Warning: Permanently added '[localhost]:14761' (ECDSA) to the list of known hosts. 2024/11/11 21:44:22 fuzzer started 2024/11/11 21:44:23 dialing manager at localhost:46317 syzkaller login: [ 66.054981] cgroup: Unknown subsys name 'net' [ 66.138852] cgroup: Unknown subsys name 'cpuset' [ 66.187230] cgroup: Unknown subsys name 'rlimit' 2024/11/11 21:44:40 syscalls: 2217 2024/11/11 21:44:40 code coverage: enabled 2024/11/11 21:44:40 comparison tracing: enabled 2024/11/11 21:44:40 extra coverage: enabled 2024/11/11 21:44:40 setuid sandbox: enabled 2024/11/11 21:44:40 namespace sandbox: enabled 2024/11/11 21:44:40 Android sandbox: enabled 2024/11/11 21:44:40 fault injection: enabled 2024/11/11 21:44:40 leak checking: enabled 2024/11/11 21:44:40 net packet injection: enabled 2024/11/11 21:44:40 net device setup: enabled 2024/11/11 21:44:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/11 21:44:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/11 21:44:40 USB emulation: enabled 2024/11/11 21:44:40 hci packet injection: enabled 2024/11/11 21:44:40 wifi device emulation: enabled 2024/11/11 21:44:40 802.15.4 emulation: enabled 2024/11/11 21:44:40 fetching corpus: 50, signal 18217/20029 (executing program) 2024/11/11 21:44:41 fetching corpus: 100, signal 31822/35191 (executing program) 2024/11/11 21:44:41 fetching corpus: 150, signal 40279/45075 (executing program) 2024/11/11 21:44:41 fetching corpus: 200, signal 47094/53226 (executing program) 2024/11/11 21:44:42 fetching corpus: 250, signal 50491/58009 (executing program) 2024/11/11 21:44:42 fetching corpus: 300, signal 57013/65698 (executing program) 2024/11/11 21:44:42 fetching corpus: 350, signal 61793/71617 (executing program) 2024/11/11 21:44:43 fetching corpus: 400, signal 65794/76681 (executing program) 2024/11/11 21:44:43 fetching corpus: 450, signal 68628/80653 (executing program) 2024/11/11 21:44:43 fetching corpus: 500, signal 70927/84060 (executing program) 2024/11/11 21:44:43 fetching corpus: 550, signal 74153/88270 (executing program) 2024/11/11 21:44:43 fetching corpus: 600, signal 78012/92911 (executing program) 2024/11/11 21:44:43 fetching corpus: 650, signal 81562/97230 (executing program) 2024/11/11 21:44:44 fetching corpus: 700, signal 83234/99837 (executing program) 2024/11/11 21:44:44 fetching corpus: 750, signal 84475/102098 (executing program) 2024/11/11 21:44:44 fetching corpus: 800, signal 87335/105664 (executing program) 2024/11/11 21:44:44 fetching corpus: 850, signal 88976/108119 (executing program) 2024/11/11 21:44:44 fetching corpus: 900, signal 90584/110537 (executing program) 2024/11/11 21:44:44 fetching corpus: 950, signal 92022/112791 (executing program) 2024/11/11 21:44:45 fetching corpus: 1000, signal 95528/116741 (executing program) 2024/11/11 21:44:45 fetching corpus: 1050, signal 97630/119469 (executing program) 2024/11/11 21:44:46 fetching corpus: 1100, signal 100195/122519 (executing program) 2024/11/11 21:44:46 fetching corpus: 1150, signal 101900/124817 (executing program) 2024/11/11 21:44:46 fetching corpus: 1200, signal 103285/126889 (executing program) 2024/11/11 21:44:47 fetching corpus: 1250, signal 104797/129016 (executing program) 2024/11/11 21:44:47 fetching corpus: 1300, signal 106114/130924 (executing program) 2024/11/11 21:44:47 fetching corpus: 1350, signal 107536/132912 (executing program) 2024/11/11 21:44:48 fetching corpus: 1400, signal 109495/135253 (executing program) 2024/11/11 21:44:48 fetching corpus: 1450, signal 110770/137091 (executing program) 2024/11/11 21:44:48 fetching corpus: 1500, signal 111820/138741 (executing program) 2024/11/11 21:44:49 fetching corpus: 1550, signal 112487/140105 (executing program) 2024/11/11 21:44:49 fetching corpus: 1600, signal 113308/141544 (executing program) 2024/11/11 21:44:49 fetching corpus: 1650, signal 114218/143094 (executing program) 2024/11/11 21:44:49 fetching corpus: 1700, signal 115971/145134 (executing program) 2024/11/11 21:44:49 fetching corpus: 1750, signal 116869/146588 (executing program) 2024/11/11 21:44:50 fetching corpus: 1800, signal 118029/148249 (executing program) 2024/11/11 21:44:50 fetching corpus: 1850, signal 119192/149855 (executing program) 2024/11/11 21:44:50 fetching corpus: 1900, signal 119844/151100 (executing program) 2024/11/11 21:44:50 fetching corpus: 1950, signal 120847/152523 (executing program) 2024/11/11 21:44:51 fetching corpus: 2000, signal 122401/154240 (executing program) 2024/11/11 21:44:51 fetching corpus: 2050, signal 122760/155269 (executing program) 2024/11/11 21:44:51 fetching corpus: 2100, signal 123514/156515 (executing program) 2024/11/11 21:44:51 fetching corpus: 2150, signal 124528/157878 (executing program) 2024/11/11 21:44:51 fetching corpus: 2200, signal 125299/159116 (executing program) 2024/11/11 21:44:51 fetching corpus: 2250, signal 126242/160410 (executing program) 2024/11/11 21:44:52 fetching corpus: 2300, signal 126928/161562 (executing program) 2024/11/11 21:44:52 fetching corpus: 2350, signal 127602/162710 (executing program) 2024/11/11 21:44:52 fetching corpus: 2400, signal 128693/164062 (executing program) 2024/11/11 21:44:52 fetching corpus: 2450, signal 129583/165235 (executing program) 2024/11/11 21:44:52 fetching corpus: 2500, signal 130329/166316 (executing program) 2024/11/11 21:44:52 fetching corpus: 2550, signal 130991/167341 (executing program) 2024/11/11 21:44:52 fetching corpus: 2600, signal 132784/168923 (executing program) 2024/11/11 21:44:53 fetching corpus: 2650, signal 133779/170041 (executing program) 2024/11/11 21:44:53 fetching corpus: 2700, signal 134310/170944 (executing program) 2024/11/11 21:44:53 fetching corpus: 2750, signal 135080/171940 (executing program) 2024/11/11 21:44:53 fetching corpus: 2800, signal 135597/172875 (executing program) 2024/11/11 21:44:53 fetching corpus: 2850, signal 136189/173822 (executing program) 2024/11/11 21:44:53 fetching corpus: 2900, signal 136577/174695 (executing program) 2024/11/11 21:44:53 fetching corpus: 2950, signal 137433/175653 (executing program) 2024/11/11 21:44:53 fetching corpus: 3000, signal 138064/176581 (executing program) 2024/11/11 21:44:54 fetching corpus: 3050, signal 138487/177365 (executing program) 2024/11/11 21:44:54 fetching corpus: 3100, signal 139329/178307 (executing program) 2024/11/11 21:44:54 fetching corpus: 3150, signal 140151/179250 (executing program) 2024/11/11 21:44:54 fetching corpus: 3200, signal 140731/180064 (executing program) 2024/11/11 21:44:54 fetching corpus: 3250, signal 141331/180850 (executing program) 2024/11/11 21:44:54 fetching corpus: 3300, signal 142025/181701 (executing program) 2024/11/11 21:44:54 fetching corpus: 3350, signal 142474/182442 (executing program) 2024/11/11 21:44:55 fetching corpus: 3400, signal 143069/183251 (executing program) 2024/11/11 21:44:55 fetching corpus: 3450, signal 143718/184093 (executing program) 2024/11/11 21:44:55 fetching corpus: 3500, signal 144162/184828 (executing program) 2024/11/11 21:44:55 fetching corpus: 3550, signal 144791/185587 (executing program) 2024/11/11 21:44:55 fetching corpus: 3600, signal 145511/186383 (executing program) 2024/11/11 21:44:55 fetching corpus: 3650, signal 145774/187009 (executing program) 2024/11/11 21:44:56 fetching corpus: 3700, signal 146163/187729 (executing program) 2024/11/11 21:44:56 fetching corpus: 3750, signal 146787/188450 (executing program) 2024/11/11 21:44:56 fetching corpus: 3800, signal 147347/189164 (executing program) 2024/11/11 21:44:56 fetching corpus: 3850, signal 147974/189868 (executing program) 2024/11/11 21:44:57 fetching corpus: 3900, signal 148331/190486 (executing program) 2024/11/11 21:44:57 fetching corpus: 3950, signal 148672/191119 (executing program) 2024/11/11 21:44:57 fetching corpus: 4000, signal 149015/191737 (executing program) 2024/11/11 21:44:57 fetching corpus: 4050, signal 149279/192318 (executing program) 2024/11/11 21:44:57 fetching corpus: 4100, signal 149644/192911 (executing program) 2024/11/11 21:44:57 fetching corpus: 4150, signal 150120/193575 (executing program) 2024/11/11 21:44:58 fetching corpus: 4200, signal 150666/194207 (executing program) 2024/11/11 21:44:58 fetching corpus: 4250, signal 151196/194794 (executing program) 2024/11/11 21:44:58 fetching corpus: 4300, signal 151723/195346 (executing program) 2024/11/11 21:44:58 fetching corpus: 4350, signal 152630/195994 (executing program) 2024/11/11 21:44:58 fetching corpus: 4400, signal 153114/196568 (executing program) 2024/11/11 21:44:59 fetching corpus: 4450, signal 153666/197128 (executing program) 2024/11/11 21:44:59 fetching corpus: 4500, signal 154116/197664 (executing program) 2024/11/11 21:44:59 fetching corpus: 4550, signal 154639/198189 (executing program) 2024/11/11 21:44:59 fetching corpus: 4600, signal 155370/198735 (executing program) 2024/11/11 21:44:59 fetching corpus: 4650, signal 156091/199211 (executing program) 2024/11/11 21:44:59 fetching corpus: 4700, signal 156601/199716 (executing program) 2024/11/11 21:45:00 fetching corpus: 4750, signal 156950/200220 (executing program) 2024/11/11 21:45:00 fetching corpus: 4800, signal 157292/200663 (executing program) 2024/11/11 21:45:00 fetching corpus: 4850, signal 157662/201143 (executing program) 2024/11/11 21:45:01 fetching corpus: 4900, signal 158100/201603 (executing program) 2024/11/11 21:45:01 fetching corpus: 4950, signal 158469/202073 (executing program) 2024/11/11 21:45:01 fetching corpus: 5000, signal 159063/202582 (executing program) 2024/11/11 21:45:01 fetching corpus: 5050, signal 159346/202968 (executing program) 2024/11/11 21:45:01 fetching corpus: 5100, signal 159690/203208 (executing program) 2024/11/11 21:45:01 fetching corpus: 5150, signal 160025/203208 (executing program) 2024/11/11 21:45:02 fetching corpus: 5200, signal 160203/203208 (executing program) 2024/11/11 21:45:02 fetching corpus: 5250, signal 160568/203208 (executing program) 2024/11/11 21:45:02 fetching corpus: 5300, signal 160849/203208 (executing program) 2024/11/11 21:45:02 fetching corpus: 5350, signal 161175/203208 (executing program) 2024/11/11 21:45:03 fetching corpus: 5400, signal 161511/203208 (executing program) 2024/11/11 21:45:03 fetching corpus: 5450, signal 161846/203208 (executing program) 2024/11/11 21:45:03 fetching corpus: 5500, signal 162229/203208 (executing program) 2024/11/11 21:45:03 fetching corpus: 5550, signal 162793/203208 (executing program) 2024/11/11 21:45:03 fetching corpus: 5600, signal 163200/203208 (executing program) 2024/11/11 21:45:03 fetching corpus: 5650, signal 163505/203208 (executing program) 2024/11/11 21:45:03 fetching corpus: 5700, signal 163829/203208 (executing program) 2024/11/11 21:45:04 fetching corpus: 5750, signal 164152/203208 (executing program) 2024/11/11 21:45:04 fetching corpus: 5800, signal 164451/203208 (executing program) 2024/11/11 21:45:04 fetching corpus: 5850, signal 164811/203208 (executing program) 2024/11/11 21:45:05 fetching corpus: 5900, signal 165150/203208 (executing program) 2024/11/11 21:45:05 fetching corpus: 5950, signal 165546/203209 (executing program) 2024/11/11 21:45:05 fetching corpus: 6000, signal 165809/203209 (executing program) 2024/11/11 21:45:05 fetching corpus: 6050, signal 166072/203216 (executing program) 2024/11/11 21:45:06 fetching corpus: 6100, signal 166302/203216 (executing program) 2024/11/11 21:45:06 fetching corpus: 6150, signal 166556/203216 (executing program) 2024/11/11 21:45:06 fetching corpus: 6200, signal 166904/203216 (executing program) 2024/11/11 21:45:06 fetching corpus: 6250, signal 167226/203216 (executing program) 2024/11/11 21:45:06 fetching corpus: 6300, signal 167691/203216 (executing program) 2024/11/11 21:45:07 fetching corpus: 6350, signal 167988/203217 (executing program) 2024/11/11 21:45:07 fetching corpus: 6400, signal 168227/203225 (executing program) 2024/11/11 21:45:07 fetching corpus: 6450, signal 168547/203225 (executing program) 2024/11/11 21:45:08 fetching corpus: 6500, signal 168855/203225 (executing program) 2024/11/11 21:45:08 fetching corpus: 6550, signal 169159/203225 (executing program) 2024/11/11 21:45:08 fetching corpus: 6600, signal 169439/203225 (executing program) 2024/11/11 21:45:08 fetching corpus: 6650, signal 169923/203225 (executing program) 2024/11/11 21:45:09 fetching corpus: 6700, signal 170201/203225 (executing program) 2024/11/11 21:45:09 fetching corpus: 6750, signal 170504/203225 (executing program) 2024/11/11 21:45:09 fetching corpus: 6800, signal 170767/203225 (executing program) 2024/11/11 21:45:10 fetching corpus: 6850, signal 171021/203225 (executing program) 2024/11/11 21:45:10 fetching corpus: 6900, signal 171295/203225 (executing program) 2024/11/11 21:45:10 fetching corpus: 6950, signal 171618/203225 (executing program) 2024/11/11 21:45:11 fetching corpus: 7000, signal 172010/203225 (executing program) 2024/11/11 21:45:11 fetching corpus: 7050, signal 172382/203225 (executing program) 2024/11/11 21:45:12 fetching corpus: 7100, signal 172703/203225 (executing program) 2024/11/11 21:45:12 fetching corpus: 7150, signal 172867/203225 (executing program) 2024/11/11 21:45:12 fetching corpus: 7200, signal 173270/203225 (executing program) 2024/11/11 21:45:13 fetching corpus: 7250, signal 173549/203225 (executing program) 2024/11/11 21:45:13 fetching corpus: 7300, signal 173840/203229 (executing program) 2024/11/11 21:45:13 fetching corpus: 7350, signal 174150/203229 (executing program) 2024/11/11 21:45:13 fetching corpus: 7400, signal 174352/203229 (executing program) 2024/11/11 21:45:14 fetching corpus: 7450, signal 174775/203234 (executing program) 2024/11/11 21:45:14 fetching corpus: 7500, signal 174999/203234 (executing program) 2024/11/11 21:45:14 fetching corpus: 7550, signal 175252/203235 (executing program) 2024/11/11 21:45:14 fetching corpus: 7600, signal 175456/203235 (executing program) 2024/11/11 21:45:14 fetching corpus: 7650, signal 175874/203235 (executing program) 2024/11/11 21:45:15 fetching corpus: 7700, signal 176067/203235 (executing program) 2024/11/11 21:45:15 fetching corpus: 7750, signal 176391/203235 (executing program) 2024/11/11 21:45:15 fetching corpus: 7800, signal 176548/203235 (executing program) 2024/11/11 21:45:15 fetching corpus: 7850, signal 176812/203235 (executing program) 2024/11/11 21:45:16 fetching corpus: 7900, signal 176961/203235 (executing program) 2024/11/11 21:45:16 fetching corpus: 7950, signal 177265/203235 (executing program) 2024/11/11 21:45:16 fetching corpus: 8000, signal 177439/203235 (executing program) 2024/11/11 21:45:16 fetching corpus: 8050, signal 177747/203235 (executing program) 2024/11/11 21:45:17 fetching corpus: 8100, signal 178001/203235 (executing program) 2024/11/11 21:45:17 fetching corpus: 8150, signal 178223/203235 (executing program) 2024/11/11 21:45:17 fetching corpus: 8200, signal 178675/203235 (executing program) 2024/11/11 21:45:17 fetching corpus: 8250, signal 178960/203235 (executing program) 2024/11/11 21:45:17 fetching corpus: 8300, signal 179252/203235 (executing program) 2024/11/11 21:45:18 fetching corpus: 8350, signal 179433/203235 (executing program) 2024/11/11 21:45:18 fetching corpus: 8400, signal 179732/203235 (executing program) 2024/11/11 21:45:18 fetching corpus: 8450, signal 179938/203235 (executing program) 2024/11/11 21:45:19 fetching corpus: 8500, signal 180216/203235 (executing program) 2024/11/11 21:45:19 fetching corpus: 8550, signal 180426/203235 (executing program) 2024/11/11 21:45:19 fetching corpus: 8600, signal 180623/203235 (executing program) 2024/11/11 21:45:20 fetching corpus: 8650, signal 180850/203235 (executing program) 2024/11/11 21:45:20 fetching corpus: 8700, signal 181097/203235 (executing program) 2024/11/11 21:45:20 fetching corpus: 8750, signal 