Warning: Permanently added '[localhost]:58971' (ECDSA) to the list of known hosts. 2024/11/01 10:32:28 fuzzer started 2024/11/01 10:32:28 dialing manager at localhost:45639 syzkaller login: [ 71.205661] cgroup: Unknown subsys name 'net' [ 71.323551] cgroup: Unknown subsys name 'cpuset' [ 71.343117] cgroup: Unknown subsys name 'rlimit' 2024/11/01 10:32:45 syscalls: 2217 2024/11/01 10:32:45 code coverage: enabled 2024/11/01 10:32:45 comparison tracing: enabled 2024/11/01 10:32:45 extra coverage: enabled 2024/11/01 10:32:45 setuid sandbox: enabled 2024/11/01 10:32:45 namespace sandbox: enabled 2024/11/01 10:32:45 Android sandbox: enabled 2024/11/01 10:32:45 fault injection: enabled 2024/11/01 10:32:45 leak checking: enabled 2024/11/01 10:32:45 net packet injection: enabled 2024/11/01 10:32:45 net device setup: enabled 2024/11/01 10:32:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/01 10:32:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/01 10:32:45 USB emulation: enabled 2024/11/01 10:32:45 hci packet injection: enabled 2024/11/01 10:32:45 wifi device emulation: enabled 2024/11/01 10:32:45 802.15.4 emulation: enabled 2024/11/01 10:32:45 fetching corpus: 50, signal 25317/27069 (executing program) 2024/11/01 10:32:45 fetching corpus: 100, signal 35635/38928 (executing program) 2024/11/01 10:32:45 fetching corpus: 150, signal 46186/50834 (executing program) 2024/11/01 10:32:46 fetching corpus: 200, signal 49990/56010 (executing program) 2024/11/01 10:32:46 fetching corpus: 250, signal 57331/64496 (executing program) 2024/11/01 10:32:46 fetching corpus: 300, signal 60678/69038 (executing program) 2024/11/01 10:32:46 fetching corpus: 350, signal 63443/72993 (executing program) 2024/11/01 10:32:47 fetching corpus: 400, signal 67788/78305 (executing program) 2024/11/01 10:32:47 fetching corpus: 450, signal 70593/82187 (executing program) 2024/11/01 10:32:47 fetching corpus: 500, signal 73839/86389 (executing program) 2024/11/01 10:32:48 fetching corpus: 550, signal 76066/89585 (executing program) 2024/11/01 10:32:48 fetching corpus: 600, signal 78984/93337 (executing program) 2024/11/01 10:32:48 fetching corpus: 650, signal 81216/96461 (executing program) 2024/11/01 10:32:48 fetching corpus: 700, signal 82963/99095 (executing program) 2024/11/01 10:32:48 fetching corpus: 750, signal 85460/102320 (executing program) 2024/11/01 10:32:48 fetching corpus: 800, signal 88056/105679 (executing program) 2024/11/01 10:32:49 fetching corpus: 850, signal 90061/108445 (executing program) 2024/11/01 10:32:49 fetching corpus: 900, signal 92053/111157 (executing program) 2024/11/01 10:32:49 fetching corpus: 950, signal 93318/113252 (executing program) 2024/11/01 10:32:49 fetching corpus: 1000, signal 94574/115269 (executing program) [ 91.933328] hrtimer: interrupt took 4582760 ns 2024/11/01 10:32:49 fetching corpus: 1050, signal 96220/117603 (executing program) 2024/11/01 10:32:49 fetching corpus: 1100, signal 97171/119335 (executing program) 2024/11/01 10:32:50 fetching corpus: 1150, signal 98206/121177 (executing program) 2024/11/01 10:32:50 fetching corpus: 1200, signal 100146/123653 (executing program) 2024/11/01 10:32:50 fetching corpus: 1250, signal 101264/125493 (executing program) 2024/11/01 10:32:50 fetching corpus: 1300, signal 102456/127325 (executing program) 2024/11/01 10:32:50 fetching corpus: 1350, signal 104592/129810 (executing program) 2024/11/01 10:32:50 fetching corpus: 1400, signal 105301/131259 (executing program) 2024/11/01 10:32:50 fetching corpus: 1450, signal 106450/133010 (executing program) 2024/11/01 10:32:51 fetching corpus: 1500, signal 107325/134539 (executing program) 2024/11/01 10:32:51 fetching corpus: 1550, signal 107886/135809 (executing program) 2024/11/01 10:32:51 fetching corpus: 1600, signal 108794/137372 (executing program) 2024/11/01 10:32:51 fetching corpus: 1650, signal 109691/138898 (executing program) 2024/11/01 10:32:52 fetching corpus: 1700, signal 110528/140373 (executing program) 2024/11/01 10:32:52 fetching corpus: 1750, signal 111944/142240 (executing program) 2024/11/01 10:32:52 fetching corpus: 1800, signal 112872/143706 (executing program) 2024/11/01 10:32:52 fetching corpus: 1850, signal 113853/145172 (executing program) 2024/11/01 10:32:53 fetching corpus: 1900, signal 115153/146817 (executing program) 2024/11/01 10:32:53 fetching corpus: 1950, signal 116184/148262 (executing program) 2024/11/01 10:32:53 fetching corpus: 2000, signal 117151/149662 (executing program) 2024/11/01 10:32:53 fetching corpus: 2050, signal 118492/151255 (executing program) 2024/11/01 10:32:54 fetching corpus: 2100, signal 119327/152501 (executing program) 2024/11/01 10:32:54 fetching corpus: 2150, signal 120191/153824 (executing program) 2024/11/01 10:32:54 fetching corpus: 2200, signal 120795/154909 (executing program) 2024/11/01 10:32:54 fetching corpus: 2250, signal 121487/156097 (executing program) 2024/11/01 10:32:54 fetching corpus: 2300, signal 122363/157364 (executing program) 2024/11/01 10:32:54 fetching corpus: 2350, signal 123773/158892 (executing program) 2024/11/01 10:32:54 fetching corpus: 2400, signal 124422/159964 (executing program) 2024/11/01 10:32:54 fetching corpus: 2450, signal 125171/161106 (executing program) 2024/11/01 10:32:54 fetching corpus: 2500, signal 125988/162281 (executing program) 2024/11/01 10:32:55 fetching corpus: 2550, signal 126654/163324 (executing program) 2024/11/01 10:32:55 fetching corpus: 2600, signal 127350/164392 (executing program) 2024/11/01 10:32:55 fetching corpus: 2650, signal 127978/165334 (executing program) 2024/11/01 10:32:55 fetching corpus: 2700, signal 128612/166336 (executing program) 2024/11/01 10:32:55 fetching corpus: 2750, signal 129667/167476 (executing program) 2024/11/01 10:32:55 fetching corpus: 2800, signal 130248/168371 (executing program) 2024/11/01 10:32:55 fetching corpus: 2850, signal 130677/169241 (executing program) 2024/11/01 10:32:55 fetching corpus: 2900, signal 131701/170342 (executing program) 2024/11/01 10:32:56 fetching corpus: 2950, signal 132709/171433 (executing program) 2024/11/01 10:32:56 fetching corpus: 3000, signal 133163/172254 (executing program) 2024/11/01 10:32:56 fetching corpus: 3050, signal 133773/173154 (executing program) 2024/11/01 10:32:56 fetching corpus: 3100, signal 134463/174050 (executing program) 2024/11/01 10:32:56 fetching corpus: 3150, signal 135596/175062 (executing program) 2024/11/01 10:32:56 fetching corpus: 3200, signal 135972/175813 (executing program) 2024/11/01 10:32:56 fetching corpus: 3250, signal 136550/176625 (executing program) 2024/11/01 10:32:57 fetching corpus: 3300, signal 137196/177447 (executing program) 2024/11/01 10:32:57 fetching corpus: 3350, signal 137740/178200 (executing program) 2024/11/01 10:32:57 fetching corpus: 3400, signal 138372/179001 (executing program) 2024/11/01 10:32:57 fetching corpus: 3450, signal 139207/179896 (executing program) 2024/11/01 10:32:57 fetching corpus: 3500, signal 139795/180677 (executing program) 2024/11/01 10:32:57 fetching corpus: 3550, signal 140395/181430 (executing program) 2024/11/01 10:32:57 fetching corpus: 3600, signal 140836/182137 (executing program) 2024/11/01 10:32:57 fetching corpus: 3650, signal 141230/182829 (executing program) 2024/11/01 10:32:58 fetching corpus: 3700, signal 142132/183622 (executing program) 2024/11/01 10:32:58 fetching corpus: 3750, signal 142659/184293 (executing program) 2024/11/01 10:32:58 fetching corpus: 3800, signal 143126/184961 (executing program) 2024/11/01 10:32:58 fetching corpus: 3850, signal 143543/185631 (executing program) 2024/11/01 10:32:58 fetching corpus: 3900, signal 144188/186340 (executing program) 2024/11/01 10:32:58 fetching corpus: 3950, signal 144770/187046 (executing program) 2024/11/01 10:32:58 fetching corpus: 4000, signal 145254/187667 (executing program) 2024/11/01 10:32:59 fetching corpus: 4050, signal 146023/188338 (executing program) 2024/11/01 10:32:59 fetching