Warning: Permanently added '[localhost]:40747' (ECDSA) to the list of known hosts. 2024/11/12 04:45:54 fuzzer started 2024/11/12 04:45:55 dialing manager at localhost:46317 syzkaller login: [ 67.758999] cgroup: Unknown subsys name 'net' [ 67.889546] cgroup: Unknown subsys name 'cpuset' [ 67.904349] cgroup: Unknown subsys name 'rlimit' 2024/11/12 04:46:11 syscalls: 2217 2024/11/12 04:46:11 code coverage: enabled 2024/11/12 04:46:11 comparison tracing: enabled 2024/11/12 04:46:11 extra coverage: enabled 2024/11/12 04:46:11 setuid sandbox: enabled 2024/11/12 04:46:11 namespace sandbox: enabled 2024/11/12 04:46:11 Android sandbox: enabled 2024/11/12 04:46:11 fault injection: enabled 2024/11/12 04:46:11 leak checking: enabled 2024/11/12 04:46:11 net packet injection: enabled 2024/11/12 04:46:11 net device setup: enabled 2024/11/12 04:46:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/12 04:46:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/12 04:46:11 USB emulation: enabled 2024/11/12 04:46:11 hci packet injection: enabled 2024/11/12 04:46:11 wifi device emulation: enabled 2024/11/12 04:46:11 802.15.4 emulation: enabled 2024/11/12 04:46:11 fetching corpus: 50, signal 19581/21389 (executing program) 2024/11/12 04:46:12 fetching corpus: 100, signal 29782/33221 (executing program) [ 84.503620] hrtimer: interrupt took 7293096 ns 2024/11/12 04:46:12 fetching corpus: 150, signal 36793/41742 (executing program) 2024/11/12 04:46:12 fetching corpus: 200, signal 46392/52595 (executing program) 2024/11/12 04:46:12 fetching corpus: 250, signal 52956/60386 (executing program) 2024/11/12 04:46:12 fetching corpus: 300, signal 56866/65553 (executing program) 2024/11/12 04:46:13 fetching corpus: 350, signal 60224/70078 (executing program) 2024/11/12 04:46:13 fetching corpus: 400, signal 62714/73784 (executing program) 2024/11/12 04:46:13 fetching corpus: 450, signal 65657/77860 (executing program) 2024/11/12 04:46:13 fetching corpus: 500, signal 68374/81636 (executing program) 2024/11/12 04:46:14 fetching corpus: 550, signal 70764/85092 (executing program) 2024/11/12 04:46:14 fetching corpus: 600, signal 73923/89193 (executing program) 2024/11/12 04:46:14 fetching corpus: 650, signal 77013/93229 (executing program) 2024/11/12 04:46:15 fetching corpus: 700, signal 79675/96775 (executing program) 2024/11/12 04:46:15 fetching corpus: 750, signal 82473/100437 (executing program) 2024/11/12 04:46:15 fetching corpus: 800, signal 83896/102802 (executing program) 2024/11/12 04:46:16 fetching corpus: 850, signal 86249/105941 (executing program) 2024/11/12 04:46:16 fetching corpus: 900, signal 88603/109028 (executing program) 2024/11/12 04:46:17 fetching corpus: 950, signal 91673/112639 (executing program) 2024/11/12 04:46:17 fetching corpus: 1000, signal 93708/115327 (executing program) 2024/11/12 04:46:17 fetching corpus: 1050, signal 95944/118169 (executing program) 2024/11/12 04:46:18 fetching corpus: 1100, signal 97849/120674 (executing program) 2024/11/12 04:46:18 fetching corpus: 1150, signal 99981/123347 (executing program) 2024/11/12 04:46:18 fetching corpus: 1200, signal 101319/125374 (executing program) 2024/11/12 04:46:19 fetching corpus: 1250, signal 102906/127590 (executing program) 2024/11/12 04:46:19 fetching corpus: 1300, signal 103926/129325 (executing program) 2024/11/12 04:46:19 fetching corpus: 1350, signal 105117/131168 (executing program) 2024/11/12 04:46:19 fetching corpus: 1400, signal 106399/133032 (executing program) 2024/11/12 04:46:20 fetching corpus: 1450, signal 107685/134847 (executing program) 2024/11/12 04:46:20 fetching corpus: 1500, signal 108361/136296 (executing program) 2024/11/12 04:46:20 fetching corpus: 1550, signal 109671/138158 (executing program) 2024/11/12 04:46:20 fetching corpus: 1600, signal 111517/140342 (executing program) 2024/11/12 04:46:21 fetching corpus: 1650, signal 112175/141693 (executing program) 2024/11/12 04:46:21 fetching corpus: 1700, signal 113103/143250 (executing program) 2024/11/12 04:46:21 fetching corpus: 1750, signal 114280/144863 (executing program) 2024/11/12 04:46:21 fetching corpus: 1800, signal 115533/146501 (executing program) 2024/11/12 04:46:21 fetching corpus: 1850, signal 116346/147916 (executing program) 2024/11/12 04:46:21 fetching corpus: 1900, signal 117071/149218 (executing program) 2024/11/12 04:46:21 fetching corpus: 1950, signal 117944/150613 (executing program) 2024/11/12 04:46:21 fetching corpus: 2000, signal 119540/152397 (executing program) 2024/11/12 04:46:22 fetching corpus: 2050, signal 120484/153791 (executing program) 2024/11/12 04:46:22 fetching corpus: 2100, signal 121326/155109 (executing program) 2024/11/12 04:46:22 fetching corpus: 2150, signal 121983/156302 (executing program) 2024/11/12 04:46:23 fetching corpus: 2200, signal 122508/157414 (executing program) 2024/11/12 04:46:23 fetching corpus: 2250, signal 123181/158551 (executing program) 2024/11/12 04:46:23 fetching corpus: 2300, signal 123863/159741 (executing program) 2024/11/12 04:46:23 fetching corpus: 2350, signal 124549/160874 (executing program) 2024/11/12 04:46:24 fetching corpus: 2400, signal 125305/162063 (executing program) 2024/11/12 04:46:24 fetching corpus: 2450, signal 126006/163186 (executing program) 2024/11/12 04:46:24 fetching corpus: 2500, signal 126682/164316 (executing program) 2024/11/12 04:46:25 fetching corpus: 2550, signal 127287/165351 (executing program) 2024/11/12 04:46:25 fetching corpus: 2600, signal 128143/166524 (executing program) 2024/11/12 04:46:25 fetching corpus: 2650, signal 129145/167731 (executing program) 2024/11/12 04:46:26 fetching corpus: 2700, signal 129763/168716 (executing program) 2024/11/12 04:46:26 fetching corpus: 2750, signal 130577/169812 (executing program) 2024/11/12 04:46:26 fetching corpus: 2800, signal 131559/170918 (executing program) 2024/11/12 04:46:26 fetching corpus: 2850, signal 132268/171901 (executing program) 2024/11/12 04:46:26 fetching corpus: 2900, signal 133041/172954 (executing program) 2024/11/12 04:46:27 fetching corpus: 2950, signal 133532/173836 (executing program) 2024/11/12 04:46:27 fetching corpus: 3000, signal 134191/174776 (executing program) 2024/11/12 04:46:27 fetching corpus: 3050, signal 134766/175728 (executing program) 2024/11/12 04:46:27 fetching corpus: 3100, signal 135842/176828 (executing program) 2024/11/12 04:46:27 fetching corpus: 3150, signal 136455/177703 (executing program) 2024/11/12 04:46:27 fetching corpus: 3200, signal 137177/178651 (executing program) 2024/11/12 04:46:28 fetching corpus: 3250, signal 137759/179470 (executing program) 2024/11/12 04:46:28 fetching corpus: 3300, signal 138605/180460 (executing program) 2024/11/12 04:46:28 fetching corpus: 3350, signal 139073/181238 (executing program) 2024/11/12 04:46:28 fetching corpus: 3400, signal 139605/182051 (executing program) 2024/11/12 04:46:28 fetching corpus: 3450, signal 140359/182944 (executing program) 2024/11/12 04:46:29 fetching corpus: 3500, signal 140953/183743 (executing program) 2024/11/12 04:46:29 fetching corpus: 3550, signal 141791/184603 (executing program) 2024/11/12 04:46:29 fetching corpus: 3600, signal 142156/185313 (executing program) 2024/11/12 04:46:29 fetching corpus: 3650, signal 142974/186127 (executing program) 2024/11/12 04:46:29 fetching corpus: 3700, signal 143758/186979 (executing program) 