Warning: Permanently added '[localhost]:45664' (ECDSA) to the list of known hosts. 2025/01/23 15:15:58 fuzzer started 2025/01/23 15:15:59 dialing manager at localhost:38529 syzkaller login: [ 71.960899] cgroup: Unknown subsys name 'net' [ 72.076067] cgroup: Unknown subsys name 'cpuset' [ 72.164147] cgroup: Unknown subsys name 'rlimit' [ 77.988127] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 88.845328] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 15:16:17 syscalls: 2217 2025/01/23 15:16:17 code coverage: enabled 2025/01/23 15:16:17 comparison tracing: enabled 2025/01/23 15:16:17 extra coverage: enabled 2025/01/23 15:16:17 setuid sandbox: enabled 2025/01/23 15:16:17 namespace sandbox: enabled 2025/01/23 15:16:17 Android sandbox: enabled 2025/01/23 15:16:17 fault injection: enabled 2025/01/23 15:16:17 leak checking: enabled 2025/01/23 15:16:17 net packet injection: enabled 2025/01/23 15:16:17 net device setup: enabled 2025/01/23 15:16:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 15:16:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 15:16:17 USB emulation: enabled 2025/01/23 15:16:17 hci packet injection: enabled 2025/01/23 15:16:17 wifi device emulation: enabled 2025/01/23 15:16:17 802.15.4 emulation: enabled 2025/01/23 15:16:17 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 15:16:17 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 15:16:17 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 15:16:17 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/23 15:16:17 fetching corpus: 0, signal 0/10000 (executing program) 2025/01/23 15:16:17 fetching corpus: 0, signal 0/11663 (executing program) 2025/01/23 15:16:17 fetching corpus: 0, signal 0/11663 (executing program) 2025/01/23 15:16:19 starting 8 fuzzer processes 15:16:19 executing program 0: sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x6c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4800}, 0x80) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000300)={0x964, 0x1, 0x5, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x7}, 0x8, 0x3, 0x76a, 0x7, 0x23, 'syz0\x00', "bd6b54b9eee8a6ac33878c3d6cc1aa67685a8c5eaa1c47e51d970c4200dc48ba", "e909368c6ec37bf07d06d39117acf091aafc204de59d54af870757c228cc3af7", [{0x3, 0x7fff, {0x1, 0x9}}, {0x20, 0xfff, {0x2, 0x789}}, {0x855, 0x6, {0x0, 0xfffffff9}}, {0x8000, 0x40, {0x1, 0x3}}, {0xff01, 0x40, {0x2}}, {0x4, 0x8, {0x1, 0x400}}, {0x1, 0x7, {0x2, 0x8}}, {0x2, 0x8, {0x2, 0x9}}, {0x5, 0x4, {0x1, 0x5}}, {0x4, 0x6, {0x2, 0x6}}, {0x800, 0x0, {0x2, 0x7fffffff}}, {0x9, 0x3ff, {0x3, 0x6}}, {0xa, 0x7, {0x1, 0x6}}, {0x0, 0x400, {0x0, 0x4}}, {0x20, 0x0, {0x3, 0x9de}}, {0x40, 0x5, {0x1, 0x7230}}, {0x1ff, 0x3, {0x0, 0x5}}, {0x6, 0x684, {0x3, 0x6}}, {0x5c, 0x8000, {0x1, 0x4}}, {0x6, 