corpus: 4100, signal 146542/188924 (executing program) 2024/11/01 10:33:00 fetching corpus: 4150, signal 146882/189492 (executing program) 2024/11/01 10:33:00 fetching corpus: 4200, signal 147751/190162 (executing program) 2024/11/01 10:33:00 fetching corpus: 4250, signal 148355/190743 (executing program) 2024/11/01 10:33:00 fetching corpus: 4300, signal 148796/191269 (executing program) 2024/11/01 10:33:00 fetching corpus: 4350, signal 149210/191810 (executing program) 2024/11/01 10:33:01 fetching corpus: 4400, signal 149688/192376 (executing program) 2024/11/01 10:33:01 fetching corpus: 4450, signal 150072/192900 (executing program) 2024/11/01 10:33:01 fetching corpus: 4500, signal 150512/193393 (executing program) 2024/11/01 10:33:02 fetching corpus: 4550, signal 151230/193950 (executing program) 2024/11/01 10:33:02 fetching corpus: 4600, signal 151756/194468 (executing program) 2024/11/01 10:33:02 fetching corpus: 4650, signal 152220/194964 (executing program) 2024/11/01 10:33:02 fetching corpus: 4700, signal 152916/195459 (executing program) 2024/11/01 10:33:02 fetching corpus: 4750, signal 153386/195894 (executing program) 2024/11/01 10:33:03 fetching corpus: 4800, signal 153811/196329 (executing program) 2024/11/01 10:33:03 fetching corpus: 4850, signal 154135/196794 (executing program) 2024/11/01 10:33:04 fetching corpus: 4900, signal 154583/197276 (executing program) 2024/11/01 10:33:04 fetching corpus: 4950, signal 155108/197622 (executing program) 2024/11/01 10:33:04 fetching corpus: 5000, signal 155587/197622 (executing program) 2024/11/01 10:33:04 fetching corpus: 5050, signal 156035/197622 (executing program) 2024/11/01 10:33:05 fetching corpus: 5100, signal 156319/197622 (executing program) 2024/11/01 10:33:05 fetching corpus: 5150, signal 156630/197622 (executing program) 2024/11/01 10:33:05 fetching corpus: 5200, signal 157064/197622 (executing program) 2024/11/01 10:33:05 fetching corpus: 5250, signal 157483/197622 (executing program) 2024/11/01 10:33:06 fetching corpus: 5300, signal 157792/197623 (executing program) 2024/11/01 10:33:06 fetching corpus: 5350, signal 158144/197623 (executing program) 2024/11/01 10:33:06 fetching corpus: 5400, signal 158586/197623 (executing program) 2024/11/01 10:33:07 fetching corpus: 5450, signal 158985/197623 (executing program) 2024/11/01 10:33:07 fetching corpus: 5500, signal 159294/197623 (executing program) 2024/11/01 10:33:07 fetching corpus: 5550, signal 159835/197623 (executing program) 2024/11/01 10:33:07 fetching corpus: 5600, signal 160350/197623 (executing program) 2024/11/01 10:33:07 fetching corpus: 5650, signal 160891/197623 (executing program) 2024/11/01 10:33:08 fetching corpus: 5700, signal 161273/197623 (executing program) 2024/11/01 10:33:08 fetching corpus: 5750, signal 161717/197623 (executing program) 2024/11/01 10:33:08 fetching corpus: 5800, signal 162029/197623 (executing program) 2024/11/01 10:33:08 fetching corpus: 5850, signal 162366/197623 (executing program) 2024/11/01 10:33:09 fetching corpus: 5900, signal 162670/197623 (executing program) 2024/11/01 10:33:09 fetching corpus: 5950, signal 163075/197623 (executing program) 2024/11/01 10:33:10 fetching corpus: 6000, signal 163851/197623 (executing program) 2024/11/01 10:33:10 fetching corpus: 6050, signal 164280/197623 (executing program) 2024/11/01 10:33:10 fetching corpus: 6100, signal 164527/197623 (executing program) 2024/11/01 10:33:10 fetching corpus: 6150, signal 164809/197623 (executing program) 2024/11/01 10:33:10 fetching corpus: 6200, signal 165113/197623 (executing program) 2024/11/01 10:33:11 fetching corpus: 6250, signal 165372/197623 (executing program) 2024/11/01 10:33:11 fetching corpus: 6300, signal 165605/197623 (executing program) 2024/11/01 10:33:11 fetching corpus: 6350, signal 165959/197623 (executing program) 2024/11/01 10:33:12 fetching corpus: 6400, signal 166217/197623 (executing program) 2024/11/01 10:33:12 fetching corpus: 6450, signal 166552/197623 (executing program) 2024/11/01 10:33:12 fetching corpus: 6500, signal 166776/197623 (executing program) 2024/11/01 10:33:12 fetching corpus: 6550, signal 167151/197623 (executing program) 2024/11/01 10:33:13 fetching corpus: 6600, signal 167747/197623 (executing program) 2024/11/01 10:33:13 fetching corpus: 6650, signal 168054/197623 (executing program) 2024/11/01 10:33:13 fetching corpus: 6700, signal 168417/197623 (executing program) 2024/11/01 10:33:14 fetching corpus: 6750, signal 168642/197623 (executing program) 2024/11/01 10:33:14 fetching corpus: 6800, signal 168976/197623 (executing program) 2024/11/01 10:33:14 fetching corpus: 6850, signal 169324/197623 (executing program) 2024/11/01 10:33:14 fetching corpus: 6900, signal 169587/197623 (executing program) 2024/11/01 10:33:15 fetching corpus: 6950, signal 169876/197623 (executing program) 2024/11/01 10:33:15 fetching corpus: 7000, signal 170329/197627 (executing program) 2024/11/01 10:33:15 fetching corpus: 7050, signal 170673/197627 (executing program) 2024/11/01 10:33:15 fetching corpus: 7100, signal 170899/197627 (executing program) 2024/11/01 10:33:16 fetching corpus: 7150, signal 171227/197627 (executing program) 2024/11/01 10:33:16 fetching corpus: 7200, signal 171543/197627 (executing program) 2024/11/01 10:33:16 fetching corpus: 7250, signal 171834/197627 (executing program) 2024/11/01 10:33:17 fetching corpus: 7300, signal 172148/197629 (executing program) 2024/11/01 10:33:17 fetching corpus: 7350, signal 172390/197629 (executing program) 2024/11/01 10:33:17 fetching corpus: 7400, signal 172676/197629 (executing program) 2024/11/01 10:33:17 fetching corpus: 7450, signal 172898/197629 (executing program) 2024/11/01 10:33:18 fetching corpus: 7500, signal 173138/197629 (executing program) 2024/11/01 10:33:18 fetching corpus: 7550, signal 173376/197629 (executing program) 2024/11/01 10:33:18 fetching corpus: 7600, signal 173569/197629 (executing program) 2024/11/01 10:33:18 fetching corpus: 7650, signal 173820/197629 (executing program) 2024/11/01 10:33:18 fetching corpus: 7700, signal 174086/197629 (executing program) 2024/11/01 10:33:19 fetching corpus: 7750, signal 174316/197629 (executing program) 2024/11/01 10:33:19 fetching corpus: 7800, signal 174507/197629 (executing program) 2024/11/01 10:33:19 fetching corpus: 7850, signal 174807/197629 (executing program) 2024/11/01 10:33:19 fetching corpus: 7900, signal 175031/197629 (executing program) 2024/11/01 10:33:19 fetching corpus: 7950, signal 175245/197629 (executing program) 2024/11/01 10:33:19 fetching corpus: 8000, signal 176373/197629 (executing program) 2024/11/01 10:33:19 fetching corpus: 8050, signal 176611/197629 (executing program) 2024/11/01 10:33:19 fetching corpus: 8100, signal 177041/197629 (executing program) 2024/11/01 10:33:19 fetching corpus: 8150, signal 177326/197629 (executing program) 2024/11/01 10:33:20 fetching corpus: 8200, signal 177554/197629 (executing program) 2024/11/01 10:33:20 fetching corpus: 8250, signal 177709/197629 (executing program) 2024/11/01 10:33:20 fetching corpus: 8300, signal 178525/197637 (executing program) 2024/11/01 10:33:20 fetching corpus: 8350, signal 178727/197637 (executing program) 2024/11/01 10:33:20 fetching corpus: 8400, signal 178922/197637 (executing program) 2024/11/01 10:33:21 fetching corpus: 8450, signal 179098/197637 (executing program) 2024/11/01 10:33:21 fetching corpus: 8500, signal 179265/197637 (executing program) 2024/11/01 10:33:21 fetching corpus: 8550, signal 179632/197637 (executing program) 2024/11/01 10:33:21 fetching corpus: 8600, signal 179913/197637 (executing program) 2024/11/01 10:33:21 fetching corpus: 8650, signal 180489/197989 (executing program) 2024/11/01 10:33:21 fetching corpus: 8700, signal 180867/197989 (executing program) 2024/11/01 10:33:22 fetching corpus: 8750, signal 181084/197989 (executing program) 2024/11/01 10:33:22 fetching corpus: 8800, signal 181297/197989 (executing program) 2024/11/01 10:33:22 