syzkaller login: [ 63.204382] sshd (233) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:5330' (ECDSA) to the list of known hosts. 2025/01/16 04:53:25 fuzzer started 2025/01/16 04:53:26 dialing manager at localhost:37863 [ 65.791169] cgroup: Unknown subsys name 'net' [ 65.907824] cgroup: Unknown subsys name 'cpuset' [ 65.937152] cgroup: Unknown subsys name 'rlimit' [ 73.413123] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 83.406362] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/16 04:53:44 syscalls: 2217 2025/01/16 04:53:44 code coverage: enabled 2025/01/16 04:53:44 comparison tracing: enabled 2025/01/16 04:53:44 extra coverage: enabled 2025/01/16 04:53:44 setuid sandbox: enabled 2025/01/16 04:53:44 namespace sandbox: enabled 2025/01/16 04:53:44 Android sandbox: enabled 2025/01/16 04:53:44 fault injection: enabled 2025/01/16 04:53:44 leak checking: enabled 2025/01/16 04:53:44 net packet injection: enabled 2025/01/16 04:53:44 net device setup: enabled 2025/01/16 04:53:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/16 04:53:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/16 04:53:44 USB emulation: enabled 2025/01/16 04:53:44 hci packet injection: enabled 2025/01/16 04:53:44 wifi device emulation: enabled 2025/01/16 04:53:44 802.15.4 emulation: enabled 2025/01/16 04:53:44 fetching corpus: 50, signal 24424/26213 (executing program) 2025/01/16 04:53:44 fetching corpus: 100, signal 33312/36727 (executing program) 2025/01/16 04:53:44 fetching corpus: 150, signal 38932/43851 (executing program) 2025/01/16 04:53:44 fetching corpus: 200, signal 46553/52820 (executing program) 2025/01/16 04:53:44 fetching corpus: 250, signal 52607/60198 (executing program) 2025/01/16 04:53:44 fetching corpus: 300, signal 55909/64838 (executing program) 2025/01/16 04:53:45 fetching corpus: 350, signal 58522/68761 (executing program) 2025/01/16 04:53:45 fetching corpus: 400, signal 61905/73386 (executing program) 2025/01/16 04:53:45 fetching corpus: 450, signal 65316/77955 (executing program) 2025/01/16 04:53:45 fetching corpus: 500, signal 69547/83212 (executing program) 2025/01/16 04:53:45 fetching corpus: 550, signal 72483/87239 (executing program) 2025/01/16 04:53:45 fetching corpus: 600, signal 74690/90515 (executing program) 2025/01/16 04:53:45 fetching corpus: 650, signal 79254/95847 (executing program) 2025/01/16 04:53:45 fetching corpus: 700, signal 81517/99117 (executing program) 2025/01/16 04:53:45 fetching corpus: 750, signal 83997/102489 (executing program) 2025/01/16 04:53:46 fetching corpus: 800, signal 85561/105061 (executing program) 2025/01/16 04:53:46 fetching corpus: 850, signal 88314/108592 (executing program) 2025/01/16 04:53:46 fetching corpus: 900, signal 90144/111313 (executing program) 2025/01/16 04:53:46 fetching corpus: 950, signal 92252/114262 (executing program) 2025/01/16 04:53:46 fetching corpus: 1000, signal 93679/116573 (executing program) 2025/01/16 04:53:46 fetching corpus: 1050, signal 95066/118827 (executing program) 2025/01/16 04:53:46 fetching corpus: 1100, signal 98330/122571 (executing program) 2025/01/16 04:53:46 fetching corpus: 1150, signal 100023/124956 (executing program) 2025/01/16 04:53:46 fetching corpus: 1200, signal 101383/127060 (executing program) 2025/01/16 04:53:46 fetching corpus: 1250, signal 102403/128912 (executing program) 2025/01/16 04:53:47 fetching corpus: 1300, signal 104254/131378 (executing program) 2025/01/16 04:53:47 fetching corpus: 1350, signal 105260/133206 (executing program) 2025/01/16 04:53:47 fetching corpus: 1400, signal 106784/135371 (executing program) 2025/01/16 04:53:47 fetching corpus: 1450, signal 108000/137290 (executing program) 2025/01/16 04:53:47 fetching corpus: 1500, signal 108961/139004 (executing program) 2025/01/16 04:53:47 fetching corpus: 1550, signal 110073/140798 (executing program) 2025/01/16 04:53:47 fetching corpus: 1600, signal 111949/143069 (executing program) 2025/01/16 04:53:47 fetching corpus: 1650, signal 113124/144842 (executing program) 2025/01/16 04:53:47 fetching corpus: 1700, signal 115127/147158 (executing program) 2025/01/16 04:53:48 fetching corpus: 1750, signal 115834/148608 (executing program) 2025/01/16 04:53:48 fetching corpus: 1800, signal 116866/150312 (executing program) 2025/01/16 04:53:48 fetching corpus: 1850, signal 118453/152267 (executing program) 2025/01/16 04:53:48 fetching corpus: 1900, signal 119518/153845 (executing program) 2025/01/16 04:53:48 fetching corpus: 1950, signal 120242/155203 (executing program) 2025/01/16 04:53:48 fetching corpus: 2000, signal 120958/156512 (executing program) 2025/01/16 04:53:48 fetching corpus: 2050, signal 121781/157887 (executing program) 2025/01/16 04:53:48 fetching corpus: 2100, signal 122970/159466 (executing program) 2025/01/16 04:53:48 fetching corpus: 2150, signal 123815/160821 (executing program) 2025/01/16 04:53:48 fetching corpus: 2200, signal 126702/163394 (executing program) 2025/01/16 04:53:49 fetching corpus: 2250, signal 127369/164654 (executing program) 2025/01/16 04:53:49 fetching corpus: 2300, signal 128222/165983 (executing program) 2025/01/16 04:53:49 fetching corpus: 2350, signal 129788/167694 (executing program) 2025/01/16 04:53:49 fetching corpus: 2400, signal 130862/169132 (executing program) 2025/01/16 04:53:49 fetching corpus: 2450, signal 131767/170421 (executing program) 2025/01/16 04:53:49 fetching corpus: 2500, signal 132747/171686 (executing program) 2025/01/16 04:53:49 fetching corpus: 2550, signal 133726/172960 (executing program) 2025/01/16 04:53:49 fetching corpus: 2600, signal 134465/174107 (executing program) 2025/01/16 04:53:49 fetching corpus: 2650, signal 135774/175514 (executing program) 2025/01/16 04:53:50 fetching corpus: 2700, signal 136696/176752 (executing program) 2025/01/16 04:53:50 fetching corpus: 2750, signal 137747/178023 (executing program) 2025/01/16 04:53:50 fetching corpus: 2800, signal 138282/179039 (executing program) 2025/01/16 04:53:50 fetching corpus: 2850, signal 138915/180040 (executing program) 2025/01/16 04:53:50 fetching corpus: 2900, signal 139755/181129 (executing program) 2025/01/16 04:53:50 fetching corpus: 2950, signal 140490/182232 (executing program) 2025/01/16 04:53:50 fetching corpus: 3000, signal 141325/183278 (executing program) 2025/01/16 04:53:50 fetching corpus: 3050, signal 142136/184335 (executing program) 2025/01/16 04:53:51 fetching corpus: 3100, signal 142876/185365 (executing program) 2025/01/16 04:53:51 fetching corpus: 3150, signal 143635/186400 (executing program) 2025/01/16 04:53:51 fetching corpus: 3200, signal 144289/187385 (executing program) 2025/01/16 04:53:51 fetching corpus: 3250, signal 144824/188282 (executing program) 2025/01/16 04:53:51 fetching corpus: 3300, signal 145530/189223 (executing program) 2025/01/16 04:53:51 fetching corpus: 3350, signal 146685/190283 (executing program) 2025/01/16 04:53:51 fetching corpus: 3400, signal 147107/191093 (executing program) 2025/01/16 04:53:51 fetching corpus: 3450, signal 147725/191958 (executing program) 2025/01/16 04:53:51 fetching corpus: 3500, signal 148316/192777 (executing program) 2025/01/16 04:53:51 fetching corpus: 3550, signal 148938/193648 (executing program) 2025/01/16 04:53:52 fetching corpus: 3600, signal 149612/194489 (executing program) 2025/01/16 04:53:52 fetching corpus: 3650, signal 150542/195442 (executing program) 2025/01/16 04:53:52 fetching corpus: 3700, signal 151019/196230 (executing program) 2025/01/16 04:53:52 fetching corpus: 3750, signal 151437/196966 (executing program) 2025/01/16 04:53:52 fetching corpus: 3800, signal 151979/197737 (executing program) 2025/01/16 04:53:52 fetching corpus: 3850, signal 152566/198516 (executing program) 2025/01/16 04:53:52 fetching corpus: 3900, signal 153433/199353 (executing program) 2025/01/16 04:53:52 fetching corpus: 3950, signal 153862/200072 (executing program) 2025/01/16 04:53:52 fetching corpus: 4000, signal 154176/200706 (executing program) 2025/01/16 04:53:52 fetching corpus: 4050, signal 154563/201390 (executing program) 2025/01/16 04:53:53 fetching corpus: 4100, signal 154957/202069 (executing program) 2025/01/16 04:53:53 fetching corpus: 4150, signal 155411/202757 (executing program) 2025/01/16 04:53:53 fetching corpus: 4200, signal 