0x9, {0x3, 0x8}}, {0x5, 0x1, {0x0, 0x5}}, {0x9, 0x20, {0x1, 0xff}}, {0x3, 0x813f, {0x1, 0x2}}, {0x1, 0x8, {0x0, 0x667b95c4}}, {0xfffd, 0x0, {0x1, 0x3}}, {0x0, 0xffff, {0x2, 0xc0f}}, {0xaf8, 0x8000}, {0x8, 0x1f}, {0xff, 0x2, {0x0, 0x3ff}}, {0x5, 0x4, {0x1, 0x4}}, {0x8001, 0x7ff, {0x3, 0x290}}, {0xffff, 0x100, {0x2, 0xb6}}, {0x0, 0x6, {0x0, 0x80}}, {0x5, 0xfff, {0x1, 0x1f}}, {0x29b, 0x1, {0x2, 0xfffffbff}}, {0xf46, 0xeef3, {0x3, 0xc49}}, {0x2, 0x9, {0x0, 0x7fffffff}}, {0x79e, 0x6, {0x1, 0x2e3d}}, {0x7, 0x7b, {0x2, 0x1}}, {0x8000, 0x2, {0x3, 0x401}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x9, 0x1, 0x6, 0x9, 0x1f, 'syz0\x00', "8cae5edbc15d92a62e4f6e2cdbdb54ec5da47f73b6b5ad1f5109c8791708ee07", "9167ffc4c25b4de0cb08811884bd0cfa380c1518b46491a637f4711571aa5846", [{0x2, 0x7, {0x1, 0xffff54b2}}, {0x1, 0xfff, {0x2, 0x5}}, {0x400, 0x1000, {0x3, 0x9cfa}}, {0x5, 0xbbc, {0x1, 0x6}}, {0x4, 0x7f, {0x0, 0x401}}, {0x8, 0x100, {0x0, 0x1f}}, {0xfff9, 0xe3a2, {0x1, 0x7ef4}}, {0x8, 0x1, {0x0, 0x10000}}, {0xffff, 0x81, {0x3, 0x7f}}, {0x2f5, 0x2, {0x1, 0xd68}}, {0x9, 0xffff, {0x2, 0x401}}, {0x5, 0x6, {0x1, 0xff}}, {0xfff, 0xff, {0x3, 0x8}}, {0xc6f5, 0x6, {0x2, 0x8001}}, {0x8001, 0x2, {0x0, 0x7fff}}, {0x7, 0x80, {0x1, 0x51}}, {0x4, 0x6, {0x2, 0x3ff}}, {0x0, 0xb5a5, {0x0, 0x4}}, {0x2, 0x1, {0x1, 0x3}}, {0x80, 0x401, {0x3, 0x6}}, {0x5, 0x6, {0x2, 0x4b92}}, {0x0, 0xffff, {0x3, 0xff}}, {0x1ff, 0x0, {0x0, 0x5}}, {0x7, 0x100, {0x0, 0x8000}}, {0xed, 0x7, {0x0, 0x4}}, {0x9, 0x9, {0x2, 0x3}}, {0x8, 0x1f, {0x3, 0x8001}}, {0x85, 0x1000, {0x0, 0x5}}, {0x6, 0xb2b, {0x1, 0xfffffffd}}, {0x80, 0x1, {0x2, 0xe9}}, {0x5526, 0xfff8, {0x1, 0x3f}}, {0x1, 0xfbfe, {0x2, 0x9}}, {0x4, 0x100, {0x0, 0x101}}, {0x3, 0x2, {0x2, 0x7fffffff}}, {0x81, 0x800, {0x1, 0x9}}, {0x8001, 0x6, {0x1}}, {0x9, 0x6, {0x3, 0x7}}, {0x40, 0xf67e, {0x2, 0x8}}, {0x1, 0xfffc, {0x2, 0x80000001}}, {0xffff, 0xab, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0xe0}, 0x2, 0x1, 0x1000, 0x4, 0x20, 'syz0\x00', "1831302773152e14b48f640e7fc485671cb6fc28d50f9ff65a7cc891aba7faaf", "f5458d38077b6850a5ac7d8242a7179aea29b765925670e8a512b535774454bb", [{0x2, 0x56d, {0x0, 0x5}}, {0x1, 0x3, {0x3, 0x5}}, {0x9, 0x1, {0x0, 0x3ff}}, {0x1, 0x8, {0x0, 0x7}}, {0x4, 0x0, {0x2, 0x80}}, {0x101, 0x1000, {0x2, 0xfffffffe}}, {0xfff, 0x2, {0x1, 0x2}}, {0x66f, 0x9, {0x1, 0xfffffffc}}, {0x5d, 0x1, {0x0, 0x3}}, {0x82da, 0x8, {0x0, 0x10001}}, {0x20, 0x7c5b, {0x3, 0x1}}, {0x6, 0x49, {0x3, 0x80000001}}, {0x4, 0x3ff, {0x3, 0x4}}, {0x2, 0x3f, {0x0, 0x100}}, {0x258, 0x4, {0x1, 0x401}}, {0x8, 0x101, {0x0, 0x3}}, {0x1f, 0x3f, {0x1, 0x4}}, {0x1, 0x5, {0x0, 0x200}}, {0x1, 0x0, {0x1, 0x2}}, {0x1000, 0x9, {0x0, 0x8}}, {0x3, 0x1c7c, {0x0, 0x3f}}, {0x9, 0x40, {0x1, 0x1}}, {0x8001, 0x7fff, {0x3, 0x3}}, {0x3, 0x40, {0x3, 