fetching corpus: 8850, signal 181525/197989 (executing program) 2024/11/01 10:33:22 fetching corpus: 8900, signal 181692/197989 (executing program) 2024/11/01 10:33:22 fetching corpus: 8950, signal 181917/197989 (executing program) 2024/11/01 10:33:23 fetching corpus: 9000, signal 182155/197989 (executing program) 2024/11/01 10:33:23 fetching corpus: 9050, signal 182336/197989 (executing program) 2024/11/01 10:33:23 fetching corpus: 9100, signal 182649/197989 (executing program) 2024/11/01 10:33:24 fetching corpus: 9150, signal 182940/197989 (executing program) 2024/11/01 10:33:24 fetching corpus: 9200, signal 183095/197989 (executing program) 2024/11/01 10:33:24 fetching corpus: 9250, signal 183301/197989 (executing program) 2024/11/01 10:33:24 fetching corpus: 9300, signal 183511/197989 (executing program) 2024/11/01 10:33:24 fetching corpus: 9350, signal 183794/197989 (executing program) 2024/11/01 10:33:24 fetching corpus: 9400, signal 184016/197989 (executing program) 2024/11/01 10:33:25 fetching corpus: 9450, signal 184143/197989 (executing program) 2024/11/01 10:33:25 fetching corpus: 9500, signal 184354/197989 (executing program) 2024/11/01 10:33:25 fetching corpus: 9550, signal 184554/197989 (executing program) 2024/11/01 10:33:25 fetching corpus: 9600, signal 184883/197991 (executing program) 2024/11/01 10:33:25 fetching corpus: 9650, signal 185105/197991 (executing program) 2024/11/01 10:33:25 fetching corpus: 9700, signal 185529/197991 (executing program) 2024/11/01 10:33:26 fetching corpus: 9750, signal 185756/197991 (executing program) 2024/11/01 10:33:26 fetching corpus: 9800, signal 185972/197991 (executing program) 2024/11/01 10:33:26 fetching corpus: 9850, signal 186278/197991 (executing program) 2024/11/01 10:33:26 fetching corpus: 9900, signal 186397/197991 (executing program) 2024/11/01 10:33:27 fetching corpus: 9950, signal 186621/197991 (executing program) 2024/11/01 10:33:27 fetching corpus: 10000, signal 186837/197991 (executing program) 2024/11/01 10:33:28 fetching corpus: 10050, signal 186986/197991 (executing program) 2024/11/01 10:33:28 fetching corpus: 10100, signal 187139/197991 (executing program) 2024/11/01 10:33:28 fetching corpus: 10150, signal 187248/197991 (executing program) 2024/11/01 10:33:28 fetching corpus: 10200, signal 187522/197991 (executing program) 2024/11/01 10:33:29 fetching corpus: 10250, signal 187717/197991 (executing program) 2024/11/01 10:33:29 fetching corpus: 10300, signal 187966/197991 (executing program) 2024/11/01 10:33:29 fetching corpus: 10350, signal 188116/197991 (executing program) 2024/11/01 10:33:29 fetching corpus: 10400, signal 188272/197991 (executing program) 2024/11/01 10:33:29 fetching corpus: 10450, signal 188514/197991 (executing program) 2024/11/01 10:33:29 fetching corpus: 10500, signal 188807/197991 (executing program) 2024/11/01 10:33:30 fetching corpus: 10550, signal 189125/197991 (executing program) 2024/11/01 10:33:30 fetching corpus: 10600, signal 189243/197991 (executing program) 2024/11/01 10:33:30 fetching corpus: 10650, signal 189413/197992 (executing program) 2024/11/01 10:33:31 fetching corpus: 10700, signal 189640/197992 (executing program) 2024/11/01 10:33:31 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/11/01 10:33:31 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/11/01 10:33:34 starting 8 fuzzer processes 10:33:34 executing program 0: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xfff, 0x9, 0x3, 0xc1f, 0x7, "628792e1484a9b6d"}) r0 = dup(0xffffffffffffffff) ioctl$KDADDIO(r0, 0x4b34, 0x900) r1 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x692, 0x7, &(0x7f0000000540)=[{&(0x7f00000000c0)="b5aae1bca8ee0bbb666cfac721c48b050d0faa1e75221f957938f8bbb8ad8476bb4ba113acd4e7b6ddf6b1b5e966550a7ef8bf5a302890c478aa89a22698b73a1ac5ec6c6432d4dc4c325478684d4ed47380f6ad3ed9af3aeccae64570b669535c5257bdfe65368704a73482a756d11b72df5b8bc2607d42d5b47f7281d78c5efaf8f717f19de732da3210d57ab4d7630b9255139ae06e5aed8056f99a9f8130733175f051d5c8c879b56d8ef7876f16f4e883940a94bdfc455907a77765", 0xbe, 0xa056}, {&(0x7f0000000180)="9714639645", 0x5, 0x18}, {&(0x7f00000001c0)="7b60e024569fcb7fff69d9cf919f8143f10d9c108c017717fdee71f9ec525a8f3d71f1b85801fc2fa89f3e08b480954af0526020b48e32d437dc7a6d719ae14151131484bef1e8e487eb308c345a102e716d2aafa151192ecfdf246aeeedfca17dba50373c1f65bfd9bc5aca03b7404ce86e0428bc7039ac31c0205de1c116768289", 0x82, 0x9}, {&(0x7f0000000280)="8a442eb1c4bdf6f2d70113cc2a502424c59fc61245898c75a9a914cba83c79a45ec0f1bf9ec832134707ba4f970764e1459622fbb26e6015fe522ba480da1b0c586f7c8fe22293066fceea7e63599bc613308010a96a11a44109d0a1ef820997a35de6b27f11698b667b7f8f25440ced32d4e4c80a945e82e1fc0de64bf9e30e9f0263daffcdf169bd12b37d2386c0fdba16c67438e0173d3484f5c4c45f3fac3c2d", 0xa2, 0x5}, {&(0x7f0000000340)="95ac8a69e752cca0dc6759a96c8fc72a2540f93396cf9730ff78988102b7e644d61955bfae4b5eea72c36d7ca5ac9c035a38a66fc2e4135604b082004a042bfe5c15b3062205c9a617496493e3b11f1cdc90a6952fef56127dc94bec7c7ce27c506584ceff4e584ca8b950", 0x6b, 0x2}, {&(0x7f00000003c0)="c150a10c70c5d84c9af9fc6683265f927a21b2bb7264b9f119506341dd9cea2e5206d2222aceb1fb55d08fbb926a77ba78f3544e9b0306ae563f1d0f5eecb43fa1e8b7b6ee1ed12ee647316eb8d8c3b026720bf4e9f32f1f462fc1e61d0ad9fc571b833e05e549c682af3c6e9192b776c1beae047564b39d434859ba72c0b7ac52ff54faf273ab679b3c005acdabc37c7d34da532830d1373403f05dd211130d1229b7bf9ea691f05867da7126dc8ebb8582c11e1fb3910ad538", 0xba, 0x4}, {&(0x7f0000000480)="203eaeb437ba0462efc096ba3814e7391e86bfd2854ff003dc8f88761db7b517af36caa407afcbcaf9ddd4037f3d901fd86966cbd180ee642d2ecd8ff6010e566cb2863988d9dc1361ffcba4599b330bda7f70eb952fc739979b7921d35e9bb1e0e08c77cc2ebda9599d4bafe2c4a69e8cb203e34b2b92bd6b461145d52ab9b4b93cf7d8df32b773133510e65f008169f20cdb7b8de4e37370d4a61861ed8f5963ecaf53aae4eebe0f62d52e25c428945f7f65839c084479", 0xb8, 0x9}], 0x100000, &(0x7f0000000600)={[{'#'}, {'/#'}, {}, {'!@&'}, {'-^:'}, {'^%5#/@'}], [{@fowner_lt={'fowner<', 0xee01}}, {@smackfsdef}, {@euid_gt}, {@measure}, {@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '}!!+^:/\',-[$\xff%,-$$\\,!#)*\xa3@.%(\x11)+/*r-\'.'}}, {@hash}]}) finit_module(r1, &(0x7f00000006c0)='\x00', 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000700)={{0x3, 0x0, 0x7, 0x3, 0xfffffffd}}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000740)) ioctl$TIOCEXCL(r0, 0x540c) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000780)={0x2, 0xc6, 0x8000, 0x2a, 0x9}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000007c0)={0x1, 0xde7}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x4, 0x4, 0x7, 0x6, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8, 0x20, 0x7, 0x3}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001}, 0x8001) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040890) r5 = accept(r1, &(0x7f0000000c80)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000d00)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e40)={'erspan0\x00', &(0x7f0000000d40)={'syztnl0\x00', r3, 0x10, 0x8000, 0xb977, 0x80, {{0x2f, 0x4, 0x0, 0x4, 0xbc, 0x7fff, 0x0, 0x2d, 0x4b, 0x0, @multicast1, @rand_addr=0x64010102, {[@generic={0x82, 0xa, "e398b2416175143c"}, @timestamp_addr={0x44, 0x44, 0xb2, 0x1, 0x5, [{@empty, 0xc09}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@loopback, 0x4}, {@remote, 0x2}, {@broadcast, 0x7}, {@multicast1, 0x401}, {@broadcast, 0x10000}, {@private=0xa010102, 0x9}]}, @timestamp_addr={0x44, 0x44, 0x2c, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@multicast1, 0x5}, {@private=0xa010102, 0x100}, {@private=0xa010100}, {@loopback, 0x6}, {@multicast2, 0x24}, {@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp_addr={0x44, 0x14, 0x61, 0x1, 0x7, [{@local, 0x7f}, {@loopback}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000000f00)={'syztnl2\x00', &(0x7f0000000e80)={'ip6_vti0\x00', r6, 0x4, 0x0, 0x0, 0x2, 0x70, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x40, 0x4, 0x81}}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 10:33:34 