181284/203235 (executing program) 2024/11/11 21:45:20 fetching corpus: 8800, signal 181457/203235 (executing program) 2024/11/11 21:45:20 fetching corpus: 8850, signal 181724/203235 (executing program) 2024/11/11 21:45:21 fetching corpus: 8900, signal 181928/203235 (executing program) 2024/11/11 21:45:21 fetching corpus: 8950, signal 182137/203239 (executing program) 2024/11/11 21:45:21 fetching corpus: 9000, signal 182310/203240 (executing program) 2024/11/11 21:45:21 fetching corpus: 9050, signal 182578/203240 (executing program) 2024/11/11 21:45:22 fetching corpus: 9100, signal 183231/203240 (executing program) 2024/11/11 21:45:22 fetching corpus: 9150, signal 183452/203240 (executing program) 2024/11/11 21:45:22 fetching corpus: 9200, signal 183790/203240 (executing program) 2024/11/11 21:45:22 fetching corpus: 9250, signal 183954/203240 (executing program) 2024/11/11 21:45:22 fetching corpus: 9300, signal 184380/203240 (executing program) 2024/11/11 21:45:22 fetching corpus: 9350, signal 184553/203240 (executing program) 2024/11/11 21:45:22 fetching corpus: 9400, signal 184756/203243 (executing program) 2024/11/11 21:45:22 fetching corpus: 9450, signal 184964/203243 (executing program) 2024/11/11 21:45:23 fetching corpus: 9500, signal 185160/203243 (executing program) 2024/11/11 21:45:23 fetching corpus: 9550, signal 185314/203243 (executing program) 2024/11/11 21:45:23 fetching corpus: 9600, signal 185618/203243 (executing program) 2024/11/11 21:45:24 fetching corpus: 9650, signal 185945/203243 (executing program) 2024/11/11 21:45:24 fetching corpus: 9700, signal 186110/203243 (executing program) 2024/11/11 21:45:24 fetching corpus: 9750, signal 186327/203243 (executing program) 2024/11/11 21:45:25 fetching corpus: 9800, signal 186528/203243 (executing program) 2024/11/11 21:45:25 fetching corpus: 9850, signal 186787/203243 (executing program) 2024/11/11 21:45:26 fetching corpus: 9900, signal 187005/203243 (executing program) 2024/11/11 21:45:26 fetching corpus: 9950, signal 187212/203243 (executing program) 2024/11/11 21:45:26 fetching corpus: 10000, signal 187482/203243 (executing program) 2024/11/11 21:45:26 fetching corpus: 10050, signal 187676/203243 (executing program) 2024/11/11 21:45:27 fetching corpus: 10100, signal 187843/203243 (executing program) 2024/11/11 21:45:27 fetching corpus: 10150, signal 188055/203243 (executing program) 2024/11/11 21:45:27 fetching corpus: 10200, signal 188244/203243 (executing program) 2024/11/11 21:45:27 fetching corpus: 10250, signal 188455/203243 (executing program) 2024/11/11 21:45:27 fetching corpus: 10300, signal 188564/203243 (executing program) 2024/11/11 21:45:27 fetching corpus: 10350, signal 188753/203243 (executing program) 2024/11/11 21:45:28 fetching corpus: 10400, signal 188919/203243 (executing program) 2024/11/11 21:45:28 fetching corpus: 10450, signal 189107/203243 (executing program) 2024/11/11 21:45:28 fetching corpus: 10500, signal 189251/203243 (executing program) 2024/11/11 21:45:28 fetching corpus: 10550, signal 189481/203243 (executing program) 2024/11/11 21:45:28 fetching corpus: 10600, signal 189632/203243 (executing program) 2024/11/11 21:45:28 fetching corpus: 10650, signal 189925/203243 (executing program) 2024/11/11 21:45:29 fetching corpus: 10700, signal 190111/203243 (executing program) 2024/11/11 21:45:29 fetching corpus: 10750, signal 190269/203243 (executing program) 2024/11/11 21:45:29 fetching corpus: 10800, signal 190510/203243 (executing program) 2024/11/11 21:45:29 fetching corpus: 10850, signal 190658/203243 (executing program) 2024/11/11 21:45:30 fetching corpus: 10900, signal 190824/203243 (executing program) 2024/11/11 21:45:30 fetching corpus: 10930, signal 190964/203243 (executing program) 2024/11/11 21:45:30 fetching corpus: 10930, signal 190964/203243 (executing program) 2024/11/11 21:45:33 starting 8 fuzzer processes 21:45:33 executing program 0: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) write(r0, &(0x7f0000000080)="4816085a8e090a9837cfc149ae85381f8aa025e5a2aeb0d7641d470f61f48d0042813b4bfb1ac212b319ff5db2c81d9d939ed6305c539cec8c95a7d8984304aae0c675a2c1e80814e3de5453135ffae21b7c3d468b52ecdf5fa6d3d91ab15284b0ae67de12e4003c190bc0f67152bba81d6be05927e80c9c4560fddf8561eabbe36663b7ec6ce7f104780176986c4d2c4bad765cde601df7c7780bc39d5e0b7dc5491852741ede63b80d3fc7fe05df", 0xaf) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0xdb) r1 = syz_open_pts(0xffffffffffffffff, 0x242100) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000017c0)={'gre0\x00', &(0x7f0000001700)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x5, {{0x1d, 0x4, 0x1, 0x11, 0x74, 0x65, 0x0, 0x7, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}, {[@cipso={0x86, 0x22, 0x0, [{0x5, 0xa, "fb925c73aa01a3b9"}, {0x1, 0x6, "fca4d987"}, {0x0, 0xc, "1c3dc342db7486ddbbd7"}]}, @cipso={0x86, 0x3e, 0x0, [{0x1, 0x8, "0b5c97322524"}, {0x0, 0x5, "308021"}, {0x0, 0xe, "b8d41ab4651d3d4240182a44"}, {0x7, 0xc, "867480472e55388e356f"}, {0x5, 0xd, "badb8b2bc2246f09f4ff87"}, {0x6, 0x4, "8979"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001880)={'syztnl1\x00', &(0x7f0000001800)={'ip6gre0\x00', r3, 0x2f, 0x80, 0x0, 0x0, 0x20, @private2, @remote, 0x1, 0x0, 0x5, 0x91a}}) getpeername(0xffffffffffffffff, &(0x7f0000001980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000001a00)=0x80) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0}, &(0x7f0000001a80)=0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001b00)={{{@in=@remote, @in=@multicast2, 0x4e23, 0x7, 0x4e24, 0x0, 0x2, 0x0, 0xa0, 0x84, r3, r5}, {0x8, 0x50, 0x10001, 0xd, 0x100000001, 0x8001, 0x2}, {0x1, 0x8, 0x40, 0x9}, 0x6, 0x0, 0x1, 0x1, 0x4, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0xff}, 0x2, @in=@remote, 0x34ff, 0x4, 0x3, 0x9, 0x3f, 0x9, 0x10000}}, 0xe8) r7 = fcntl$dupfd(r2, 0x406, r6) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c40), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x24, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4011) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000001d80), &(0x7f0000001dc0)={'U+', 0xed9}, 0x16, 0x0) 21:45:33 executing program 1: mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=xen,', {[{@privport}, {@cache_fscache}, {@fscache}], [{@subj_role={'subj_role', 0x3d, ',+):}'}}, {@euid_lt}, {@obj_role={'obj_role', 0x3d, '.^'}}, {@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x204000, 0x2) chmod(&(0x7f0000000240)='./file0\x00', 0x40) move_mount(r1, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x3) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) utimes(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={{r2, r3/1000+60000}, {r4, r5/1000+10000}}) futex(&(0x7f0000000400)=0x1, 0x2, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x1, 0x1) clock_gettime(0x1, &(0x7f00000004c0)) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000500)=[{0x0, 0x3f, 0x1000}, {0x2, 0x8001, 0x2000}, {0x0, 0x18, 0x1800}, {0xb3666901cfcaf252, 0x5, 0x800}, {0x3, 0x40}, {0x2, 0x0, 0x1000}], 0x6, &(0x7f0000000580)={r6, r7+10000000}) semtimedop(0xffffffffffffffff, &(0x7f00000005c0)=[{0x3, 0x8b1e, 0x1000}], 0x1, &(0x7f0000000600)) clock_gettime(0x7, &(0x7f0000000640)) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000680)=[{0x0, 0x0, 0x1000}, {0x3, 0x7f}, {0x2, 0x80}, {0x4, 0x6, 0x1000}], 0x4, &(0x7f0000000700)={r8, r9+60000000}) futex(&(0x7f0000000740)=0x1, 0x8, 0x0, &(0x7f0000000780)={0x0, 0x3938700}, &(0x7f00000007c0)=0x2, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880)={0x0, 0xfb, 0x15, 0x5, 0xcd, "8c1cbc8c4c882d5761cb8f247669c22c"}, 0x15, 0x3) semctl$GETZCNT(0x0, 0x4, 0xf, &(0x7f00000008c0)=""/175) 21:45:33 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x313502, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xd) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x804) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = dup2(r2, r0) r4 = openat$cgroup_int(r1, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000280)={0xfffffffffffff5ae, 0x28, [0x1, 0x80, 0x100, 0x6032], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xb90}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x47, 0x0, "6c2d85025a1f6458df00eecac9ec58cf37d78a915cb0267816f88475d4178e4bd37a895acac894e06d13bf6e349cded9ce22cf86980cdfab4d346f6ae22287864d7715"}]}, @NL80211_ATTR_IE={0x33, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x3, @device_a, 0x3f, @device_a, 0xc9400000, 0x3, @broadcast, 0xfc55}}]}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="0e47c3445c7609"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4a000}, 0x85) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000480)) dup2(r1, r2) finit_module(0xffffffffffffffff, &(0x7f00000004c0)='\x02\x02\x02\x02\x02\x02', 0x4) r5 = syz_open_dev$vcsn(&(0x7f0000001f40), 0x4, 0x103300) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000001f80)) ioctl$KDADDIO(r1, 0x4b34, 0x1) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000001fc0)) write$P9_RSETATTR(r1, &(0x7f0000002000)={0x7, 0x1b, 0x1}, 0x7) openat$cgroup_int(r1, &(0x7f0000002040)='io.bfq.weight\x00', 0x2, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) 21:45:33 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000000)=0x80, 0xffffffffffffffff, &(0x7f0000000040)=0x80000000, 0x40, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000008c0)={0x234, 0x0, 0x110, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x25, 0x6, 0xc3b}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4040040}, 0x800) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x74}, 0x1, 0x0, 0x0, 0x48040}, 0x80) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10a}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x44003}, 0x1) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xa0, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}}, 0x20008080) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xd0, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x80}, @ETHTOOL_A_LINKINFO_HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x58, r6, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001440)={'xfrm0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001480)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001540)={'gre0\x00', &(0x7f00000014c0)={'syztnl0\x00', r3, 0x1, 0x7, 0x800, 0x2, {{0x17, 0x4, 0x3, 0x28, 0x5c, 0x64, 0x0, 0x72, 0x4, 0x0, @loopback, @loopback, {[@end, @ssrr={0x89, 0xb, 0x40, [@local, @rand_addr=0x64010101]}, @rr={0x7, 0xb, 0x2e, [@local, @dev={0xac, 0x14, 0x14, 0x40}]}, @end, @timestamp_addr={0x44, 0x1c, 0xdf, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@broadcast, 0x1}, {@rand_addr=0x64010102, 0xfff}]}, @ssrr={0x89, 0x13, 0x77, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000001580)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x74, r8}) [ 136.122368] audit: type=1400 audit(1731361533.569:7): avc: denied { execmem } for pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:45:33 executing program 4: faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1180) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x504001, 0x62) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x1192, 0x100, 0x2, 0x6, 0x1, [0x1ff, 0x80000001, 0x8ff, 0xa18]}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040000) umount2(&(0x7f0000000240)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0', [{0x20, '/dev/zero\x00'}, {0x20, '\x85)}%(@/$+!.'}, {0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}, {}, {0x20, '}:\\@^'}, {0x20, '*['}], 0xa, "aa33444e62dd83bce292ce92db2d65f201dcf61344f284f6ddb9c29669efb13103577e21a69fc24f4f780a7e7abcfc2557706700746b12f401c2e6a2ff605059c65cf4ff54d69bd909bcc9eddc5ad2db8b9b5ac854db20b4d3fe05f734934fde574a6d29185261f6d324cf2d6e5cd9e4d151d7b779e79b070b4d1a6a1b686184352439d73714abeda9fe57d309de3b5f9c"}, 0xd3) recvmmsg$unix(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/205, 0xcd}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/3, 0x3}, {&(0x7f0000000580)=""/37, 0x25}, {&(0x7f00000005c0)=""/241, 0xf1}], 0x5, &(0x7f0000000740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/110, 0x6e}, {&(0x7f0000000980)=""/19, 0x13}, {&(0x7f00000009c0)=""/184, 0xb8}], 0x4, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x80}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000bc0)=""/177, 0xb1}, {&(0x7f0000000c80)=""/25, 0x19}, {&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000000d80)=""/118, 0x76}, {&(0x7f0000000e00)=""/18, 0x12}, {&(0x7f0000000e40)=""/232, 0xe8}], 0x6, &(0x7f0000000fc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001100)=""/60, 0x3c}, {&(0x7f0000001140)=""/112, 0x70}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/52, 0x34}, {&(0x7f0000001240)=""/156, 0x9c}, {&(0x7f0000001300)=""/158, 0x9e}, {&(0x7f00000013c0)=""/49, 0x31}], 0x7, &(0x7f0000001480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001540), 0x6e, &(0x7f0000001b80)=[{&(0x7f00000015c0)=""/224, 0xe0}, {&(0x7f00000016c0)=""/69, 0x45}, {&(0x7f0000001740)=""/163, 0xa3}, {&(0x7f0000001800)}, {&(0x7f0000001840)=""/176, 0xb0}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000001980)=""/188, 0xbc}, {&(0x7f0000001a40)=""/23, 0x17}, {&(0x7f0000001a80)=""/132, 0x84}, {&(0x7f0000001b40)=""/7, 0x7}], 0xa, &(0x7f0000001c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001d00), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/184, 0xb8}, {&(0x7f0000001e40)=""/165, 0xa5}], 0x2, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x98}}], 0x6, 0x60, 0x0) fcntl$setflags(r4, 0x2, 0x0) r11 = openat$cgroup_procs(r5, &(0x7f0000002180)='cgroup.threads\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r11, 0xd000941e, &(0x7f00000021c0)={0x0, "4a2126bbc331575a686781c44ed89761"}) r12 = fcntl$dupfd(r7, 0x406, r3) r13 = openat2(r9, &(0x7f0000003200)='./file0/file0\x00', &(0x7f0000003240)={0x40002, 0xc0, 0xa}, 0x18) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000003340)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x60, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7b}, @void, @val={0xc, 0x99, {0x4, 0x9}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x62}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc1e, 0x45}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) r14 = openat$cgroup_ro(r8, &(0x7f0000003380)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r14, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x118000}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2530d589865191da}, 0x40040005) syz_mount_image$ext4(&(0x7f00000034c0)='ext4\x00', &(0x7f0000003500)='./file0/file0\x00', 0x7, 0x3, &(0x7f0000003740)=[{&(0x7f0000003540)="0ba19c459e0ec360cdfe80f235179995a65df92c4c1c4ef92cea355c8e537f64f0c4ff7636d1a4d88d18767044c4166815beabad136b98ceb7c8c843f26c5f1c7c933ee5e32d73600c2dc7f45e2cd48234974756b38f874fda7149139783a6fa50edcfeb7eedaf18349650fc0305780f134368049c2b2c14341511a3b9ffb4a7e305eaf9", 0x84, 0x9}, {&(0x7f0000003600)="87bb34d58e5a490b1fc8d2184b7ab7d4cbc3a92925a96e7d3d3c6c84e9608a7624595089b7cd81175d", 0x29, 0x1}, {&(0x7f0000003640)="4bbf9b8a703a5779cd5f1459ae672242cf8c3ef492dc9f721bff41e905a37b3b3151afa1f5287490fbf1d6fd579d32ca0acd533ac24739033aada010d01247a9beb3f243f9676d0d372f00b7058523476c319cb943f653829076002fa6b0aa6e82d476c074244663a0dc3e74dd7f4967d5f5470e27f01a5d43bdc0a1308d3444de7b6da4497317e4b40d9ecdfeffa1ca519185c7a2249998c9619c15f606509f001b7a0d7f8e506ce503597b7575e8e911e573bd5cde0783596a1671bbc2f128d7387b43a5fcc1ef34fa9f465ce23f9dc6c93305e5e5b10dbfad5e2c6035d03630d739d98b60bf837a8ed86331702813cf74c76c72d2f3dc21f2", 0xfa, 0x40}], 0x90004, &(0x7f00000037c0)={[{@errors_remount}], [{@subj_role={'subj_role', 0x3d, '/dev/bsg\x00'}}, {@appraise}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_user={'obj_user', 0x3d, '!