2024/11/12 04:46:29 fetching corpus: 3750, signal 144354/187707 (executing program) 2024/11/12 04:46:29 fetching corpus: 3800, signal 144900/188455 (executing program) 2024/11/12 04:46:29 fetching corpus: 3850, signal 145339/189132 (executing program) 2024/11/12 04:46:30 fetching corpus: 3900, signal 145897/189852 (executing program) 2024/11/12 04:46:30 fetching corpus: 3950, signal 146386/190508 (executing program) 2024/11/12 04:46:30 fetching corpus: 4000, signal 146799/191160 (executing program) 2024/11/12 04:46:30 fetching corpus: 4050, signal 147162/191813 (executing program) 2024/11/12 04:46:30 fetching corpus: 4100, signal 147771/192496 (executing program) 2024/11/12 04:46:31 fetching corpus: 4150, signal 148113/193104 (executing program) 2024/11/12 04:46:31 fetching corpus: 4200, signal 148654/193735 (executing program) 2024/11/12 04:46:31 fetching corpus: 4250, signal 150114/194507 (executing program) 2024/11/12 04:46:32 fetching corpus: 4300, signal 150509/195116 (executing program) 2024/11/12 04:46:32 fetching corpus: 4350, signal 150787/195668 (executing program) 2024/11/12 04:46:32 fetching corpus: 4400, signal 151179/196258 (executing program) 2024/11/12 04:46:32 fetching corpus: 4450, signal 151585/196798 (executing program) 2024/11/12 04:46:32 fetching corpus: 4500, signal 151973/197346 (executing program) 2024/11/12 04:46:33 fetching corpus: 4550, signal 152684/197934 (executing program) 2024/11/12 04:46:33 fetching corpus: 4600, signal 153108/198467 (executing program) 2024/11/12 04:46:33 fetching corpus: 4650, signal 153664/199012 (executing program) 2024/11/12 04:46:33 fetching corpus: 4700, signal 154104/199522 (executing program) 2024/11/12 04:46:33 fetching corpus: 4750, signal 154570/200039 (executing program) 2024/11/12 04:46:33 fetching corpus: 4800, signal 154911/200513 (executing program) 2024/11/12 04:46:33 fetching corpus: 4850, signal 155475/201011 (executing program) 2024/11/12 04:46:34 fetching corpus: 4900, signal 155920/201504 (executing program) 2024/11/12 04:46:34 fetching corpus: 4950, signal 156495/201962 (executing program) 2024/11/12 04:46:34 fetching corpus: 5000, signal 156891/202498 (executing program) 2024/11/12 04:46:35 fetching corpus: 5050, signal 157182/202961 (executing program) 2024/11/12 04:46:35 fetching corpus: 5100, signal 157542/203223 (executing program) 2024/11/12 04:46:35 fetching corpus: 5150, signal 157961/203223 (executing program) 2024/11/12 04:46:35 fetching corpus: 5200, signal 158290/203223 (executing program) 2024/11/12 04:46:35 fetching corpus: 5250, signal 158549/203223 (executing program) 2024/11/12 04:46:36 fetching corpus: 5300, signal 159098/203223 (executing program) 2024/11/12 04:46:36 fetching corpus: 5350, signal 159450/203223 (executing program) 2024/11/12 04:46:36 fetching corpus: 5400, signal 159823/203223 (executing program) 2024/11/12 04:46:36 fetching corpus: 5450, signal 160239/203230 (executing program) 2024/11/12 04:46:36 fetching corpus: 5500, signal 160590/203230 (executing program) 2024/11/12 04:46:37 fetching corpus: 5550, signal 161463/203230 (executing program) 2024/11/12 04:46:37 fetching corpus: 5600, signal 161800/203230 (executing program) 2024/11/12 04:46:37 fetching corpus: 5650, signal 162246/203230 (executing program) 2024/11/12 04:46:38 fetching corpus: 5700, signal 162504/203230 (executing program) 2024/11/12 04:46:38 fetching corpus: 5750, signal 163016/203230 (executing program) 2024/11/12 04:46:38 fetching corpus: 5800, signal 163395/203230 (executing program) 2024/11/12 04:46:38 fetching corpus: 5850, signal 163733/203233 (executing program) 2024/11/12 04:46:39 fetching corpus: 5900, signal 164039/203233 (executing program) 2024/11/12 04:46:39 fetching corpus: 5950, signal 164297/203233 (executing program) 2024/11/12 04:46:39 fetching corpus: 6000, signal 164534/203233 (executing program) 2024/11/12 04:46:39 fetching corpus: 6050, signal 164857/203233 (executing program) 2024/11/12 04:46:39 fetching corpus: 6100, signal 165298/203233 (executing program) 2024/11/12 04:46:39 fetching corpus: 6150, signal 165540/203233 (executing program) 2024/11/12 04:46:40 fetching corpus: 6200, signal 165809/203233 (executing program) 2024/11/12 04:46:40 fetching corpus: 6250, signal 166437/203233 (executing program) 2024/11/12 04:46:40 fetching corpus: 6300, signal 166746/203233 (executing program) 2024/11/12 04:46:41 fetching corpus: 6350, signal 167303/203233 (executing program) 2024/11/12 04:46:41 fetching corpus: 6400, signal 167632/203233 (executing program) 2024/11/12 04:46:41 fetching corpus: 6450, signal 168058/203233 (executing program) 2024/11/12 04:46:41 fetching corpus: 6500, signal 168282/203233 (executing program) 2024/11/12 04:46:41 fetching corpus: 6550, signal 168560/203233 (executing program) 2024/11/12 04:46:41 fetching corpus: 6600, signal 169069/203233 (executing program) 2024/11/12 04:46:41 fetching corpus: 6650, signal 169402/203233 (executing program) 2024/11/12 04:46:42 fetching corpus: 6700, signal 169701/203233 (executing program) 2024/11/12 04:46:42 fetching corpus: 6750, signal 169854/203233 (executing program) 2024/11/12 04:46:42 fetching corpus: 6800, signal 170185/203233 (executing program) 2024/11/12 04:46:42 fetching corpus: 6850, signal 170488/203233 (executing program) 2024/11/12 04:46:42 fetching corpus: 6900, signal 170741/203233 (executing program) 2024/11/12 04:46:42 fetching corpus: 6950, signal 171034/203233 (executing program) 2024/11/12 04:46:43 fetching corpus: 7000, signal 171282/203233 (executing program) 2024/11/12 04:46:43 fetching corpus: 7050, signal 171617/203233 (executing program) 2024/11/12 04:46:43 fetching corpus: 7100, signal 171933/203233 (executing program) 2024/11/12 04:46:44 fetching corpus: 7150, signal 172296/203233 (executing program) 2024/11/12 04:46:44 fetching corpus: 7200, signal 172545/203233 (executing program) 2024/11/12 04:46:44 fetching corpus: 7250, signal 172935/203233 (executing program) 2024/11/12 04:46:44 fetching corpus: 7300, signal 173142/203233 (executing program) 2024/11/12 04:46:45 fetching corpus: 7350, signal 173403/203233 (executing program) 2024/11/12 04:46:45 fetching corpus: 7400, signal 173903/203233 (executing program) 2024/11/12 04:46:45 fetching corpus: 7450, signal 174320/203233 (executing program) 2024/11/12 04:46:45 fetching corpus: 7500, signal 174544/203233 (executing program) 2024/11/12 04:46:45 fetching corpus: 7550, signal 174876/203233 (executing program) 2024/11/12 04:46:46 fetching corpus: 7600, signal 175135/203233 (executing program) 2024/11/12 04:46:46 fetching corpus: 7650, signal 175315/203233 (executing program) 2024/11/12 04:46:47 fetching corpus: 7700, signal 175556/203234 (executing program) 2024/11/12 04:46:47 fetching corpus: 7750, signal 175794/203234 (executing program) 2024/11/12 04:46:48 fetching corpus: 7800, signal 176079/203234 (executing program) 2024/11/12 04:46:48 fetching corpus: 7850, signal 176345/203234 (executing program) 2024/11/12 04:46:48 fetching corpus: 7900, signal 176589/203234 (executing program) 2024/11/12 04:46:49 fetching corpus: 7950, signal 176900/203234 (executing program) 2024/11/12 04:46:49 fetching corpus: 8000, signal 177122/203234 (executing program) 2024/11/12 04:46:49 fetching corpus: 8050, signal 177606/203234 (executing program) 2024/11/12 04:46:49 fetching corpus: 8100, signal 