Warning: Permanently added '[localhost]:53627' (ECDSA) to the list of known hosts. 2025/01/14 00:29:42 fuzzer started 2025/01/14 00:29:42 dialing manager at localhost:35571 syzkaller login: [ 62.500036] cgroup: Unknown subsys name 'net' [ 62.602014] cgroup: Unknown subsys name 'cpuset' [ 62.666290] cgroup: Unknown subsys name 'rlimit' [ 67.846425] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 80.325483] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/14 00:30:00 syscalls: 2217 2025/01/14 00:30:00 code coverage: enabled 2025/01/14 00:30:00 comparison tracing: enabled 2025/01/14 00:30:00 extra coverage: enabled 2025/01/14 00:30:00 setuid sandbox: enabled 2025/01/14 00:30:00 namespace sandbox: enabled 2025/01/14 00:30:00 Android sandbox: enabled 2025/01/14 00:30:00 fault injection: enabled 2025/01/14 00:30:00 leak checking: enabled 2025/01/14 00:30:00 net packet injection: enabled 2025/01/14 00:30:00 net device setup: enabled 2025/01/14 00:30:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/14 00:30:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/14 00:30:00 USB emulation: enabled 2025/01/14 00:30:00 hci packet injection: enabled 2025/01/14 00:30:00 wifi device emulation: enabled 2025/01/14 00:30:00 802.15.4 emulation: enabled 2025/01/14 00:30:00 fetching corpus: 50, signal 21035/22818 (executing program) 2025/01/14 00:30:00 fetching corpus: 100, signal 32715/36071 (executing program) 2025/01/14 00:30:01 fetching corpus: 150, signal 42254/47005 (executing program) 2025/01/14 00:30:01 fetching corpus: 200, signal 49579/55703 (executing program) 2025/01/14 00:30:01 fetching corpus: 250, signal 54389/61796 (executing program) 2025/01/14 00:30:01 fetching corpus: 300, signal 59438/68034 (executing program) 2025/01/14 00:30:01 fetching corpus: 350, signal 62605/72366 (executing program) 2025/01/14 00:30:01 fetching corpus: 400, signal 64253/75296 (executing program) 2025/01/14 00:30:01 fetching corpus: 450, signal 67329/79502 (executing program) 2025/01/14 00:30:01 fetching corpus: 500, signal 69142/82522 (executing program) 2025/01/14 00:30:01 fetching corpus: 550, signal 73468/87750 (executing program) 2025/01/14 00:30:02 fetching corpus: 600, signal 75967/91270 (executing program) 2025/01/14 00:30:02 fetching corpus: 650, signal 77718/94063 (executing program) 2025/01/14 00:30:02 fetching corpus: 700, signal 79470/96909 (executing program) 2025/01/14 00:30:02 fetching corpus: 750, signal 83427/101544 (executing program) 2025/01/14 00:30:02 fetching corpus: 800, signal 84735/103874 (executing program) 2025/01/14 00:30:02 fetching corpus: 850, signal 85937/106137 (executing program) 2025/01/14 00:30:02 fetching corpus: 900, signal 87596/108716 (executing program) 2025/01/14 00:30:02 fetching corpus: 950, signal 90789/112519 (executing program) 2025/01/14 00:30:02 fetching corpus: 1000, signal 92465/114997 (executing program) 2025/01/14 00:30:02 fetching corpus: 1050, signal 93920/117302 (executing program) 2025/01/14 00:30:03 fetching corpus: 1100, signal 95746/119829 (executing program) 2025/01/14 00:30:03 fetching corpus: 1150, signal 97771/122493 (executing program) 2025/01/14 00:30:03 fetching corpus: 1200, signal 99254/124704 (executing program) 2025/01/14 00:30:03 fetching corpus: 1250, signal 100694/126846 (executing program) 2025/01/14 00:30:03 fetching corpus: 1300, signal 102329/129116 (executing program) 2025/01/14 00:30:03 fetching corpus: 1350, signal 104541/131753 (executing program) 2025/01/14 00:30:03 fetching corpus: 1400, signal 107010/134544 (executing program) 2025/01/14 00:30:03 fetching corpus: 1450, signal 108535/136624 (executing program) 2025/01/14 00:30:03 fetching corpus: 1500, signal 110119/138694 (executing program) 2025/01/14 00:30:03 fetching corpus: 1550, signal 111378/140499 (executing program) 2025/01/14 00:30:03 fetching corpus: 1600, signal 113016/142559 (executing program) 2025/01/14 00:30:04 fetching corpus: 1650, signal 114629/144563 (executing program) 2025/01/14 00:30:04 fetching corpus: 1700, signal 115780/146257 (executing program) 2025/01/14 00:30:04 fetching corpus: 1750, signal 118542/149009 (executing program) 2025/01/14 00:30:04 fetching corpus: 1800, signal 119610/150598 (executing program) 2025/01/14 00:30:04 fetching corpus: 1850, signal 120357/151961 (executing program) 2025/01/14 00:30:04 fetching corpus: 1900, signal 121222/153350 (executing program) 2025/01/14 00:30:04 fetching corpus: 1950, signal 122085/154714 (executing program) 2025/01/14 00:30:04 fetching corpus: 2000, signal 123174/156273 (executing program) 2025/01/14 00:30:04 fetching corpus: 2050, signal 124502/157909 (executing program) 2025/01/14 00:30:04 fetching corpus: 2100, signal 125359/159240 (executing program) 2025/01/14 00:30:04 fetching corpus: 2150, signal 126155/160517 (executing program) 2025/01/14 00:30:05 fetching corpus: 2200, signal 127154/161898 (executing program) 2025/01/14 00:30:05 fetching corpus: 2250, signal 127979/163155 (executing program) 2025/01/14 00:30:05 fetching corpus: 2300, signal 129187/164604 (executing program) 2025/01/14 00:30:05 fetching corpus: 2350, signal 129878/165770 (executing program) 2025/01/14 00:30:05 fetching corpus: 2400, signal 130757/167039 (executing program) 2025/01/14 00:30:05 fetching corpus: 2450, signal 132027/168443 (executing program) 2025/01/14 00:30:05 fetching corpus: 2500, signal 132822/169588 (executing program) 2025/01/14 00:30:05 fetching corpus: 2550, signal 133508/170658 (executing program) 2025/01/14 00:30:05 fetching corpus: 2600, signal 134255/171793 (executing program) 2025/01/14 00:30:05 fetching corpus: 2650, signal 134828/172811 (executing program) 2025/01/14 00:30:05 fetching corpus: 2700, signal 135482/173829 (executing program) 2025/01/14 00:30:06 fetching corpus: 2750, signal 136867/175154 (executing program) 2025/01/14 00:30:06 fetching corpus: 2800, signal 137300/176045 (executing program) 2025/01/14 00:30:06 fetching corpus: 2850, signal 138008/177064 (executing program) 2025/01/14 00:30:06 fetching corpus: 2900, signal 138669/178061 (executing program) 2025/01/14 00:30:06 fetching corpus: 2950, signal 139846/179250 (executing program) 2025/01/14 00:30:06 fetching corpus: 3000, signal 140421/180154 (executing program) 2025/01/14 00:30:06 fetching corpus: 3050, signal 140851/181010 (executing program) 2025/01/14 00:30:06 fetching corpus: 3100, signal 142101/182208 (executing program) 2025/01/14 00:30:06 fetching corpus: 3150, signal 142605/183049 (executing program) 2025/01/14 00:30:07 fetching corpus: 3200, signal 143062/183846 (executing program) 2025/01/14 00:30:07 fetching corpus: 3250, signal 143596/184669 (executing program) 2025/01/14 00:30:07 fetching corpus: 3300, signal 144205/185529 (executing program) 2025/01/14 00:30:07 fetching corpus: 3350, signal 144914/186399 (executing program) 2025/01/14 00:30:07 fetching corpus: 3400, signal 145495/187249 (executing program) 2025/01/14 00:30:07 fetching corpus: 3450, signal 146530/188207 (executing program) 2025/01/14 00:30:07 fetching corpus: 3500, signal 147283/189080 (executing program) 2025/01/14 00:30:07 fetching corpus: 3550, signal 148088/189955 (executing program) 2025/01/14 00:30:08 fetching corpus: 3600, signal 148731/190725 (executing program) 2025/01/14 00:30:08 fetching corpus: 3650, signal 149309/191456 (executing program) 2025/01/14 00:30:08 fetching corpus: 3700, signal 149760/192184 (executing program) 2025/01/14 00:30:08 fetching corpus: 3750, signal 150295/192890 (executing program) 2025/01/14 00:30:08 fetching corpus: 3800, signal 150940/193622 (executing program) 2025/01/14 00:30:08 fetching corpus: 3850, signal 151391/194303 (executing program) 2025/01/14 00:30:08 fetching corpus: 3900, signal 152054/195026 (executing program) 2025/01/14 00:30:08 fetching corpus: 3950, signal 152848/195765 (executing program) 2025/01/14 00:30:08 fetching corpus: 4000, signal 153536/196482 (executing program) 2025/01/14 00:30:08 fetching corpus: 4050, signal 154161/197127 (executing program) 2025/01/14 00:30:09 fetching corpus: 4100, signal 155308/197929 (executing