Warning: Permanently added '[localhost]:24392' (ECDSA) to the list of known hosts. 2024/10/28 17:57:31 fuzzer started 2024/10/28 17:57:32 dialing manager at localhost:45639 syzkaller login: [ 79.532070] cgroup: Unknown subsys name 'net' [ 79.638221] cgroup: Unknown subsys name 'cpuset' [ 79.650751] cgroup: Unknown subsys name 'rlimit' 2024/10/28 17:57:56 syscalls: 2217 2024/10/28 17:57:56 code coverage: enabled 2024/10/28 17:57:56 comparison tracing: enabled 2024/10/28 17:57:56 extra coverage: enabled 2024/10/28 17:57:56 setuid sandbox: enabled 2024/10/28 17:57:56 namespace sandbox: enabled 2024/10/28 17:57:56 Android sandbox: enabled 2024/10/28 17:57:56 fault injection: enabled 2024/10/28 17:57:56 leak checking: enabled 2024/10/28 17:57:56 net packet injection: enabled 2024/10/28 17:57:56 net device setup: enabled 2024/10/28 17:57:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/28 17:57:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/28 17:57:56 USB emulation: enabled 2024/10/28 17:57:56 hci packet injection: enabled 2024/10/28 17:57:56 wifi device emulation: enabled 2024/10/28 17:57:56 802.15.4 emulation: enabled 2024/10/28 17:57:57 fetching corpus: 50, signal 21624/23400 (executing program) 2024/10/28 17:57:57 fetching corpus: 100, signal 34402/37671 (executing program) 2024/10/28 17:57:57 fetching corpus: 150, signal 43927/48590 (executing program) 2024/10/28 17:57:57 fetching corpus: 200, signal 51069/56961 (executing program) 2024/10/28 17:57:57 fetching corpus: 250, signal 55500/62651 (executing program) 2024/10/28 17:57:58 fetching corpus: 300, signal 60247/68559 (executing program) 2024/10/28 17:57:58 fetching corpus: 350, signal 62883/72436 (executing program) 2024/10/28 17:57:58 fetching corpus: 400, signal 65233/76012 (executing program) 2024/10/28 17:57:58 fetching corpus: 450, signal 69476/81184 (executing program) 2024/10/28 17:57:58 fetching corpus: 500, signal 75345/87731 (executing program) 2024/10/28 17:57:58 fetching corpus: 550, signal 76869/90310 (executing program) 2024/10/28 17:57:59 fetching corpus: 600, signal 79100/93493 (executing program) 2024/10/28 17:57:59 fetching corpus: 650, signal 80961/96344 (executing program) 2024/10/28 17:57:59 fetching corpus: 700, signal 83876/100019 (executing program) 2024/10/28 17:58:00 fetching corpus: 750, signal 85299/102424 (executing program) 2024/10/28 17:58:00 fetching corpus: 800, signal 86843/104800 (executing program) 2024/10/28 17:58:00 fetching corpus: 850, signal 88595/107342 (executing program) 2024/10/28 17:58:01 fetching corpus: 900, signal 91083/110450 (executing program) 2024/10/28 17:58:01 fetching corpus: 950, signal 92799/112897 (executing program) 2024/10/28 17:58:02 fetching corpus: 1000, signal 94368/115212 (executing program) 2024/10/28 17:58:02 fetching corpus: 1050, signal 95933/117476 (executing program) 2024/10/28 17:58:02 fetching corpus: 1100, signal 98416/120414 (executing program) 2024/10/28 17:58:02 fetching corpus: 1150, signal 99885/122506 (executing program) 2024/10/28 17:58:03 fetching corpus: 1200, signal 100886/124232 (executing program) 2024/10/28 17:58:03 fetching corpus: 1250, signal 102716/126593 (executing program) 2024/10/28 17:58:03 fetching corpus: 1300, signal 104086/128583 (executing program) 2024/10/28 17:58:04 fetching corpus: 1350, signal 104975/130157 (executing program) 2024/10/28 17:58:04 fetching corpus: 1400, signal 106279/132050 (executing program) 2024/10/28 17:58:04 fetching corpus: 1450, signal 107784/134003 (executing program) 2024/10/28 17:58:04 fetching corpus: 1500, signal 108911/135681 (executing program) 2024/10/28 17:58:04 fetching corpus: 1550, signal 109826/137225 (executing program) 2024/10/28 17:58:05 fetching corpus: 1600, signal 111163/138997 (executing program) 2024/10/28 17:58:05 fetching corpus: 1650, signal 112383/140664 (executing program) 2024/10/28 17:58:05 fetching corpus: 1700, signal 113023/141969 (executing program) 2024/10/28 17:58:05 fetching corpus: 1750, signal 113834/143384 (executing program) 2024/10/28 17:58:06 fetching corpus: 1800, signal 115125/145034 (executing program) 2024/10/28 17:58:06 fetching corpus: 1850, signal 116115/146485 (executing program) 2024/10/28 17:58:06 fetching corpus: 1900, signal 118177/148579 (executing program) 2024/10/28 17:58:06 fetching corpus: 1950, signal 118797/149763 (executing program) 2024/10/28 17:58:06 fetching corpus: 2000, signal 120036/151254 (executing program) 2024/10/28 17:58:06 fetching corpus: 2050, signal 121132/152696 (executing program) 2024/10/28 17:58:07 fetching corpus: 2100, signal 121997/153988 (executing program) 2024/10/28 17:58:07 fetching corpus: 2150, signal 123494/155609 (executing program) 2024/10/28 17:58:07 fetching corpus: 2200, signal 124036/156667 (executing program) 2024/10/28 17:58:07 fetching corpus: 2250, signal 124742/157805 (executing program) 2024/10/28 17:58:07 fetching corpus: 2300, signal 125442/158994 (executing program) 2024/10/28 17:58:07 fetching corpus: 2350, signal 126358/160270 (executing program) 2024/10/28 17:58:08 fetching corpus: 2400, signal 126970/161348 (executing program) 2024/10/28 17:58:08 fetching corpus: 2450, signal 127867/162482 (executing program) 2024/10/28 17:58:08 fetching corpus: 2500, signal 129233/163891 (executing program) 2024/10/28 17:58:08 fetching corpus: 2550, signal 130631/165389 (executing program) 2024/10/28 17:58:09 fetching corpus: 2600, signal 131476/166478 (executing program) 2024/10/28 17:58:09 fetching corpus: 2650, signal 132055/167450 (executing program) 2024/10/28 17:58:09 fetching corpus: 2700, signal 132751/168435 (executing program) 2024/10/28 17:58:09 fetching corpus: 2750, signal 133360/169344 (executing program) 2024/10/28 17:58:09 fetching corpus: 2800, signal 133922/170235 (executing program) 2024/10/28 17:58:09 fetching corpus: 2850, signal 134599/171197 (executing program) 2024/10/28 17:58:09 fetching corpus: 2900, signal 135284/172107 (executing program) 2024/10/28 17:58:09 fetching corpus: 2950, signal 135948/172999 (executing program) 2024/10/28 17:58:10 fetching corpus: 3000, signal 136574/173870 (executing program) 2024/10/28 17:58:10 fetching corpus: 3050, signal 137079/174672 (executing program) 2024/10/28 17:58:10 fetching corpus: 3100, signal 137559/175480 (executing program) 2024/10/28 17:58:10 fetching corpus: 3150, signal 138143/176329 (executing program) 2024/10/28 17:58:10 fetching corpus: 3200, signal 138648/177164 (executing program) 2024/10/28 17:58:10 fetching corpus: 3250, signal 139350/177964 (executing program) 2024/10/28 17:58:10 fetching corpus: 3300, signal 140224/178812 (executing program) 2024/10/28 17:58:10 fetching corpus: 3350, signal 140584/179505 (executing program) 2024/10/28 17:58:11 fetching corpus: 3400, signal 141100/180261 (executing program) 2024/10/28 17:58:11 fetching corpus: 3450, signal 141501/180928 (executing program) 2024/10/28 17:58:11 fetching corpus: 3500, signal 142226/181713 (executing program) 2024/10/28 17:58:12 fetching corpus: 3550, signal 142625/182391 (executing program) 2024/10/28 17:58:12 fetching corpus: 3600, signal 143200/183139 (executing program) 2024/10/28 17:58:12 fetching corpus: 3650, signal 143928/183875 (executing program) 2024/10/28 17:58:12 fetching corpus: 3700, signal 144553/184570 (executing program) 2024/10/28 17:58:12 fetching corpus: 3750, signal 144930/185204 (executing program) 2024/10/28 17:58:12 fetching corpus: 3800, signal 145356/185819 (executing program) 2024/10/28 17:58:12 fetching corpus: 3850, signal 145983/186537 (executing program) 2024/10/28 17:58:13 fetching corpus: 3900, signal 146903/187246 (executing program) 2024/10/28 17:58:13 fetching corpus: 3950, signal 147255/187838 (executing program) 2024/10/28 17:58:13 fetching corpus: 4000, signal 147547/188410 (executing program) 2024/10/28 17:58:13 fetching corpus: 4050, signal 147980/189008 (executing program) 2024/10/28 17:58:13 fetching corpus: 4100, signal 148387/189576 (executing program) 2024/10/28 17:58:13 fetching corpus: 4150, signal 149197/190185 (executing program) 2024/10/28 17:58:14 fetching corpus: 4200, signal 149729/190741 (executing program) 2024/10/28 17:58:14 fetching corpus: 4250, signal 150074/191274 (executing program) 2024/10/28 17:58:14 fetching corpus: 4300, signal 150681/191847 (executing program) 2024/10/28 17:58:15 fetching corpus: 4350, signal 151710/192430 (executing program) 2024/10/28 17:58:15 fetching corpus: 4400, signal 152377/192977 (executing program) 2024/10/28 17:58:15 fetching corpus: 4450, signal 152714/193460 (executing program) 2024/10/28 17:58:16 fetching corpus: 4500, signal 153268/193975 (executing program) 2024/10/28 17:58:16 fetching corpus: 4550, signal 153603/194441 (executing program) 2024/10/28 