155799/203413 (executing program) 2025/01/16 04:53:53 fetching corpus: 4250, signal 156155/204041 (executing program) 2025/01/16 04:53:53 fetching corpus: 4300, signal 156714/204718 (executing program) 2025/01/16 04:53:53 fetching corpus: 4350, signal 157074/205346 (executing program) 2025/01/16 04:53:53 fetching corpus: 4400, signal 157413/205957 (executing program) 2025/01/16 04:53:53 fetching corpus: 4450, signal 157985/206600 (executing program) 2025/01/16 04:53:54 fetching corpus: 4500, signal 158761/207250 (executing program) 2025/01/16 04:53:54 fetching corpus: 4550, signal 159356/207856 (executing program) 2025/01/16 04:53:54 fetching corpus: 4600, signal 159896/208482 (executing program) 2025/01/16 04:53:54 fetching corpus: 4650, signal 160288/209083 (executing program) 2025/01/16 04:53:54 fetching corpus: 4700, signal 160644/209672 (executing program) 2025/01/16 04:53:54 fetching corpus: 4750, signal 161063/210277 (executing program) 2025/01/16 04:53:54 fetching corpus: 4800, signal 161633/210832 (executing program) 2025/01/16 04:53:54 fetching corpus: 4850, signal 162299/211415 (executing program) 2025/01/16 04:53:55 fetching corpus: 4900, signal 162893/212009 (executing program) 2025/01/16 04:53:55 fetching corpus: 4950, signal 163313/212517 (executing program) 2025/01/16 04:53:55 fetching corpus: 5000, signal 163930/213026 (executing program) 2025/01/16 04:53:55 fetching corpus: 5050, signal 164548/213586 (executing program) 2025/01/16 04:53:55 fetching corpus: 5100, signal 164897/214114 (executing program) 2025/01/16 04:53:55 fetching corpus: 5150, signal 165325/214640 (executing program) 2025/01/16 04:53:55 fetching corpus: 5200, signal 165851/215135 (executing program) 2025/01/16 04:53:55 fetching corpus: 5250, signal 166214/215617 (executing program) 2025/01/16 04:53:55 fetching corpus: 5300, signal 166533/216093 (executing program) 2025/01/16 04:53:56 fetching corpus: 5350, signal 166873/216539 (executing program) 2025/01/16 04:53:56 fetching corpus: 5400, signal 167354/217001 (executing program) 2025/01/16 04:53:56 fetching corpus: 5450, signal 167841/217329 (executing program) 2025/01/16 04:53:56 fetching corpus: 5500, signal 168202/217329 (executing program) 2025/01/16 04:53:56 fetching corpus: 5550, signal 168571/217329 (executing program) 2025/01/16 04:53:56 fetching corpus: 5600, signal 169026/217329 (executing program) 2025/01/16 04:53:56 fetching corpus: 5650, signal 169272/217329 (executing program) 2025/01/16 04:53:56 fetching corpus: 5700, signal 169623/217329 (executing program) 2025/01/16 04:53:56 fetching corpus: 5750, signal 169983/217329 (executing program) 2025/01/16 04:53:56 fetching corpus: 5800, signal 170251/217329 (executing program) 2025/01/16 04:53:57 fetching corpus: 5850, signal 170547/217329 (executing program) 2025/01/16 04:53:57 fetching corpus: 5900, signal 170798/217329 (executing program) 2025/01/16 04:53:57 fetching corpus: 5950, signal 171072/217329 (executing program) 2025/01/16 04:53:57 fetching corpus: 6000, signal 171482/217329 (executing program) 2025/01/16 04:53:57 fetching corpus: 6050, signal 171811/217329 (executing program) 2025/01/16 04:53:57 fetching corpus: 6100, signal 172261/217329 (executing program) 2025/01/16 04:53:57 fetching corpus: 6150, signal 172573/217329 (executing program) 2025/01/16 04:53:57 fetching corpus: 6200, signal 172964/217329 (executing program) 2025/01/16 04:53:57 fetching corpus: 6250, signal 173301/217329 (executing program) 2025/01/16 04:53:58 fetching corpus: 6300, signal 173547/217329 (executing program) 2025/01/16 04:53:58 fetching corpus: 6350, signal 173845/217329 (executing program) 2025/01/16 04:53:58 fetching corpus: 6400, signal 174363/217329 (executing program) 2025/01/16 04:53:58 fetching corpus: 6450, signal 174769/217329 (executing program) 2025/01/16 04:53:58 fetching corpus: 6500, signal 175044/217329 (executing program) 2025/01/16 04:53:58 fetching corpus: 6550, signal 175296/217329 (executing program) 2025/01/16 04:53:58 fetching corpus: 6600, signal 175918/217329 (executing program) 2025/01/16 04:53:58 fetching corpus: 6650, signal 176367/217329 (executing program) 2025/01/16 04:53:58 fetching corpus: 6700, signal 176700/217329 (executing program) 2025/01/16 04:53:59 fetching corpus: 6750, signal 177058/217329 (executing program) 2025/01/16 04:53:59 fetching corpus: 6800, signal 177523/217334 (executing program) 2025/01/16 04:53:59 fetching corpus: 6850, signal 177696/217334 (executing program) 2025/01/16 04:53:59 fetching corpus: 6900, signal 178119/217334 (executing program) 2025/01/16 04:53:59 fetching corpus: 6950, signal 178486/217334 (executing program) 2025/01/16 04:53:59 fetching corpus: 7000, signal 178855/217334 (executing program) 2025/01/16 04:53:59 fetching corpus: 7050, signal 179438/217334 (executing program) 2025/01/16 04:54:00 fetching corpus: 7100, signal 179732/217334 (executing program) 2025/01/16 04:54:00 fetching corpus: 7150, signal 179974/217334 (executing program) 2025/01/16 04:54:00 fetching corpus: 7200, signal 180351/217334 (executing program) 2025/01/16 04:54:00 fetching corpus: 7250, signal 180858/217334 (executing program) 2025/01/16 04:54:00 fetching corpus: 7300, signal 181133/217334 (executing program) 2025/01/16 04:54:00 fetching corpus: 7350, signal 181411/217334 (executing program) 2025/01/16 04:54:00 fetching corpus: 7400, signal 181931/217334 (executing program) 2025/01/16 04:54:00 fetching corpus: 7450, signal 182277/217334 (executing program) 2025/01/16 04:54:00 fetching corpus: 7500, signal 182515/217334 (executing program) 2025/01/16 04:54:01 fetching corpus: 7550, signal 183082/217334 (executing program) 2025/01/16 04:54:01 fetching corpus: 7600, signal 183441/217334 (executing program) 2025/01/16 04:54:01 fetching corpus: 7650, signal 183610/217334 (executing program) 2025/01/16 04:54:01 fetching corpus: 7700, signal 183908/217334 (executing program) 2025/01/16 04:54:01 fetching corpus: 7750, signal 184052/217334 (executing program) 2025/01/16 04:54:01 fetching corpus: 7800, signal 184325/217334 (executing program) 2025/01/16 04:54:01 fetching corpus: 7850, signal 184689/217334 (executing program) 2025/01/16 04:54:01 fetching corpus: 7900, signal 185092/217334 (executing program) 2025/01/16 04:54:01 fetching corpus: 7950, signal 185269/217334 (executing program) 2025/01/16 04:54:02 fetching corpus: 8000, signal 185594/217334 (executing program) 2025/01/16 04:54:02 fetching corpus: 8050, signal 185946/217334 (executing program) 2025/01/16 04:54:02 fetching corpus: 8100, signal 186132/217334 (executing program) 2025/01/16 04:54:02 fetching corpus: 8150, signal 186386/217334 (executing program) 2025/01/16 04:54:02 fetching corpus: 8200, signal 186639/217334 (executing program) 2025/01/16 04:54:02 fetching corpus: 8250, signal 186875/217334 (executing program) 2025/01/16 04:54:02 fetching corpus: 8300, signal 187183/217334 (executing program) 2025/01/16 04:54:02 fetching corpus: 8350, signal 187410/217334 (executing program) 2025/01/16 04:54:02 fetching corpus: 8400, signal 187644/217334 (executing program) 2025/01/16 04:54:03 fetching corpus: 8450, signal 187854/217334 (executing program) 2025/01/16 04:54:03 fetching corpus: 8500, signal 188099/217334 (executing program) 2025/01/16 04:54:03 fetching corpus: 8550, signal 188368/217334 (executing program) 2025/01/16 04:54:03 fetching corpus: 8600, signal 188593/217334 (executing program) 2025/01/16 04:54:03 fetching corpus: 8650, signal 188815/217334 (executing program) 2025/01/16 04:54:03 fetching corpus: 8700, signal 189176/217334 (executing program) 2025/01/16 04:54:03 fetching corpus: 8750, signal 189355/217334 (executing program) 2025/01/16 04:54:03 fetching corpus: 8800, signal 189563/217334 (executing program) 2025/01/16 04:54:04 fetching corpus: 8850, signal 189763/217334 (executing program) 2025/01/16 04:54:04 fetching corpus: 8900, signal 190045/217334 (executing program) 2025/01/16 04:54:04 fetching corpus: 8950, signal 190330/217334 (executing program) 2025/01/16 04:54:04 fetching corpus: 9000, signal 190627/217334 (executing program) 2025/01/16 04:54:04 fetching corpus: 9050, signal 190836/217334 (executing program) 2025/01/16 04:54:04 fetching corpus: 9100, signal 191069/217334 (executing program) 