+%'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}) 21:45:33 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003640)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/250, 0xfa}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000200)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f00000004c0)=""/67, 0x43}], 0x3, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000640)=""/223, 0xdf}, {&(0x7f0000000740)=""/242, 0xf2}, {&(0x7f0000000840)=""/151, 0x97}], 0x3}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f00000009c0)=""/203, 0xcb}, {&(0x7f0000000ac0)=""/205, 0xcd}, {&(0x7f0000000bc0)=""/80, 0x50}, {&(0x7f0000000c40)=""/108, 0x6c}, {&(0x7f0000000cc0)=""/146, 0x92}, {&(0x7f0000000d80)=""/144, 0x90}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/224, 0xe0}], 0x8, &(0x7f0000001fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002000)=@abs, 0x6e, &(0x7f0000003480)=[{&(0x7f0000002080)=""/105, 0x69}, {&(0x7f0000002100)=""/240, 0xf0}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/103, 0x67}, {&(0x7f0000003280)=""/170, 0xaa}, {&(0x7f0000003340)}, {&(0x7f0000003380)=""/247, 0xf7}], 0x7, &(0x7f0000003500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x5, 0x0, 0x0) sched_setattr(r4, &(0x7f0000003780)={0x38, 0x5, 0x0, 0x3, 0xd50a, 0x10000, 0x6, 0x4b70, 0x20, 0xc94}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000037c0)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000003800)={0x38, 0x2, 0x10000022, 0xffffffff, 0x3, 0x2, 0x2, 0x2, 0x0, 0x6}, 0x0) sched_setattr(r5, &(0x7f0000003840)={0x38, 0x3, 0x8, 0x9, 0x8, 0x5, 0x80000000, 0x1ff, 0x8, 0xfffffff7}, 0x0) sched_setattr(r3, &(0x7f0000003880)={0x38, 0x5, 0x10000001, 0x2, 0xfffffff8, 0x3, 0x30000000000000, 0x6, 0x3, 0x1}, 0x0) recvmmsg$unix(r2, &(0x7f0000008680)=[{{&(0x7f00000038c0)=@abs, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000003940)=""/148, 0x94}, {&(0x7f0000003a00)=""/14, 0xe}], 0x2, &(0x7f0000003a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000003ac0)=""/165, 0xa5}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/218, 0xda}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/58, 0x3a}, {&(0x7f0000004d00)=""/156, 0x9c}, {&(0x7f0000004dc0)=""/109, 0x6d}, {&(0x7f0000004e40)=""/35, 0x23}, {&(0x7f0000004e80)=""/201, 0xc9}], 0x9, &(0x7f0000005040)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000005100)=@abs, 0x6e, &(0x7f0000005580)=[{&(0x7f0000005180)=""/135, 0x87}, {&(0x7f0000005240)=""/213, 0xd5}, {&(0x7f0000005340)=""/250, 0xfa}, {&(0x7f0000005440)=""/189, 0xbd}, {&(0x7f0000005500)=""/55, 0x37}, {&(0x7f0000005540)=""/1, 0x1}], 0x6, &(0x7f0000005600)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000005740), 0x6e, &(0x7f0000006a80)=[{&(0x7f00000057c0)=""/4096, 0x1000}, {&(0x7f00000067c0)=""/181, 0xb5}, {&(0x7f0000006880)=""/132, 0x84}, {&(0x7f0000006940)=""/118, 0x76}, {&(0x7f00000069c0)=""/145, 0x91}], 0x5, &(0x7f0000006b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x58}}, {{&(0x7f0000006b80), 0x6e, &(0x7f00000081c0)=[{&(0x7f0000006c00)=""/4096, 0x1000}, {&(0x7f0000007c00)=""/199, 0xc7}, {&(0x7f0000007d00)=""/226, 0xe2}, {&(0x7f0000007e00)=""/167, 0xa7}, {&(0x7f0000007ec0)=""/229, 0xe5}, {&(0x7f0000007fc0)=""/248, 0xf8}, {&(0x7f00000080c0)=""/232, 0xe8}], 0x7}}, {{&(0x7f0000008240)=@abs, 0x6e, &(0x7f0000008500)=[{&(0x7f00000082c0)=""/253, 0xfd}, {&(0x7f00000083c0)=""/95, 0x5f}, {&(0x7f0000008440)=""/164, 0xa4}], 0x3, &(0x7f0000008540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @cred={{0x1c}}], 0x108}}], 0x6, 0x0, &(0x7f0000008800)) sched_setattr(r7, &(0x7f0000008840)={0x38, 0x5, 0x28, 0x3, 0xfff, 0x6, 0x8, 0xd5d7, 0x7, 0x6}, 0x0) sched_setattr(r9, &(0x7f0000008880)={0x38, 0x3, 0x3, 0xfffff800, 0x7dfc, 0x9, 0x5, 0x3f, 0x7, 0x5}, 0x0) sched_setattr(r4, &(0x7f00000088c0)={0x38, 0x2, 0x10, 0x8, 0x1, 0x40, 0x100000001, 0xfffffffffffffffd, 0x0, 0x9}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000008900)=0x0) sched_setattr(r10, &(0x7f0000008940)={0x38, 0x228e0bd4802030aa, 0x10000008, 0x6, 0x0, 0xefd, 0x3, 0x2, 0x400, 0x7fff}, 0x0) sched_setattr(r9, &(0x7f0000008980)={0x38, 0xb5e3af2515ea79be, 0x10000026, 0x0, 0x7b4, 0x8001, 0x9, 0x3, 0x1f, 0xffffff80}, 0x0) r11 = fork() sched_setattr(r11, &(0x7f00000089c0)={0x38, 0x1, 0x21, 0x3f07, 0x8, 0x4, 0x3, 0xff, 0x3f, 0x9}, 0x0) sched_setattr(r10, &(0x7f0000008a00)={0x38, 0x6, 0x20000068, 0x20, 0x9, 0xfffffffffffffffa, 0x5, 0x137, 0x2791, 0x3}, 0x0) sched_setattr(r8, &(0x7f0000008a40)={0x38, 0x6, 0x60, 0xffff8b15, 0x200, 0x2, 0x2, 0xab26, 0x0, 0x9}, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000008a80)=0x0) sched_setattr(r12, &(0x7f0000008ac0)={0x38, 0x3, 0x10000000, 0x2, 0x4cda, 0x2, 0x2, 0x6, 0x5, 0x3f}, 0x0) sched_setattr(0x0, &(0x7f0000008dc0)={0x38, 0x1, 0x2, 0x1, 0x4, 0x8, 0xb892, 0x5, 0xfff, 0x5}, 0x0) 21:45:33 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x440002) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x4]}, 0x8, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_any}], [{@fowner_lt={'fowner<', r2}}]}}) bind(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x2, 0x2, 0x1}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x1}, {0x16, 0x1}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x81}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) lseek(r1, 0x6, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0x2c}}, 0x40000) r4 = dup3(r3, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000006c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000700)={"d9b437c9599fe907d8ba13677bcbb411", r6, r6, {0x7cf63537, 0x1}, {0x9, 0xe87}, 0xc13, [0xaa, 0x4, 0xfffffffffffffffa, 0x7, 0x100000001, 0x9, 0x4bd, 0x25, 0x100000001, 0x3ff, 0x5d, 0x9, 0x0, 0x7, 0x8000, 0x9]}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x22000, 0x0) finit_module(r7, &(0x7f0000000840)='/dev/vcsu#\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000900)={0x0, 0x0}) r9 = fsmount(r7, 0x1, 0x0) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x9, 0x3, 0x2, 0x2, 0x0, 0x4, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0xfffffffffffeffff, 0x2}, 0x8504, 0x0, 0x400, 0x3, 0x7, 0x1, 0x1, 0x0, 0x85}, r8, 0x3, r9, 0x0) 21:45:33 executing program 7: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "93639a7fabfb62504ba8fe62f13e6d9324de05a8d2bc7f394e7c88c88e471215bc9eb2c4aa9a794b64041ac8bd3a26825b40c860033f16b85189061bd95142b5", 0x3d}, 0x48, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r2, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000280)='rxrpc\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000380)=@keyring={'key_or_keyring:', r3}) r5 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="d55cf81ea1d895aceb27b90d90c961b037c109c8ff040cf78bdeb22808ba6baed14e3fc85412f3be4015232957b45f800301d8fcde58c8130f9f59dc9b518b81f7b6404df98d3a8199e5185c6b2ad78e1dbfa3ab2c", 0x55, r5) r7 = add_key(&(0x7f0000000540)='pkcs7_test\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="f089c823d02fc532a65ea5498944bc2b7dec3f840fd21afdc04f7e53f8", 0x1d, 0x0) keyctl$KEYCTL_MOVE(0x1e, r7, r4, r1, 0x0) r8 = add_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)="e4ddb2dfebcfb789b3b83241aad84e4196198709410d5ad5a6dc8bd0f30387a3c7afda39f4fd47e2afe4fa36c1d6ba4a03d007f65f8096e47e5d651472570beca0d2ccb1aff6b9db63e5e01cc6d238b88f8e048adb7bd710c65877ed75471ee2658889c4b1a409e82e44d82360caeb1376fbb375139284bb087eb6b9f1483eb7032ecb19e1f9d3bfc2cca0c906356231a11923bc7101772866325241dc2d7cebe7efa7b2b5", 0xa5, r4) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r8) r9 = request_key(&(0x7f00000007c0)='user\x00', &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)='\'\x00', 0xfffffffffffffffc) keyctl$revoke(0x3, r9) keyctl$KEYCTL_MOVE(0x1e, r6, r4, r9, 0x1) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r7, 0x0) r10 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r10, 0x0, 0x1) [ 