17:58:17 fetching corpus: 4600, signal 154071/194933 (executing program) 2024/10/28 17:58:17 fetching corpus: 4650, signal 154643/195394 (executing program) 2024/10/28 17:58:17 fetching corpus: 4700, signal 154951/195848 (executing program) 2024/10/28 17:58:18 fetching corpus: 4750, signal 155357/196307 (executing program) 2024/10/28 17:58:18 fetching corpus: 4800, signal 155954/196773 (executing program) 2024/10/28 17:58:18 fetching corpus: 4850, signal 156501/197230 (executing program) 2024/10/28 17:58:19 fetching corpus: 4900, signal 156861/197641 (executing program) 2024/10/28 17:58:19 fetching corpus: 4950, signal 157298/197983 (executing program) 2024/10/28 17:58:19 fetching corpus: 5000, signal 157785/197983 (executing program) 2024/10/28 17:58:20 fetching corpus: 5050, signal 158027/197983 (executing program) 2024/10/28 17:58:20 fetching corpus: 5100, signal 158361/197983 (executing program) 2024/10/28 17:58:20 fetching corpus: 5150, signal 158911/197983 (executing program) 2024/10/28 17:58:21 fetching corpus: 5200, signal 159342/197983 (executing program) 2024/10/28 17:58:21 fetching corpus: 5250, signal 159765/197983 (executing program) 2024/10/28 17:58:21 fetching corpus: 5300, signal 160130/197983 (executing program) 2024/10/28 17:58:21 fetching corpus: 5350, signal 160438/197983 (executing program) 2024/10/28 17:58:22 fetching corpus: 5400, signal 160722/197983 (executing program) 2024/10/28 17:58:22 fetching corpus: 5450, signal 161077/197983 (executing program) 2024/10/28 17:58:22 fetching corpus: 5500, signal 161359/197983 (executing program) 2024/10/28 17:58:22 fetching corpus: 5550, signal 161685/197983 (executing program) 2024/10/28 17:58:23 fetching corpus: 5600, signal 161976/197983 (executing program) 2024/10/28 17:58:23 fetching corpus: 5650, signal 162506/197983 (executing program) 2024/10/28 17:58:23 fetching corpus: 5700, signal 162806/197983 (executing program) 2024/10/28 17:58:24 fetching corpus: 5750, signal 163068/197983 (executing program) 2024/10/28 17:58:24 fetching corpus: 5800, signal 163439/197983 (executing program) 2024/10/28 17:58:24 fetching corpus: 5850, signal 163763/197986 (executing program) 2024/10/28 17:58:24 fetching corpus: 5900, signal 164189/197986 (executing program) 2024/10/28 17:58:25 fetching corpus: 5950, signal 164439/197986 (executing program) 2024/10/28 17:58:25 fetching corpus: 6000, signal 164872/197986 (executing program) 2024/10/28 17:58:25 fetching corpus: 6050, signal 165139/197986 (executing program) 2024/10/28 17:58:25 fetching corpus: 6100, signal 165385/197986 (executing program) 2024/10/28 17:58:25 fetching corpus: 6150, signal 165576/197986 (executing program) 2024/10/28 17:58:26 fetching corpus: 6200, signal 165809/197986 (executing program) 2024/10/28 17:58:26 fetching corpus: 6250, signal 166020/197986 (executing program) 2024/10/28 17:58:26 fetching corpus: 6300, signal 166480/197986 (executing program) 2024/10/28 17:58:26 fetching corpus: 6350, signal 166916/197986 (executing program) 2024/10/28 17:58:27 fetching corpus: 6400, signal 167141/197986 (executing program) 2024/10/28 17:58:27 fetching corpus: 6450, signal 167459/197986 (executing program) 2024/10/28 17:58:27 fetching corpus: 6500, signal 167749/197986 (executing program) 2024/10/28 17:58:27 fetching corpus: 6550, signal 167953/197986 (executing program) 2024/10/28 17:58:28 fetching corpus: 6600, signal 168233/197986 (executing program) 2024/10/28 17:58:28 fetching corpus: 6650, signal 168625/197986 (executing program) 2024/10/28 17:58:28 fetching corpus: 6700, signal 169125/197987 (executing program) 2024/10/28 17:58:28 fetching corpus: 6750, signal 169483/197987 (executing program) 2024/10/28 17:58:29 fetching corpus: 6800, signal 169750/197987 (executing program) 2024/10/28 17:58:29 fetching corpus: 6850, signal 170001/197987 (executing program) 2024/10/28 17:58:29 fetching corpus: 6900, signal 170322/197987 (executing program) 2024/10/28 17:58:29 fetching corpus: 6950, signal 170611/197987 (executing program) 2024/10/28 17:58:29 fetching corpus: 7000, signal 170972/197987 (executing program) 2024/10/28 17:58:30 fetching corpus: 7050, signal 171217/197987 (executing program) 2024/10/28 17:58:30 fetching corpus: 7100, signal 171650/197987 (executing program) 2024/10/28 17:58:30 fetching corpus: 7150, signal 172003/197987 (executing program) 2024/10/28 17:58:31 fetching corpus: 7200, signal 172447/197989 (executing program) 2024/10/28 17:58:31 fetching corpus: 7250, signal 172659/197989 (executing program) 2024/10/28 17:58:31 fetching corpus: 7300, signal 172970/197989 (executing program) 2024/10/28 17:58:32 fetching corpus: 7350, signal 173243/197989 (executing program) 2024/10/28 17:58:32 fetching corpus: 7400, signal 173481/197989 (executing program) 2024/10/28 17:58:32 fetching corpus: 7450, signal 173656/197989 (executing program) 2024/10/28 17:58:32 fetching corpus: 7500, signal 173916/197989 (executing program) 2024/10/28 17:58:33 fetching corpus: 7550, signal 174216/197989 (executing program) 2024/10/28 17:58:33 fetching corpus: 7600, signal 174435/197989 (executing program) 2024/10/28 17:58:33 fetching corpus: 7650, signal 174720/197989 (executing program) 2024/10/28 17:58:33 fetching corpus: 7700, signal 174910/197989 (executing program) 2024/10/28 17:58:34 fetching corpus: 7750, signal 175269/197989 (executing program) 2024/10/28 17:58:34 fetching corpus: 7800, signal 175546/197989 (executing program) 2024/10/28 17:58:35 fetching corpus: 7850, signal 175727/197989 (executing program) 2024/10/28 17:58:35 fetching corpus: 7900, signal 175970/197989 (executing program) 2024/10/28 17:58:35 fetching corpus: 7950, signal 176284/197989 (executing program) 2024/10/28 17:58:35 fetching corpus: 8000, signal 176487/197989 (executing program) 2024/10/28 17:58:36 fetching corpus: 8050, signal 176872/197989 (executing program) 2024/10/28 17:58:36 fetching corpus: 8100, signal 177056/197989 (executing program) 2024/10/28 17:58:36 fetching corpus: 8150, signal 177419/197989 (executing program) 2024/10/28 17:58:36 fetching corpus: 8200, signal 177585/197989 (executing program) 2024/10/28 17:58:36 fetching corpus: 8250, signal 177844/197989 (executing program) 2024/10/28 17:58:37 fetching corpus: 8300, signal 178375/197989 (executing program) 2024/10/28 17:58:37 fetching corpus: 8350, signal 178592/197989 (executing program) 2024/10/28 17:58:37 fetching corpus: 8400, signal 178848/197989 (executing program) 2024/10/28 17:58:37 fetching corpus: 8450, signal 179083/197989 (executing program) 2024/10/28 17:58:37 fetching corpus: 8500, signal 179467/197989 (executing program) 2024/10/28 17:58:38 fetching corpus: 8550, signal 179671/197989 (executing program) 2024/10/28 17:58:38 fetching corpus: 8600, signal 180011/197989 (executing program) 2024/10/28 17:58:38 fetching corpus: 8650, signal 180375/197989 (executing program) 2024/10/28 17:58:39 fetching corpus: 8700, signal 180587/197989 (executing program) 2024/10/28 17:58:39 fetching corpus: 8750, signal 180812/197991 (executing program) 2024/10/28 17:58:39 fetching corpus: 8800, signal 180954/197991 (executing program) 2024/10/28 17:58:40 fetching corpus: 8850, signal 181259/197991 (executing program) 2024/10/28 17:58:40 fetching corpus: 8900, signal 181700/197991 (executing program) 2024/10/28 17:58:41 fetching corpus: 8950, signal 181905/197991 (executing program) 2024/10/28 17:58:41 fetching corpus: 9000, signal 182102/197991 (executing program) 2024/10/28 17:58:41 fetching corpus: 9050, signal 182328/197991 (executing program) 2024/10/28 17:58:42 fetching corpus: 9100, signal 182532/197991 (executing program) 2024/10/28 17:58:42 fetching corpus: 9150, signal 182772/197991 (executing program) 2024/10/28 17:58:42 fetching corpus: 9200, signal 183018/197991 (executing program) 2024/10/28 17:58:42 fetching corpus: 9250, signal 183314/197991 (executing program) 2024/10/28 17:58:42 fetching corpus: 9300, signal 183447/197991 (executing program) 2024/10/28 17:58:43 fetching corpus: 9350, signal 183757/197991 (executing program) 2024/10/28 17:58:43 fetching corpus: 9400, signal 183910/197991 (executing program) 2024/10/28 17:58:43 fetching corpus: 9450, signal 184168/197991 (executing program) 2024/10/28 17:58:43 fetching corpus: 9500, signal 184342/197991 (executing program) 2024/10/28 17:58:43 fetching corpus: 9550, signal 184552/197991 (executing program) 2024/10/28 17:58:43 fetching corpus: 9600, signal 184889/197991 (executing program) 2024/10/28 17:58:43 fetching corpus: 9650, signal 185076/197991 (executing program) 2024/10/28 17:58:44 fetching corpus: 9700, signal 185242/197991 (executing program) 2024/10/28 17:58:44 fetching corpus: 9750, signal 185415/197991 (executing program) 2024/10/28 17:58:44 