177864/203234 (executing program) 2024/11/12 04:46:50 fetching corpus: 8150, signal 178047/203234 (executing program) 2024/11/12 04:46:50 fetching corpus: 8200, signal 178239/203234 (executing program) 2024/11/12 04:46:50 fetching corpus: 8250, signal 178535/203234 (executing program) 2024/11/12 04:46:50 fetching corpus: 8300, signal 178742/203234 (executing program) 2024/11/12 04:46:51 fetching corpus: 8350, signal 179011/203234 (executing program) 2024/11/12 04:46:51 fetching corpus: 8400, signal 179330/203234 (executing program) 2024/11/12 04:46:52 fetching corpus: 8450, signal 179604/203234 (executing program) 2024/11/12 04:46:52 fetching corpus: 8500, signal 179845/203234 (executing program) 2024/11/12 04:46:52 fetching corpus: 8550, signal 180227/203234 (executing program) 2024/11/12 04:46:53 fetching corpus: 8600, signal 180584/203234 (executing program) 2024/11/12 04:46:53 fetching corpus: 8650, signal 180791/203234 (executing program) 2024/11/12 04:46:53 fetching corpus: 8700, signal 181061/203238 (executing program) 2024/11/12 04:46:54 fetching corpus: 8750, signal 181358/203238 (executing program) 2024/11/12 04:46:54 fetching corpus: 8800, signal 181545/203238 (executing program) 2024/11/12 04:46:54 fetching corpus: 8850, signal 181768/203238 (executing program) 2024/11/12 04:46:54 fetching corpus: 8900, signal 182007/203238 (executing program) 2024/11/12 04:46:54 fetching corpus: 8950, signal 182178/203238 (executing program) 2024/11/12 04:46:55 fetching corpus: 9000, signal 182459/203238 (executing program) 2024/11/12 04:46:55 fetching corpus: 9050, signal 182661/203238 (executing program) 2024/11/12 04:46:55 fetching corpus: 9100, signal 182838/203238 (executing program) 2024/11/12 04:46:55 fetching corpus: 9150, signal 183031/203238 (executing program) 2024/11/12 04:46:55 fetching corpus: 9200, signal 183311/203238 (executing program) 2024/11/12 04:46:55 fetching corpus: 9250, signal 183596/203238 (executing program) 2024/11/12 04:46:55 fetching corpus: 9300, signal 183799/203238 (executing program) 2024/11/12 04:46:55 fetching corpus: 9350, signal 184038/203238 (executing program) 2024/11/12 04:46:56 fetching corpus: 9400, signal 184376/203238 (executing program) 2024/11/12 04:46:56 fetching corpus: 9450, signal 184516/203238 (executing program) 2024/11/12 04:46:56 fetching corpus: 9500, signal 184775/203238 (executing program) 2024/11/12 04:46:57 fetching corpus: 9550, signal 184980/203238 (executing program) 2024/11/12 04:46:57 fetching corpus: 9600, signal 185117/203238 (executing program) 2024/11/12 04:46:57 fetching corpus: 9650, signal 185321/203238 (executing program) 2024/11/12 04:46:58 fetching corpus: 9700, signal 185543/203238 (executing program) 2024/11/12 04:46:58 fetching corpus: 9750, signal 185705/203238 (executing program) 2024/11/12 04:46:58 fetching corpus: 9800, signal 185895/203238 (executing program) 2024/11/12 04:46:59 fetching corpus: 9850, signal 186206/203238 (executing program) 2024/11/12 04:46:59 fetching corpus: 9900, signal 186468/203238 (executing program) 2024/11/12 04:46:59 fetching corpus: 9950, signal 186638/203238 (executing program) 2024/11/12 04:46:59 fetching corpus: 10000, signal 186967/203238 (executing program) 2024/11/12 04:47:00 fetching corpus: 10050, signal 187494/203240 (executing program) 2024/11/12 04:47:00 fetching corpus: 10100, signal 187729/203240 (executing program) 2024/11/12 04:47:00 fetching corpus: 10150, signal 187933/203240 (executing program) 2024/11/12 04:47:01 fetching corpus: 10200, signal 188145/203240 (executing program) 2024/11/12 04:47:01 fetching corpus: 10250, signal 188294/203243 (executing program) 2024/11/12 04:47:01 fetching corpus: 10300, signal 188426/203243 (executing program) 2024/11/12 04:47:02 fetching corpus: 10350, signal 188664/203243 (executing program) 2024/11/12 04:47:02 fetching corpus: 10400, signal 188855/203243 (executing program) 2024/11/12 04:47:02 fetching corpus: 10450, signal 189019/203243 (executing program) 2024/11/12 04:47:03 fetching corpus: 10500, signal 189202/203243 (executing program) 2024/11/12 04:47:03 fetching corpus: 10550, signal 189484/203243 (executing program) 2024/11/12 04:47:03 fetching corpus: 10600, signal 189710/203243 (executing program) 2024/11/12 04:47:03 fetching corpus: 10650, signal 189905/203243 (executing program) 2024/11/12 04:47:03 fetching corpus: 10700, signal 190109/203243 (executing program) 2024/11/12 04:47:03 fetching corpus: 10750, signal 190297/203243 (executing program) 2024/11/12 04:47:04 fetching corpus: 10800, signal 190463/203243 (executing program) 2024/11/12 04:47:04 fetching corpus: 10850, signal 190694/203243 (executing program) 2024/11/12 04:47:04 fetching corpus: 10900, signal 190845/203243 (executing program) 2024/11/12 04:47:04 fetching corpus: 10930, signal 190964/203243 (executing program) 2024/11/12 04:47:04 fetching corpus: 10930, signal 190964/203243 (executing program) 2024/11/12 04:47:08 starting 8 fuzzer processes 04:47:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x330, 0x70bd2b, 0x7, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xea}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x74, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5e75a943cda6c3e9929f49cd58c7057d0cd397711eb3ad65758cf8c03623b2be"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2e3f68a260cffd82ce270673e7245cb791663162db22abc4ec15b81ec2b0f94c"}]}]}, 0x94}}, 0x8800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe4e63a4b668f8341}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", "", "", ""]}, 0x24}}, 0x80000c5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r2) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100a404}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2f6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008884}, 0x1) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x18, 0x3f9, 0x8, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000000) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x3]}, 0x8) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044081}, 0x20004000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a40)={'wpan3\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r7) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x90, r8, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x9}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xffff}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x35, 0xac, "3fa1e82bb4b960e559e5dce644e1adfd4e33f1e48ce00989067ade4e7fb52bc6ba7189454cd95a8c5bde3dc50ce3bee9f6"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x58b}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) 04:47:08 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x324, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @empty, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "067de759ebee89dadacaa4cd06dc29d918adc91ee659f39af87df4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1c00000}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @mcast1, 0xc88}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffa, @mcast2, 0xfffffffb}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x78, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6000000, @empty, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x185}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd9e1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x10}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'tunl0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x80, 