2025/01/16 04:54:04 fetching corpus: 9150, signal 191575/217334 (executing program) 2025/01/16 04:54:04 fetching corpus: 9200, signal 191756/217334 (executing program) 2025/01/16 04:54:05 fetching corpus: 9250, signal 192060/217363 (executing program) 2025/01/16 04:54:05 fetching corpus: 9300, signal 192311/217363 (executing program) 2025/01/16 04:54:05 fetching corpus: 9350, signal 192568/217363 (executing program) 2025/01/16 04:54:05 fetching corpus: 9400, signal 192728/217363 (executing program) 2025/01/16 04:54:05 fetching corpus: 9450, signal 193010/217363 (executing program) 2025/01/16 04:54:05 fetching corpus: 9500, signal 193225/217363 (executing program) 2025/01/16 04:54:05 fetching corpus: 9550, signal 193563/217363 (executing program) 2025/01/16 04:54:05 fetching corpus: 9600, signal 193775/217363 (executing program) 2025/01/16 04:54:05 fetching corpus: 9650, signal 193994/217363 (executing program) 2025/01/16 04:54:06 fetching corpus: 9700, signal 194285/217363 (executing program) 2025/01/16 04:54:06 fetching corpus: 9750, signal 194533/217363 (executing program) 2025/01/16 04:54:06 fetching corpus: 9800, signal 194787/217363 (executing program) 2025/01/16 04:54:06 fetching corpus: 9850, signal 195208/217363 (executing program) 2025/01/16 04:54:06 fetching corpus: 9900, signal 195501/217363 (executing program) 2025/01/16 04:54:06 fetching corpus: 9950, signal 195676/217363 (executing program) 2025/01/16 04:54:06 fetching corpus: 10000, signal 195945/217363 (executing program) 2025/01/16 04:54:06 fetching corpus: 10050, signal 196114/217363 (executing program) 2025/01/16 04:54:06 fetching corpus: 10100, signal 196346/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10150, signal 196601/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10200, signal 196825/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10250, signal 197044/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10300, signal 197236/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10350, signal 197394/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10400, signal 197647/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10450, signal 197930/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10500, signal 198203/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10550, signal 198429/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10600, signal 198679/217363 (executing program) 2025/01/16 04:54:07 fetching corpus: 10650, signal 198870/217363 (executing program) 2025/01/16 04:54:08 fetching corpus: 10700, signal 199034/217363 (executing program) 2025/01/16 04:54:08 fetching corpus: 10750, signal 199214/217363 (executing program) 2025/01/16 04:54:08 fetching corpus: 10800, signal 199566/217363 (executing program) 2025/01/16 04:54:08 fetching corpus: 10850, signal 199883/217363 (executing program) 2025/01/16 04:54:08 fetching corpus: 10900, signal 200076/217363 (executing program) 2025/01/16 04:54:08 fetching corpus: 10950, signal 200274/217363 (executing program) 2025/01/16 04:54:08 fetching corpus: 11000, signal 200468/217363 (executing program) 2025/01/16 04:54:08 fetching corpus: 11050, signal 200623/217363 (executing program) 2025/01/16 04:54:08 fetching corpus: 11100, signal 200880/217363 (executing program) 2025/01/16 04:54:08 fetching corpus: 11150, signal 201151/217363 (executing program) 2025/01/16 04:54:09 fetching corpus: 11200, signal 201396/217363 (executing program) 2025/01/16 04:54:09 fetching corpus: 11250, signal 201687/217363 (executing program) 2025/01/16 04:54:09 fetching corpus: 11300, signal 202003/217363 (executing program) 2025/01/16 04:54:09 fetching corpus: 11350, signal 202556/217363 (executing program) 2025/01/16 04:54:09 fetching corpus: 11400, signal 202825/217363 (executing program) 2025/01/16 04:54:09 fetching corpus: 11450, signal 203030/217363 (executing program) 2025/01/16 04:54:09 fetching corpus: 11500, signal 203255/217363 (executing program) 2025/01/16 04:54:09 fetching corpus: 11550, signal 203450/217363 (executing program) 2025/01/16 04:54:09 fetching corpus: 11600, signal 203633/217363 (executing program) 2025/01/16 04:54:09 fetching corpus: 11650, signal 203926/217363 (executing program) 2025/01/16 04:54:10 fetching corpus: 11700, signal 204100/217363 (executing program) 2025/01/16 04:54:10 fetching corpus: 11741, signal 204292/217363 (executing program) 2025/01/16 04:54:10 fetching corpus: 11741, signal 204292/217363 (executing program) 2025/01/16 04:54:14 starting 8 fuzzer processes 04:54:14 executing program 0: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x1, r0, 0xee01, r1, 0xffffffffffffffff, 0x80, 0x80}, 0x0, 0x0, 0x99, 0x81, 0x4, 0x401, 0x0, 0x200, 0x0, 0x7, 0xffffffffffffffff}) utime(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x2, 0x1}) msgsnd(0x0, &(0x7f0000000300)={0x2, "5dda6c814c6482768865a62c92da"}, 0x16, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={0xffffffffffffffff, 0x8, 0x7, 0x1ff}) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '\x83'}}], [{@dont_appraise}]}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', r3, 0x2f, 0x54, 0x7, 0x5, 0x47, @local, @remote, 0x7877, 0x80, 0x1, 0x80000001}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000005c0)) msgrcv(0x0, &(0x7f0000000600)={0x0, ""/109}, 0x75, 0x2, 0x0) fallocate(r4, 0x8, 0x3, 0x7fffffff) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42005) r6 = creat(&(0x7f0000000780)='./file0\x00', 0x70) msgrcv(0x0, &(0x7f00000007c0), 0x8, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {0x929}}, './file1\x00'}) open_by_handle_at(r7, &(0x7f0000000840)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x3, 0x0, 0x3, 0x0, 0xff, 0xe4f1}}, 0x410000) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000008c0)=""/98, &(0x7f0000000940)=0x62) 04:54:14 executing program 3: r0 = socket(0x18, 0x1, 0x8000) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockname(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80) sendmsg$sock(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="041f1c06f15c9c36aa1f5cb926a93f7f", 0x10}, {&(0x7f0000000180)="493fc490557140fd2d9eb641527411feeb7a930605b950290d738498de521fc58f5d7c2c9f6948009db8784d466a5ad73ca305223e4a28cd91d9b1c693070a51fc226115ac59570eb5f70e9fb6a90adf78b73f5fc2bb3b229524a0cef213938be270b32d3f402c36f645a32d2740fa3bd6826f9cb7883db0dafbcd28292a39fc2eaca5297e350f8ba03eb02f454ed9d2a66ed8e7ddcdb275bba8de156212ea", 0x9f}, {&(0x7f0000000240)="d507c5198f3c07292079a32d8c4fa536ae66b547dd65a7f1b85ef42074f96f11a3773245405e08a36853b4333bdb0c07943364fd3f0161e5eecff61c6c16dc2252fbc382ae4e33fb57f6d5ad7dc92dbe25d0e540d1d50f8047a0da52de603b35ac907911284579a823b6c83929e70f352caa0991b4065aa046231b5a53d2fe", 0x7f}], 0x3, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x60}, 0x40000) sendto(r0, &(0x7f00000003c0)="240982444bab8b0fc37f1f90fb037ec92c3c022d5dcf7edf77201c5f37cc77701f7d7210882c5e9a9fddf15099191d9fa4248ede7353be549cf6d1898dc874e2df1aecc9fb3827696776a275ef5476001fa1bbbd3ebf163ccd9fba0397fcb575ee1722d84e8d19cef5fcd493865ce203c96d030f51998080bd83d4973c2466b67f05553285573c0ba3532e02ecb18ad6f9ada902d12a947fe6bf64a55da306f71caf0917da34c415d71b02e96436d720ef8eb156eeac584e93c9af5bc0d3922982104c73e37403ce4ee54e423f646d95", 0xd0, 0x2000e000, &(0x7f00000004c0)=@ethernet={0x306, @multicast}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x60, 0x5, 0x61, @mcast1, @dev={0xfe, 0x80, '\x00', 0x20}, 0x20, 0x8000, 0x7, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'syztnl0\x00', r1, 0x2f, 0x9, 0x1, 0xdb, 0x32, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x700, 0x20, 0xad1, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl1\x00', r2, 0x4, 0x4, 0x5, 0x1, 0x64, @dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x58, 0x1ff, 0x3082}}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x84a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000800)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000840)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl0\x00', r3, 0x2f, 0x5, 0x7, 0x3, 0x12, @empty, @mcast1, 0x7800, 0x40, 0x8, 0x1}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) r9 = openat$incfs(r6, &(0x7f0000000940)='.log\x00', 0x182, 0x81) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000980)={'\x00', 0x1, 0x0, 