fetching corpus: 9800, signal 185570/197991 (executing program) 2024/10/28 17:58:45 fetching corpus: 9850, signal 185896/197991 (executing program) 2024/10/28 17:58:45 fetching corpus: 9900, signal 186055/197991 (executing program) 2024/10/28 17:58:45 fetching corpus: 9950, signal 186233/197992 (executing program) 2024/10/28 17:58:46 fetching corpus: 10000, signal 186479/197992 (executing program) 2024/10/28 17:58:46 fetching corpus: 10050, signal 186689/197992 (executing program) 2024/10/28 17:58:46 fetching corpus: 10100, signal 186842/197992 (executing program) 2024/10/28 17:58:47 fetching corpus: 10150, signal 187016/197992 (executing program) 2024/10/28 17:58:47 fetching corpus: 10200, signal 187295/197992 (executing program) 2024/10/28 17:58:47 fetching corpus: 10250, signal 187537/197992 (executing program) 2024/10/28 17:58:47 fetching corpus: 10300, signal 187719/197992 (executing program) 2024/10/28 17:58:47 fetching corpus: 10350, signal 187992/197992 (executing program) 2024/10/28 17:58:48 fetching corpus: 10400, signal 188154/197992 (executing program) 2024/10/28 17:58:48 fetching corpus: 10450, signal 188367/197992 (executing program) 2024/10/28 17:58:48 fetching corpus: 10500, signal 188521/197992 (executing program) 2024/10/28 17:58:48 fetching corpus: 10550, signal 188746/197992 (executing program) 2024/10/28 17:58:48 fetching corpus: 10600, signal 188882/197992 (executing program) 2024/10/28 17:58:49 fetching corpus: 10650, signal 189513/197992 (executing program) 2024/10/28 17:58:49 fetching corpus: 10700, signal 189726/197992 (executing program) 2024/10/28 17:58:49 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/10/28 17:58:49 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/10/28 17:58:52 starting 8 fuzzer processes 17:58:52 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xca00, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)={{0x10b, 0x0, 0x0, 0x3dc, 0x14, 0x2, 0x362, 0x5}, "b9f6579231d39d8cad85af2915c05aecdb08f5913dfd44846b8f6fece27fc2f72c6b4887b684ad3efe31d1835d081be58d4eaa374c49f16677b10fbfae57e894f102f1d07856478bf7045a68d42b460158711e625ec74805018bc803f7e99551aa878f7ad5b0a71cf216c19756d0e9b2d250f37e88ce8a5166bc2723850829333ac2998a7e43daa4840e67c0a8ba284353c0a77036cd54122bda7e79aed73f6cb5cfd5cc7ebfa99cb29d7c979b6111ef36fa1a5dce2537e23694ae524910aedb4bedc8f3e719aa472dc8c72912bebbdd038769628df9e0640ac643ecb27b113b9a65f7b93ee9c77435c1546b4aed9edb3a87034191235b9750e1b29bb346", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa1e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/consoles\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) recvfrom(r4, &(0x7f0000000b40)=""/138, 0x8a, 0x20, &(0x7f0000000c00)=@ll={0x11, 0x11, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x80) recvfrom(r2, &(0x7f0000000c80)=""/34, 0x22, 0x2, &(0x7f0000000cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x0, @remote, 0xfff}}}, 0x80) r5 = syz_mount_image$vfat(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', 0x9, 0x6, &(0x7f0000001180)=[{&(0x7f0000000dc0)="c19da2f1a0f79aa69404e1b39bca08a37bffe79d7e2df68c7e12fc4f2c5aff228c83589c1d4c9a5e2c3d2dab157621ae3fb4f16572d3cfc518feb1cf86eceb5cd13b119dc262dc48080c4a5f4c8d4f8a8fd3fc1c86f5bb51f4cd8770f04024ed47f3bad83ee12d51f6cea2c7e38366dc78e5406ec417c83cf2cc32f672af8c", 0x7f, 0x5}, {&(0x7f0000000e40)="82aad4b6502793b8274071fd6f854a74a8171848a46da6cd48d8ee2d7a0c646db4640bd07e6d5c5afbad57f6a78336ac729f0de9d8fca6f6c01fcf11512ca6d3f401feb03327ed2b8944cc411f52e7f93e4030afddc98f627bdc9af81cc6533f31d5b9412aa9c2b061609dac6147943449bd59b2aac6ecb20ab0be61ba1584e306fc9c40b0", 0x85, 0x308e}, {&(0x7f0000000f00)="8cec501b945b894c72249691c17ff34e17a85fcf067ad7fbe5508948ab7c222675cd98efd6b82a5951c5324e1bb20e2dfc1319d8a521065341fd87acb98a4c9aa249fed7e217de0c37ec3c2d4f93b8e807ab88efe8e43f16780623dca20c214f90089de49795affc2dae0a41ad6a8182d3a63f7a3595846c8ff0ace0e1a075c997be443aad0a657d809c", 0x8a, 0x1000}, {&(0x7f0000000fc0)="a04be5fec928e029cfdf16c0ab2be4f14c5dc3aa34c7cd0275e68e4750441cd7838863db2af6b24d9d437edb023f1d3eaf2453e4958957873acb55007603cd0df598f6075e0bca8caa62b4ef7ff034422e", 0x51}, {&(0x7f0000001040)="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", 0xfc, 0xfffffffffffffffa}, {&(0x7f0000001140)="a3e4fb04c19c3acf87367cd7a466ff7194d4962517c0ccc3a99da4a9a2ef99a0a49b", 0x22, 0x4f4}], 0x0, &(0x7f0000001240)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xe12}}, {@utf8no}, {@shortname_win95}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@subj_role}, {@smackfstransmute}]}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000012c0)) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000001300), 0x88081, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000001340)=0x2) r7 = openat(r3, &(0x7f0000001380)='./file0\x00', 0x800, 0x25) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r7) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x38, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) r9 = syz_genetlink_get_family_id$team(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xd0, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x29}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008004}, 0x24000010) r10 = signalfd4(r7, &(0x7f0000001700)={[0x7]}, 0x8, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000001a80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a40)={&(0x7f00000017c0)={0x254, r11, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x918, 0xc}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x210, 0x2a, [@ht={0x2d, 0x1a, {0x2000, 0x1, 0x7, 0x0, {0x200, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0xfb, 0x81}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xd, 0x5}}, @dsss={0x3, 0x1, 0x57d81fd86f516937}, @tim={0x5, 0x86, {0x6, 0x5b, 0x80, "d31ea14e3619f092332c3f7bfdf05bca41295e36840a061e9bb13d0897c4cd105d335462b6c73615074c3425d8830f30cc2c17f6de6bfcc53a0dc8aa9f0f0ab3b9984b5e221c4bf2ea4f601b171060f058e851fe9428c39f9ec4dfcd2719d62aa4cf4ee9e4da80126b7f39124dc47eb395286281019182dad8c186427a51ecdab8761c"}}, @erp={0x2a, 0x1, {0x1}}, @random_vendor={0xdd, 0x66, "58692a3b975373a9a0b75692102e5d3ebbdc9079d8c14639421805c67258f392bc45de7fca460f1cb4a4ca7a6204e57ba53db45bcfb2b9136d614245d32fe1feb0c207b7a6f0c178f636d909c17a4457a0b1155b392e0d9378096dd949d29678c27913af8796"}, @rann={0x7e, 0x15, {{0x1, 0x32}, 0xcd, 0x6, @device_a, 0xb6, 0x1, 0xffffffff}}, @erp={0x2a, 0x1}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x9, 0xab, @device_b, 0x8, 0x3, 0xf422}}, @random={0x7, 0xc1, "34ffa8e75b25a2e47f59efe49e8c2c2110f296611cccaae1fbbfab49ea912aae6fb5c1b2c238831eebe366873e79d947840f0774aa790364f26daf7ec17be1956f0f7ec8b1c52435b481ea17f00cb8ce669d9078ff4032e3752ab137a246fd2ebb2c9337b7b0f40c4e3ac68199a3298ed5814289ff2260e9c01731c9bf3f22f57dc9030e9c5406e97b862be07483de5a2f8ae0660d8545f045432f3b848122a4fe0345392391613384b2f47e92c48fc4e101d12199c9e7e26645b1ac7f3f2bf917"}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 17:58:52 executing program 1: ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f0000000040)={@lba=0x3, 0x3, 0x16, &(0x7f0000000000)=""/22}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$CDROMCLOSETRAY(r0, 0x5319) r1 = socket$inet(0x2, 0x5, 0xfff) write$binfmt_misc(r1, &(0x7f0000000080)={'syz1', "cd2f97ab67c43b705f80b519e87cfbe85ceec36a"}, 0x18) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000140)={{r0}, 0x0, 0xc, @inherit={0x60, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0x7, {0x1, 0x67d, 0x0, 0x2, 0x20}, [0x80, 0x2, 