program) 2025/01/14 00:30:09 fetching corpus: 4150, signal 156282/198646 (executing program) 2025/01/14 00:30:09 fetching corpus: 4200, signal 156835/199271 (executing program) 2025/01/14 00:30:09 fetching corpus: 4250, signal 157269/199862 (executing program) 2025/01/14 00:30:09 fetching corpus: 4300, signal 157866/200447 (executing program) 2025/01/14 00:30:09 fetching corpus: 4350, signal 158221/201024 (executing program) 2025/01/14 00:30:09 fetching corpus: 4400, signal 158829/201624 (executing program) 2025/01/14 00:30:09 fetching corpus: 4450, signal 159462/202145 (executing program) 2025/01/14 00:30:10 fetching corpus: 4500, signal 159946/202686 (executing program) 2025/01/14 00:30:10 fetching corpus: 4550, signal 160436/203253 (executing program) 2025/01/14 00:30:10 fetching corpus: 4600, signal 160812/203731 (executing program) 2025/01/14 00:30:10 fetching corpus: 4650, signal 161248/204248 (executing program) 2025/01/14 00:30:10 fetching corpus: 4700, signal 161673/204759 (executing program) 2025/01/14 00:30:10 fetching corpus: 4750, signal 161994/205215 (executing program) 2025/01/14 00:30:10 fetching corpus: 4800, signal 162611/205721 (executing program) 2025/01/14 00:30:10 fetching corpus: 4850, signal 163029/206188 (executing program) 2025/01/14 00:30:10 fetching corpus: 4900, signal 163445/206643 (executing program) 2025/01/14 00:30:11 fetching corpus: 4950, signal 163847/207087 (executing program) 2025/01/14 00:30:11 fetching corpus: 5000, signal 164275/207555 (executing program) 2025/01/14 00:30:11 fetching corpus: 5050, signal 164970/208025 (executing program) 2025/01/14 00:30:11 fetching corpus: 5100, signal 165407/208452 (executing program) 2025/01/14 00:30:11 fetching corpus: 5150, signal 165808/208893 (executing program) 2025/01/14 00:30:11 fetching corpus: 5200, signal 166152/209324 (executing program) 2025/01/14 00:30:11 fetching corpus: 5250, signal 166776/209667 (executing program) 2025/01/14 00:30:11 fetching corpus: 5300, signal 167188/209667 (executing program) 2025/01/14 00:30:11 fetching corpus: 5350, signal 167525/209667 (executing program) 2025/01/14 00:30:11 fetching corpus: 5400, signal 167930/209667 (executing program) 2025/01/14 00:30:11 fetching corpus: 5450, signal 168399/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 5500, signal 168974/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 5550, signal 169323/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 5600, signal 169819/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 5650, signal 170232/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 5700, signal 170537/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 5750, signal 170933/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 5800, signal 171409/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 5850, signal 171735/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 5900, signal 171992/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 5950, signal 172391/209667 (executing program) 2025/01/14 00:30:12 fetching corpus: 6000, signal 172882/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6050, signal 173197/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6100, signal 173496/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6150, signal 173783/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6200, signal 174016/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6250, signal 174310/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6300, signal 174556/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6350, signal 174857/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6400, signal 175284/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6450, signal 175619/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6500, signal 176039/209667 (executing program) 2025/01/14 00:30:13 fetching corpus: 6550, signal 176348/209667 (executing program) 2025/01/14 00:30:14 fetching corpus: 6600, signal 176664/209667 (executing program) 2025/01/14 00:30:14 fetching corpus: 6650, signal 176937/209667 (executing program) 2025/01/14 00:30:14 fetching corpus: 6700, signal 177180/209667 (executing program) 2025/01/14 00:30:14 fetching corpus: 6750, signal 177620/209667 (executing program) 2025/01/14 00:30:14 fetching corpus: 6800, signal 177927/209667 (executing program) 2025/01/14 00:30:14 fetching corpus: 6850, signal 178202/209667 (executing program) 2025/01/14 00:30:14 fetching corpus: 6900, signal 178697/209667 (executing program) 2025/01/14 00:30:14 fetching corpus: 6950, signal 178910/209667 (executing program) 2025/01/14 00:30:14 fetching corpus: 7000, signal 179146/209667 (executing program) 2025/01/14 00:30:14 fetching corpus: 7050, signal 179419/209667 (executing program) 2025/01/14 00:30:15 fetching corpus: 7100, signal 179781/209667 (executing program) 2025/01/14 00:30:15 fetching corpus: 7150, signal 180084/209667 (executing program) 2025/01/14 00:30:15 fetching corpus: 7200, signal 180337/209667 (executing program) 2025/01/14 00:30:15 fetching corpus: 7250, signal 180709/209667 (executing program) 2025/01/14 00:30:15 fetching corpus: 7300, signal 180912/209667 (executing program) 2025/01/14 00:30:15 fetching corpus: 7350, signal 181146/209667 (executing program) 2025/01/14 00:30:15 fetching corpus: 7400, signal 181671/209667 (executing program) 2025/01/14 00:30:15 fetching corpus: 7450, signal 182012/209667 (executing program) 2025/01/14 00:30:15 fetching corpus: 7500, signal 182366/209667 (executing program) 2025/01/14 00:30:15 fetching corpus: 7550, signal 182605/209667 (executing program) 2025/01/14 00:30:16 fetching corpus: 7600, signal 182996/209667 (executing program) 2025/01/14 00:30:16 fetching corpus: 7650, signal 183157/209667 (executing program) 2025/01/14 00:30:16 fetching corpus: 7700, signal 183484/209667 (executing program) 2025/01/14 00:30:16 fetching corpus: 7750, signal 183758/209667 (executing program) 2025/01/14 00:30:16 fetching corpus: 7800, signal 184051/209667 (executing program) 2025/01/14 00:30:16 fetching corpus: 7850, signal 184448/209667 (executing program) 2025/01/14 00:30:16 fetching corpus: 7900, signal 184790/209667 (executing program) 2025/01/14 00:30:16 fetching corpus: 7950, signal 185039/209667 (executing program) 2025/01/14 00:30:16 fetching corpus: 8000, signal 185702/209667 (executing program) 2025/01/14 00:30:16 fetching corpus: 8050, signal 186001/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8100, signal 186198/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8150, signal 186449/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8200, signal 186681/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8250, signal 186927/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8300, signal 187113/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8350, signal 187416/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8400, signal 187569/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8450, signal 187792/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8500, signal 188060/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8550, signal 188359/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8600, signal 188653/209667 (executing program) 2025/01/14 00:30:17 fetching corpus: 8650, signal 189164/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 8700, signal 189544/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 8750, signal 189847/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 8800, signal 190050/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 8850, signal 190318/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 8900, signal 190622/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 8950, signal 190883/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 9000, signal 191116/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 9050, signal 191351/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 9100, signal 191594/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 9150, signal 191839/209667 (executing program) 2025/01/14 00:30:18 fetching