0xd9, 0x70, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x10, 0x8, 0x200}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000900)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000a00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x80, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x400c0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x8040) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80), 0x100, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'ip6gre0\x00', r3, 0x29, 0x2, 0x0, 0xd3, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x40, 0x40, 0xd745, 0x401}}) pipe2(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) inotify_rm_watch(r9, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2000, 0x0) ioctl$IOC_PR_REGISTER(r10, 0x401870c8, &(0x7f0000000d00)={0xfffffffffffffd87, 0x39ec000}) ioctl$HIDIOCGFLAG(r10, 0x8004480e, &(0x7f0000000d40)) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000000d80)) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001180)={{{@in, @in=@dev}}, {{@in=@multicast1}}}, &(0x7f0000001280)=0xe8) 04:47:08 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="25e50ebd3731732ad472ee53464d89c01644553a3a8f6248360690614dad53789ea6dcc1e5a7bbd4eedc", 0x2a, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r7 = request_key(&(0x7f0000000440)='.request_key_auth\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='+!}:{}[!\')\x00', r6) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$unlink(0x9, r2, r6) keyctl$KEYCTL_MOVE(0x1e, r0, r4, r5, 0x0) r8 = add_key(&(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="e4d04d857fcc18c8261c9570f44da07ce0ecb8f579ccd003a85f6f62a6a0f7dcbf56121811528b9e0e6cb1faf6291f13934feaca83eab142ad709a2a40e68852095a58bfd165f9b1dec4e88e6691832faaa777ed1ce311b1e8a4067cdb501dc2e12752d628c9e78bb617ff327e907d2dab5c683e15d85ad79de37753fcdab627495773dd781829781f8e6a97e723ccbe300d18f3f521e604a2abd06b2fe5d7aac9d00d5e525e0b383ab584fbf0c9f6b2f1feb1b6e5", 0xb5, r2) add_key$user(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)="3a05c388804d60be458b72c57d69372be0a007359809e8629e2a842d279aff7bba66099b5261a0b65c2474db8fb873eee3a95be9a6bc1be734b34557429b1afa0607027172498e4d39594639c57c0a3c8d800081afefce148ea489cd1a", 0x5d, r8) keyctl$KEYCTL_MOVE(0x1e, r3, r8, r3, 0x1) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r3, 0x1) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r6, 0xffffffffffffffff, 0xee01) add_key(&(0x7f00000007c0)='cifs.idmap\x00', &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)="f73f89de984ffe0eda33e5a437179a0f40e35d1d605625d33d84a70d41396548f26b76df6945161d7b8ed4f46c5db95cbf729ccfc388b7b06dccea30fa1425dc9f260f860c0a2aff3815be13d07aa07b26975e24", 0x54, r2) 04:47:08 executing program 3: r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fsetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '\x9a@%!\x00'}, &(0x7f0000000080)='^!\x00', 0x3, 0x2) chroot(&(0x7f00000000c0)='./file0\x00') getpeername$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000280)={0x0, r0, 0x800, 0xb250, 0x5, 0x2}) renameat2(r1, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='pids.events\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001f80)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/21, 0x15}], 0x3, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/215, 0xd7}, {&(0x7f0000000a00)=""/145, 0x91}], 0x2}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/37, 0x25}, {&(0x7f0000000bc0)=""/13, 0xd}, {&(0x7f0000000c00)=""/184, 0xb8}], 0x3}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000d80)=""/65, 0x41}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x2, &(0x7f0000001e40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x4, 0x10021, &(0x7f0000001fc0)={r4, r5+60000000}) r8 = syz_mount_image$iso9660(&(0x7f0000002000), &(0x7f0000002040)='./file0\x00', 0x1, 0x3, &(0x7f00000022c0)=[{&(0x7f0000002080)="118ce8cd6acd4dcef94ba88cdebbe0a21490b24119ae2f3f8a09fab02d55890dc2f9daccd3d9e05b02098d868efcad33c0a257b02b9a823715506c0e954565cfd7306a8ae5e71f4bd632030e1c40026f1071599094b38acd2a4862afcafad3cd2206d5aae51f2b4d4f24ca40c3d6427ea0e454fcedf8c6359af68a83f5281f7dd4dbf9579dbbe36325d290c3151d8022b120b93fd9ced6353a913a8b62a305f80e98c9d298b058d1ec", 0xa9, 0x6f}, {&(0x7f0000002140)="82faeb7eda6b4fc6dbec7206f177d1e8891f88924359116bb5205b8a00d5e7a785f10d217ff4a4e851cec981b7be32732d15831dce9b37507d1fe7a7e4b511be84b8cd8582824820f49e140f7824827fadb2551085a08ee98275539ffcfa4a2ef6dbd01210a65a11663ac89fbad2da2ca0537ea44c44a04a1e6aa8e00828e54925c542d2d44593e41c0b9d62760fb15607ae0fea6caaf31089ad77df0af5a9d30edd3d136dc3cc97bdf341f4c29ffcbcb19c8d6ed09d56625637df1f2b40541fc817a25c5fbd00dda6c8ae8f7240f7ba82f17882789f1f52219d693bb2c5", 0xde, 0x9}, {&(0x7f0000002240)="21c549ac1390defaafa23544532bc7c0cf3e7fc9c1b18e9250ed4ee49cd630d6233a285ace1d1629f58117c3520da9b4bc4754dd03d8fd12d2ad27025d6a5a5fc9c9f4b413ceb3593ded827a00800bc6700ee25525d177d36856fb32c21d6dae1bff962e11b6093c9b07c9e9155df6", 0x6f, 0xfffffffffffffff8}], 0x200020, &(0x7f0000002340)={[{@overriderock}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'cp857'}}], [{@smackfsfloor}, {@obj_user={'obj_user', 0x3d, '\x9a@%!\x00'}}, {@subj_role={'subj_role', 0x3d, '\x84()'}}, {@hash}, {@obj_role={'obj_role', 0x3d, 'btrfs.'}}, {@subj_user={'subj_user', 0x3d, 'btrfs.'}}, {@fowner_gt={'fowner>', 0xee01}}, {@audit}, {@uid_gt={'uid>', r6}}, {@euid_lt={'euid<', r6}}]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000002440)={{r2, 0x1f, 0x7, 0x6a, 0x2, 0x6, 0x4, 0x4, 0x0, 0x0, 0xfffffff8, 0x1, 0xfd09, 0x4, 0x1f}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f00000024c0)={{r9, 0x101, 0x2, 0x0, 0x4, 0xbc, 0x8, 0x4, 0x1000, 0x66c3, 0x4, 0x5, 0xffffffff, 0x9, 0x60000000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat(r7, &(0x7f0000002580)='./file0\x00', 0x22100, 0x82) quotactl(0xa81, &(0x7f00000025c0)='./file0\x00', r6, &(0x7f0000002600)="393b14286b6d9bfb100fa327fd3d8a1ec090c4b953a3028aedef10dcb7e41b3bc6d4520dee3bb367cad3933e178eb6e37ff390540418119925b671388cc816c76e41e63474cc43f24d66930905ebf1016b9e55f507e05b8ad995da5f460d2ebcb63e6db1f678ce0939e2c7a6e1d99feb28b9cf5766ae96486b872529e3c0bf05b7eeb0d66027e280d895429bc182dcaec8cb6f7d3d91e263fe6868b341d61bd87cc7f08425b0f0457b06a09ab08ea006af3a818711978485d7745cf587bc1b73ba17c66b13f1139391566e8c4f4d09949c3ddcd07e48f4a9da3ba748d18cd1457ef765a9a4778caaa840d471d580b0575844") clock_gettime(0x3, &(0x7f0000002700)) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000002740)=0x200) [ 140.524251] audit: type=1400 audit(1731386828.124:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:47:08 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x800, 0xa7f6a9bbad5caa09) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5) r1 = fsmount(r0, 0x0, 0x7e) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000080)={0x0, 0x0, 0x101}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffb000/0x3000)=nil) r2 = io_uring_setup(0x7855, &(0x7f00000000c0)={0x0, 0x8f2d, 0x8, 0x2, 0x311, 0x0, r1}) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/92, 0x5c}], 0x3, 0x7, 0x3f) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="74d700cb0373c74f8a9281fe55041724", 