0x7fffffff, 0xef, 0xcb73, 0xffffffffffffffff}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a40)={0x434, 0x3f3, 0x100, 0x70bd29, 0x25dfdbfb, {0x6, 0x1, 0x8, [0x325, 0x4, 0x6, 0x10000, 0x5, 0x7ff, 0x9, 0xb6, 0xfffffffb, 0x9, 0x0, 0x2, 0x10000, 0x3, 0xf8d, 0x6, 0x8, 0x6, 0x1c8, 0x3, 0x1, 0x8, 0x4, 0x7, 0x27f, 0x401, 0x0, 0x6, 0x4, 0x7fff, 0x2, 0x0, 0x5, 0x7ff, 0x7, 0x10001, 0x5, 0x4, 0x81, 0x6, 0x7, 0x6, 0x4, 0x5, 0x4, 0x2, 0xfffffffa, 0x6, 0x8000, 0x1, 0x7ad, 0x8000, 0x9, 0xc4d7, 0x4, 0xffffffff, 0x7ff, 0x6, 0x10000, 0x7ff, 0x0, 0xec, 0x2, 0x3f], [0x800, 0x0, 0x200, 0x2, 0x1e, 0x4866, 0x1, 0x1, 0x6, 0x5, 0xf85, 0x80, 0x350a2005, 0x8, 0x7, 0x4, 0x200, 0x8001, 0x2, 0x0, 0x7, 0x81, 0xffff, 0x3f, 0xffff, 0x8, 0x40, 0x3, 0x200, 0x8, 0x1ff, 0xef, 0x7ff, 0x8, 0x7, 0x9, 0xc19f, 0x8001, 0x800, 0x1, 0x5, 0x9, 0x0, 0x10000, 0x0, 0x800, 0x8, 0xfffffff8, 0x7, 0x5, 0x8, 0x3f, 0x1, 0x93b, 0x0, 0x7, 0x80000000, 0x8df, 0x3, 0x20, 0x5, 0x10001, 0x8000, 0x7], [0x6, 0x55c056fc, 0x7, 0x4, 0xffff6688, 0x8, 0x1ff, 0x1, 0x20, 0x7, 0x3, 0x1, 0x9, 0x5, 0x3, 0x7, 0xfb, 0x2, 0xfffffc01, 0x6, 0x1, 0x3ff, 0x0, 0xf, 0x2, 0x3, 0x4, 0x1, 0x1, 0x0, 0x8, 0x2, 0x7, 0x7, 0x227d, 0x10001, 0x6, 0x5, 0x1, 0x5, 0x7, 0x5, 0x7, 0x2b67, 0x4, 0x0, 0x3, 0x3, 0x10001, 0x401, 0x8c4e, 0x6, 0x4, 0x2, 0x800, 0x9, 0x7, 0x80000000, 0x795f, 0x4, 0x100, 0x10001, 0x8, 0x34], [0x3ff, 0x800, 0x2, 0x10000, 0x5, 0xffffffff, 0x9, 0xfffffffc, 0xffff8000, 0x6, 0x100, 0x6, 0x4, 0x800, 0x5, 0x8, 0xff, 0x5, 0x1, 0xa7a, 0x9, 0x0, 0x401, 0x3, 0x0, 0x1, 0x100, 0x2, 0x3f, 0xfffffbff, 0x1, 0x17, 0x800000, 0x7fff, 0x10001, 0x3ff, 0x1, 0x2, 0x2b, 0x8, 0xffffffff, 0x1, 0x100, 0x1ff, 0x7, 0xffffffff, 0x5ea, 0xffff7fff, 0x9, 0x7, 0x80, 0x900, 0x0, 0x4, 0x0, 0x3ff, 0x0, 0x4, 0xffffffff, 0xa5, 0x1, 0x3, 0x2, 0xf01], 0x11, ['\x00', '\xbb\xbb\xbb\xbb\xbb\xbb', '$\x00', '**\x00', '++-\x00', '\x00']}, ["", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x1}, 0x80000) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000001000)={'sit0\x00', &(0x7f0000000f80)={'syztnl1\x00', r1, 0x2f, 0x9, 0xff, 0x401, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, 0x0, 0x708, 0x9, 0x1}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000001180)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0xf4, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8004}, 0x2000c840) 04:54:14 executing program 1: sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000810) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x80102}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1008002}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, r1, 0x209, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040854) r2 = openat2(r0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x30000, 0x38}, 0x18) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x85]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0x9, 0xfffffff7]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x51b1, &(0x7f0000000640)={0x0, 0x793, 0x8, 0x3, 0xd6, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x800, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_user}, {@cachetag}], [{@smackfsdef={'smackfsdef', 0x3d, ':/'}}, {@hash}, {@euid_lt={'euid<', 0xee00}}]}}) pwritev(r5, &(0x7f0000000bc0)=[{&(0x7f00000007c0)="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", 0xfa}, {&(0x7f00000008c0)="284f6986644b73b78972544305f5a836e13cd003cf5141e798c6b05e83", 0x1d}, {&(0x7f0000000900)="8e07ec61743b5847fda7e583a791e8144ca0d9f80932cae1d70fd660eeb6721c1c3d594abb32f752d5f35aaf05a9533da9d68f6aa41f7a101157131aeb4a069cac00649f4c6b878022d7f7712c6917510bf37efc265926d50c120c5eb47c61210603aaf37c2efeab9a944d531313d5621b5bfdc757058dedc9922c2e29ce483a90614ebc6ee62c1d9a4e45d6a0e80efcb09e", 0x92}, {&(0x7f00000009c0)="9e2c69c50e3c6ede5539f4cd9e8c5838cd611e32e88912da32817dbf4fc012ffb3b965746fa95003a6f9b9b72e8bef02c7347ff66b02042be478ef534a23df0b88ebf1c82fffe383df020112516dfa747e59184093decd8e0953f1f9b72e7a77b5e94ed9b022ec1802f9a624e9e8d3dae6b6bd558d58a75c4849fa", 0x7b}, {&(0x7f0000000a40)="0f00bd3911a16e8d049102b9676973993775941cd4166f512e5f6a53f5e2a1f471d58a0f4a0f0bdfe5aa857887bda3198a831ce5a533734b40800e14f277b32ef1fc33940a427bce7e41b4b8eaf6b740fe0f6ce955d3d7ff0b0ed6d539d5b496ea33f828124a01cc9540a91f857bfe209e73324d89ac7e1bf61a397ab07411c85d195082de0293a931c1fa0ab2b734394230b1bab62ad0ad9e7f709f6cb9df571f8b6364163cbe0ea5a28d0015d6335b8e1d91e01bca812d26f78969a84c0c12cd567ba58c25ab6df2b36f79eaad1d5c72c49573384bab7566adb1fcc59ca9ab831f20134ecdecdecf", 0xe9}, {&(0x7f0000000b40)="5b28ffb0671613b1b5e4785b5d8c581f66fe7234888d2481510d584d94b9dfd7819e10cd4d4f314eee58580f2564a93a24214d42ad97803577dd5550b55fbe887b444b2859bd494299bc634fe4da53bb5ac48da7e8", 0x55}], 0x6, 0x1, 0x5) sendmsg$SOCK_DESTROY(r4, &(0x7f0000001080)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000c80)={0x388, 0x15, 0x8, 0x70bd27, 0x25dfdbfd, {0xf, 0xac}, [@INET_DIAG_REQ_BYTECODE={0xe, 0x1, "69c4bdee425fe0bf9806"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "b115c8a0d1a4b5f904d69bd84b16a635315f9c5787c7c8372e621ae192a66f64d2d34e8a0fffaa8a1221b977ef1c71d3fbb393aa7ea9adf6af57f540c3fa099ac980b482993fda6a820edbc26c29899adcd811f1fe3846871954bce6a6c9632901e450803e463756ffb802878215abe811b01acf7826258ec95f048611d6948a613750c1a378bc105c797832cf2accc2f0d8d53a23161e583b920466aa4c768f47b62bf199760bbc23debfb3b0813373c6a00ea6971b49de5067e7d3fae044ac6182ce9282590bc48b2f162d94626ce373155f67661c003f2d"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "240725de4dad652fb6d897591575d4936ca1d4dc2d755909e6895b58b61ba36c7495ece0a39375d32cff191555134ddadecbad485cab14208378458a53c242cde63340cc85ac5b9ec7433c38ef1a685a054f06cb779d5900771f53cad8fc6a1b91726ee5e1342b27c9edca906ff0380bd2f7e2d136609cd3"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "235dc2dd0c89cba72909f42699c55b5360a8ba498d48b4967b0545fca145039d584906772f41faea43a752b5c0e86e2e5ee3a758b7b2f54ec9242a0310e9f21c7c482834b56e48736fc193bfe944002b46f6211267d73f406662e98c29e3150ed881e4dadcb3c05b7c93a43cddbf063af8537934ee"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "58450eedaf33733a30c247ad55bf7410649139b2eeb280bbd19fa513c58bba806c3756e191ba20bcc55e1e1ec632bd59cb64af1410df31145d71b2e521ff59a5fae4b3b6f80db1ef80f802c3ee5d3d1ef8886f54584d137d"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "05d6b506bc2ae1929759576c321675a3fd"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "58758455305d284115ebc0d02eeb6695a112bde7c083a3da1696d75a371c54fc1b598e21796310926f613757417b5702c2c47b8e971757b341051867b519351f0e2c44ba0bdac0a4983957aaaa01ac6838f9ac270c3a4c352934a639ded2551ba617240045a66d81baf7dbe87bd0eac98f70f70562e8158677bc61a28eb1652bbac19394f5ab2ce6800b5c044063d1ddce83b4b084b04ac8a1a00ed2d177de187b"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "c37418b0a269f8e3ff6442c872fd903e89d148de5e2beb0663c52ee65cd404b53a10100dc0b237a9f4548b92962b04343e2cc3e5d51011471965f02404e05f69e0ef9c6aaf70520087d0711aa20db3c87f75c7dd6d0e1b32fe75fe382e3499a7707f8a870da21402550ecd"}]}, 0x388}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) io_setup(0x7, &(0x7f00000010c0)=0x0) io_submit(r6, 0x3, &(0x7f0000001440)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x2, 0x3f, r0, &(0x7f0000001100)="16a03b9f9fb3a0ed0febcc6127213a19f2e4740af08ff9429be808add1e942c447797868f4308a114d978aaf1d74add7234a724ab9854e177f908cbdb803e7914fbe74c138c2d6f0966f8ed3c01decaf922fc076db6c637aff13eccca31ebbc3935b60a42a18814e71da8508d899e669242af586552f493cd0a4ebbad4084241fadfe4a909c210956032ceb54deb", 0x8e, 0x200, 0x0, 0x3, r2}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000001200)="b625e186222a7c231bf5eff8ba3ccf8e9b7c0c655f00d56df40b8bf51992978d39e32caa4730f2e90944227107edab31b9122856b72080b4708358ae66028252e2306e15bff5cf10c82e24d68d31550ca1af93f731f2b0129d1db17ee008090697c163d2078a6e949ba4bdf8c2065ef004dae60feed8509ca5cac095a4246e1c1cb15deab87b439d96942ea9e57d6a1f9817ca296d9de7a7afaf2848920582f111de3a7284a56fbfeed02cd260f05369d133b39aed8cb7185ec24861", 0xbc, 0x4, 0x0, 0x0, r2}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000001300)="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", 0xfe, 0x7, 0x0, 0x2, r4}]) r7 = syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x14c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x101}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xa14}, {0x8, 