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40088d0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xec63dcc6ca1b3e66}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe4c}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0xc010) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x62a46ea0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x3c}}, 0x40005) r5 = signalfd(r3, &(0x7f0000000880)={[0x4]}, 0x8) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x60e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x48190}, 0x2400c081) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000a40), r5) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4040) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r3) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa4, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9b}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0xc0000) sendmsg$802154_dgram(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000dc0)={&(0x7f0000000d80)="303c05ed0b0a5c737d6b63cf7479", 0xe}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000e80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2b6}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r8) 10:33:34 executing program 2: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x40}) fcntl$getflags(0xffffffffffffffff, 0x401) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xd516, 0xfffffffffffff8ea, 0x9}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={0x0, 0x472d, 0xdb38}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000004c0)={r1, 0x0, 0x0, [0x3ff, 0x9, 0xfffffffffffffffb, 0x5, 0x10001], [0x1200, 0xfffffffffffff5af, 0x7f, 0x6, 0x3, 0x7fffffff, 0x5, 0x0, 0xa7, 0x100000000, 0x400, 0x8, 0x2, 0x2e, 0x80, 0x6, 0x1000, 0x6, 0x5, 0x44, 0x2, 0x1, 0x7fff, 0x7, 0x0, 0x9, 0x6, 0x599, 0x3f, 0x6, 0x7ff, 0x4, 0x4053b9e8, 0x2, 0x7, 0x6, 0x101, 0x8, 0x40, 0x9, 0x1, 0x401, 0xfffffffffffffffd, 0xffffffff, 0x0, 0x7fff, 0x1, 0x1f, 0x22, 0x3, 0x184e, 0x2, 0x8, 0x1, 0x1, 0x10000, 0x0, 0x7, 0xdf42, 0x401, 0x6, 0x5, 0xf804, 0xff, 0xa71f, 0x6, 0xc7b, 0x0, 0x7, 0x8, 0x5, 0x9, 0x4, 0x8, 0xc0, 0x1, 0x3, 0x3ff, 0x6, 0x10001, 0x4, 0x61c, 0xea66, 0x7, 0xff, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0xc7, 0x3, 0x400, 0x3f, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffa, 0x8001, 0x1f71, 0x80000001, 0x9, 0x10001, 0x3e7f, 0x4, 0x8001, 0x40, 0x10000, 0x0, 0x7, 0x7fffffff, 0x3ba5, 0x7fffffff, 0x100000001, 0x1c, 0x800, 0x101, 0x501, 0x1, 0x3, 0x6, 0x0, 0x4, 0x81]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000900)={{0x0, 0x40, 0x1, 0x8, 0x0, 0xb7d4, 0x9, 0x3f, 0x10001, 0x2958, 0x7ff, 0x67cd215b, 0x0, 0xdc2, 0x34cdb12f}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001900)={{r2, 0x7f, 0x80000001, 0x7f, 0x3, 0xffffffffffffffc8, 0x5, 0x0, 0x8d, 0x0, 0xffffffc1, 0x8, 0x7fffffff, 0x3, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_mount_image$tmpfs(&(0x7f00000019c0), &(0x7f0000001a00)='./file0\x00', 0x0, 0x2, &(0x7f0000001c00)=[{&(0x7f0000001a40)="2a92388f563c4c1f9866514bda9161b1b694ec275ea171e248b694330e5969e1fdd7284f3966362cc01d7eb219b5112b7c9b8019256891b9513d43c9d51c6da5da3c16a94f7732222a26ace97806eb358c338c3e9255df363ff06c86a62add9be67c099b68f0726eda058dfb3348b23b8a8f7c01f170c093fd810e9527eb15ae858fc13d7917e1c742f317b9daf2e85f6b4c0a64f1f039a53f8454abfdb8e117ffccf5c7a6c90bb9c446e77d0eb24cbdc15fb670fec2f9725ff80e99433626b2813e56a34e56d1c7ecd63f1d3c1599dc3518b3e20f98", 0xd6}, {&(0x7f0000001b40)="3ffefa3249d1746dc632ca5e875471fd09e18f6ff4725642f8ac55ec12e4587f83c6e8fd846639b6187305233d85bae71ac68ffed065dd1f8ec0879cdc98b9a4c3517f9e671335e9ac3ca600857b76bad01e74f65b293a1fe713ad02ecff731e094c13c9145ad5b086bc99d7c282e4e3a29ccef885d3d05c14e46a9c6e2c8a2f2de3bd93c8e387a82728dadad4caef579e8ed3f5131a52118b47fd04459b9c0ff1b59902a35764bcb1ba07187ab17b9146d8064e023aad9b388de96142", 0xbd, 0x7}], 0x206022, &(0x7f0000001c40)={[{@uid={'uid', 0x3d, 0xee01}}, {@size={'size', 0x3d, [0x36, 0x31, 0x38, 0x36, 0x54, 0x33]}}], [{@subj_user={'subj_user', 0x3d, '\x00'}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@appraise}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x35}}]}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000001d00)) r4 = io_uring_setup(0x72a, &(0x7f0000001d40)={0x0, 0xcb78, 0x0, 0x1, 0x2d4, 0x0, r0}) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000001dc0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001e00)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syncfs(r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24040040) writev(r0, &(0x7f0000002300)=[{&(0x7f0000002140)="704e8a592490e751e585eb9ed060cda2f4e7d735b049820a09887328bc161bfc08696d5b1a54d8d15871b08d8726fef83b477ebc9113901d986cd19f30c923f0e4c57a6ad8f2a52e542a399fca0d7cdd4f1b7f02a618a1693ef65522b5ee65a9fb25ab36c2be7424274470bb45c4d0630590e4f0677898c60e34b7cd30d05969a75ec96d107d0165b6d9ee66bf0bf50be5c3a9673576e7d458823cccf5baf41bf716bd9d34e6458f586e0389e843cec740272934cee4381634079e0937f7263d985b", 0xc2}, {&(0x7f0000002240)="253015c11b0dc821d86b743111957f", 0xf}, {&(0x7f0000002280)="20a55d6335d7cc09a54eb0382d347449bb86ccaadc8701a48bfafd1960b92d77ba0866c2a495e25c0f0b82f6c709aeb1f6e0489a370f53050c89360e07e26d40564e4dded4a3f405e0d2dd1df308555789bcc9dea0802decc699a59a5d4bb4e1e8d0222b88867989bff25de88f121c8e730db54663d5", 0x76}], 0x3) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x34, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040840) r5 = dup2(r4, r3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000002440)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c1}, 0x4000000) [ 137.071519] audit: type=1400 audit(1730457214.853:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:33:34 executing program 4: r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x15, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8845}, 0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x2000) r1 = open(&(0x7f0000000180)='./file0\x00', 0x1, 0x37) r2 = openat(r1, &(0x7f00000001c0)='./file0\x00', 0x4a0e80, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x16) ftruncate(r3, 0xfffffffffffffff7) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r3, 0x1, 0x1000, 0x2, 0x4}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) r5 = fspick(r4, &(0x7f00000002c0)='./file0\x00', 0x1) fsmount(r4, 0x0, 0xa) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r8 = creat(&(0x7f0000000480)='./file0/file0\x00', 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x128, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40448d2}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000780)={r6, 0x7a3, 0x6, 0x100000001}) r11 = getuid() mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x1000480, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {}, 0x2c, {[{@version_9p2000}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@seclabel}, {@fowner_gt={'fowner>', 0xee01}}, {@fowner_eq={'fowner', 0x3d, r11}}, {@uid_lt={'uid<', 0xee00}}]}}) 10:33:34 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x81) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#\x81^%('}, {0x20, '&'}], 0xa, "547dc30266186cfe76a5f1d983bd29735573febb900d39af8bbcc6f6fc73be4eb674bb3a382c50a64fce07dcefffcb2a7c9ac0229d35e3264f3d8b2216a47d81267aff98b1c40d949f5efbc5fcb72e9a531b59fa60703981c19ce7ddef86edcaac3530f100264718cdbb386028ebfc1bf9bca16044903b09ae617e9b7dd36eabcbdfe038f6d219060b078527ee23305baef1c854dfd173e972f74cebc720e3eeb2a270a437e709b585bf41016e9d47a8a9c7c22bd298288993b4f5848aedb5d0ee3282897642f55c663f"}, 0xdd) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000140)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) connect$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = dup2(r2, r2) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x5, @multicast2}, {0x2, 0x4e22, @local}, 0x2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240), 0x0, 0x3, 0x5}) fallocate(0xffffffffffffffff, 0x11, 0x8001, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x2, @empty, 