0x4ba52168]}}, @name="f12e532fd271e0fbe40536274bc863b3337ae23486cb6d46ffba94c2f6070edbc8e5a93bad2837f9a7f02546c927237e8e00bc3c07d24a4e364f1df48245a88d52c2ff5e321e0f13cd58c1ed0d599fb0b1365554b2c35075647450c1b8f218103483ad276fe3486866082393ceeb6bfdbf8e9e30e1a3eef51547cf059015a75fbb5878a749046d80ccc5d771d98476f74314f716741ba23a2712adc049400105118589b1b494222a20083ab2e4b9168fb2a990aa11e23cb816777ad4df925e923963b56b04a4f805adb0f8a79b6306be49e640e2c672aede5725d07be1e177ef34894192e42501665cfca3bfb29e6d8da27d8f830f0b26034142b90e55664432fae4f9af1087f2f43c4319eff9361df657d4274f8306e4009392428f2cfcf58d5fab2751dbba2eed49cda7a03a4acdbf3805b6847cc67c474749f74df23d4387b652c0e438d3e486358db4445d2310309f8ffaee282f7a6fae3e5436cd9259cf2b8fef573b640a03b59d00da099da978352471e99182f90fee415ef51efa7ee8e87e9baf771633a40623ed99dca27c6083ac8c69973279f4563b5940c10d4639dcb89a988542ba22f18542adee21fe61fcdc4b4bbe016fe1292128c1715a1715f8270563455f3070805406d438103f4485a48f24980545626a61cd426c9c062cf7cabb0adf6b0c561cd8399eab798cdfb46ffaa1129a3feae257e4ffad75083741d93088ff1031628d5a069bfc9312c73893cf7b1c7118aa6239fcef72dac86b2eeea6ecd516ef3791f3f0d51c8e14d0d1ecbe35aa05ae79fd160b036b8205d58b56d4ad6010e65b766347f139264914c98acb516057472f5330c5185eec4e015ff3becd60082a5e75e466a0ff31468c4a0ec47523a8ab09bd4a60f6e11878725dde5f1f11c97ba1001487281c42780de8a4bba282c16569f424176fdf8430ce22820bbe88a645474c1728669960bdf770320c4d5cd5b71f964246faa0073132e4a903ba2e0669d6e94cb4f6acdd57d7a49757e607335446b7505a96eae06ffb9dfd4bd9280685112842d2a7c6e3944a41eee0302682a63468ca9883dead7f9e643d21ae3535c45ff21d0ac9b9c405bbe1d283426b3bc947d9082ee52e5a264c2bedffd4201577c65b5ae09753789812526fd06d5e83f5475c616fd2b7937e495a137ea25aab6b0a76a0d5bda2d910a8521bdae3b88714279e30729c587e5944f9c339dbd9524b84736d20be4e7ce2a5d6874241d34408bdf1b874939df5bea5387260a0305196f5d765eb9b41afd7b1771362dce68e10c3ebf762796660c92e5fa989f37666479af6a8687593efb5d05d1d7133ed0216f386a14ef6f8f330e987608947b266d86dbd971c4f974a7f66575692953d271658174841d3f12ac63f554047cffd3ad85a6aa4e936396640f2a82a67e20ba2fbdc4d818293b40d1c7002dc866672e0a497b9ab7787a4dc0e7b7aaf88dfafa516ed811bde7c24d0d9fde2e635c8a19cac499bdfdd67f66d9fabf0ba1198d96578e227299d4d345aa590dc0d7aafd86bda111f96ff1b4b447232b854b4913c9a954e625ba08333ab10518183a4daf4e9e9a182a4cb6e306b4691d7c83e564cf1fcaebe6f5d939817e811937d741858c37c9ab1e18e9022b2c69092f6a70aa5dfca930be268571d468562084cc1c3ecccea872632e89c9fb07493b92afae94bbe969bcbbbc1c761e1f114c31cead13b18618cd8ec414e283f807af74cd6acf05d6f96b81e8dfe6710bcdd45b675a45eb8c9166c9e715e156938aee410e3c99062a3cc7e8113c8ba69346375b3e9ef8951e947f476e71cf372058da20e29e23c2a003ad900a6188ed60ff3257e6ab6e6197b003a36128b597ba87e943acd3dfcf5e3639af576c74766683da93c943a9e5e77a024f9d06431c9a4e77ebd3ea0317f9f43dbb71adec8cae2d770da03e9c601fa886b6c2459473866f12304c61016bd31c2aab08af9c856b7717fd69c5f6cc3b858099f07b00b312a3a8064ead39b4d0ad8fb21b34624a0fb20a3109902b611ea4134e1a00b302eeed87ee230794a01f488b898cf411af8f46d56f206d33b97420a08ec7910444486c79c055dbe1644d552454c80df44e7e4b9ec57ec06fe865346fca3b9cfad3fc234f1a8935b336f7bb40dce18d7bedf9897576d04592fd8fc9a74e7f7a7b86f399281e7e6d7f2a04570e8436de010235b8ced2c56db491598bed2f6503d620e3d6649b813a7defc7192487b0903b51fbbfdbedb09ca77d4504d07832caf2d88591167101f9fdd993bc422a78c85714d39a6c30523b081d61659ee533fbebad6465d87f8b9b38fdcef7ba44ae9492a213648d859cd67acc207cda2871780676702a82c916e75c4e4a6df81a6ed3c0ab1c10648fb13c33e765f2a6ffb3cfe8a97d3b47457a1d69c4c5f4c9cd564d3b6417f705c22bd246334a3762d8406ffac618acb36944853c538450179657f11272c561a44101db58192de8633d3dda2910a7776b0936292e6c9195e2965fbd71632a1ca81b26c80271ef6a2e7f66ab887337251c252574f18c674c85536af5988a984fcae6bb921ef532c1d5d2a91951f909e53d8c3d94739b8ab50dc5ff4b84e1fec821dbe5d7260a712de31b9da1f6deecea00ea1a49a2c1ba0cfce1b4ce61962ebcec450ffa9f0c7e12f3b0ac480f776dbdcb5ece75fdb8111f05a946bcd95cac96bdbf1afa0cd0adc29b1b6d542c4d39fca82a596ca5d9025a1c2194e5fe6d0a5abe5c0cb0dd43b85cad8520a1e05ae983fc4869b4542deb93be289d904c96c6e438e784167d797d4cbb9c12fab0c1c33a2752233d3e194f64d27b77ecf5664d20aa2d2f4b5177d904ea081168a435167d77e2fe3b9038c6bdaa7e71902428c2a1a87499518a3d00a4e3fca702c05050b20acb12bb6811ca6af3ab63885b17ca0c844c82592e65ad07cb4cf46f39d0e7020020b2acf66c4a5716add09d57d04498aaac5cad7cd8cffa8f4952fa1f71053dd2bb01a91e1dc5c20ac499198ff0585260e12fbd47329b615b7c6c2055652f46db6aa28f2493537ca73a8ead4a35203c9080bc73174733fe3e7aad2cedcd2301224ef998d9c3e9d25a5bbb98b6280d05ea68c6f0e9eaedd2d25efc97ce83fe10cbc0460a9a71000a77265d77c6c3f545b44e7371c1c5937a78e214894da10caf53b482bd044c6127815a20a5acc42650bfc428ae095e86199d43f38e536580cfe9b1148b899bd5c12f58dbe203b0458afd292f2212f63b6dad6e3e6a49a15419f72291f3265021da623a49d266d847567436ad58fea2492d33341b5e4e63b48d65d8d1beaca2b5c4ae233e16d1ff329b5301fc1ac62444bd945487f9bdff47bf91e0d57b1a0e7eb290def6d45d499dad48f973042afd87e4317170219cb715747786561139ae7f10b4b661f4baeda4ea3d86fcc1745765394f4043e0a6542a5db8de15201ea20c31b43db6220edc8554dd18161fa35af1dcfdf7fdb26793120dfff4b279b2a3f7eac4971d5e2ded30ea55dbcad5070893f3cb136e5cef3471c09472c47129e2d4a913bfaefdd5ea47ca6e7eae8f8db21f0c42feae5cf2d6c0de8b0930ce870bb8a24b3229e1fb5dc04f1bf671e1df41f873564ffabc4cfd4431c356dd83400e89e9864b0e8b0110858cf17b491f7c93acdd668524faa42a127ea89763db724e171b98bb1100b49b946eaa9514232685b79fcccf9be24bf86caa7e414d9c538ce1ff3c05f4ac2280a0f0243b326fa81aa352af37d1c724ae0b98786bb4eb15e5587b9f94f9db3956c3a9b109ef7476e6b64a6db9259bd5a1ffb50ae033f32dcebe8be71fedabb0faecc50a158b9208de9c8b8b1727d5a3140a581fdec1243d691cfca187018da2cfe572ff1fa209ac5e05535720c772c34d341c55085aef786a753b3e49c0b8921f61025150f5dbb86dd10313c0dc8cbb08fb7a095817884377947957fe975474ffecab47420a1ab974de9af137c9e865f97e8c0f61f10c62df5c6fa9b3b7c1703232f88046d8af48e378f2cbaac44c2c0dbfe94174385d5bedcb2e37972ac1ceca7ac242d1456d39f857b46f8c396476455b8e1fbf20adcefc46e6e898a19fa2818369d39d6360828efa9f5d7a703e4d869a9822b63e68bfd9f5159cf91a38af7c047fdf15b4b39d6f029bbfaaf3484efdd4397282c89c273cab546dabcff79b183d42c7070afa17727c42e06f199bab08aa8ea5ef80959077913d5a81eb752f30c1535182e2ec11c54d5e6e21a8ae34b8346d094530ebb81b6eca19c9157250683761a341c9df36dda3b47b723a770cbc6d29e07681047dc49f9530d9e2eb59405dc8821f77bad34544826145a10ee7870ddcaff9bbccceb15fa3221e95f7d5a6e3c467ca470804f6d317831800a6f5e202d77b54b802821d8c9cb26a98aa3673c81e67f003b61f7aea0e2cd5e42d988fa8f5db73afcc78e2aaa2e6897e34c23684777491a0ffefb77fad26e344ee9ce6c356c0a120b36f1c6880da5bf5714ed3038c136bc5aafc5ca76b9ab1e3be62b1eaad1732f126f1b48aab56c0abb7d3d35c8ece96b5ff11eedc6813f98e1bf007c2ab8404936e86f961b858d51b3c2c5bf8ceb9e84f28b033da40753c4910232ad939bf167e08c17a40dcf367fce2050861f576f8c9b7c26e55cc833f54eb14502d4251d734f79de5698ad4692deb61f981773f6c0899e31a502abc68bf85ff63a86d974343b513f031f61972c343cedd09fcfc5203681ad404b6c3f981594519b338dcc2a9bf728a22015143c0a2b656f45438613070605320a06d8ee753a321edc1767f78573da3e431fcb43a691d753ae047e58e5931578d9beab071d42e30c283e9659e03cf3c272950eeb4b520dfdf439d994069a6e80f342bae98217efecc55004bc92188b78aeef2b583a288ed842d7e5ca02b2f4968ea37903511fd3f516c3dff3474fb68c5c4f0c599309d73619648f76525ed8188bf22c90368b2b6e41b84e850fef2a54967398f74e88c279aa85f73ca1b67d415f087e6a03bdfd931d4883f84f0e46dc2c3684336f0034192e4496cc15c6a1a3849f9fe04d8e41c783756bff199017457baaca7dddec6b0c6f9f08a3f657a615ea017c211080c034a03422d3dbb83899e2e7fe96be1c17c7b567a9691e09d164ead838bcacd6f2370e4cac975be450ff8617a407a4093f0ea6fe0ee3a5b9c82264587adb311e02b51daea03a24d1a80faafaa70a8578b02052a5e206da2fa9243aa316185aaa723a75aa8559bd2872384c1aec448de95471d24450401d89c72c5a7b4d6e32c3231e36f911e19291dc9fc5f73a5c5075881b6c60ddeef242c6b05fcb845a4261760da324769bad4325612630b284a523bc64307874a935d4baa00e4291d4de7aa76d4a1eb50aabbcfe28f6cc123ae740f2c68007b3e2ea6dfc0d5d6ccf65f26f7c5fd26f8eccb5855dbd2911f052a2124ecdb322f95d8b1dcebc4cce6e5b800f99ffa86106e8300dfbb4e420804a416006e08b0fc1be50019e956115dd4d48031eecedd3dbf8e3fd606a12306b1773cb6f09aa040c35368c8952ab4ca39d669a43c6e81b334934e5bce783fc85af181feea284e2ced6bbd212f37be993bd9ed614e4ad1ecf7efd02d2ca3a4fdf2143c01ab77efbbd8c5fc25a7d3e2409617ebf0830893a3cd6b3f7c70b4b25bff3ff0a16d223b452f775a709b65d70"}) r2 = accept(r1, 0x0, &(0x7f0000001140)) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000001180)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x1a, {0x2, 0x4e24, @loopback}, 'bond0\x00'}) r3 = signalfd4(r0, &(0x7f0000001200)={[0x8]}, 0x8, 0xc00) getpeername$inet(r3, &(0x7f0000001240)={0x2, 0x0, @loopback}, &(0x7f0000001280)=0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) fcntl$setstatus(r4, 0x4, 0x2000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001300)='/sys/module/usb_storage', 0x111000, 0x17) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000001340)={0x268, "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"}) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000015c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001800), 0x82480, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000001840)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readv(r7, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/99, 0x63}, {&(0x7f0000001900)=""/230, 0xe6}, {&(0x7f0000001a00)=""/186, 0xba}, {&(0x7f0000001ac0)=""/233, 0xe9}, {&(0x7f0000001bc0)=""/54, 0x36}, {&(0x7f0000001c00)=""/40, 0x28}], 0x6) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000001cc0)) 17:58:52 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x24040001) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x23c, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10009054}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800c424}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x420, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6e}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x589e}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xeb}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}]}, 0x38}}, 0x48004) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x4, 0x0, 0x78, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x87c9, 