [ 173.483392] Bluetooth: hci7: command tx timeout [ 173.484012] Bluetooth: hci6: command tx timeout [ 173.484201] Bluetooth: hci5: command tx timeout [ 175.212110] Bluetooth: hci0: command tx timeout [ 175.403014] Bluetooth: hci3: command tx timeout [ 175.467088] Bluetooth: hci2: command tx timeout [ 175.467121] Bluetooth: hci4: command tx timeout [ 175.467641] Bluetooth: hci1: command tx timeout [ 175.531006] Bluetooth: hci5: command tx timeout [ 175.531535] Bluetooth: hci7: command tx timeout [ 175.532070] Bluetooth: hci6: command tx timeout [ 177.259012] Bluetooth: hci0: command tx timeout [ 177.452971] Bluetooth: hci3: command tx timeout [ 177.515019] Bluetooth: hci1: command tx timeout [ 177.516364] Bluetooth: hci4: command tx timeout [ 177.517485] Bluetooth: hci2: command tx timeout [ 177.578980] Bluetooth: hci6: command tx timeout [ 177.580433] Bluetooth: hci7: command tx timeout [ 177.581566] Bluetooth: hci5: command tx timeout [ 229.111956] syz-executor.1 (281) used greatest stack depth: 23824 bytes left [ 231.936145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.939395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.941825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.948143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.961255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 231.969424] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.058165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.060265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.061912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.068492] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.076124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.077261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.128134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.134249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.136708] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.138053] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.143134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.144790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.146116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.148135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.151586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.175121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.186137] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.187077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.188574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.196039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.208222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.209862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 232.211093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.212073] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 232.217120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.217846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 232.219144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 232.220599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.224101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 232.225602] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 232.226350] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 232.227512] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.228661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.244019] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 232.266350] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.272799] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 232.284462] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.285204] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 232.300292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.305579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.317534] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 232.318854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 234.027144] Bluetooth: hci0: command tx timeout [ 234.092274] Bluetooth: hci1: command tx timeout [ 234.220027] Bluetooth: hci2: command tx timeout [ 234.283986] Bluetooth: hci5: command tx timeout [ 234.284970] Bluetooth: hci6: command tx timeout [ 234.347186] Bluetooth: hci7: command tx timeout [ 234.348261] Bluetooth: hci4: command tx timeout [ 234.348368] Bluetooth: hci3: command tx timeout [ 236.074987] Bluetooth: hci0: command tx timeout [ 236.139230] Bluetooth: hci1: command tx timeout [ 236.268019] Bluetooth: hci2: command tx timeout [ 236.331104] Bluetooth: hci6: command tx timeout [ 236.331261] Bluetooth: hci5: command tx timeout [ 236.395123] Bluetooth: hci7: command tx timeout [ 236.395683] Bluetooth: hci3: command tx timeout [ 236.396392] Bluetooth: hci4: command tx timeout [ 238.123237] Bluetooth: hci0: command tx timeout [ 238.187079] Bluetooth: hci1: command tx timeout [ 238.315075] Bluetooth: hci2: command tx timeout [ 238.379003] Bluetooth: hci5: command tx timeout [ 238.379042] Bluetooth: hci6: command tx timeout [ 238.443103] Bluetooth: hci3: command tx timeout [ 238.443631] Bluetooth: hci4: command tx timeout [ 238.444529] Bluetooth: hci7: command tx timeout [ 240.171975] Bluetooth: hci0: command tx timeout [ 240.235076] Bluetooth: hci1: command tx timeout [ 240.364033] Bluetooth: hci2: command tx timeout [ 240.427007] Bluetooth: hci6: command tx timeout [ 240.428189] Bluetooth: hci5: command tx timeout [ 240.491411] Bluetooth: hci4: command tx timeout [ 240.492799] Bluetooth: hci3: command tx timeout [ 240.492803] Bluetooth: hci7: command tx timeout [ 294.395111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.400298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.402606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.410605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.419791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.421533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.744726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.750117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.751339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.756995] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.760613] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 