0x6}, 0x1c) write$rfkill(r2, &(0x7f0000000340)={0x5, 0x8, 0x3, 0x1}, 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x101, 0x4) r4 = mq_open(&(0x7f00000003c0)='#\x81^%(', 0x40, 0x20, &(0x7f0000000400)={0x6, 0x5, 0x7fff, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000540)={0x7, &(0x7f0000000500)=[{0xfff7, 0x9, 0x9}, {0xe65, 0x6, 0x1, 0x51}, {0xfffe, 0x7a, 0xe1, 0x2}, {0xc91, 0x95, 0x3f, 0x2}, {0x1ff, 0x3, 0x1, 0xffffffe1}, {0x4, 0x52, 0x40, 0x36}, {0x3, 0x40, 0x9, 0x1}]}, 0x10) socket$packet(0x11, 0x2, 0x300) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000580)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}, 0xfffffafc) execveat(r5, &(0x7f00000005c0)='./file0\x00', &(0x7f00000007c0)=[&(0x7f0000000600)='/proc/cpuinfo\x00', &(0x7f0000000640)='*),:()-\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)=']}&\x00', &(0x7f0000000740)='#! ', &(0x7f0000000780)='#! '], &(0x7f0000000940)=[&(0x7f0000000800)='\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='-@--/:^\xc5,#:\x00', &(0x7f00000008c0)='/proc/cpuinfo\x00', &(0x7f0000000900)='#\x81^%('], 0x1000) 10:33:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xfffffffff3f0947a) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='@&.\x00', 0x0, r0) name_to_handle_at(r0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=@reiserfs_4={0x10, 0x4, {0x56, 0x5, 0x36, 0x6}}, &(0x7f0000000100), 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/virtio_blk', 0x4100, 0x20) mknodat$loop(r1, &(0x7f0000000180)='./file1\x00', 0x8d9ea6491c651512, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x9, 0x9, 0x0, 0x2}, {0x9, 0x80, 0xec, 0x6d}]}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0x9a, 0x4, 0x6, "52f0caa7422c0707f1313fe7b350e818", "93ae7a8fc56de63900a32e8d593bc49b6ee4d0d04bb05772e0369c7ddc438dc1a4cdb20da94f0b1a1d96b40a5807af5da532baea115b54b2a9441f3d0b752ab8b3a7fdbb029782117e6808a7fdbf1150adece459ba2147703556796cf975867d15e764a1d560c69dd9dd8ac44d1e55137851ea65a048672887478112d5967a2c97e2f67d48"}, 0x9a, 0x0) r3 = accept(r1, 0x0, &(0x7f0000000340)) open$dir(&(0x7f0000000380)='./file0/file0\x00', 0x80001, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f0000000500)=@generic, &(0x7f0000000580)=0x80) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000005c0)={0x0, r1, 0x8, 0x401, 0xd8aa, 0x6}) r6 = accept4$unix(r5, &(0x7f0000000880)=@abs, &(0x7f0000000900)=0x6e, 0x800) recvmmsg$unix(r6, &(0x7f0000004a00)=[{{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f00000009c0)=""/249, 0xf9}, {&(0x7f0000000ac0)=""/173, 0xad}, {&(0x7f0000000b80)=""/67, 0x43}, {&(0x7f0000000c00)=""/83, 0x53}, {&(0x7f0000000c80)=""/145, 0x91}, {&(0x7f0000000d40)=""/246, 0xf6}, {&(0x7f0000000e40)=""/31, 0x1f}, {&(0x7f0000000e80)=""/160, 0xa0}, {&(0x7f0000000f40)=""/26, 0x1a}, {&(0x7f0000000f80)=""/25, 0x19}], 0xa, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001100), 0x6e, &(0x7f0000001240)=[{&(0x7f0000001180)=""/148, 0x94}], 0x1, &(0x7f0000001280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/90, 0x5a}], 0x2}}, {{&(0x7f0000002480)=@abs, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002500)=""/153, 0x99}, {&(0x7f00000025c0)=""/241, 0xf1}], 0x2, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002800)=""/129, 0x81}, {&(0x7f00000028c0)=""/222, 0xde}], 0x2}}, {{&(0x7f0000002a00), 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002a80)=""/12, 0xc}, {&(0x7f0000002ac0)=""/128, 0x80}, {&(0x7f0000002b40)=""/104, 0x68}, {&(0x7f0000002bc0)=""/1, 0x1}, {&(0x7f0000002c00)=""/1, 0x1}], 0x5, &(0x7f0000002cc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000003400)=[{&(0x7f0000002d80)=""/222, 0xde}, {&(0x7f0000002e80)=""/246, 0xf6}, {&(0x7f0000002f80)=""/203, 0xcb}, {&(0x7f0000003080)=""/254, 0xfe}, {&(0x7f0000003180)=""/219, 0xdb}, {&(0x7f0000003280)=""/178, 0xb2}, {&(0x7f0000003340)=""/187, 0xbb}], 0x7}}, {{&(0x7f0000003480)=@abs, 0x6e, &(0x7f0000003500), 0x0, &(0x7f0000003540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000004940)=[{&(0x7f0000003640)=""/209, 0xd1}, {&(0x7f0000003740)=""/176, 0xb0}, {&(0x7f0000003800)=""/57, 0x39}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/193, 0xc1}], 0x5, &(0x7f00000049c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x9, 0x2101, &(0x7f0000004c40)={0x0, 0x989680}) mmap(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x3000008, 0x810, r7, 0xa8e63000) r8 = syz_mount_image$nfs(&(0x7f0000004c80), &(0x7f0000004cc0)='./file1\x00', 0x6000000, 0x2, &(0x7f0000004e00)=[{&(0x7f0000004d00)="242758314e952f7d07495a0ed076afd3c2fb0eec8ceb60acc3b200ec8877163eca4848c54ae3293bc7784b7a17b6a9919db0a7aca018a903a5418bfd869d1a6a0d2e240a8f10df161b63c52862d5ea6804e9746dc31849c675a09698f2012c49f8c4be152b08c95e5199f3e74d83c4d63db9aaffea5e794a901f9cf1c8acef", 0x7f, 0x6}, {&(0x7f0000004d80)="2ecfc08041dfcf3537d5100448aa05114f2157923692c6cdf3d23c2db0106bf41df15bc09c1c325744cf7f68599b684b6b5e3b7fea2246908fdae233bf90c3022ecd9ba139fe7063fd5d490d5fedd237fc02b15772371ba536591ff11c17", 0x5e}], 0x2104002, &(0x7f0000004e40)={[{'@&.\x00'}, {'trusted.overlay.upper\x00'}, {}, {'trusted.overlay.upper\x00'}, {'&/-'}], [{@dont_hash}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x63, 0x33, 0x66, 0x65, 0x34, 0x32, 0x66], 0x2d, [0x60, 0x33, 0x35, 0x35], 0x2d, [0x36, 0x30, 0x32, 0x61], 0x2d, [0x39, 0x64, 0x61, 0x65], 0x2d, [0x31, 0x65, 0x64, 0x30, 0x63, 0x36, 0x32, 0x34]}}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000004f00)={0x9, 0x9}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000004f40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x62, 0x2e, 0x0, 0x6, 0x3e, 0x81, 0xe5, 0x38, 0x116, 0x3f6, 0x2, 0x20, 0x1, 0x6, 0x400, 0xda}, [{0x60000000, 0x81, 0xe04, 0xff, 0x1, 0x7, 0x3, 0x9}], "4437966ef0588261f304014bf4539c51bcc2e1038907ea01de8e16", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x873) 10:33:34 executing program 6: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0x90, 0x80000, 0x12345}, 0x2) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x4040, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r3, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x2, 0x40200, 0x23456, {0x0, r5}}, 0x401) r6 = io_uring_setup(0x7e69, &(0x7f0000000240)={0x0, 0xb678, 0x10, 0x3, 0x12b, 0x0, r3}) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x40}, 0x1}, 0xfffffffe) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10010, r6, 0x0) r7 = dup(0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x140, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x100010, r6, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r8, 0x8000000) 10:33:34 executing program 7: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x800) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9a}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x97}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x8800) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) write$P9_RRENAME(r2, &(0x7f0000000300)={0x7, 0x15, 0x2}, 0x7) fcntl$setsig(r1, 0xa, 0x37) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x800) write$P9_RLOCK(r0, &(0x7f0000000440)={0x8, 0x35, 0x1}, 0x8) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000540)={{r2}, 0x0, 0x14, @inherit={0x90, &(0x7f0000000480)={0x1, 0x9, 0x81, 0x0, {0x4, 0x9, 0x1, 0x200, 0x1}, [0x1, 0x1000, 0x4, 0x7fffffff, 0x0, 0x1, 0x6, 0x55, 0x2a97]}}, @devid}) r3 = dup3(r0, r0, 0x80000) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000001580)={{r3}, 0x8, &(0x7f0000001540)=[0x200, 0xfffffffffffffffe, 0x7, 0x4, 0x800, 0x8, 0x5, 0x2], 0xfffffffffffffffe, 0x6, [0x3, 0xfffffffffffffe56, 0x1355, 0x101]}) splice(r2, &(0x7f0000001600)=0x1, r3, &(0x7f0000001640)=0x1, 0x0, 0xa) r4 = socket$unix(0x1, 0x1, 0x0) fcntl$setsig(r4, 0xa, 0x39) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000001800)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f00000018c0)={{r1}, r7, 0x20, @inherit={0x58, &(0x7f0000001840)={0x0, 0x2, 0x7, 0x6, {0x8, 0x101, 0x8, 0x20000000, 0x2b}, [0xff, 