0x4, @perf_config_ext={0x8, 0xb4}, 0xc09, 0x8, 0x7f, 0x3, 0xfffffffffffffffb, 0x7, 0x6a, 0x0, 0x8}, 0xffffffffffffffff, 0x8, r0, 0x9) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = openat2(r0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x200, 0x40, 0x1f}, 0x18) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0xf37}}, './file0/file0\x00'}) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000007c0), r3) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r5, 0x634, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x40) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000020}, 0x4811) r7 = dup2(r3, r4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f0000000a40)={0x8, 'xfrm0\x00', {'veth1_to_bond\x00'}, 0x7f}) recvmsg(r3, &(0x7f0000000f40)={&(0x7f0000000a80)=@ieee802154, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f0000000bc0)=""/158, 0x9e}, {&(0x7f0000000c80)=""/65, 0x41}, {&(0x7f0000000d00)=""/43, 0x2b}, {&(0x7f0000000d40)=""/210, 0xd2}], 0x5, &(0x7f0000000ec0)=""/114, 0x72}, 0x2100) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2e000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) 17:58:52 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x54}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x24}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfffa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x6, 0x7, 0x1c, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x20, 0x80, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x1, 0x7fff, 0x2, @mcast2, @private0, 0x20, 0x20, 0xffffffff, 0x2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x158, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x158}, 0x1, 0x0, 0x0, 0xa0}, 0x4845) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa0, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x100, 0x0, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x800]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x22}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa2f9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x200}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4008001) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r9, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x134, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6d2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x4, 0x0, 0xfffffffd]}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x6, 0x1]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x0, 0x4, 0xffffffff, 0x5, 0x2, 0x10000, 0x10001, 0x1]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xff, 0x10001, 0x0]}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2e27, 0x100]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x40, 0x20, 0x20, 0x402, 0xd8a, 0x7, 0xe56, 0x75, 0x4]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa2f9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x200c1}, 0x24040848) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5774fd7dc44969b4}, 0x4000000) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x845) 17:58:52 executing program 4: ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000000)=0x6) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) sendfile(r0, r1, &(0x7f00000000c0)=0x1, 0x7c15) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x200102) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x4002, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r1, r2, r1, r1, r3], 0x5) mknodat$null(r3, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x103) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000440)={{r2}, r5, 0x0, @unused=[0xa061, 0x0, 0x0, 0xc17e], @devid}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001440)='/proc/tty/ldiscs\x00', 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000001480), &(0x7f00000014c0)='system_u:object_r:syslog_conf_t:s0\x00', 0x23, 0x2) syncfs(r0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000007, 0x11, r3, 0xd4650000) r8 = openat$cgroup_type(r3, &(0x7f0000001500), 0x2, 0x0) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000001540), &(0x7f0000001580), 0x2, 0x3) socket$packet(0x11, 0x2, 0x300) pwrite64(r4, &(0x7f00000015c0)="b73e90c83a5b7a887eb071305f73834c03b327bd1f0e2c1646d7ffbfe2eb51bd0743e9bac710ea8a5de11b0f6bb9201c2659f112b544d9fae09e837e7bdd6cbfa06c72616b10cb8915465531d2d71c17f08c2146a9b05f7b66e029db986183c33fdda75d2d442ef9194f0d2a2f396e0447020e93b5d25caf3faeaf970083405552e03ab08d3ebcf6c5cff2c86d50daa3", 0x90, 0x6a) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001800)={{}, r6, 0x4, @inherit={0x70, &(0x7f0000001780)={0x0, 0x5, 0x280000, 0x4, {0x1, 0x7, 0x5, 0x52f, 0x7}, [0x5, 0x3, 0x40, 0x7fff, 0x9f]}}, @subvolid=0x5a6}) 17:58:52 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x4090) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}]}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x24008800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x4884) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x4008001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4008044) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000881}, 0x4000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x96d8}}, @NFULA_CFG_MODE={0xa, 0x2, {0x4}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9d2}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffffffa, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x51) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, 0x2, 0x8, 0x101, 0x0, 0x0, {0xb, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xb5cf}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r6, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}}, 0x40800) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008d4}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x1a4, r0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xb0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6ae3e44826f7542a90e3d8f6585b60051359b3e16253a3105562a801c35b6379"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8eded9a292b8654fcf3cbb9ef86e1199e3efa2bd33a4b06e7949e55caab1f702"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, @NL802154_ATTR_SEC_KEY={0xc8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3c3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2008804}, 0x80) 17:58:52 executing program 6: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000040)=""/53, 0x35}], 0x2) r0 = io_uring_setup(0x4b1b, &(0x7f00000000c0)={0x0, 0x251b, 0x14, 0x3, 0x285}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x100, 0x3) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x1, 0x1b, "f143cc108124813dceeb52a9ec9576bef2b704dab420d30b2bba2d"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2726}}, './file0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = io_uring_setup(0x3bd4, &(0x7f0000000200)={0x0, 0xfda0, 0x1, 0x3, 0x2b5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000280)={0x0, 0x0, 0x7, 0x1}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000680)={r3, 0x4, 0x4, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000b40)={0x0, @empty, @loopback}, &(0x7f0000000b80)=0xc) sendmsg(r5, &(0x7f0000000dc0)={&(0x7f0000000bc0)=@ll={0x11, 0x4, r6, 0x1, 0x2, 0x6, @multicast}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c40)="9a3900b762295aa6e2c2e263b32886064c7468f292e54fbb4b829f3dacf561dc42a44005ff18bc91d59868090827aae9bd13100c4665421f90db8966b105977d01190b9310e4364d0683aa0d9a2cce7cb7068a36e8d3e5a8ba9c49d86864c8b7d21b02212663350e64c9665d42fbb48beed679685ddf980d3c225996f69d1be9d66006fa9d49e6148cc28fc0cd42856b908d9f50faf55b46ac223966188b8ef4eeda332d06adf2903f39abab69ca9f4cfa42ff479261e66eba7359d99999", 0xbe}], 0x1, &(0x7f0000000d40)=[{0x58, 0x10d, 0x7, "a5fbe7734a385dd9240952422fc9a03e64c39957ad398530ebad974d19bec8f99ed41c6d90fd67b74ed8e1693c0919f75c324c8c667a5a1697fec1cb149f52a7586887829419"}], 0x58}, 0x2004c080) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000e00)={0x77359400}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) r7 = syz_mount_image$ext4(&(0x7f0000000e80)='ext4\x00', &(0x7f0000000ec0)='./file0/file0\x00', 0xfffffffffffffeff, 0x3, &(0x7f0000001100)=[{&(0x7f0000000f00)="d0f30c09b7968b5ea5ecd3a95b4d824f86c7c40c1258b737483242f9d2991788ada1f59df73312265776d502f42019140b072f7b75d729593528ba0806432d5f6c97c2b4b21d8ef96e8a3932039b25cfbfcf9bfa091441ab2547ab039fbd686ed230b79a74692380bc2985e6fda5b50427d3b41f8e3e2906e0a2da23146f213a9d0de07d041b1264b92bca6e6076878848069ad518b8da355c00b6e63d5ae69fd0e11d81f209a2bfeb3f482667b9a4cd09230764bd54ceee4dbc3be13cb3b8e9b15345cb0e", 0xc5, 0xf7}, {&(0x7f0000001000)="94aa5d913171de338bc1", 0xa, 