137.490560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.492843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.495232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.496676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.498646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.501036] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.502220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.504053] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.504779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.521167] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.523015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.523746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.526227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 137.527231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.528396] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.529336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.533849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.534740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.624764] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.626471] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.631598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.633523] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.645584] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.646485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.646698] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.647630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.655471] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.655569] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.657769] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.660338] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 137.679955] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 137.681082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.682208] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 137.684851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.689272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.690554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.692673] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.698124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.701158] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 137.702638] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 137.703621] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.705216] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.705295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.709326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.717508] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 137.720484] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 137.730351] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 137.746324] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 139.581451] Bluetooth: hci1: command tx timeout [ 139.638029] Bluetooth: hci0: command tx timeout [ 139.638700] Bluetooth: hci2: command tx timeout [ 139.766048] Bluetooth: hci5: command tx timeout [ 139.767288] Bluetooth: hci4: command tx timeout [ 139.831003] Bluetooth: hci6: command tx timeout [ 139.832151] Bluetooth: hci3: command tx timeout [ 139.832776] Bluetooth: hci7: command tx timeout [ 141.623150] Bluetooth: hci1: command tx timeout [ 141.687298] Bluetooth: hci2: command tx timeout [ 141.687818] Bluetooth: hci0: command tx timeout [ 141.815948] Bluetooth: hci5: command tx timeout [ 141.816491] Bluetooth: hci4: command tx timeout [ 141.878285] Bluetooth: hci3: command tx timeout [ 141.881089] Bluetooth: hci6: command tx timeout [ 141.881582] Bluetooth: hci7: command tx timeout [ 143.671106] Bluetooth: hci1: command tx timeout [ 143.733992] Bluetooth: hci0: command tx timeout [ 143.734475] Bluetooth: hci2: command tx timeout [ 143.862090] Bluetooth: hci4: command tx timeout [ 143.862631] Bluetooth: hci5: command tx timeout [ 143.927075] Bluetooth: hci7: command tx timeout [ 143.927598] Bluetooth: hci6: command tx timeout [ 143.928888] Bluetooth: hci3: command tx timeout [ 145.719075] Bluetooth: hci1: command tx timeout [ 145.783064] Bluetooth: hci2: command tx timeout [ 145.783542] Bluetooth: hci0: command tx timeout [ 145.910057] Bluetooth: hci5: command tx timeout [ 145.910549] Bluetooth: hci4: command tx timeout [ 145.975007] Bluetooth: hci6: command tx timeout [ 145.975489] Bluetooth: hci7: command tx timeout [ 145.976344] Bluetooth: hci3: command tx timeout [ 200.431852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.435786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.437864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.439417] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.452080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.453482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.466117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.467238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.469540] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.471315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.479509] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.479558] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.480827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.482437] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 200.488178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.489704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.490135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.496708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.497951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.499746] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 200.503751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.506165] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.525718] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 200.527146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 200.528492] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 200.532084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 200.535086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.537309] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 200.538372] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.539372] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 200.539439] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.540633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 200.541607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.548826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.552332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.553279] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.554389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.554577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.562841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.564762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 200.564802] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 200.566654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.567690] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.568235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.572614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.583521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.585389] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 200.586494] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.550126] Bluetooth: hci2: command tx timeout [ 202.613988] Bluetooth: hci7: command tx timeout [ 202.680021] Bluetooth: hci1: command tx timeout [ 202.682142] Bluetooth: hci5: command tx timeout [ 202.683478] Bluetooth: hci3: command tx timeout [ 202.684183] Bluetooth: hci6: command tx timeout [ 202.684275] Bluetooth: hci4: command tx timeout [ 202.684772] Bluetooth: hci0: command tx timeout [ 204.599066] Bluetooth: hci2: command tx timeout [ 204.664599] Bluetooth: hci7: command tx timeout [ 204.726192] Bluetooth: hci4: command tx timeout [ 204.726745] Bluetooth: hci3: command tx timeout [ 204.727417] Bluetooth: hci6: command tx timeout [ 204.728673] Bluetooth: hci0: command tx timeout [ 204.729374] Bluetooth: hci5: command tx timeout [ 204.729455] Bluetooth: hci1: command tx timeout [ 206.646284] Bluetooth: hci2: command tx timeout [ 206.710058] Bluetooth: hci7: command tx timeout [ 206.774326] Bluetooth: hci1: command tx timeout [ 206.775049] Bluetooth: hci0: command tx timeout [ 206.775176] Bluetooth: hci3: command tx timeout [ 206.775568] Bluetooth: hci5: command tx timeout [ 206.776574] Bluetooth: hci6: command tx timeout [ 206.776623] Bluetooth: hci4: command tx timeout [ 208.693997] Bluetooth: hci2: command tx timeout [ 208.758024] Bluetooth: hci7: command tx timeout [ 208.822169] Bluetooth: hci1: command tx timeout [ 208.823817] Bluetooth: hci5: command tx timeout [ 208.823847] Bluetooth: hci4: command tx timeout [ 208.825089] Bluetooth: hci6: command tx timeout [ 208.825563] Bluetooth: hci3: command tx timeout [ 208.826686] Bluetooth: hci0: command tx timeout [ 262.860442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.864381] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.866489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.871068] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.873781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 262.876315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.233653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.247101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.248727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.251702] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.253052] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.255465] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.256645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.271818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.274750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.290239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.292603] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 263.298019] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.322507] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.337301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.338222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.343294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.347001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.349249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.370318] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.371489] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.376274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.378663] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.389117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.390257] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.399249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.400560] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.402189] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.403618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.405390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.409093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 263.409113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 263.411008] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.412179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.413778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.414743] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.416382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.427163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.444361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.445838] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 263.446927] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.470137] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 263.472216] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.949974] Bluetooth: hci0: command tx timeout [ 265.334075] Bluetooth: hci2: command tx timeout [ 265.335138] Bluetooth: hci1: command tx timeout [ 265.462117] Bluetooth: hci3: command tx timeout [ 265.463434] Bluetooth: hci4: command tx timeout [ 265.463716] Bluetooth: hci5: command tx timeout [ 265.526095] Bluetooth: hci6: command tx timeout [ 265.526716] Bluetooth: hci7: command tx timeout [ 266.997958] Bluetooth: hci0: command tx timeout [ 267.383914] Bluetooth: hci1: command tx timeout [ 267.384442] Bluetooth: hci2: command tx timeout [ 267.510065] Bluetooth: hci5: command tx timeout [ 267.510552] Bluetooth: hci4: command tx timeout [ 267.511418] Bluetooth: hci3: command tx timeout [ 267.575985] Bluetooth: hci7: command tx timeout [ 267.576219] Bluetooth: hci6: command tx timeout [ 269.046074] Bluetooth: hci0: command tx timeout [ 269.431923] Bluetooth: hci2: command tx timeout [ 269.432076] Bluetooth: hci1: command tx timeout [ 269.559027] Bluetooth: hci3: command tx timeout [ 269.559587] Bluetooth: hci4: command tx timeout [ 269.560188] Bluetooth: hci5: command tx timeout [ 269.621971] Bluetooth: hci7: command tx timeout [ 269.624929] Bluetooth: hci6: command tx timeout [ 271.097927] Bluetooth: hci0: command tx timeout [ 271.478105] Bluetooth: hci2: command tx timeout [ 271.478656] Bluetooth: hci1: command tx timeout [ 271.606172] Bluetooth: hci4: command tx timeout [ 271.607729] Bluetooth: hci5: command tx timeout [ 271.609059] Bluetooth: hci3: command tx timeout [ 271.670196] Bluetooth: hci6: command tx timeout [ 271.671779] Bluetooth: hci7: command tx timeout [ 325.524242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.528158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.530221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.533590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.543274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 325.559697] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.820295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.825151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.828394] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.830543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.836415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.837676] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.840302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.841181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.842797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 325.844040] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.848078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 325.851241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.895963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.899705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.907250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.909144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.911447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.915808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.918837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 325.920279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.924699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.934787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.936686] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 325.937735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.967649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 325.971522] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.973031] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.976720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 325.985557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.986997] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 