294.762707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.804276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.808081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.810756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.814161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.816238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.822984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.871575] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.873223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.874217] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.876382] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.878148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.881568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.883415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.886169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.887845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.889388] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.890647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.900690] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.902181] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.903390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.911743] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.913760] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.917466] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.918111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.921180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.921664] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.923424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.943268] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.944037] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.945132] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.950260] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 294.951719] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.952532] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 294.953386] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.960382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.961431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.491091] Bluetooth: hci0: command tx timeout [ 296.811171] Bluetooth: hci1: command tx timeout [ 296.939035] Bluetooth: hci2: command tx timeout [ 297.004006] Bluetooth: hci7: command tx timeout [ 297.004831] Bluetooth: hci4: command tx timeout [ 297.004946] Bluetooth: hci6: command tx timeout [ 297.005530] Bluetooth: hci5: command tx timeout [ 297.067975] Bluetooth: hci3: command tx timeout [ 298.539151] Bluetooth: hci0: command tx timeout [ 298.860106] Bluetooth: hci1: command tx timeout [ 298.987070] Bluetooth: hci2: command tx timeout [ 299.053071] Bluetooth: hci6: command tx timeout [ 299.053583] Bluetooth: hci4: command tx timeout [ 299.054123] Bluetooth: hci5: command tx timeout [ 299.054574] Bluetooth: hci7: command tx timeout [ 299.116044] Bluetooth: hci3: command tx timeout [ 300.586966] Bluetooth: hci0: command tx timeout [ 300.907141] Bluetooth: hci1: command tx timeout [ 301.034969] Bluetooth: hci2: command tx timeout [ 301.099997] Bluetooth: hci7: command tx timeout [ 301.100079] Bluetooth: hci6: command tx timeout [ 301.101452] Bluetooth: hci5: command tx timeout [ 301.101971] Bluetooth: hci4: command tx timeout [ 301.163013] Bluetooth: hci3: command tx timeout [ 302.634983] Bluetooth: hci0: command tx timeout [ 302.955236] Bluetooth: hci1: command tx timeout [ 303.083102] Bluetooth: hci2: command tx timeout [ 303.147298] Bluetooth: hci6: command tx timeout [ 303.147835] Bluetooth: hci5: command tx timeout [ 303.148014] Bluetooth: hci4: command tx timeout [ 303.148368] Bluetooth: hci7: command tx timeout [ 303.210986] Bluetooth: hci3: command tx timeout [ 303.863766] hrtimer: interrupt took 5627293 ns [ 356.998198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.999676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.002762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.008630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.010596] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 357.011980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.302500] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.308448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.313707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.316019] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.319882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.321437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.324646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.327686] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 357.329252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.332387] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.354060] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.358100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.378524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.391422] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.408615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.411344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.412307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.414195] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.417712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.419558] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 357.419807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.421333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.435112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.436224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.507564] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 357.511096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.524753] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.528131] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 357.530343] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 357.531329] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.540626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.544716] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.546369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.550031] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.561575] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.563566] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 357.564436] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 357.567185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.569587] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 357.588102] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 357.589447] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 357.606419] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.084390] Bluetooth: hci0: command tx timeout [ 359.403023] Bluetooth: hci1: command tx timeout [ 359.403960] Bluetooth: hci2: command tx timeout [ 359.466969] Bluetooth: hci3: command tx timeout [ 359.530994] Bluetooth: hci4: command tx timeout [ 359.595055] Bluetooth: hci5: command tx timeout [ 359.659053] Bluetooth: hci6: command tx timeout [ 359.722934] Bluetooth: hci7: command tx timeout [ 361.131089] Bluetooth: hci0: command tx