0x3329}, {&(0x7f0000001040)="f7f001b1587c04da9900f1227fb03e7eabd2ef644b16a8c631e5920066de3ced2b81966870dab541af3ec0b5c526ad36b149bd96a41b36c16b126556a9fa7085d71d1f9e1c7a67c21d83394b1d1f2ba20fa98a43f65da47c58ad02bb45e287be3606abc0fd3edde25651deab91282369deb6d344f22f7def029961de20834abd7174727120433384ce5c36b40589bb0717", 0x91, 0x1}], 0x2024000, &(0x7f0000001180)={[{@init_itable}, {@bh}, {@nomblk_io_submit}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@grpjquota}, {@nojournal_checksum}], [{@obj_user={'obj_user', 0x3d, '-\x95+'}}]}) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000001200)) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r8, {0x3f95}}, './file0\x00'}) 17:58:52 executing program 7: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) r0 = clone3(&(0x7f0000001180)={0x200000600, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0xf}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/114, &(0x7f0000001140)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) move_pages(r0, 0x5, &(0x7f0000001200)=[&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000001240)=[0x0, 0x6, 0xa62, 0x5, 0x1, 0x400, 0x96aa, 0x8, 0x7, 0xff], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) r3 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$IPC_RMID(r3, 0x0) shmat(r3, &(0x7f0000ffe000/0x1000)=nil, 0x5000) get_mempolicy(&(0x7f00000012c0), &(0x7f0000001300), 0x9, &(0x7f0000ffc000/0x2000)=nil, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000a, 0xffffffffffffffff) r4 = openat(0xffffffffffffffff, &(0x7f0000001340)='./file0\x00', 0xda182, 0x83) statx(r4, &(0x7f0000001380)='./file0\x00', 0x400, 0x4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = clone3(&(0x7f00000017c0)={0x10400, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600)=0x0, {0x14}, &(0x7f0000001640)=""/181, 0xb5, &(0x7f0000001700)=""/81, &(0x7f0000001780)=[r2, r0, r1, r2, r1, r2], 0x6, {r4}}, 0x58) r9 = getpid() shmctl$IPC_SET(r3, 0x1, &(0x7f0000001840)={{0x1, 0xee00, 0xee00, r5, r6, 0x20, 0x2}, 0x5, 0x2, 0x7f, 0xae54, r8, r9, 0x8000}) mlock2(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0) pkey_free(0xffffffffffffffff) move_pages(r7, 0x5, &(0x7f00000018c0)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000001900)=[0xd46, 0x6], &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) [ 159.822928] audit: type=1400 audit(1730138332.790:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 161.239843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.241167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.252039] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.253499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.254911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.256103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.260019] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.261281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.262844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.263996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.271077] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.275656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.280821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.298718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.301723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.319647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.324608] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.334819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.337729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.339742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.341939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.345869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.348605] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.350924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.424058] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 161.434516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.437833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.438740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.440075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.440095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.445163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.445170] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.448551] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.449628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.455262] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 161.458779] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 161.466565] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.470785] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.472390] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.473358] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 161.484502] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 161.486926] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.489432] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.491458] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 161.492867] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.493908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.506495] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.507831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.214946] hrtimer: interrupt took 6915640 ns [ 163.312538] Bluetooth: hci0: command tx timeout [ 163.375558] Bluetooth: hci1: command tx timeout [ 163.378411] Bluetooth: hci2: command tx timeout [ 163.439671] Bluetooth: hci3: command tx timeout [ 163.576369] Bluetooth: hci5: command tx timeout [ 163.580315] Bluetooth: hci6: command tx timeout [ 163.636349] Bluetooth: hci7: command tx timeout [ 163.695386] Bluetooth: hci4: command tx timeout [ 165.359443] Bluetooth: hci0: command tx timeout [ 165.423686] Bluetooth: hci2: command tx timeout [ 165.424447] Bluetooth: hci1: command tx timeout [ 165.487345] Bluetooth: hci3: command tx timeout [ 165.615534] Bluetooth: hci6: command tx timeout [ 165.616092] Bluetooth: hci5: command tx timeout [ 165.679466] Bluetooth: hci7: command tx timeout [ 165.743384] Bluetooth: hci4: command tx timeout [ 167.408292] Bluetooth: hci0: command tx timeout [ 167.471380] Bluetooth: hci2: command tx timeout [ 167.471938] Bluetooth: hci1: command tx timeout [ 167.535535] Bluetooth: hci3: command tx timeout [ 167.664429] Bluetooth: hci6: command tx timeout [ 167.664989] Bluetooth: hci5: command tx timeout [ 167.727316] Bluetooth: hci7: command tx timeout [ 167.791314] Bluetooth: hci4: command tx timeout [ 169.455416] Bluetooth: hci0: command tx timeout [ 169.519474] Bluetooth: hci2: command tx timeout [ 169.521027] Bluetooth: hci1: command tx timeout [ 169.583466] Bluetooth: hci3: command tx timeout [ 169.711622] Bluetooth: hci5: command tx timeout [ 169.712185] Bluetooth: hci6: command tx timeout [ 169.776280] Bluetooth: hci7: command tx timeout [ 169.840097] Bluetooth: hci4: command tx timeout [ 221.271423] syz-executor.7 (287) used greatest stack depth: 23568 bytes left [ 224.250778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.254898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.257903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.264491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.266741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.269094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.271473] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.272495] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.275321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.275498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.279533] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.280766] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.386868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.393849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.419433] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.451179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.458170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.468398] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.469620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 224.473492] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.475641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.478564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.478774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 224.481610] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 224.483010] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.484048] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.488097] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 224.488380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.489048] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.496546] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 