0x0]}}, @devid}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) [ 138.487331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.492895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.495293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.503599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.507156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.509473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.512219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.515756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.518114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.520077] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.520453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.525183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.535507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.535525] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.538706] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.541560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.544465] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.570035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.579504] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.583151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.586258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.593128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.599447] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.599939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.604231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.613087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.619172] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.622664] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.627061] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 138.628374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.632764] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 138.634341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.636747] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 138.639249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 138.649293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.651677] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 138.651749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.655405] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 138.661641] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 138.666767] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.669246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 138.679134] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 138.691127] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 138.706368] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 138.710090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.729136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 138.740351] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 138.742872] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 140.595634] Bluetooth: hci2: command tx timeout [ 140.595771] Bluetooth: hci1: command tx timeout [ 140.596732] Bluetooth: hci0: command tx timeout [ 140.659037] Bluetooth: hci3: command tx timeout [ 140.724896] Bluetooth: hci5: command tx timeout [ 140.787918] Bluetooth: hci7: command tx timeout [ 140.789764] Bluetooth: hci6: command tx timeout [ 140.791406] Bluetooth: hci4: command tx timeout [ 142.642941] Bluetooth: hci0: command tx timeout [ 142.644658] Bluetooth: hci1: command tx timeout [ 142.644698] Bluetooth: hci2: command tx timeout [ 142.706953] Bluetooth: hci3: command tx timeout [ 142.771075] Bluetooth: hci5: command tx timeout [ 142.835027] Bluetooth: hci6: command tx timeout [ 142.835310] Bluetooth: hci7: command tx timeout [ 142.836542] Bluetooth: hci4: command tx timeout [ 144.690984] Bluetooth: hci0: command tx timeout [ 144.692974] Bluetooth: hci1: command tx timeout [ 144.694584] Bluetooth: hci2: command tx timeout [ 144.755954] Bluetooth: hci3: command tx timeout [ 144.821904] Bluetooth: hci5: command tx timeout [ 144.882930] Bluetooth: hci7: command tx timeout [ 144.884683] Bluetooth: hci4: command tx timeout [ 144.884707] Bluetooth: hci6: command tx timeout [ 146.739123] Bluetooth: hci0: command tx timeout [ 146.739185] Bluetooth: hci1: command tx timeout [ 146.740261] Bluetooth: hci2: command tx timeout [ 146.802981] Bluetooth: hci3: command tx timeout [ 146.868876] Bluetooth: hci5: command tx timeout [ 146.930940] Bluetooth: hci4: command tx timeout [ 146.931457] Bluetooth: hci7: command tx timeout [ 146.932012] Bluetooth: hci6: command tx timeout [ 201.439384] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.445540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.446905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.448017] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.449305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.455560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.457540] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.460296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.463003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.467006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.470620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.474515] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.477484] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.479313] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.479511] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.482020] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 201.485198] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 201.485519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.487111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.489180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.493997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.507175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.509029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.515259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.552517] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.554105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.558097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.559958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 201.563668] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.566372] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.568034] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 201.569144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.570413] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.571293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.583061] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.586317] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.602203] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 201.603035] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.612047] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.615140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.617240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 201.624641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.670514] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 201.685121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 201.691965] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 201.723055] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 201.741053] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 201.760713] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 203.570954] Bluetooth: hci2: command tx timeout [ 203.571005] Bluetooth: hci1: command tx timeout [ 203.572058] Bluetooth: hci0: command tx timeout [ 203.636140] Bluetooth: hci3: command tx timeout [ 203.636777] Bluetooth: hci4: command tx timeout [ 203.699067] Bluetooth: hci6: command tx timeout [ 203.699677] Bluetooth: hci5: command tx timeout [ 203.826942] Bluetooth: hci7: command tx