corpus: 9200, signal 192073/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9250, signal 192454/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9300, signal 192615/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9350, signal 192963/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9400, signal 193284/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9450, signal 193553/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9500, signal 193746/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9550, signal 194036/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9600, signal 194349/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9650, signal 194546/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9700, signal 194785/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9750, signal 194987/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9800, signal 195196/209667 (executing program) 2025/01/14 00:30:19 fetching corpus: 9850, signal 195480/209667 (executing program) 2025/01/14 00:30:20 fetching corpus: 9900, signal 195724/209667 (executing program) 2025/01/14 00:30:20 fetching corpus: 9950, signal 196003/209667 (executing program) 2025/01/14 00:30:20 fetching corpus: 10000, signal 196164/209667 (executing program) 2025/01/14 00:30:20 fetching corpus: 10050, signal 196421/209667 (executing program) 2025/01/14 00:30:20 fetching corpus: 10100, signal 196590/209667 (executing program) 2025/01/14 00:30:20 fetching corpus: 10150, signal 196725/209667 (executing program) 2025/01/14 00:30:20 fetching corpus: 10200, signal 196902/209667 (executing program) 2025/01/14 00:30:20 fetching corpus: 10250, signal 197200/209667 (executing program) 2025/01/14 00:30:20 fetching corpus: 10300, signal 197467/209667 (executing program) 2025/01/14 00:30:20 fetching corpus: 10350, signal 197664/209667 (executing program) 2025/01/14 00:30:21 fetching corpus: 10400, signal 198212/209667 (executing program) 2025/01/14 00:30:21 fetching corpus: 10450, signal 198370/209667 (executing program) 2025/01/14 00:30:21 fetching corpus: 10500, signal 198667/209667 (executing program) 2025/01/14 00:30:21 fetching corpus: 10550, signal 199028/209667 (executing program) 2025/01/14 00:30:21 fetching corpus: 10600, signal 199312/209667 (executing program) 2025/01/14 00:30:21 fetching corpus: 10650, signal 199539/209667 (executing program) 2025/01/14 00:30:21 fetching corpus: 10700, signal 199779/209667 (executing program) 2025/01/14 00:30:21 fetching corpus: 10750, signal 200072/209667 (executing program) 2025/01/14 00:30:21 fetching corpus: 10800, signal 200330/209667 (executing program) 2025/01/14 00:30:22 fetching corpus: 10850, signal 200479/209667 (executing program) 2025/01/14 00:30:22 fetching corpus: 10900, signal 200648/209667 (executing program) 2025/01/14 00:30:22 fetching corpus: 10950, signal 201046/209667 (executing program) 2025/01/14 00:30:22 fetching corpus: 11000, signal 201300/209667 (executing program) 2025/01/14 00:30:22 fetching corpus: 11050, signal 201543/209667 (executing program) 2025/01/14 00:30:22 fetching corpus: 11100, signal 201735/209667 (executing program) 2025/01/14 00:30:22 fetching corpus: 11150, signal 201875/209667 (executing program) 2025/01/14 00:30:22 fetching corpus: 11200, signal 202056/209667 (executing program) 2025/01/14 00:30:22 fetching corpus: 11250, signal 202335/209667 (executing program) 2025/01/14 00:30:22 fetching corpus: 11300, signal 202552/209667 (executing program) 2025/01/14 00:30:23 fetching corpus: 11350, signal 202722/209667 (executing program) 2025/01/14 00:30:23 fetching corpus: 11400, signal 202929/209667 (executing program) 2025/01/14 00:30:23 fetching corpus: 11450, signal 203172/209667 (executing program) 2025/01/14 00:30:23 fetching corpus: 11500, signal 203332/209667 (executing program) 2025/01/14 00:30:23 fetching corpus: 11550, signal 203507/209667 (executing program) 2025/01/14 00:30:23 fetching corpus: 11600, signal 203681/209667 (executing program) 2025/01/14 00:30:23 fetching corpus: 11650, signal 203897/209667 (executing program) 2025/01/14 00:30:23 fetching corpus: 11700, signal 204072/209667 (executing program) 2025/01/14 00:30:23 fetching corpus: 11750, signal 204340/209667 (executing program) 2025/01/14 00:30:23 fetching corpus: 11800, signal 204513/209667 (executing program) 2025/01/14 00:30:24 fetching corpus: 11819, signal 204600/209667 (executing program) 2025/01/14 00:30:24 fetching corpus: 11819, signal 204600/209667 (executing program) 2025/01/14 00:30:26 starting 8 fuzzer processes 00:30:26 executing program 0: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="e4665c76890168e150648cc64a65e88e313537600910c8f0405a705f4b23b7b6308e07526600ea5677ae772bc9a534bef047536f2d485f251da62725f960ea6587883bd5da168c2145344e1841", 0x4d}], 0x1, &(0x7f00000001c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x4000}}], 0x1, 0x4000001) setxattr$incfs_id(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) r2 = getpgrp(0xffffffffffffffff) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000540)={0x481a000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x27}, &(0x7f0000000400)=""/39, 0x27, &(0x7f0000000440)=""/160, &(0x7f0000000500)=[r2, 0xffffffffffffffff], 0x2, {r3}}, 0x58) recvmmsg$unix(r0, &(0x7f0000005780)=[{{&(0x7f00000005c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000640)=""/97, 0x61}, {&(0x7f00000006c0)=""/130, 0x82}, {&(0x7f0000000780)=""/169, 0xa9}], 0x3}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/145, 0x91}, {&(0x7f00000009c0)=""/237, 0xed}, {&(0x7f0000000ac0)=""/227, 0xe3}, {&(0x7f0000000bc0)=""/71, 0x47}], 0x4, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000d80)=""/166, 0xa6}, {&(0x7f0000000e40)=""/190, 0xbe}, {&(0x7f0000000f00)=""/222, 0xde}, {&(0x7f0000001000)=""/48, 0x30}, {&(0x7f0000001040)=""/230, 0xe6}, {&(0x7f0000001140)=""/162, 0xa2}, {&(0x7f0000001200)=""/115, 0x73}, {&(0x7f0000001280)=""/214, 0xd6}], 0x8, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000014c0), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001540)=""/114, 0x72}, {&(0x7f00000015c0)=""/179, 0xb3}, {&(0x7f0000001680)=""/166, 0xa6}, {&(0x7f0000001740)=""/66, 0x42}, {&(0x7f00000017c0)=""/219, 0xdb}, {&(0x7f00000018c0)=""/181, 0xb5}], 0x6}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/160, 0xa0}, {&(0x7f0000002b40)=""/50, 0x32}, {&(0x7f0000002b80)=""/63, 0x3f}, {&(0x7f0000002bc0)=""/136, 0x88}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/18, 0x12}], 0x7, &(0x7f0000003d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000003e00), 0x6e, &(0x7f0000005440)=[{&(0x7f0000003e80)=""/142, 0x8e}, {&(0x7f0000003f40)=""/219, 0xdb}, {&(0x7f0000004040)=""/192, 0xc0}, {&(0x7f0000004100)=""/95, 0x5f}, {&(0x7f0000004180)=""/61, 0x3d}, {&(0x7f00000041c0)}, {&(0x7f0000004200)=""/245, 0xf5}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000005300)=""/36, 0x24}, {&(0x7f0000005340)=""/244, 0xf4}], 0xa, &(0x7f0000005500)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000005540)=@abs, 0x6e, &(0x7f0000005740)=[{&(0x7f00000055c0)=""/173, 0xad}, {&(0x7f0000005680)=""/170, 0xaa}], 0x2}}], 0x7, 0x40, &(0x7f0000005940)) r8 = dup3(r0, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000005980)='./file0\x00', &(0x7f00000059c0), &(0x7f0000005a00)={0x0, 0xfb, 0x56, 0x2, 0x80, "4c545ce52a539f159cd7a48675b9be3c", "b11df98593ad4b3472d63fbbba36825125fa4d29ac689f738aef552d281923e5ddf93483ce8f71bc24c6cf58543259d5f0277728f9c85fd2d51ed41a159f225cdf"}, 0x56, 0x3) open_tree(r4, &(0x7f0000005a80)='./file0\x00', 0x100) recvmsg$unix(r8, &(0x7f0000005d00)={&(0x7f0000005ac0)=@abs, 0x6e, &(0x7f0000005c40)=[{&(0x7f0000005b40)=""/198, 0xc6}], 0x1, &(0x7f0000005c80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x0) r12 = syz_mount_image$vfat(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x7fffffff, 0x4, &(0x7f00000061c0)=[{&(0x7f0000005e80)="74abff3c1e736924f4725ee76b62c36e1d791eda869b005aaef05364d03b61c48ef262f691e44fb17b05fbaddfeef73f20eb5cf2ecc2f549a554c71574bf615f9215533f59d3b77f13968c66223c0041613b2445b50001dd6c90a9ad1cafd5fe38a82267f24f1f255f11319bfa7f", 