0x13, 0xa034}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbc5}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xfffff800}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7c86}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6}, {0x8, 0x13, 0xfff}, {0x5, 0x14, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r7) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r8, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000001840)='./file0\x00', 0x98003, 0x18) 04:54:14 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/secretmem', 0x20003, 0x0) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x10000, 0x0, 0x1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) fchown(r2, r3, 0xee01) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000240)={0x80, "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"}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x4}, 0x68) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000500), &(0x7f0000000540)=0x4) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000580)={0x2, 0x1, 0x7, 0xf9, 0xe, "543a29f7c47e72ba"}) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffa) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f00000005c0)={0x1ff, 0xae, 0x2}) ioctl$TIOCCONS(r0, 0x541d) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000600)={0xfa3e, 0x2}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000640)={0x7ff}, 0x4) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000680)) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f00000006c0)) pipe2(&(0x7f0000000700), 0x4000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x210040, 0x0) fremovexattr(r6, &(0x7f0000000780)=@known='trusted.syz\x00') 04:54:14 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf184}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x20}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40041}, 0x4040004) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x80) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x120, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x24080050e5e3a4ba, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, '*@)::*{#\r\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xd) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0xc, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000640), 0x48c340, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44000000) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = getegid() fchown(r3, 0x0, r4) r5 = syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x3b19, 0x2, &(0x7f0000000ac0)=[{&(0x7f0000000940)="eb0a45f11d4ccb70fc6b288ffebf4398d71cffd667e3995a17445b32488ab1291225d88a9322fbcaa1e736ccf310ad2546620cc2037fc3b98a886984f85d70119dad8adc906ab35371d86f57d35ac224a69629b422856234", 0x58, 0x4}, {&(0x7f00000009c0)="9f5672f4ba8a8d50113f233c4ea881cde85951f31c75774963700224431a43e3a01d12289223245659da2c47d1a079fc9aacb768f034707700d9d289ce049ef55b6c6afe076244b6a879310471b06b25d2db2951c05cb574e152d3cb20fff8e30895ead5e34aeb1eb9e9cd80ddc1eab3885dcae0aa530cf03f75c7f5ba12f74f1a0a487eceb902b01967c554c81fd270d61a57fca9e0be181becc36a57d7e1d83bd32bee526508546f6b9a05b7b5d127a0fda095ed5444a712571f358582c45d370363e269b277a733d1410a0f60f6ba5d7d958ccef846d9658bc440ec4014a7", 0xe0, 0x20}], 0x4020, &(0x7f0000000b00)={[], [{@dont_appraise}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r6, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x50}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc050}, 0x20000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, r4}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x88, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x1}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "36e7a052c279510e5b54208f78b313e5"}, @NL80211_ATTR_SSID={0x20, 0x34, @random="b4dd16ab8266f7bd4410ba089d8ce39cfae691f0eb1577f4d05a66d4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xb}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="67b3e6f27825"}]}, 0x88}, 0x1, 0x0, 0x0, 0x48080}, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0xe20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) 04:54:14 executing program 7: fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x2}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) sync_file_range(r2, 0x0, 0x2, 0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, r0, r1}, 0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x990d, @none, 0x5}, 0xe) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010101}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0xc3aa, @mcast1, 0xb00}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000240)={0x0, 0x0, 0x5}) syncfs(r3) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x2) flistxattr(r2, &(0x7f0000000300)=""/4, 0x4) r5 = pidfd_getfd(r4, r4, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000340)={0x7dc, 0x7f}) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') fcntl$getown(r6, 0x9) 04:54:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x80, 0x200) fcntl$setownex(r0, 0xf, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002500)={0x0, 0xfffffffffffffffd, 0x72, 0x5, @scatter={0x7, 0x0, &(0x7f0000002300)=[{&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/78, 0x4e}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)}, {&(0x7f0000002200)=""/92, 0x5c}, {&(0x7f0000002280)=""/103, 0x67}]}, &(0x7f0000002380)="33ef28a8f5439c55de2486745ef41379e0d9b660498ec9ae8d469b1ebde8c11edb1f6eeec870b0041b388132064263e4185dc02e95f9d5880702a63bca3f00d53b5bf898e0b9bd10608f91daefcc8d44ddd4bee233a389c13bc5c18ff335e230623d3b48e2c109c847767059180dc21c98ce", &(0x7f0000002400)=""/141, 0x72f3, 0x10000, 0xffffffffffffffff, &(0x7f00000024c0)}) r2 = openat$cgroup_ro(r1, &(0x7f0000002580)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) fcntl$addseals(r2, 0x409, 0xf) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x10800, 0x0) close_range(r2, r3, 0x2) r4 = memfd_secret(0x0) r5 = eventfd2(0x9, 0x801) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002600)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000002700)=0xe8) recvmmsg$unix(r1, &(0x7f0000005340)=[{{&(0x7f0000002740)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000027c0)=""/241, 0xf1}, {&(0x7f00000028c0)=""/217, 0xd9}, {&(0x7f00000029c0)=""/210, 0xd2}], 0x3, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002bc0), 0x6e, &(0x7f0000003e80)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/49, 0x31}, {&(0x7f0000003c80)=""/223, 0xdf}, {&(0x7f0000003d80)=""/163, 0xa3}, {&(0x7f0000003e40)=""/34, 0x22}], 0x5}}, {{&(0x7f0000003f00), 0x6e, &(0x7f0000005280)=[{&(0x7f0000003f80)=""/131, 0x83}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/134, 0x86}, {&(0x7f0000005100)=""/99, 0x63}, {&(0x7f0000005180)=""/53, 0x35}, {&(0x7f00000051c0)=""/142, 0x8e}], 0x6, &(0x7f0000005300)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}}], 0x3, 0x10020, &(0x7f0000005400)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000005440)={{0x1, 0x1, 0x18, r5, {r6, r8}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000005480), &(0x7f00000054c0)=0xc) r9 = syz_io_uring_setup(0x6fb5, &(0x7f0000005500)={0x0, 0xf020, 0x4, 0x0, 0x1ed, 0x0, r7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000005580), &(0x7f00000055c0)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000005600)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6004, @fd_index=0x7, 0x3f, 0x9, 0x2, 0x19, 0x1}, 0x9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000057c0)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000005640)=""/195, 0xc3, 0x0, &(0x7f0000005740)=""/65, 0x41}, &(0x7f0000005800)=0x40) ftruncate(r9, 0x3) setsockopt$inet_tcp_buf(r7, 0x6, 0x1a, &(0x7f0000005840)="289b9e63a23f80e6bb7bdeaa41621755e8989ed0954940c1736ac659daeba8959dc9b78b75d1944df80298676b5d393f1a0ac17e4cafd84577c68312b0c7f6345363961af534721983f2fdbe5cdc140b27631064d6098c41ccf0840af2780e181f3fbed6cf0ff15995dc6ad24c22f7360bf8877c2c5c9822d670ef5e3f7af34a75ff59", 0x83) [ 114.107502] audit: type=1400 audit(1737003254.563:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:54:14 executing program 6: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{r0, r1+60000000}, {0x0, 