0x10) r4 = openat(r1, &(0x7f0000000380)='./file0\x00', 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000003c0)={0x0, r3, 0xffffffffffff0000, 0xf5, 0xd2d, 0x5}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r6 = fsmount(r0, 0x1, 0x74) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x8100, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000800)={0xa4, 0x0, &(0x7f0000000680)=[@register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0x4, 0x1, 0x5}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/62, 0x3e, 0x0, 0x1c}}, &(0x7f0000000540)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/43, 0x2b, 0x1, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x1}, @flat=@binder={0x73622a85, 0x100}}, &(0x7f0000000640)={0x0, 0x28, 0x40}}}, @exit_looper, @increfs={0x40046304, 0x1}, @dead_binder_done], 0x9a, 0x0, &(0x7f0000000740)="5f718af3dcaf37a16a3076622d22cb4014416117be68a32a1371ed2a12b5c8f8043096a2807061b81aeeac65c7a821850a193cf069a5288aac04447fca1da6aea55eb1474d3df68e3dac03d4f400a49b394ee973e042b2406e10b9fb22df80934d7592328f7dca9204576ca8e21ed7b2e33dabb90f7ceb1a91c10277a1d8e7c97a3d8fd98cecab4a714efc2c74635977c12ef2cae04b7cd012e0"}) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000880)={0x4, 0x20, '\x00', 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0]}) pwrite64(0xffffffffffffffff, &(0x7f0000000980)="ecc576b23b253cd25001e12f13ed95b89bea7a58693417ec317637208978862e913c257c5c4c91824aa9f27153df7c995a114240bb1006f487af51ee9acf58d374b38e25845cce3903e77c4ae95dc0d4d24874a7d190b438c131c8f455763ed1f30885cbadd3f73b1658702dbc8db6fcef5a2a20db0e316009731a4ec66695673e420265e8a29d01d9ab49f5c3142a7487557c3e9b8a2a22df56761299fd35471c6c7ceecb9046838a776b271a8aba659aa367c4966cabb5011af47adfd8eab7", 0xc0, 0xfff) 04:47:08 executing program 5: sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x15c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1f}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x115}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfff9}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r2 = signalfd4(r0, &(0x7f0000000500)={[0x4]}, 0x8, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x804) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup2(r1, r5) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004090}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000800)={0x20000001}) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000840), 0x40803, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000980)={r2, 0x7, 0xfffffffffffffffb, 0x3}) fcntl$getflags(r9, 0x408) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/devices/LNXSYSTM:00', 0x400000, 0x10c) close(r10) write(r6, &(0x7f0000000a00)="13b1ea7261d839cb7141a3f054a594dfe24ef86dd0f47fcdf661cc9c7a53024e9dee0b12e998946b076dcb9291b30364a70452d2789346631f119dd8fdb08dec9e4acef2de0da7f730e28781bdd84bd21b579815aca54ddaba6946eede87848698a1ab826f4636c839491979421abbdb0018b7ac0f7b1fe9948b1479ce87a8f9f7f41441fd3eab4087e1813574c99b02fd420e1a07ab51685f87", 0x9a) 04:47:08 executing program 6: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x7, 0x7, 0x3, @remote, @loopback, 0x80, 0x40, 0x400, 0xfffffff9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0x2, 0x81, 0x2, @local, @private2, 0x779, 0x1, 0x71de, 0x3}}) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0xfe, 0x8, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x80, 0x8, 0x7f, 0x6}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000580)={@private0, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x268, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000900)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x28, r8}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x101881, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000980)={@broadcast, @rand_addr, 0x0}, &(0x7f00000009c0)=0xc) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000a00)=r10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', r10, 0x80, 0x8, 0x4, 0x400, {{0xd, 0x4, 0x1, 0x20, 0x34, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @broadcast, {[@ssrr={0x89, 0x1f, 0xcf, [@multicast1, @local, @empty, @empty, @broadcast, @loopback, @multicast2]}]}}}}}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b00)={r11, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010100}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000b40)={r9, 0x80000001, 0x9, 0x3}) fcntl$setown(r12, 0x8, 0x0) fsync(r12) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r12, 0xc0189372, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r13, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2048015) 04:47:08 executing program 7: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000040)={{}, {r0, r1/1000+60000}}, &(0x7f0000000080)) clock_gettime(0x1, &(0x7f00000000c0)) clock_gettime(0x3, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000180)={{0x77359400}, {r2, r3/1000+60000}}, &(0x7f00000001c0)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x8]}, 0x8) rt_sigtimedwait(&(0x7f0000000300)={[0x8000]}, &(0x7f0000000340), &(0x7f00000003c0), 0x8) clock_gettime(0x4, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) getitimer(0x0, &(0x7f0000000480)) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f00000004c0)={0x1}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000500)=[{0x1, 0xcfc, 0x1000}, {0x1, 0x9, 0x800}], 0x2, &(0x7f0000000580)={r5, r6+10000000}) clock_gettime(0x7, &(0x7f00000005c0)) getitimer(0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$smc(&(0x7f0000000640), r4) socket$packet(0x11, 0x2, 0x300) getitimer(0x0, &(0x7f0000000680)) [ 141.971840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.973850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.975162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.976560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.982069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.983552] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.992150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.993893] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.995015] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.006154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.012795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.014070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.022605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.024784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.027800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.033887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.041298] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.043387] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 142.044573] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.053369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.059589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.064078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.065427] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.068940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.072244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.074415] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.074633] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.078835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.079668] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.081815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.096701] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.108593] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 