0x6e, 0x3}, {&(0x7f0000005f00)="7a96f1d02ac425f5ba3697be115f31af10b01712515b8a2ae5f0310802e5ed8762736e2c8a60cf23df3c806d384cb11ee32cefc71c62f3ca662ac3e9ab05bdac41d0a8979d6eb1506ff9f490f535efdb6073795c067717f9f7a16ac4d006b1ad48fd95657c7f4f5ac937e5ebb931b225cfd062d689032b58d360695c014225012cce91feccaea329eaef7cc293cc9244bb26b2b25d738fc65295dca71b17fc1330e483b063f9943de1feb5bacb926bdf063503f3047f9e4fab061384d988c2ddb021563f7b4957a309", 0xc9, 0x8}, {&(0x7f0000006000)="e02443c52fb54f7233c2244da5f60028517ee4b08e2b273e13cd550c6360b3fb0737254fd067983047d83c266eb897cd12733faa50e851e5cec11858a251ac2fa1f5274484439b05e3bfc8e3126e445c02afc6b3eaf5e2ffe4a42d2549b403e70df520ba61fc370edf997302bf5d46ff4790948f3ba65249f78e43e6ce89fef2300f601a54c13480a8c42c4e66e65d6604593cd92edc95eb140d408d21af4abcba61d5bf399dfde394b452ddf4de70e83f41bd97c1c1f7552d45a28b900f3ca69b634de408170a435e8f04d6aac9188800e96c4b11893af86b3110a1b69e99860b888aeb53130ae563249bb8ffc6", 0xee, 0x4fa5}, {&(0x7f0000006100)="25615d1298f4bf93cf6b4f762e807a1954fd6ab846bbc32f5a4e51d5b7b1f2c6a236cf4de11574917672570e7697890182eace2b3de74ffb62e616a33437d3910b672e89654a7b1dc3ee45a5fec840dd0ee203b4953d6e25ea9a7c0c9ab75b674351dd3652c8181482c35d4050171e00250668498f6904e8eb62b0640f19e6e4ddd11b252650951e6defa6c0d7a1d23fdfcd8fb30353798921df8ade7ab7", 0x9e, 0x4}], 0x1a0002, &(0x7f0000006240)={[{}, {@uni_xlate}, {@shortname_winnt}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_type={'subj_type', 0x3d, 'user.incfs.id\x00'}}]}) sendmsg$unix(r7, &(0x7f0000006300)={&(0x7f0000005d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005dc0), 0x0, &(0x7f00000062c0)=[@rights={{0x1c, 0x1, 0x1, [r9, r12, r11]}}, @rights={{0x10}}], 0x30, 0x10}, 0x20004044) connect$unix(r6, &(0x7f0000006340)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000006500)={&(0x7f00000063c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000064c0)={&(0x7f0000006400)={0xa8, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7779}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x3}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3096}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8cf}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) fspick(r4, &(0x7f0000006540)='./file0\x00', 0x1) r13 = syz_mount_image$msdos(&(0x7f0000006580), &(0x7f00000065c0)='./file0\x00', 0x7, 0x3, &(0x7f0000006800)=[{&(0x7f0000006600)="f3230643596127a4688502896f2705325a9a2b423877e91c302ec42a4f931172dbde3583db09d64f095eb6f96e6bc15a4fd28b61562d1f35ff5eea35984400f180d001cee3ff79e85b89179d23703c7d93419b4057350328a88d22093b02a2d9aa0ad7ca08c37a980f77ba25b0e983c0ceb7b478e2ba8681e34ed38d555bded8e9ab0c8f094f41c71ff090add7245ea7", 0x90, 0x10001}, {&(0x7f00000066c0)="d0d06b254e8da51e381126f8a3bd3e5752997d775aed061dce59df092d72ff85d6e7ddff5c5ae7740a0819e03b0ea69a36b9102772b4ef617adf30050146fd753dfb7d47ae3c073a06c3b2d3517e1c", 0x4f, 0x7}, {&(0x7f0000006740)="002a09c90c6d613dc96375f150c0a74e1d76d717c43ec5892e56d3f1dc551fd626c8a0532fd0b881306544a517abfa50ab2fadb05a4b13719ea88eaeb5589d245f2d5955797ec55c90b6839b091968785affc7ce05a6caef47b831f9c12b79ec673d6253a2bceb6a1c572fa560ae785aee6994bd7b68b16edcbe8d3a298a9ea1d974cb98fc983fc294f079", 0x8b, 0x100000001}], 0x20000, &(0x7f0000006880)={[{@dots}, {@dots}, {@fat=@quiet}, {@nodots}], [{@appraise}, {@uid_eq={'uid', 0x3d, r5}}, {@seclabel}, {@fowner_gt={'fowner>', r5}}, {@smackfsdef={'smackfsdef', 0x3d, ']-'}}]}) close_range(r10, r13, 0x0) getpid() 00:30:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000002440)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/146, 0x92}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/188, 0xbc}, {&(0x7f0000001280)=""/107, 0x6b}, {&(0x7f0000001300)=""/18, 0x12}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/199, 0xc7}], 0x9, &(0x7f0000002500)=""/234, 0xea}, 0x2}, {{&(0x7f0000002600)=@alg, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002680)=""/119, 0x77}, {&(0x7f0000002700)=""/101, 0x65}, {&(0x7f0000002780)=""/88, 0x58}, {&(0x7f0000002800)=""/191, 0xbf}, {&(0x7f00000028c0)=""/55, 0x37}, {&(0x7f0000002900)=""/150, 0x96}, {&(0x7f00000029c0)=""/95, 0x5f}], 0x7, &(0x7f0000002ac0)=""/115, 0x73}, 0x3}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000002b40)=""/16, 0x10}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/116, 0x74}, {&(0x7f0000003c00)=""/227, 0xe3}], 0x4, &(0x7f0000003d40)=""/4096, 0x1000}, 0x7f}], 0x3, 0x121, &(0x7f0000004e00)={0x77359400}) r1 = accept4$inet(r0, 0x0, &(0x7f0000004e40), 0x800) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000004e80)={0x6cc, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000004fc0), 0x10) r3 = signalfd(r2, &(0x7f0000005000)={[0x200]}, 0x8) r4 = getgid() fsetxattr$system_posix_acl(r3, &(0x7f0000005040)='system.posix_acl_access\x00', &(0x7f0000005080)={{}, {}, [{0x2, 0x3, 0xffffffffffffffff}], {0x4, 0x5}, [{0x8, 0x4, r4}, {0x8, 0x4, 0xee01}, {0x8, 0xc}], {0x10, 0x6}, {0x20, 0x2}}, 0x44, 0x3) getgid() getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000005200)={'nat\x00', 0x0, 0x4, 0x60, [0x6bc, 0x9, 0x4, 0xfffffffffffffffb, 0x0, 0x401], 0x8, &(0x7f0000005100)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000005180)=""/96}, &(0x7f0000005280)=0x78) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000052c0)={0x84, 0x8, 0x2, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x12}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x48) r5 = eventfd(0xff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r5, 0x6ef24000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000005340), 0x10a82, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000005380)={'vlan1\x00'}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000005540)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005500)={&(0x7f0000005400)={0xc8, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004010}, 0x10) openat(0xffffffffffffffff, &(0x7f0000005580)='./file0\x00', 0x4a0000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000005600)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @l2={0x1f, 0x6c2c, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3ff, 0x2}, @ethernet={0x6}, 0x2, 0x0, 0x0, 0x0, 0x4, &(0x7f00000055c0)='geneve0\x00', 0x0, 0x1, 0x8}) 00:30:26 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xbd, 0x3, 0x1, 0x8, 0x0, 0x3, 0x1, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x8}, 0x20, 0xfff, 0x80f6, 0x5, 0x5, 0x6, 0x8, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x66, 0x5, 0x80, 0x1, 0x0, 0x1, 0x204, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x3, 0x5}, 0x4840, 0x100000000, 0x7, 0x1, 0x1, 0x8000, 0x4, 0x0, 0x2, 0x0, 0x200}, 0xffffffffffffffff, 0x6, r0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xda, 0x1, 0x8, 0x3, 0x0, 0x9, 0x2010, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x9}, 0x4000, 0x40, 0x100, 0x6, 0xffffffffc2b11666, 0x3, 0x1f, 0x0, 0x8001, 0x0, 0x80000001}, 0x0, 0x1, 0xffffffffffffffff, 0x8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='@@\x00', 0x0, r0) r3 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xa7, 0x8, 0x2, 0xc9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x9, 0xfffffffffffffffb}, 0x4a1a2, 0x200, 0x8000, 0x5, 0x5468a22c, 0xab1, 0x4, 0x0, 0x10000, 0x0, 0x100000001}, 0x0, 0x1ff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x121900, 0x0) sendfile(r4, r5, &(0x7f00000002c0), 0x1000) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000300)={0x4b9, 0x1ea5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000007480)={0x3, 0x80, 0x4, 0xfa, 0x2, 0x6, 0x0, 0xfb, 0x880, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x6}, 0x10400, 0x6, 0x3, 0x1, 0x100000000, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x8}, 0xffffffffffffffff, 0x8, r2, 0x3) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007500), 0xc01, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000007540)={0x7, 0x1ff, 0x2, 0x0, 0x0, [{{r7}, 0x4}, {{r2}, 