0x3938700}}, &(0x7f0000000080)) clock_gettime(0x6, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000140)={{r2, r3+60000000}, {0x77359400}}, &(0x7f0000000180)) futex(&(0x7f00000001c0)=0x2, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x1, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) pselect6(0x40, &(0x7f0000000300)={0x7307, 0xc5, 0x40, 0x2, 0x6, 0x7, 0x2, 0x5}, &(0x7f0000000340)={0x81, 0x3, 0x8, 0x6, 0xfffffffffffffff9, 0x6bb3, 0x5, 0x7ff}, &(0x7f0000000380)={0x1d, 0x1f, 0x9, 0x2, 0x1, 0x5, 0x3, 0x2}, &(0x7f00000003c0)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x1000]}, 0x8}) clock_gettime(0x7, &(0x7f0000000480)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000500)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0) clock_gettime(0x5, &(0x7f0000000540)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000005c0)={{r6, r7+60000000}, {0x77359400}}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {r8, r9+10000000}}, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000780)) futex(&(0x7f00000007c0)=0x2, 0xc, 0x1, &(0x7f0000000800), &(0x7f0000000840), 0x2) clock_gettime(0x4, &(0x7f0000000880)) [ 115.372504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.378592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.381061] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.389290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.398394] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.400839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.534213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.538558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.542938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.548014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.550557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.551924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.553214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.554211] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.556566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.558094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.568088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.569310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.605696] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.608076] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.610275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.611404] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.618100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.622690] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.628695] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.629736] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.631558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.632466] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.632633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.634970] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.635877] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.637473] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.637735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.645165] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.645348] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.649332] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.653393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.656514] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.658003] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.665576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.666607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.667869] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 115.670967] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.673060] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.675136] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 115.675483] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 115.676465] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.689589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.444442] Bluetooth: hci0: command tx timeout [ 117.637837] Bluetooth: hci2: command tx timeout [ 117.638107] Bluetooth: hci1: command tx timeout [ 117.764219] Bluetooth: hci5: command tx timeout [ 117.764263] Bluetooth: hci7: command tx timeout [ 117.764832] Bluetooth: hci3: command tx timeout [ 117.764971] Bluetooth: hci4: command tx timeout [ 117.891979] Bluetooth: hci6: command tx timeout [ 119.491919] Bluetooth: hci0: command tx timeout [ 119.684809] Bluetooth: hci1: command tx timeout [ 119.684896] Bluetooth: hci2: command tx timeout [ 119.811895] Bluetooth: hci7: command tx timeout [ 119.813498] Bluetooth: hci5: command tx timeout [ 119.813640] Bluetooth: hci3: command tx timeout [ 119.813728] Bluetooth: hci4: command tx timeout [ 119.941273] Bluetooth: hci6: command tx timeout [ 121.541928] Bluetooth: hci0: command tx timeout [ 121.732156] Bluetooth: hci1: command tx timeout [ 121.732588] Bluetooth: hci2: command tx timeout [ 121.859991] Bluetooth: hci5: command tx timeout [ 121.860881] Bluetooth: hci4: command tx timeout [ 121.860946] Bluetooth: hci3: command tx timeout [ 121.861006] Bluetooth: hci7: command tx timeout [ 121.987946] Bluetooth: hci6: command tx timeout [ 123.588101] Bluetooth: hci0: command tx timeout [ 123.780006] Bluetooth: hci2: command tx timeout [ 123.780148] Bluetooth: hci1: command tx timeout [ 123.909127] Bluetooth: hci7: command tx timeout [ 123.909270] Bluetooth: hci3: command tx timeout [ 123.909364] Bluetooth: hci4: command tx timeout [ 123.909424] Bluetooth: hci5: command tx timeout [ 124.035986] Bluetooth: hci6: command tx timeout [ 175.515527] syz-executor.7 (284) used greatest stack depth: 24032 bytes left [ 178.195506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.197942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.198859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.206480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.210184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 178.213117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.391960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.401546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.404742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.406496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.411435] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.415501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.418304] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.420269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.430141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.435970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.438659] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 178.444648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.534949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.545249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.549939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.553526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.564525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.570977] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.576507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.583438] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.590077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.607088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.615104] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.617079] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.626344] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.631229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 178.636312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.639263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.673318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.673361] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.687182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.706067] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.712223] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.720185] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.725137] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.734348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.739033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.746971] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 