325.988207] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 326.013201] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 326.014728] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.016745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.018016] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.020551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.022136] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 326.023164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.028249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 326.060055] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 326.078565] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 326.097336] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 327.605947] Bluetooth: hci0: command tx timeout [ 327.861988] Bluetooth: hci2: command tx timeout [ 327.926918] Bluetooth: hci1: command tx timeout [ 327.990135] Bluetooth: hci4: command tx timeout [ 328.055063] Bluetooth: hci3: command tx timeout [ 328.056811] Bluetooth: hci5: command tx timeout [ 328.057546] Bluetooth: hci6: command tx timeout [ 328.181958] Bluetooth: hci7: command tx timeout [ 329.655304] Bluetooth: hci0: command tx timeout [ 329.909972] Bluetooth: hci2: command tx timeout [ 329.975963] Bluetooth: hci1: command tx timeout [ 330.038984] Bluetooth: hci4: command tx timeout [ 330.102085] Bluetooth: hci6: command tx timeout [ 330.103530] Bluetooth: hci5: command tx timeout [ 330.105524] Bluetooth: hci3: command tx timeout [ 330.229933] Bluetooth: hci7: command tx timeout [ 331.703074] Bluetooth: hci0: command tx timeout [ 331.957982] Bluetooth: hci2: command tx timeout [ 332.021986] Bluetooth: hci1: command tx timeout [ 332.086946] Bluetooth: hci4: command tx timeout [ 332.151133] Bluetooth: hci3: command tx timeout [ 332.151612] Bluetooth: hci6: command tx timeout [ 332.153110] Bluetooth: hci5: command tx timeout [ 332.278005] Bluetooth: hci7: command tx timeout [ 333.780460] Bluetooth: hci0: command tx timeout [ 334.006105] Bluetooth: hci2: command tx timeout [ 334.070940] Bluetooth: hci1: command tx timeout [ 334.135681] Bluetooth: hci4: command tx timeout [ 334.198981] Bluetooth: hci6: command tx timeout [ 334.200030] Bluetooth: hci5: command tx timeout [ 334.200555] Bluetooth: hci3: command tx timeout [ 334.327046] Bluetooth: hci7: command tx timeout [ 388.125325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.127035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.129768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.132576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.134236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 388.135499] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.546219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.550568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.555481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.563285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.578988] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 388.581412] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.694594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.700337] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.701500] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.705271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.711537] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 388.713635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.731416] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.732929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.738232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 388.741517] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 388.743190] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.747901] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.750761] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 388.751927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.752973] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 388.762432] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.766076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.767413] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.768377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.770017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.773059] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.774211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.775904] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.778760] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 388.786130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.793677] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 388.797524] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 388.798414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.806677] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.809965] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 388.811357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.816090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.838491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.851230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.868209] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 388.910359] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.197980] Bluetooth: hci0: command tx timeout [ 390.709954] Bluetooth: hci1: command tx timeout [ 390.773958] Bluetooth: hci5: command tx timeout [ 390.839906] Bluetooth: hci7: command tx timeout [ 390.840753] Bluetooth: hci2: command tx timeout [ 390.901988] Bluetooth: hci3: command tx timeout [ 390.966075] Bluetooth: hci6: command tx timeout [ 391.030017] Bluetooth: hci4: command tx timeout [ 392.246088] Bluetooth: hci0: command tx timeout [ 392.758033] Bluetooth: hci1: command tx timeout [ 392.821973] Bluetooth: hci5: command tx timeout [ 392.885949] Bluetooth: hci2: command tx timeout [ 392.886429] Bluetooth: hci7: command tx timeout [ 392.951610] Bluetooth: hci3: command tx timeout [ 393.014034] Bluetooth: hci6: command tx timeout [ 393.078786] Bluetooth: hci4: command tx timeout [ 394.294066] Bluetooth: hci0: command tx timeout [ 394.805920] Bluetooth: hci1: command tx timeout [ 394.870798] Bluetooth: hci5: command tx timeout [ 394.933922] Bluetooth: hci2: command tx timeout [ 394.934441] Bluetooth: hci7: command tx timeout [ 394.997911] Bluetooth: hci3: command tx timeout [ 395.061897] Bluetooth: hci6: command tx timeout [ 395.125945] Bluetooth: hci4: command tx timeout [ 396.341984] Bluetooth: hci0: command tx timeout [ 396.854121] Bluetooth: hci1: command tx timeout [ 396.917918] Bluetooth: hci5: command tx timeout [ 396.982027] Bluetooth: hci7: command tx timeout [ 396.983186] Bluetooth: hci2: command tx timeout [ 397.046141] Bluetooth: hci3: command tx timeout [ 397.109995] Bluetooth: hci6: command tx timeout [ 397.173998] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 21:50:42 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888015ab7f01 RSI=ffff888015ab7f48 RDI=ffff888015ab71a8 RBP=ffff888015ab71b0 RSP=ffff888015ab70e8 R8 =0000000000000001 R9 =ffff888015ab7198 R10=000000000003c001 R11=00000000000c1507 R12=ffff888015ab71b8 R13=ffff888015ab71a0 R14=ffff888015ab7f48 R15=ffff888015ab7158 RIP=ffffffff81149cee RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8230abc260 CR3=000000003a038000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007fec0e23d000 RCX=ffffffff8179be3c RDX=ffff8880364d0000 RSI=ffffffff8179be4a RDI=0000000000000006 RBP=ffff88800bea6e00 RSP=ffff88802f3bf630 R8 =ffff88802f3bf730 R9 =0000000000000001 R10=00007fec0e23d000 R11=0000000000000001 R12=00007fec0e23d000 R13=00007fec0e241000 R14=ffff88802f3bf730 R15=00007fec0e241000 RIP=ffffffff8179be4d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fec0e23c610 CR3=0000000033a04000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000