0x3}]}) write(r2, &(0x7f00000075c0)="8a323e24dc528f06b4006679da494cffbe80577a14b31bd088a8e95dbd5e4a141e0ab057cb3db44c4744172eb35ff4de50c6380657dd5f1c997130f2a19c5b11aec32dc4190382abbe672967c20676587cad2a145c88f19f5f5b1f2d6770fa4f9a9647ddc5cd0111c161e374105a9cda82cc167d4f9864f6320e54c81a34d06210305082d1ecf7d9986e5ea2efeefc40609c2aff0cacb87dd9b3f85678984f29b26afd17c7aa29aa8d775366bd6cad4e418b877a05c016a8db493b8366b7ef94706c6ba8a7fe03181c3bef1a48ccb107a0026e59d24362f94db0929f8d57ad381a6dc4f3a97c3d45670c009f08ca99ecbfeb", 0xf2) perf_event_open(&(0x7f0000007700)={0x3, 0x80, 0x0, 0x54, 0x6, 0x40, 0x0, 0x81, 0x204, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f00000076c0), 0x2}, 0x604, 0x4, 0x81, 0x6, 0x8, 0x10000, 0x6, 0x0, 0x35f211e2, 0x0, 0x7fff}, 0x0, 0xd, r3, 0xa) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000007780)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000077c0)={"3dd12de1afa29899504f104146064916", 0x0, 0x0, {0x3}, {0x3, 0x7f}, 0x20, [0x6, 0x5, 0x9, 0x40, 0x2, 0x400, 0x2, 0x8, 0x3, 0x40, 0xfffffffffffffff7, 0xfffffffffffffff7, 0x10001, 0x5, 0x1ff, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000078c0)={"3c2a3ca0038ae312d547197400dc1b5e", r8, r9, {0x6, 0x40}, {0x5, 0x20}, 0x6, [0x4799296e, 0x401, 0x1, 0x8, 0x7, 0x1, 0x1, 0xfff, 0x1a, 0xfffffffffffffffb, 0x17b, 0x7fff, 0xffffffffffffffec, 0xfffffffffffffffb, 0x90000000000, 0xffff]}) poll(&(0x7f0000007a00)=[{0xffffffffffffffff, 0x8504}, {r6, 0x2003}], 0x2, 0x8) [ 106.588590] audit: type=1400 audit(1736814626.717:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:30:26 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}}]}, 0x70}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x108, r3, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x50}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x506}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x949}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2140}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000081}, 0x6004000) getsockname(r1, &(0x7f0000000680)=@ethernet, &(0x7f0000000700)=0x80) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000740)={0x1, 'veth1_virt_wifi\x00', {}, 0xf60}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1) recvmsg$unix(r1, &(0x7f00000009c0)={&(0x7f0000000800)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/23, 0x17}], 0x1, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x40000002) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000c80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x194, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x194}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000cc0), 0x800, 0x0) recvfrom$inet(r6, &(0x7f0000000d00)=""/70, 0x46, 0x40010000, &(0x7f0000000d80)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000dc0)={0x0, 'veth1_vlan\x00', {0x4}, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 00:30:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = pidfd_open(0x0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x155500, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r2, 0x7f, 0x8001, 0x8}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x78}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xe4bc0009e25e7230}, 0x10) r6 = creat(&(0x7f00000004c0)='./file0\x00', 0x4) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) r8 = fcntl$dupfd(r3, 0x406, r2) write$binfmt_misc(r8, &(0x7f0000000540)={'syz1', "64683f3a4bd25dc1b8a70a042e5340140f029e"}, 0x17) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000780)={"b1e859095a01d86c84f59bdaece84680", r9, 0x0, {0x3, 0x1}, {0xea, 0x8}, 0x1000, [0x1, 0x2, 0x10000, 0x5, 0x0, 0x100000000, 0xd28, 0xeaf6, 0xffffffffffff1f57, 0x1f, 0x2, 0x4, 0x2ae, 0x2, 0x8, 0xac26]}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x7d}}}}}, 0x28}}, 0x41) 00:30:26 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0xc20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044005}, 0x55) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ']*\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x40) r5 = syz_open_dev$mouse(&(0x7f0000000680), 0xfffffffffffff000, 0x4000) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x200080c4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r7, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x80}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1d0}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x4014) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x2c801) r8 = fcntl$dupfd(r1, 0x406, r5) sendmsg$NL80211_CMD_LEAVE_OCB(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 00:30:26 executing program 6: r0 = gettid() r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="7be4bc3baff393268cb99dd5d87e636f91e504fdd2bf87075e6c786fdcf052ea34ecd32bdbab34d2d9f2cffa91dec3f7a8757f15514b9f219928bd6dc2", 0x3d}, {&(0x7f00000000c0)="ed4182ed8568137f118cf94021bdc511ce7c84cfd872d9c98cbac1c7795f1b3dcc2d0b35ecdf168c47a79ed1b486e9ea0a2aff5d185d58a7cbef9ed46fc19e4782b10be962d5a245183e1ece07ebc273f39772dec68467e359c5f8e556b72774fc5fab44c46429cc3f87c1d4440e961525f98745fd31459e2ce6bbd502184f2a71cc3916ad6e1419f3bb938f8e22724b76dbe11d61a0aaa1c99ff458e504ca5fea32627d4f96cc34429822a031dc6c1bdd7bdd8bf9e135dc4754b8f8", 0xbc, 0x400}, {&(0x7f0000000180)="18304735eef42a855f0c77df116773f4cfcbf55b76aab29a71787524624fe1bea6061240b13259304317252cad57f2231107253022d5b94bb912cef4b5ddde138eb2a94c38747cc812c82418ba728f05b53c8504170208b245812bfdc4d1bddac0107db3fc7a5942459a", 0x6a, 0x9}], 0x20000, &(0x7f0000000280)={[{@gid={'gid', 0x3d, 0xee00}}, {@mode={'mode', 0x3d, 0x3}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x36, 0x1b, 0x0, 0x78, 0x2d]}}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '-^%-$'}}]}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) kcmp(r0, 0x0, 0x6, r1, r2) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x33, 0x0, 0x4, 0x37, 0x0, 0x80, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x0, 0x9, 0x810, 0x8, 0xfffffffffffffff7, 0x800, 0x1f, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0xffff, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x3, 0xffffffffffffffff, r4, 0xee00, r5, 0x4e, 0x6}, 0x8, 0x0, 0x8, 0x0, r0, r0, 0xf25}) r6 = openat(r1, &(0x7f00000005c0)='./file0\x00', 0x181000, 0xac) gettid() openat(r6, &(0x7f0000000600)='./file0\x00', 0x280, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r9 = memfd_secret(0x0) open_by_handle_at(r9, &(0x7f0000000840)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x7dc, 0x8, 0xfffffffa, 0xffff, 0x80000001, 0x9}}, 0x101400) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x0, 0x0, 0x80, 0xa1, 0x0, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffff00, 0x1, @perf_bp={&(0x7f0000000880), 0x1}, 0x12452, 0x7fff, 0x80000001, 0x2, 0xef, 0x6, 0xb2e8, 0x0, 0x6, 0x0, 0x6}, 0x0, 0xf, r6, 0x9) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000940)={0x8, 0x80, 0x3, 0x1ff, 0x0, [0x0, 0x5, 0x1, 0x8]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x7}) 00:30:26 executing program 7: ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x14) r0 = dup(0xffffffffffffffff) ioctl$CDROMRESET(r0, 0x5312) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@newsa={0x134, 0x10, 0x4, 0x70bd2d, 0x25dfdbfe, {{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e23, 0x0, 0x4e20, 0x400, 0x2, 0x20, 0x20, 0x8}, {@in=@remote, 0x4d4, 0x33}, @in6=@empty, {0xfffffffffffffacf, 0x7, 0x8, 0x81, 0x5, 0x8000000000, 0xca98, 0x890}, {0xb8b1, 0x2, 0x1, 0x8}, {0x5, 0x3, 0x8}, 0x70bd26, 0x3502, 0x2, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x3c}, 0xa, @in=@broadcast, 0x3500, 0x2, 0x2, 0x0, 0x6, 0x1000, 0xb48}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000001}, 0x40011) r3 = dup(r2) close_range(r2, r1, 0x2) socket$inet6(0xa, 0x800, 0x8) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000240)=[r4, r1]}, 0x2) r5 = openat$incfs(r3, &(0x7f00000002c0)='.log\x00', 0x42040, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000300)={{r6}, 0x3000000000000000, 0xfffffffffffffffe, 0x8}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80, 0x194) r7 = openat$incfs(r0, &(0x7f0000000380)='.pending_reads\x00', 0x4602, 0x1c1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0\x00'}) connect$inet6(r8, &(0x7f0000000400)={0xa, 0x4e21, 