142.116246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 142.124073] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 142.126151] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 142.127418] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 142.128938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.132747] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 142.136840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.155838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 142.158312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 142.158502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.164052] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 142.168100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 142.168267] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 142.170926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 142.171084] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 142.182199] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.047479] Bluetooth: hci1: command tx timeout [ 144.111684] Bluetooth: hci4: command tx timeout [ 144.112838] Bluetooth: hci0: command tx timeout [ 144.179735] Bluetooth: hci2: command tx timeout [ 144.180909] Bluetooth: hci3: command tx timeout [ 144.238821] Bluetooth: hci6: command tx timeout [ 144.239806] Bluetooth: hci5: command tx timeout [ 144.303190] Bluetooth: hci7: command tx timeout [ 146.095548] Bluetooth: hci1: command tx timeout [ 146.159014] Bluetooth: hci4: command tx timeout [ 146.159601] Bluetooth: hci0: command tx timeout [ 146.222827] Bluetooth: hci3: command tx timeout [ 146.223371] Bluetooth: hci2: command tx timeout [ 146.286631] Bluetooth: hci6: command tx timeout [ 146.287169] Bluetooth: hci5: command tx timeout [ 146.351546] Bluetooth: hci7: command tx timeout [ 148.142596] Bluetooth: hci1: command tx timeout [ 148.206878] Bluetooth: hci4: command tx timeout [ 148.207412] Bluetooth: hci0: command tx timeout [ 148.270684] Bluetooth: hci2: command tx timeout [ 148.271217] Bluetooth: hci3: command tx timeout [ 148.336653] Bluetooth: hci5: command tx timeout [ 148.337186] Bluetooth: hci6: command tx timeout [ 148.398557] Bluetooth: hci7: command tx timeout [ 150.190689] Bluetooth: hci1: command tx timeout [ 150.254716] Bluetooth: hci0: command tx timeout [ 150.255244] Bluetooth: hci4: command tx timeout [ 150.319996] Bluetooth: hci2: command tx timeout [ 150.321089] Bluetooth: hci3: command tx timeout [ 150.382587] Bluetooth: hci6: command tx timeout [ 150.383118] Bluetooth: hci5: command tx timeout [ 150.446557] Bluetooth: hci7: command tx timeout [ 204.711776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.731991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.763239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.798988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.841834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.844280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.845772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.847552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.853337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.854871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.855700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.856820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.864341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.867821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.869872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.875060] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.878540] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.882862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 204.884671] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.886179] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 204.886829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.887699] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.888466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.890037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.890919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.891022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.892018] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.893302] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.896296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.898732] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 204.899563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.901033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.902124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.903641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.906682] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 204.925968] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 204.936218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.943145] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 204.944474] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 204.945999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.948854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 204.956881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.967554] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 204.979242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 204.980300] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 204.984935] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 204.992125] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 204.993615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 206.894623] Bluetooth: hci0: command tx timeout [ 206.958635] Bluetooth: hci2: command tx timeout [ 206.959596] Bluetooth: hci5: command tx timeout [ 206.959995] Bluetooth: hci1: command tx timeout [ 207.045929] Bluetooth: hci3: command tx timeout [ 207.045982] Bluetooth: hci6: command tx timeout [ 207.046843] Bluetooth: hci4: command tx timeout [ 207.086934] Bluetooth: hci7: command tx timeout [ 208.942575] Bluetooth: hci0: command tx timeout [ 209.006574] Bluetooth: hci5: command tx timeout [ 209.006621] Bluetooth: hci1: command tx timeout [ 209.008180] Bluetooth: hci2: command tx timeout [ 209.070547] Bluetooth: hci4: command tx timeout [ 209.070616] Bluetooth: hci6: command tx timeout [ 209.071868] Bluetooth: hci3: command tx timeout [ 209.134568] Bluetooth: hci7: command tx timeout [ 210.991495] Bluetooth: hci0: command tx timeout [ 211.054608] Bluetooth: hci2: command tx timeout [ 211.054857] Bluetooth: hci1: command tx timeout [ 211.055121] Bluetooth: hci5: command tx timeout [ 211.119515] Bluetooth: hci3: command tx timeout [ 211.119811] Bluetooth: hci6: command tx timeout [ 211.120089] Bluetooth: hci4: command tx timeout [ 211.182765] Bluetooth: hci7: command tx timeout [ 213.038529] Bluetooth: hci0: command tx timeout [ 213.102559] Bluetooth: hci5: command tx timeout [ 213.102598] Bluetooth: hci1: command tx timeout [ 213.103966] Bluetooth: hci2: command tx timeout [ 213.166718] Bluetooth: hci4: command tx timeout [ 213.167284] Bluetooth: hci6: command tx timeout [ 213.167312] Bluetooth: hci3: command tx timeout [ 213.231474] Bluetooth: hci7: command