timeout [ 361.451047] Bluetooth: hci2: command tx timeout [ 361.451598] Bluetooth: hci1: command tx timeout [ 361.515187] Bluetooth: hci3: command tx timeout [ 361.579051] Bluetooth: hci4: command tx timeout [ 361.643004] Bluetooth: hci5: command tx timeout [ 361.707104] Bluetooth: hci6: command tx timeout [ 361.770982] Bluetooth: hci7: command tx timeout [ 363.179390] Bluetooth: hci0: command tx timeout [ 363.499028] Bluetooth: hci1: command tx timeout [ 363.499545] Bluetooth: hci2: command tx timeout [ 363.562925] Bluetooth: hci3: command tx timeout [ 363.626950] Bluetooth: hci4: command tx timeout [ 363.690942] Bluetooth: hci5: command tx timeout [ 363.754958] Bluetooth: hci6: command tx timeout [ 363.819115] Bluetooth: hci7: command tx timeout [ 365.227146] Bluetooth: hci0: command tx timeout [ 365.547123] Bluetooth: hci2: command tx timeout [ 365.548999] Bluetooth: hci1: command tx timeout [ 365.610941] Bluetooth: hci3: command tx timeout [ 365.676909] Bluetooth: hci4: command tx timeout [ 365.738956] Bluetooth: hci5: command tx timeout [ 365.802955] Bluetooth: hci6: command tx timeout [ 365.866964] Bluetooth: hci7: command tx timeout [ 419.519291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 419.521201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 419.523623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 419.528145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 419.529908] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 419.531462] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.906697] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.908872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.910357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.915937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.917691] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 419.922183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.961464] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 419.965652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.970364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 419.971667] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.974194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.975725] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 419.977008] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.986010] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.987294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.990589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.992410] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 419.995248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 420.021102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.024903] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 420.027471] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.032072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.034645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 420.043244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 420.044194] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 420.047506] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 420.055149] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 420.062995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 420.063543] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.065679] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 420.066728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.073002] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 420.073030] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 420.082365] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 420.091749] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 420.094039] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 420.104045] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 420.120752] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 420.124449] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 420.129266] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 420.148451] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 420.151485] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 421.547031] Bluetooth: hci0: command tx timeout [ 421.995951] Bluetooth: hci1: command tx timeout [ 422.059364] Bluetooth: hci2: command tx timeout [ 422.060170] Bluetooth: hci3: command tx timeout [ 422.122980] Bluetooth: hci6: command tx timeout [ 422.124626] Bluetooth: hci4: command tx timeout [ 422.202966] Bluetooth: hci5: command tx timeout [ 422.203754] Bluetooth: hci7: command tx timeout [ 423.595967] Bluetooth: hci0: command tx timeout [ 424.043866] Bluetooth: hci1: command tx timeout [ 424.106983] Bluetooth: hci2: command tx timeout [ 424.107135] Bluetooth: hci3: command tx timeout [ 424.171045] Bluetooth: hci6: command tx timeout [ 424.171554] Bluetooth: hci4: command tx timeout [ 424.235056] Bluetooth: hci7: command tx timeout [ 424.235162] Bluetooth: hci5: command tx timeout [ 425.644041] Bluetooth: hci0: command tx timeout [ 426.091061] Bluetooth: hci1: command tx timeout [ 426.155189] Bluetooth: hci2: command tx timeout [ 426.155212] Bluetooth: hci3: command tx timeout [ 426.219067] Bluetooth: hci4: command tx timeout [ 426.220607] Bluetooth: hci6: command tx timeout [ 426.282948] Bluetooth: hci7: command tx timeout [ 426.284278] Bluetooth: hci5: command tx timeout [ 427.692931] Bluetooth: hci0: command tx timeout [ 428.140060] Bluetooth: hci1: command tx timeout [ 428.202918] Bluetooth: hci2: command tx timeout [ 428.203434] Bluetooth: hci3: command tx timeout [ 428.266999] Bluetooth: hci4: command tx timeout [ 428.268405] Bluetooth: hci6: command tx timeout [ 428.332899] Bluetooth: hci7: command tx timeout [ 428.334211] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 22:52:28 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8169c328 RDX=ffff88800ec63700 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffea00001d9434 RSP=ffff8880383e7a40 R8 =0000000000000001 R9 =fffff9400003b286 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=dffffc0000000000 R15=ffff8880092d1870 RIP=ffffffff81517c20 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb585137288 CR3=000000001646e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffffffffffff RBX=ffffea0000bea940 RCX=0000000000000005 RDX=0000000000000200 RSI=00000000000000ff RDI=ffffed1005f54a80 RBP=000000002faa5000 RSP=ffff88803894f770 R8 =0000000000000000 R9 =0000000000000000 R10=ffffed1005f54a00 R11=00000000000007e0 R12=0000000000000000 R13=dffffc0000000000 R14=ffffea0000bea974 R15=0000000000000000 RIP=ffffffff848247f2 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005623d0947008 CR3=000000000d2e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000