0x4, @mcast2, 0x943}, 0x1c) getsockname$unix(r7, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) [ 107.903248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.915980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.924503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.941423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.955551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.962958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.968903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.980346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.982693] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.989327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.993506] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.016329] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.027922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.029492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.033402] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.035319] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.036215] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.045789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.046522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.050588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.055253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.055909] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.069113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.071688] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.077262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.085010] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.115998] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 108.118415] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 108.121882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.125146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.130699] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.136464] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.138961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.141129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 108.144041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.146471] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 108.150627] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.151492] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.157470] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.160386] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.166043] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 108.166367] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 108.184033] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 108.209183] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 108.213376] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 108.215312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 108.237391] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 108.243214] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 110.043148] Bluetooth: hci0: command tx timeout [ 110.108591] Bluetooth: hci1: command tx timeout [ 110.170917] Bluetooth: hci2: command tx timeout [ 110.234851] Bluetooth: hci3: command tx timeout [ 110.299897] Bluetooth: hci6: command tx timeout [ 110.300176] Bluetooth: hci7: command tx timeout [ 110.300320] Bluetooth: hci4: command tx timeout [ 110.300460] Bluetooth: hci5: command tx timeout [ 112.092747] Bluetooth: hci0: command tx timeout [ 112.155008] Bluetooth: hci1: command tx timeout [ 112.220037] Bluetooth: hci2: command tx timeout [ 112.282847] Bluetooth: hci3: command tx timeout [ 112.348015] Bluetooth: hci5: command tx timeout [ 112.348242] Bluetooth: hci4: command tx timeout [ 112.348294] Bluetooth: hci7: command tx timeout [ 112.348343] Bluetooth: hci6: command tx timeout [ 114.139149] Bluetooth: hci0: command tx timeout [ 114.202839] Bluetooth: hci1: command tx timeout [ 114.266875] Bluetooth: hci2: command tx timeout [ 114.330846] Bluetooth: hci3: command tx timeout [ 114.395070] Bluetooth: hci6: command tx timeout [ 114.395365] Bluetooth: hci7: command tx timeout [ 114.395483] Bluetooth: hci4: command tx timeout [ 114.395551] Bluetooth: hci5: command tx timeout [ 116.187828] Bluetooth: hci0: command tx timeout [ 116.250893] Bluetooth: hci1: command tx timeout [ 116.314947] Bluetooth: hci2: command tx timeout [ 116.378868] Bluetooth: hci3: command tx timeout [ 116.442920] Bluetooth: hci6: command tx timeout [ 116.443043] Bluetooth: hci5: command tx timeout [ 116.443173] Bluetooth: hci4: command tx timeout [ 116.443271] Bluetooth: hci7: command tx timeout [ 166.296806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.297078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.875785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.875871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.729404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.734153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.736413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.744470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.750238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.754124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.864402] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.867523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.870431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.881575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.887089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.890932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.929036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.933218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.940047] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.945166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.953975] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.955058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.060082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.068228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.074248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.080557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.084210] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.088067] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.123416] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.138873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 171.142087] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.165069] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 171.165949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.177966] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 171.178343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.190650] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.203294] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.214391] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.222401] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.225609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.238904] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.247748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.248089] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 171.248418] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 171.265354] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.277145] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.277874] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 171.280506] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.280930] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 171.288176] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.293491] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.305073] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.827021] Bluetooth: hci0: command tx timeout [ 172.954887] Bluetooth: hci1: command tx timeout [ 173.018775] Bluetooth: hci2: command tx timeout [ 173.146944] Bluetooth: hci3: command tx timeout [ 173.338819] Bluetooth: hci6: command tx timeout [ 173.468020] Bluetooth: hci7: command tx timeout [ 173.530814] Bluetooth: hci4: command tx timeout [ 173.915805] Bluetooth: hci5: command tx timeout [ 174.874937] Bluetooth: hci0: command tx timeout [ 175.003762] Bluetooth: hci1: command tx timeout [ 175.067046] Bluetooth: hci2: command tx timeout [ 175.194780] Bluetooth: hci3: command tx timeout [ 175.386825] Bluetooth: hci6: command tx timeout [ 175.514846] Bluetooth: hci7: command tx timeout [ 175.578975] Bluetooth: hci4: command tx timeout [ 175.963745] Bluetooth: hci5: command tx timeout [ 176.922785] Bluetooth: hci0: command tx timeout [ 177.051767] Bluetooth: hci1: command tx timeout [ 177.114853] Bluetooth: hci2: command tx timeout [ 177.243776] Bluetooth: hci3: command tx timeout [ 177.434951] Bluetooth: hci6: command tx timeout [ 177.562835] Bluetooth: hci7: command tx timeout [ 177.626779] Bluetooth: hci4: command tx timeout [ 178.010782] Bluetooth: hci5: command tx timeout [ 178.970783] Bluetooth: hci0: command tx timeout [ 179.099010] Bluetooth: hci1: command tx timeout [ 179.162808] Bluetooth: hci2: command tx timeout [ 179.291831] Bluetooth: hci3: command tx timeout [ 179.483760] Bluetooth: hci6: command tx timeout [ 179.610917] Bluetooth: hci7: command tx timeout [ 179.674811] Bluetooth: hci4: command tx timeout [ 180.058837] Bluetooth: hci5: command tx timeout [ 232.615385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.621269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.624327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.632052] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.638865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.641378] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.871400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.875980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.879164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.885292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.889146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.891403] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.208937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.214598] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.217373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.226218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.235451] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.237515] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.242958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.244538] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.245623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.273185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.278472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.278981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.288208] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.288537] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.294007] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.305491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.307267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.324865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.358088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.375131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.389595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 233.390527] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 233.398146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 233.406115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 233.409726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.418233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 233.431163] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 233.442766] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 233.443286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.447026] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 233.450263] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 233.450908] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 233.453238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 233.455276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.457919] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 233.462076] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.715793] Bluetooth: hci0: command tx timeout [ 234.972759] Bluetooth: hci1: command tx timeout [ 235.359101] Bluetooth: hci2: command tx timeout [ 235.359566] Bluetooth: hci3: command tx timeout [ 235.418936] Bluetooth: hci4: command tx timeout [ 235.610884] Bluetooth: hci5: command tx timeout [ 235.611056] Bluetooth: hci7: command tx timeout [ 235.674766] Bluetooth: hci6: command tx timeout [ 236.762828] Bluetooth: hci0: command tx timeout [ 237.018882] Bluetooth: hci1: command tx timeout [ 237.402878] Bluetooth: hci3: command tx timeout [ 237.404142] Bluetooth: hci2: command tx timeout [ 237.466814] Bluetooth: hci4: command tx timeout [ 237.658818] Bluetooth: hci5: command tx timeout [ 237.659910] Bluetooth: hci7: command tx timeout [ 237.724766] Bluetooth: hci6: command tx timeout [ 238.811782] Bluetooth: hci0: command tx timeout [ 239.066860] Bluetooth: hci1: command tx timeout [ 239.450905] Bluetooth: hci2: command tx timeout [ 239.450947] Bluetooth: hci3: command tx timeout [ 239.515073] Bluetooth: hci4: command tx timeout [ 239.706848] Bluetooth: hci7: command tx timeout [ 239.707027] Bluetooth: hci5: command tx timeout [ 239.772717] Bluetooth: hci6: command tx timeout [ 240.858808] Bluetooth: hci0: command tx timeout [ 241.116909] Bluetooth: hci1: command tx timeout [ 241.498871] Bluetooth: hci3: command tx timeout [ 241.498942] Bluetooth: hci2: command tx timeout [ 241.562760] Bluetooth: hci4: command tx timeout [ 241.754793] Bluetooth: hci7: command tx timeout [ 241.754827] Bluetooth: hci5: command tx timeout [ 241.818766] Bluetooth: hci6: command tx timeout [ 294.953449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.956199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.958615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.967307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.971425] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.975341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.340016] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.346902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.349500] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.357264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.360537] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.362927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.409829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.412189] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.414373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.428514] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.430456] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.430501] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.437463] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.441741] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.444278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.446140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.451869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.461850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.466253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 295.468186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.474990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.476473] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.483499] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.489988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.497053] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.519614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.521085] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 295.521877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.552146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 295.553207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.640412] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 