tx timeout [ 267.078484] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.081107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.089311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.101714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.106177] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.108632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.391026] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.404147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.412353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.416847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.424823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.424857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.429759] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 267.431969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.437400] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.446032] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.467944] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 267.470022] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.472175] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.476058] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.480589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.486078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.488232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.502506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.509274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 267.511678] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 267.514041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.515490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.518148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 267.520838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 267.523507] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 267.523704] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.533925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.538241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.542860] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 267.544828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.547254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.555041] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 267.563853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 267.565776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 267.567622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.570378] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 267.572050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.577075] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 267.579142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 267.581832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 267.597974] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 267.612638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.187528] Bluetooth: hci0: command tx timeout [ 269.486550] Bluetooth: hci1: command tx timeout [ 269.550643] Bluetooth: hci2: command tx timeout [ 269.614549] Bluetooth: hci4: command tx timeout [ 269.615260] Bluetooth: hci3: command tx timeout [ 269.678612] Bluetooth: hci6: command tx timeout [ 269.679299] Bluetooth: hci7: command tx timeout [ 269.680008] Bluetooth: hci5: command tx timeout [ 271.214577] Bluetooth: hci0: command tx timeout [ 271.534555] Bluetooth: hci1: command tx timeout [ 271.600459] Bluetooth: hci2: command tx timeout [ 271.662614] Bluetooth: hci4: command tx timeout [ 271.662700] Bluetooth: hci3: command tx timeout [ 271.726640] Bluetooth: hci5: command tx timeout [ 271.727173] Bluetooth: hci7: command tx timeout [ 271.727789] Bluetooth: hci6: command tx timeout [ 273.277452] Bluetooth: hci0: command tx timeout [ 273.582507] Bluetooth: hci1: command tx timeout [ 273.646601] Bluetooth: hci2: command tx timeout [ 273.710518] Bluetooth: hci3: command tx timeout [ 273.712542] Bluetooth: hci4: command tx timeout [ 273.774674] Bluetooth: hci6: command tx timeout [ 273.776507] Bluetooth: hci7: command tx timeout [ 273.776988] Bluetooth: hci5: command tx timeout [ 275.310681] Bluetooth: hci0: command tx timeout [ 275.630557] Bluetooth: hci1: command tx timeout [ 275.694659] Bluetooth: hci2: command tx timeout [ 275.758747] Bluetooth: hci4: command tx timeout [ 275.758840] Bluetooth: hci3: command tx timeout [ 275.822611] Bluetooth: hci5: command tx timeout [ 275.822667] Bluetooth: hci7: command tx timeout [ 275.823078] Bluetooth: hci6: command tx timeout [ 329.665261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.667824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.671608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.679076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.685203] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 329.687745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.914698] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.919653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.926093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.930780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.937640] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 329.938929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.042981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.046015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.048658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.052674] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.056629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.064514] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.067949] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 330.070470] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.074144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.075086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.076816] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 330.078035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.119967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.129989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.142722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.147238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.152068] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 330.156478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.187709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.201622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.220097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 330.228929] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.231482] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 330.233824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.246528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.257730] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.260099] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 330.262259] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 330.273829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.275980] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.293928] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 330.296375] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 330.300225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 