178.752124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.762086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.790177] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 178.791264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.293860] Bluetooth: hci0: command tx timeout [ 180.548017] Bluetooth: hci1: command tx timeout [ 180.548590] Bluetooth: hci2: command tx timeout [ 180.675991] Bluetooth: hci3: command tx timeout [ 180.739884] Bluetooth: hci6: command tx timeout [ 180.867977] Bluetooth: hci5: command tx timeout [ 180.868443] Bluetooth: hci7: command tx timeout [ 180.995951] Bluetooth: hci4: command tx timeout [ 182.340041] Bluetooth: hci0: command tx timeout [ 182.597004] Bluetooth: hci2: command tx timeout [ 182.597112] Bluetooth: hci1: command tx timeout [ 182.723864] Bluetooth: hci3: command tx timeout [ 182.787892] Bluetooth: hci6: command tx timeout [ 182.916927] Bluetooth: hci5: command tx timeout [ 182.917014] Bluetooth: hci7: command tx timeout [ 183.044818] Bluetooth: hci4: command tx timeout [ 184.388805] Bluetooth: hci0: command tx timeout [ 184.643917] Bluetooth: hci1: command tx timeout [ 184.644013] Bluetooth: hci2: command tx timeout [ 184.773799] Bluetooth: hci3: command tx timeout [ 184.836888] Bluetooth: hci6: command tx timeout [ 184.965897] Bluetooth: hci7: command tx timeout [ 184.966276] Bluetooth: hci5: command tx timeout [ 185.093236] Bluetooth: hci4: command tx timeout [ 186.436005] Bluetooth: hci0: command tx timeout [ 186.691825] Bluetooth: hci1: command tx timeout [ 186.691915] Bluetooth: hci2: command tx timeout [ 186.819849] Bluetooth: hci3: command tx timeout [ 186.884854] Bluetooth: hci6: command tx timeout [ 187.011929] Bluetooth: hci5: command tx timeout [ 187.012037] Bluetooth: hci7: command tx timeout [ 187.140790] Bluetooth: hci4: command tx timeout [ 241.179093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.186118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.188981] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.195470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.202669] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 241.205960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.246813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.251130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.251871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.255962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.257407] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 241.258013] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.263085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.265462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.268946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.274334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.277132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.281038] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.329102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.332203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.334976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.340178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.341482] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 241.350522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.373862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.381990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.386476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.402152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.414094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.416574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.438184] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.442175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.455157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.462415] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.473429] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.476100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.478271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.482245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 241.485061] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.487976] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 241.488564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.490836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.632160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.633558] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.634181] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.636237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.650990] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 241.651559] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 243.268024] Bluetooth: hci0: command tx timeout [ 243.331825] Bluetooth: hci2: command tx timeout [ 243.332163] Bluetooth: hci1: command tx timeout [ 243.396188] Bluetooth: hci3: command tx timeout [ 243.459824] Bluetooth: hci4: command tx timeout [ 243.589042] Bluetooth: hci6: command tx timeout [ 243.779931] Bluetooth: hci5: command tx timeout [ 243.908080] Bluetooth: hci7: command tx timeout [ 245.315911] Bluetooth: hci0: command tx timeout [ 245.379932] Bluetooth: hci2: command tx timeout [ 245.380064] Bluetooth: hci1: command tx timeout [ 245.444097] Bluetooth: hci3: command tx timeout [ 245.508991] Bluetooth: hci4: command tx timeout [ 245.636247] Bluetooth: hci6: command tx timeout [ 245.827807] Bluetooth: hci5: command tx timeout [ 245.957773] Bluetooth: hci7: command tx timeout [ 247.363831] Bluetooth: hci0: command tx timeout [ 247.428174] Bluetooth: hci2: command tx timeout [ 247.428459] Bluetooth: hci1: command tx timeout [ 247.492162] Bluetooth: hci3: command tx timeout [ 247.556041] Bluetooth: hci4: command tx timeout [ 247.684022] Bluetooth: hci6: command tx timeout [ 247.876258] Bluetooth: hci5: command tx timeout [ 248.004099] Bluetooth: hci7: command tx timeout [ 249.411831] Bluetooth: hci0: command tx timeout [ 249.475959] Bluetooth: hci1: command tx timeout [ 249.476096] Bluetooth: hci2: command tx timeout [ 249.540125] Bluetooth: hci3: command tx timeout [ 249.603920] Bluetooth: hci4: command tx timeout [ 249.731846] Bluetooth: hci6: command tx timeout [ 249.925186] Bluetooth: hci5: command tx timeout [ 250.051842] Bluetooth: hci7: command tx timeout [ 302.995204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.997557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.999597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.009571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.013923] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.015892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.253378] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.263916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.267000] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.273397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.276937] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 303.280207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.453169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.456196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.468846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.470019] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.472356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.483308] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.484782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.490436] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.494293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.495172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.495512] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.504371] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 303.505208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.516695] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.517182] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 303.542495] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.551158] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 