295.652114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 295.656298] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 295.661116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 295.670909] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 295.678199] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 295.680622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.698070] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 295.700550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 295.759928] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 295.776906] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 295.782991] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 297.050918] Bluetooth: hci0: command tx timeout [ 297.434923] Bluetooth: hci1: command tx timeout [ 297.562824] Bluetooth: hci2: command tx timeout [ 297.563252] Bluetooth: hci3: command tx timeout [ 297.628789] Bluetooth: hci5: command tx timeout [ 297.693862] Bluetooth: hci4: command tx timeout [ 297.883829] Bluetooth: hci6: command tx timeout [ 297.947863] Bluetooth: hci7: command tx timeout [ 299.099119] Bluetooth: hci0: command tx timeout [ 299.483790] Bluetooth: hci1: command tx timeout [ 299.611785] Bluetooth: hci3: command tx timeout [ 299.611816] Bluetooth: hci2: command tx timeout [ 299.675719] Bluetooth: hci5: command tx timeout [ 299.739070] Bluetooth: hci4: command tx timeout [ 299.930942] Bluetooth: hci6: command tx timeout [ 299.994790] Bluetooth: hci7: command tx timeout [ 301.146796] Bluetooth: hci0: command tx timeout [ 301.532809] Bluetooth: hci1: command tx timeout [ 301.659180] Bluetooth: hci2: command tx timeout [ 301.659572] Bluetooth: hci3: command tx timeout [ 301.722755] Bluetooth: hci5: command tx timeout [ 301.787800] Bluetooth: hci4: command tx timeout [ 301.980698] Bluetooth: hci6: command tx timeout [ 302.042912] Bluetooth: hci7: command tx timeout [ 303.194736] Bluetooth: hci0: command tx timeout [ 303.580181] Bluetooth: hci1: command tx timeout [ 303.707775] Bluetooth: hci3: command tx timeout [ 303.708550] Bluetooth: hci2: command tx timeout [ 303.771740] Bluetooth: hci5: command tx timeout [ 303.834834] Bluetooth: hci4: command tx timeout [ 304.026743] Bluetooth: hci6: command tx timeout [ 304.090799] Bluetooth: hci7: command tx timeout [ 355.101369] syz-executor.2 (10608) used greatest stack depth: 23792 bytes left [ 357.234627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.241285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.244244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.256113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.263488] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 357.272126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.673251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.677867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.679864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.686313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.692081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.694275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.813871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.816999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.818835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.825110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.828225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 357.831135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.887891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.918137] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.920543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.926787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.929950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.932106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.013615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.017095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.020622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.024068] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 358.024765] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.033938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.040439] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 358.043099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.075557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.079456] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.091845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.097495] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 358.110999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.112069] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 358.115549] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.119093] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.136190] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.142898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 358.150915] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 358.153456] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 358.157229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 358.171310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.174142] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 358.176840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.322926] Bluetooth: hci0: command tx timeout [ 359.771814] Bluetooth: hci1: command tx timeout [ 359.900214] Bluetooth: hci2: command tx timeout [ 360.027736] Bluetooth: hci3: command tx timeout [ 360.155770] Bluetooth: hci5: command tx timeout [ 360.220185] Bluetooth: hci4: command tx timeout [ 360.221147] Bluetooth: hci6: command tx timeout [ 360.283789] Bluetooth: hci7: command tx timeout [ 361.371844] Bluetooth: hci0: command tx timeout [ 361.818713] Bluetooth: hci1: command tx timeout [ 361.946776] Bluetooth: hci2: command tx timeout [ 362.076027] Bluetooth: hci3: command tx timeout [ 362.202776] Bluetooth: hci5: command tx timeout [ 362.266998] Bluetooth: hci4: command tx timeout [ 362.267142] Bluetooth: hci6: command tx timeout [ 362.330842] Bluetooth: hci7: command tx timeout [ 363.418893] Bluetooth: hci0: command tx timeout [ 363.867961] Bluetooth: hci1: command tx timeout [ 363.996781] Bluetooth: hci2: command tx timeout [ 364.123835] Bluetooth: hci3: command tx timeout [ 364.251968] Bluetooth: hci5: command tx timeout [ 364.315857] Bluetooth: hci4: command tx timeout [ 364.316102] Bluetooth: hci6: command tx timeout [ 364.378902] Bluetooth: hci7: command tx timeout [ 365.466994] Bluetooth: hci0: command tx timeout [ 365.916121] Bluetooth: hci1: command tx timeout [ 366.042712] Bluetooth: hci2: command tx timeout [ 366.171725] Bluetooth: hci3: command tx timeout [ 366.299867] Bluetooth: hci5: command tx timeout [ 366.363761] Bluetooth: hci6: command tx timeout [ 366.364332] Bluetooth: hci4: command tx timeout [ 366.426698] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:35:31 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88802d728a9a RCX=1ffffffff0fe0f44 RDX=dffffc0000000000 RSI=0000000000000004 RDI=ffffffff87f07a20 RBP=ffff88802d728a78 RSP=ffff88803dc2f6b8 R8 =0000000000000000 R9 =fffffbfff0fdffde R10=ffffffff87effef7 R11=0000000000000001 R12=ffff88802d728000 R13=ffffffff85cecd40 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff814fdeb5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f76e477b540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f76e484c710 CR3=0000000036658000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff818e5d3b RDX=ffffea0000525540 RSI=0000000000000008 RDI=ffffea0000525540 RBP=ffffea0000525540 RSP=ffff888037faf838 R8 =0000000000000000 R9 =fffff940000a4aa8 R10=ffffea0000525547 R11=0000000000000001 R12=8000000014955025 R13=000056135c98a000 R14=ffff888037fafce8 R15=0000000000000000 RIP=ffffffff818e5d48 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc3563e56f4 CR3=0000000015dc4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fc3563f447000007fc3563f3f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000