224.498181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.503461] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 224.516102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.520968] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.524987] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.526732] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.527936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.534782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.536382] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.537787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.558017] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 224.558503] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 224.567627] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 224.568757] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.573777] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 224.575025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 224.579862] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 224.587618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.372305] Bluetooth: hci0: command tx timeout [ 226.373294] Bluetooth: hci1: command tx timeout [ 226.544329] Bluetooth: hci2: command tx timeout [ 226.607555] Bluetooth: hci3: command tx timeout [ 226.609352] Bluetooth: hci4: command tx timeout [ 226.671342] Bluetooth: hci6: command tx timeout [ 226.672402] Bluetooth: hci7: command tx timeout [ 226.674378] Bluetooth: hci5: command tx timeout [ 228.399344] Bluetooth: hci0: command tx timeout [ 228.400885] Bluetooth: hci1: command tx timeout [ 228.591351] Bluetooth: hci2: command tx timeout [ 228.656552] Bluetooth: hci3: command tx timeout [ 228.657096] Bluetooth: hci4: command tx timeout [ 228.719357] Bluetooth: hci5: command tx timeout [ 228.719896] Bluetooth: hci7: command tx timeout [ 228.720477] Bluetooth: hci6: command tx timeout [ 230.448417] Bluetooth: hci0: command tx timeout [ 230.448969] Bluetooth: hci1: command tx timeout [ 230.640350] Bluetooth: hci2: command tx timeout [ 230.703312] Bluetooth: hci4: command tx timeout [ 230.703887] Bluetooth: hci3: command tx timeout [ 230.767448] Bluetooth: hci6: command tx timeout [ 230.768315] Bluetooth: hci7: command tx timeout [ 230.768788] Bluetooth: hci5: command tx timeout [ 232.496442] Bluetooth: hci1: command tx timeout [ 232.497003] Bluetooth: hci0: command tx timeout [ 232.688313] Bluetooth: hci2: command tx timeout [ 232.752411] Bluetooth: hci3: command tx timeout [ 232.752974] Bluetooth: hci4: command tx timeout [ 232.816406] Bluetooth: hci5: command tx timeout [ 232.816941] Bluetooth: hci6: command tx timeout [ 232.817470] Bluetooth: hci7: command tx timeout [ 286.591056] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.598905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.600156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.612146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.619337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 286.621291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.915684] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.917782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.921427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.923899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.925690] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.929516] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.943989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.947602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.952459] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 286.955068] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.956981] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 286.962423] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.972573] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.976409] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.983528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.986605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.994591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.997411] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.998819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.000398] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.001857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.004103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.005767] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.017418] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.048447] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.053620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 287.055288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.056813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.057592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 287.062433] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 287.066467] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 287.067406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.079528] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.080663] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.083851] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 287.087066] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.122473] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 287.125832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 287.126990] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 287.149488] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 287.157452] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 287.161650] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.687313] Bluetooth: hci0: command tx timeout [ 289.009356] Bluetooth: hci2: command tx timeout [ 289.071356] Bluetooth: hci4: command tx timeout [ 289.071998] Bluetooth: hci1: command tx timeout [ 289.135387] Bluetooth: hci3: command tx timeout [ 289.136904] Bluetooth: hci5: command tx timeout [ 289.199858] Bluetooth: hci6: command tx timeout [ 289.263392] Bluetooth: hci7: command tx timeout [ 290.736342] Bluetooth: hci0: command tx timeout [ 291.056415] Bluetooth: hci2: command tx timeout [ 291.119505] Bluetooth: hci1: command tx timeout [ 291.120677] Bluetooth: hci4: command tx timeout [ 291.183360] Bluetooth: hci3: command tx timeout [ 291.183840] Bluetooth: hci5: command tx timeout [ 291.247459] Bluetooth: hci6: command tx timeout [ 291.311319] Bluetooth: hci7: command tx timeout [ 292.784255] Bluetooth: hci0: command tx timeout [ 293.103367] Bluetooth: hci2: command tx timeout [ 293.167348] Bluetooth: hci1: command tx timeout [ 293.167829] Bluetooth: hci4: command tx timeout [ 293.231426] Bluetooth: hci5: command tx timeout [ 293.231900] Bluetooth: hci3: command tx timeout [ 293.296372] Bluetooth: hci6: command tx timeout [ 293.359286] Bluetooth: hci7: command tx timeout [ 294.831337] Bluetooth: hci0: command tx timeout [ 295.151337] Bluetooth: hci2: command tx timeout [ 295.215322] Bluetooth: hci4: command tx timeout [ 295.215809] Bluetooth: hci1: command tx timeout [ 295.279315] Bluetooth: hci3: command tx timeout [ 295.279799] Bluetooth: hci5: command tx timeout [ 295.343305] Bluetooth: hci6: command tx timeout [ 295.407627] Bluetooth: hci7: command tx timeout [ 349.327951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.330406] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.336148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.346465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.348079] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 349.349374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.516647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.536498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.541288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.553488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.556150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 349.563647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.564716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.574065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.577655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.586999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.590892] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 349.592135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.634535] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.636326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.637585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.639042] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.641595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.642998] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 