303.554095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.572830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.576553] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.589178] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.593387] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.593587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.613077] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.614638] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 303.615960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.625385] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.628607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.630245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 303.632122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.647927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.661787] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.667147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.749194] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.754952] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 303.763235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.092026] Bluetooth: hci0: command tx timeout [ 305.348288] Bluetooth: hci1: command tx timeout [ 305.539892] Bluetooth: hci2: command tx timeout [ 305.603946] Bluetooth: hci3: command tx timeout [ 305.668869] Bluetooth: hci4: command tx timeout [ 305.733016] Bluetooth: hci5: command tx timeout [ 305.733411] Bluetooth: hci6: command tx timeout [ 305.861094] Bluetooth: hci7: command tx timeout [ 307.139972] Bluetooth: hci0: command tx timeout [ 307.397748] Bluetooth: hci1: command tx timeout [ 307.587895] Bluetooth: hci2: command tx timeout [ 307.653742] Bluetooth: hci3: command tx timeout [ 307.715838] Bluetooth: hci4: command tx timeout [ 307.781803] Bluetooth: hci6: command tx timeout [ 307.781887] Bluetooth: hci5: command tx timeout [ 307.907825] Bluetooth: hci7: command tx timeout [ 309.189790] Bluetooth: hci0: command tx timeout [ 309.444075] Bluetooth: hci1: command tx timeout [ 309.635847] Bluetooth: hci2: command tx timeout [ 309.699961] Bluetooth: hci3: command tx timeout [ 309.764045] Bluetooth: hci4: command tx timeout [ 309.827902] Bluetooth: hci5: command tx timeout [ 309.827950] Bluetooth: hci6: command tx timeout [ 309.957099] Bluetooth: hci7: command tx timeout [ 311.236100] Bluetooth: hci0: command tx timeout [ 311.492909] Bluetooth: hci1: command tx timeout [ 311.683918] Bluetooth: hci2: command tx timeout [ 311.749795] Bluetooth: hci3: command tx timeout [ 311.812933] Bluetooth: hci4: command tx timeout [ 311.876036] Bluetooth: hci6: command tx timeout [ 311.876194] Bluetooth: hci5: command tx timeout [ 312.003866] Bluetooth: hci7: command tx timeout [ 365.337011] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.340853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.345548] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.354577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.358576] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 365.361220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.676114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.679023] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.681080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.683310] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.687846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.690885] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 365.693194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.699896] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.703642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.733089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.735492] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 365.736352] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.756038] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.761337] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.772533] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.773996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.783646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.784266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.785992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.797385] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.799587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.809275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.813403] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.814175] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 365.819419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.819812] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 365.823352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.847945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.854974] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 365.879436] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.899835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.900768] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.907322] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.911079] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.924226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.926645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.966162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.985136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.990947] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 365.992566] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 365.995429] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.996030] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.427850] Bluetooth: hci0: command tx timeout [ 367.747826] Bluetooth: hci1: command tx timeout [ 367.811787] Bluetooth: hci2: command tx timeout [ 367.875872] Bluetooth: hci3: command tx timeout [ 367.939843] Bluetooth: hci5: command tx timeout [ 367.940035] Bluetooth: hci4: command tx timeout [ 368.069781] Bluetooth: hci6: command tx timeout [ 368.070045] Bluetooth: hci7: command tx timeout [ 369.475830] Bluetooth: hci0: command tx timeout [ 369.796809] Bluetooth: hci1: command tx timeout [ 369.859840] Bluetooth: hci2: command tx timeout [ 369.924069] Bluetooth: hci3: command tx timeout [ 369.987902] Bluetooth: hci5: command tx timeout [ 369.988046] Bluetooth: hci4: command tx timeout [ 370.115903] Bluetooth: hci6: command tx timeout [ 370.116058] Bluetooth: hci7: command tx timeout [ 371.523767] Bluetooth: hci0: command tx timeout [ 371.844525] Bluetooth: hci1: command tx timeout [ 371.907833] Bluetooth: hci2: command tx timeout [ 371.971862] Bluetooth: hci3: command tx timeout [ 372.035804] Bluetooth: hci4: command tx timeout [ 372.035901] Bluetooth: hci5: command tx timeout [ 372.163900] Bluetooth: hci6: command tx timeout [ 372.164063] Bluetooth: hci7: command tx timeout [ 373.572735] Bluetooth: hci0: command tx timeout [ 373.891759] Bluetooth: hci1: command tx timeout [ 373.955922] Bluetooth: hci2: command tx timeout [ 374.020135] Bluetooth: hci3: command tx timeout [ 374.083845] Bluetooth: hci4: command tx timeout [ 374.083991] Bluetooth: hci5: command tx timeout [ 374.211827] Bluetooth: hci6: command tx timeout [ 374.211862] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:59:14 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff818a6953 RDX=0000000000000000 RSI=ffffffff818a6f28 RDI=0000000000000000 RBP=0000000000000000 RSP=ffff88803d987818 R8 =0000000000000000 R9 =fffffbfff0fe11e4 R10=0000000000000001 R11=0000000000000000 R12=ffff88803d987b28 R13=0000000000000000 R14=ffff88803d987b28 R15=ffff88803d987df0 RIP=ffffffff818a6f2f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f464fc77269 CR3=0000000039b02000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff85c6ff20 RCX=ffffffff81722aff RDX=0000000000000000 RSI=ffffffff81722c05 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff88802ee17488 R8 =0000000000000000 R9 =fffffbfff0fe11e4 R10=0000000000000001 R11=0000000000000000 R12=00007f29f880ed82 R13=0000000000000000 R14=ffff888031903780 R15=0000000000000cc0 RIP=ffffffff81722c0c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f29f87f1020 CR3=0000000039b06000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000