timeout [ 205.622915] Bluetooth: hci2: command tx timeout [ 205.623446] Bluetooth: hci0: command tx timeout [ 205.628839] Bluetooth: hci1: command tx timeout [ 205.684071] Bluetooth: hci3: command tx timeout [ 205.684540] Bluetooth: hci4: command tx timeout [ 205.747977] Bluetooth: hci6: command tx timeout [ 205.748456] Bluetooth: hci5: command tx timeout [ 205.874928] Bluetooth: hci7: command tx timeout [ 207.668853] Bluetooth: hci1: command tx timeout [ 207.670314] Bluetooth: hci0: command tx timeout [ 207.671613] Bluetooth: hci2: command tx timeout [ 207.731033] Bluetooth: hci4: command tx timeout [ 207.731515] Bluetooth: hci3: command tx timeout [ 207.794990] Bluetooth: hci6: command tx timeout [ 207.796299] Bluetooth: hci5: command tx timeout [ 207.923940] Bluetooth: hci7: command tx timeout [ 209.716882] Bluetooth: hci1: command tx timeout [ 209.717409] Bluetooth: hci0: command tx timeout [ 209.717919] Bluetooth: hci2: command tx timeout [ 209.779891] Bluetooth: hci4: command tx timeout [ 209.780370] Bluetooth: hci3: command tx timeout [ 209.843008] Bluetooth: hci5: command tx timeout [ 209.843484] Bluetooth: hci6: command tx timeout [ 209.971898] Bluetooth: hci7: command tx timeout [ 263.755757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.758216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.759520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.763752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.769039] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 263.776987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.059501] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.064331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.067330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.074348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.079651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 264.082073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.131373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.137672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.145156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.149879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 264.154479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.155362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 264.158222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.166139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.167383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 264.170355] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.171395] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.174324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.175935] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 264.188628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.194002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.196694] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.201515] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 264.203694] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 264.214027] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.219510] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.220622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 264.228423] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 264.231343] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 264.241332] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 264.245063] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.264072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.266145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 264.277940] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 264.279105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.283986] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 264.285031] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.291930] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 264.296162] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 264.297010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.306122] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 264.334082] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 265.843086] Bluetooth: hci0: command tx timeout [ 266.100266] Bluetooth: hci1: command tx timeout [ 266.292036] Bluetooth: hci2: command tx timeout [ 266.293023] Bluetooth: hci3: command tx timeout [ 266.354901] Bluetooth: hci4: command tx timeout [ 266.356765] Bluetooth: hci6: command tx timeout [ 266.418935] Bluetooth: hci7: command tx timeout [ 266.420487] Bluetooth: hci5: command tx timeout [ 267.892849] Bluetooth: hci0: command tx timeout [ 268.149220] Bluetooth: hci1: command tx timeout [ 268.339944] Bluetooth: hci2: command tx timeout [ 268.340460] Bluetooth: hci3: command tx timeout [ 268.404604] Bluetooth: hci6: command tx timeout [ 268.405659] Bluetooth: hci4: command tx timeout [ 268.468842] Bluetooth: hci7: command tx timeout [ 268.469336] Bluetooth: hci5: command tx timeout [ 269.940218] Bluetooth: hci0: command tx timeout [ 270.195965] Bluetooth: hci1: command tx timeout [ 270.387892] Bluetooth: hci3: command tx timeout [ 270.388454] Bluetooth: hci2: command tx timeout [ 270.452877] Bluetooth: hci4: command tx timeout [ 270.453385] Bluetooth: hci6: command tx timeout [ 270.516054] Bluetooth: hci5: command tx timeout [ 270.516550] Bluetooth: hci7: command tx timeout [ 271.986948] Bluetooth: hci0: command tx timeout [ 272.242941] Bluetooth: hci1: command tx timeout [ 272.436042] Bluetooth: hci3: command tx timeout [ 272.436563] Bluetooth: hci2: command tx timeout [ 272.500051] Bluetooth: hci6: command tx timeout [ 272.501480] Bluetooth: hci4: command tx timeout [ 272.563893] Bluetooth: hci7: command tx timeout [ 272.564386] Bluetooth: hci5: command tx timeout [ 326.344664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.357183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.360464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.363456] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.365757] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 326.366990] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.602146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.611572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.614315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.620674] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.625462] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.627982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.758282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.760693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.761921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.765755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.769426] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 326.770531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.777592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.788514] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.789868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.799989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.802506] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 326.803731] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.847575] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.862693] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.869670] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.873621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.875763] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 326.877089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.898655] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.900034] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.903163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.908399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.909599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.941912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.946015] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 