349.644140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.660599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.664617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.680562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.701463] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 349.702907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.704661] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 349.705561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.707038] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.708567] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 349.713030] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 349.714104] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.714475] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 349.716722] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 349.718771] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.720385] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 349.727870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.739505] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.743144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.744445] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.751442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.754785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.783798] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 349.794092] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.412281] Bluetooth: hci0: command tx timeout [ 351.604694] Bluetooth: hci1: command tx timeout [ 351.664397] Bluetooth: hci4: command tx timeout [ 351.665226] Bluetooth: hci2: command tx timeout [ 351.792729] Bluetooth: hci7: command tx timeout [ 351.869290] Bluetooth: hci5: command tx timeout [ 351.871154] Bluetooth: hci3: command tx timeout [ 351.919309] Bluetooth: hci6: command tx timeout [ 353.455284] Bluetooth: hci0: command tx timeout [ 353.647278] Bluetooth: hci1: command tx timeout [ 353.711294] Bluetooth: hci4: command tx timeout [ 353.712292] Bluetooth: hci2: command tx timeout [ 353.840304] Bluetooth: hci7: command tx timeout [ 353.904491] Bluetooth: hci3: command tx timeout [ 353.904625] Bluetooth: hci5: command tx timeout [ 353.967342] Bluetooth: hci6: command tx timeout [ 355.503265] Bluetooth: hci0: command tx timeout [ 355.695314] Bluetooth: hci1: command tx timeout [ 355.759260] Bluetooth: hci4: command tx timeout [ 355.761262] Bluetooth: hci2: command tx timeout [ 355.887412] Bluetooth: hci7: command tx timeout [ 355.951293] Bluetooth: hci5: command tx timeout [ 355.951363] Bluetooth: hci3: command tx timeout [ 356.015312] Bluetooth: hci6: command tx timeout [ 357.551492] Bluetooth: hci0: command tx timeout [ 357.743406] Bluetooth: hci1: command tx timeout [ 357.807581] Bluetooth: hci2: command tx timeout [ 357.807666] Bluetooth: hci4: command tx timeout [ 357.935614] Bluetooth: hci7: command tx timeout [ 357.999533] Bluetooth: hci5: command tx timeout [ 358.000290] Bluetooth: hci3: command tx timeout [ 358.064310] Bluetooth: hci6: command tx timeout [ 411.912798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.914865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.916485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.935379] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.936957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 411.939629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.218085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.221058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.223077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.226897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.228655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 412.229884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.280517] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 412.285899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 412.287724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 412.294756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 412.296870] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 412.298468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 412.350803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.367013] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.371522] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.372547] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.374970] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.375602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.380199] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 412.383935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 412.385679] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.392573] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.396786] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 412.399367] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.425481] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 412.427559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.427644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 412.429119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.430586] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 412.432384] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 412.433825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.435512] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 412.442485] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 412.443991] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 412.445417] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 412.447754] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.450648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 412.452145] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 412.453209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.454632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 412.463317] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 412.466467] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 413.999441] Bluetooth: hci0: command tx timeout [ 414.255309] Bluetooth: hci1: command tx timeout [ 414.319241] Bluetooth: hci2: command tx timeout [ 414.447296] Bluetooth: hci5: command tx timeout [ 414.511333] Bluetooth: hci6: command tx timeout [ 414.511963] Bluetooth: hci3: command tx timeout [ 414.513232] Bluetooth: hci4: command tx timeout [ 414.575308] Bluetooth: hci7: command tx timeout [ 416.048377] Bluetooth: hci0: command tx timeout [ 416.303222] Bluetooth: hci1: command tx timeout [ 416.367214] Bluetooth: hci2: command tx timeout [ 416.495541] Bluetooth: hci5: command tx timeout [ 416.559248] Bluetooth: hci6: command tx timeout [ 416.561304] Bluetooth: hci3: command tx timeout [ 416.561771] Bluetooth: hci4: command tx timeout [ 416.623321] Bluetooth: hci7: command tx timeout [ 418.095527] Bluetooth: hci0: command tx timeout [ 418.351255] Bluetooth: hci1: command tx timeout [ 418.415246] Bluetooth: hci2: command tx timeout [ 418.543239] Bluetooth: hci5: command tx timeout [ 418.607366] Bluetooth: hci4: command tx timeout [ 418.607841] Bluetooth: hci3: command tx timeout [ 418.608369] Bluetooth: hci6: command tx timeout [ 418.672242] Bluetooth: hci7: command tx timeout [ 420.144193] Bluetooth: hci0: command tx timeout [ 420.401173] Bluetooth: hci1: command tx timeout [ 420.464232] Bluetooth: hci2: command tx timeout [ 420.591248] Bluetooth: hci5: command tx timeout [ 420.655268] Bluetooth: hci6: command tx timeout [ 420.655741] Bluetooth: hci3: command tx timeout [ 420.656265] Bluetooth: hci4: command tx timeout [ 420.720216] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:04:01 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff813e8f70 RCX=0000000000000001 RDX=1ffff11005e4ae57 RSI=ffffffff81841acd RDI=ffff88802f2572b8 RBP=ffff88802f257350 RSP=ffff88802f257298 R8 =0000000000000001 R9 =ffff88802f2572f8 R10=000000000003c001 R11=0000000000023a71 R12=ffff88802f257380 R13=0000000000000000 R14=ffff888035fdd280 R15=ffff88802f2572b8 RIP=ffffffff81148eae RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564fa763f080 CR3=00000000402f4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=61c8864680b583eb RBX=ffffffff87ed6d50 RCX=ffffffff812ef5ee RDX=fffffbfff0fda9d5 RSI=0000000000000008 RDI=ffffffff87ed4ea0 RBP=ffff888039373700 RSP=ffff888036a2f598 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=ffff88806cf41b90 R12=ffff888039374190 R13=3549de2cfc7eac86 R14=ffffffff863f34b4 R15=0000000000000000 RIP=ffffffff812fc034 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb08e527028 CR3=000000002f2e4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000