0xffffffff}}, {0xfff, 0x7, {0x1, 0x866}}, {0x1, 0x6, {0x3, 0xfff}}, {0xcd, 0x9, {0x0, 0x5}}, {0x3f, 0xffc9, {0x0, 0x9}}, {0x400, 0x8, {0x1}}, {0x9, 0x100, {0x0, 0x8}}, {0x0, 0x7, {0x3, 0x8f}}, {0x7fff, 0x6, {0x1, 0x9}}, {0xa9, 0x8001, {0x1, 0xfffffffa}}, {0x5, 0xff, {0x2, 0xfff}}, {0x400, 0x1, {0x0, 0x7ff}}, {0x7f, 0x2665, {0x1, 0x7}}, {0x380, 0x9, {0x0, 0x3}}, {0x2, 0xff, {0x0, 0x4}}, {0x6, 0xe47, {0x8d6fad2c584c6110, 0x2931}}, {0x68a, 0x401}]}}}, {{0x254, 0x1, {{0x0, 0xfffffffe}, 0x4, 0x1, 0x70, 0x1, 0x9, 'syz1\x00', "8afd5efc6456040840608d1d8b99e8fb34b90970800ab50108267169bdba82a2", "1c9247464ed766448797a225be860fcda1debdecad0196da0a1990fe92995dca", [{0x4, 0x76, {0x1, 0x200}}, {0x7f, 0x401, {0x3, 0xf468}}, {0x8, 0x7, {0x3, 0x9}}, {0x4, 0x6, {0x0, 0x5}}, {0x7, 0x40, {0x3, 0x36}}, {0x800, 0x4, {0x3, 0x9}}, {0x40, 0x2, {0x2, 0x5}}, {0xfff, 0x8000, {0x1, 0x1f}}, {0x9, 0x9, {0x1, 0x4}}, {0x7, 0x4, {0x0, 0x4e0}}, {0x3, 0x2, {0x1, 0x401}}, {0x7, 0x7, {0x1, 0xfff}}, {0x8, 0x2a, {0x1, 0x1}}, {0x2, 0x3f, {0x2, 0xfffffffe}}, {0x0, 0x7ff, {0x1, 0x1}}, {0x5, 0x5, {0x1, 0x3ff}}, {0x5, 0xffff, {0x1, 0x6}}, {0x9, 0x0, {0x0, 0xdd}}, {0xfffb, 0x1, {0x2, 0x453d}}, {0x4, 0x1000, {0x1, 0x2}}, {0x0, 0x4, {0x2, 0x5}}, {0x8, 0x800, {0x11cec1e92819e44d, 0x200}}, {0x7fb0, 0x7fff, {0x0, 0x1}}, {0x251d, 0x7, {0x3}}, {0x0, 0x20, {0x1, 0x9}}, {0x80, 0xa3, {0x3}}, {0x1, 0xf347, {0x2, 0x700000}}, {0x8001, 0x7ff, {0x0, 0x80000000}}, {0x7, 0x2, {0x0, 0x5}}, {0x7, 0x7ff, {0x2, 0x7d}}, {0x2, 0x6, {0x0, 0x2}}, {0x7fff, 0x7, {0x1, 0x20}}, {0x9, 0x5, {0x1, 0x81}}, {0x7, 0xff00, {0x3, 0x6}}, {0x1c57, 0x1, {0x2, 0x5}}, {0x401, 0x6, {0x2, 0x3bfe}}, {0x0, 0x1000, {0x1, 0xfff}}, {0x9, 0x6, {0x3, 0x80}}, {0x1ff, 0xff81, {0x3, 0x1}}, {0xf6, 0x2b74, {0x3, 0x8302}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x9002}, 0x40000) r0 = socket$netlink(0x10, 0x3, 0x13) r1 = syz_genetlink_get_family_id$mptcp(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200440c4}, 0x1) readahead(r0, 0x20, 0xa2) connect$netlink(r0, &(0x7f0000000e00)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) ioctl$FIONCLEX(r0, 0x5450) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000e40), &(0x7f0000000e80), 0x2, 0x1) ioctl$FIOCLEX(r0, 0x5451) sendmsg$AUDIT_GET(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x3e8, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x95}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x114, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x9, 0x4}, {0x6, 0x1}, {0x3}, {0x1f, 0x5}, {0x1, 0x1}], "4ffc46b43b01a1e1"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x2, 0x4}, {0x6, 0x5}, {0x3f, 0x6}, {0x20, 0x4}, {0x4, 0x3}, {0x22, 0x2}], "64d030dfb55cec29"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xfb, 0x6}, {0x40, 