326.951032] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.952498] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.955485] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 326.963217] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 326.964199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.965432] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 326.971072] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 326.973624] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 326.975610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 326.977031] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 326.986263] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 328.436885] Bluetooth: hci0: command tx timeout [ 328.691161] Bluetooth: hci1: command tx timeout [ 328.818894] Bluetooth: hci3: command tx timeout [ 328.882905] Bluetooth: hci2: command tx timeout [ 328.947969] Bluetooth: hci4: command tx timeout [ 329.014123] Bluetooth: hci5: command tx timeout [ 329.074932] Bluetooth: hci7: command tx timeout [ 329.077057] Bluetooth: hci6: command tx timeout [ 330.483000] Bluetooth: hci0: command tx timeout [ 330.738890] Bluetooth: hci1: command tx timeout [ 330.867330] Bluetooth: hci3: command tx timeout [ 330.931021] Bluetooth: hci2: command tx timeout [ 330.994854] Bluetooth: hci4: command tx timeout [ 331.059167] Bluetooth: hci5: command tx timeout [ 331.138870] Bluetooth: hci7: command tx timeout [ 331.139442] Bluetooth: hci6: command tx timeout [ 332.530907] Bluetooth: hci0: command tx timeout [ 332.786856] Bluetooth: hci1: command tx timeout [ 332.914988] Bluetooth: hci3: command tx timeout [ 332.978893] Bluetooth: hci2: command tx timeout [ 333.042857] Bluetooth: hci4: command tx timeout [ 333.107482] Bluetooth: hci5: command tx timeout [ 333.170921] Bluetooth: hci6: command tx timeout [ 333.171442] Bluetooth: hci7: command tx timeout [ 334.578957] Bluetooth: hci0: command tx timeout [ 334.835856] Bluetooth: hci1: command tx timeout [ 334.962887] Bluetooth: hci3: command tx timeout [ 335.026973] Bluetooth: hci2: command tx timeout [ 335.090873] Bluetooth: hci4: command tx timeout [ 335.154897] Bluetooth: hci5: command tx timeout [ 335.219084] Bluetooth: hci6: command tx timeout [ 335.219624] Bluetooth: hci7: command tx timeout [ 389.020738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.022593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.023722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.027534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.030058] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 389.031501] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.258664] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.261011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.267575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.280025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.289634] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 389.300308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.509553] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.514083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.516668] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.521618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.526481] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 389.528494] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.584983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.601067] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.608338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 389.613128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.619085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.638010] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.640310] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 389.642388] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.656553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.661172] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 389.669640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 389.675016] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 389.681067] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 389.687088] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 389.693030] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 389.702379] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 389.708179] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 389.709083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 389.752732] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 389.754081] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 389.760956] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 389.762570] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 389.767123] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 389.787363] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.797592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.817075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.829935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.885081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.902042] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 389.913062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.091893] Bluetooth: hci0: command tx timeout [ 391.347488] Bluetooth: hci1: command tx timeout [ 391.602976] Bluetooth: hci2: command tx timeout [ 391.731929] Bluetooth: hci3: command tx timeout [ 391.794868] Bluetooth: hci4: command tx timeout [ 391.860840] Bluetooth: hci7: command tx timeout [ 391.922916] Bluetooth: hci6: command tx timeout [ 391.986850] Bluetooth: hci5: command tx timeout [ 393.138858] Bluetooth: hci0: command tx timeout [ 393.394922] Bluetooth: hci1: command tx timeout [ 393.650828] Bluetooth: hci2: command tx timeout [ 393.778890] Bluetooth: hci3: command tx timeout [ 393.842855] Bluetooth: hci4: command tx timeout [ 393.906834] Bluetooth: hci7: command tx timeout [ 393.972835] Bluetooth: hci6: command tx timeout [ 394.034967] Bluetooth: hci5: command tx timeout [ 395.186939] Bluetooth: hci0: command tx timeout [ 395.443823] Bluetooth: hci1: command tx timeout [ 395.698919] Bluetooth: hci2: command tx timeout [ 395.827015] Bluetooth: hci3: command tx timeout [ 395.890845] Bluetooth: hci4: command tx timeout [ 395.955885] Bluetooth: hci7: command tx timeout [ 396.018850] Bluetooth: hci6: command tx timeout [ 396.082838] Bluetooth: hci5: command tx timeout [ 397.234893] Bluetooth: hci0: command tx timeout [ 397.490858] Bluetooth: hci1: command tx timeout [ 397.746839] Bluetooth: hci2: command tx timeout [ 397.874936] Bluetooth: hci3: command tx timeout [ 397.938965] Bluetooth: hci4: command tx timeout [ 398.002829] Bluetooth: hci7: command tx timeout [ 398.067789] Bluetooth: hci6: command tx timeout [ 398.130841] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 10:38:38 Registers: info registers vcpu 0 RAX=ffff888038258001 RBX=ffff888038257668 RCX=0000000000000001 RDX=ffff888038257901 RSI=ffff8880382579e8 RDI=ffff888038257678 RBP=ffff8880382579e8 RSP=ffff8880382575c0 R8 =ffffffff868320ea R9 =ffff8880382576a8 R10=000000000003c001 R11=0000000000023a1c R12=0000000000000008 R13=ffff888038250000 R14=ffff8880382579f0 R15=ffff888038257668 RIP=ffffffff81148d89 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f765ce7b000 CR3=00000000166d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff813e8f70 RCX=0000000000000001 RDX=1ffff110077b1f04 RSI=ffffffff81841c90 RDI=ffff88803bd8f78c RBP=ffff88803bd8f750 RSP=ffff88803bd8f6b8 R8 =0000000000000001 R9 =ffff88803bd8f6f8 R10=000000000003c001 R11=0000000000024b4f R12=ffff88803bd8f780 R13=0000000000000000 R14=ffff88803dd73700 R15=0000000000092cc0 RIP=ffffffff810d1979 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055bb5a2ac080 CR3=0000000036750000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000