330.302596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 330.317696] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 330.334985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 331.758531] Bluetooth: hci0: command tx timeout [ 332.014482] Bluetooth: hci1: command tx timeout [ 332.142523] Bluetooth: hci2: command tx timeout [ 332.143613] Bluetooth: hci3: command tx timeout [ 332.272558] Bluetooth: hci4: command tx timeout [ 332.398647] Bluetooth: hci7: command tx timeout [ 332.398711] Bluetooth: hci5: command tx timeout [ 332.462510] Bluetooth: hci6: command tx timeout [ 333.806489] Bluetooth: hci0: command tx timeout [ 334.062464] Bluetooth: hci1: command tx timeout [ 334.190755] Bluetooth: hci3: command tx timeout [ 334.191068] Bluetooth: hci2: command tx timeout [ 334.318579] Bluetooth: hci4: command tx timeout [ 334.446944] Bluetooth: hci5: command tx timeout [ 334.448428] Bluetooth: hci7: command tx timeout [ 334.510507] Bluetooth: hci6: command tx timeout [ 335.854559] Bluetooth: hci0: command tx timeout [ 336.111478] Bluetooth: hci1: command tx timeout [ 336.239934] Bluetooth: hci3: command tx timeout [ 336.241315] Bluetooth: hci2: command tx timeout [ 336.368468] Bluetooth: hci4: command tx timeout [ 336.494513] Bluetooth: hci7: command tx timeout [ 336.495950] Bluetooth: hci5: command tx timeout [ 336.559635] Bluetooth: hci6: command tx timeout [ 337.903255] Bluetooth: hci0: command tx timeout [ 338.161441] Bluetooth: hci1: command tx timeout [ 338.286544] Bluetooth: hci2: command tx timeout [ 338.287918] Bluetooth: hci3: command tx timeout [ 338.417522] Bluetooth: hci4: command tx timeout [ 338.542552] Bluetooth: hci5: command tx timeout [ 338.543691] Bluetooth: hci7: command tx timeout [ 338.607568] Bluetooth: hci6: command tx timeout [ 392.260328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.263571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.264690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.279024] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.288298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 392.289592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.635261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.636940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.638095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.643613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.645363] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 392.647005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.699055] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 392.702710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 392.709895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 392.717636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 392.723696] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 392.727307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.782110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.786622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.788158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.796677] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.801789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 392.804507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.941545] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.943032] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.944172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.945252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.946917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.948671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.954784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.956748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.957966] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 392.960502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.962195] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 392.964290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.023994] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 393.029911] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 393.034449] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 393.037648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 393.043872] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 393.072085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.072147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 393.116890] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 393.118050] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 393.139330] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 393.143241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 393.144538] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 394.350504] Bluetooth: hci0: command tx timeout [ 394.670544] Bluetooth: hci1: command tx timeout [ 394.798485] Bluetooth: hci2: command tx timeout [ 394.862492] Bluetooth: hci3: command tx timeout [ 395.056218] Bluetooth: hci4: command tx timeout [ 395.118535] Bluetooth: hci5: command tx timeout [ 395.184438] Bluetooth: hci7: command tx timeout [ 395.246670] Bluetooth: hci6: command tx timeout [ 396.398604] Bluetooth: hci0: command tx timeout [ 396.718577] Bluetooth: hci1: command tx timeout [ 396.846641] Bluetooth: hci2: command tx timeout [ 396.910531] Bluetooth: hci3: command tx timeout [ 397.102661] Bluetooth: hci4: command tx timeout [ 397.166545] Bluetooth: hci5: command tx timeout [ 397.230461] Bluetooth: hci7: command tx timeout [ 397.294470] Bluetooth: hci6: command tx timeout [ 398.446589] Bluetooth: hci0: command tx timeout [ 398.766646] Bluetooth: hci1: command tx timeout [ 398.894508] Bluetooth: hci2: command tx timeout [ 398.958473] Bluetooth: hci3: command tx timeout [ 399.151326] Bluetooth: hci4: command tx timeout [ 399.214499] Bluetooth: hci5: command tx timeout [ 399.278442] Bluetooth: hci7: command tx timeout [ 399.342484] Bluetooth: hci6: command tx timeout [ 400.494519] Bluetooth: hci0: command tx timeout [ 400.814599] Bluetooth: hci1: command tx timeout [ 400.944427] Bluetooth: hci2: command tx timeout [ 401.006689] Bluetooth: hci3: command tx timeout [ 401.198543] Bluetooth: hci4: command tx timeout [ 401.262510] Bluetooth: hci5: command tx timeout [ 401.326632] Bluetooth: hci7: command tx timeout [ 401.390672] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:52:14 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffff8880375b7748 RDX=1ffff11006eb6ee1 RSI=1ffff11006eb6ed7 RDI=ffff8880375b76a8 RBP=ffff8880375b7700 RSP=ffff8880375b75e8 R8 =0000000000000000 R9 =0000000000000000 R10=ffff8880375b76a8 R11=00000000000c33ea R12=ffff8880375b7708 R13=ffff8880375b76f0 R14=ffff8880375b76f0 R15=ffff8880375b76a8 RIP=ffffffff81149132 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563a160ab121 CR3=0000000030d58000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff11005d08f04 RCX=ffffffff819964f0 RDX=ffff88803d240000 RSI=ffffffff81a27dce RDI=ffff88802e847840 RBP=0000000000000000 RSP=ffff88802e847820 R8 =0000000000000000 R9 =ffffed1001813470 R10=0000000000000000 R11=00000000000c33ea R12=0000000000000000 R13=ffffffff85af6c60 R14=ffff8880094658a0 R15=ffffffff85d1bbc0 RIP=ffffffff81a27dd1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f688a2ac0dc CR3=0000000036cf8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000