0x1}, {0x6, 0x5}, {0x1}, {0x7, 0x3}, {0x9, 0x3}, {0x9}, {0x8, 0x6}, {0xa2, 0x3}, {0x9, 0x7}], "4ccbf8669baa6894"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x80, 0x1}, {0x4, 0x2}, {0x6, 0x5}, {0x6, 0x1}, {0x57, 0x6}, {0x9, 0x3}, {0x40, 0x2}, {0xd3, 0x3}, {0x1f, 0x2}, {0x4c, 0x3}, {0x1c, 0x1}], "3d870b08a59f33f0"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x20, 0x7}, {0x8, 0x6}, {0x30, 0x6}, {0x0, 0x5}, {0x8, 0x5}, {0x98, 0x3}, {0x0, 0x6}], "b32b86c739d63b88"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x3, 0x2}, {0x7, 0x5}, {0x51}], "15e4cc94569abccc"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x20, 0x6}, {0x89, 0x5}, {0x8}, {0x3, 0x2}, {0x5, 0x3}, {0xaf, 0x6}, {0x1f, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x8, 0x2}, {0x6, 0x5}, {0x7, 0x1}, {0x3, 0x5}, {0x2, 0x2}, {0x9, 0x6}, {0x23, 0x5}, {0x37, 0x5}, {0xe9, 0x7}, {0x5, 0x4}], "2c9e397b9219e5d9"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x20, 0x2}, {0x3f, 0x7}, {0x3, 0x3}, {0x20, 0x3}, {0x62, 0x1}, {0x80, 0x1}, {0x9, 0x1}, {0x3, 0x1}, {0xac, 0x6}, {0x0, 0x4}], "c7c174092d41e7be"}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x88, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x121}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001380)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f00000013c0)={0x3d6, 0x0, 0x0, 0x0, 0x0, [0x9, 0x80000000, 0x5, 0x400]}) r4 = creat(&(0x7f0000001400)='./file0\x00', 0x0) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc011) 15:16:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_complete(0x0) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x400c0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4810}, 0x6000) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000580)={0x0, @private=0xa010100, 0x4e23, 0x0, 'nq\x00', 0x1, 0xd2d2, 0x3f}, 0x2c) r4 = socket$inet(0x2, 0x800, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f00000005c0)) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000600)=0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0x40}}, 0x48080) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@private, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f00000008c0)=0xe8) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x200001, 0x19) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000940)) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80480e}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x70, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) 15:16:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) socketpair(0x9, 0x6, 0x6, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) r3 = syz_open_dev$vcsn(&(0x7f0000000280), 0x721, 0x303000) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x13, 0xbe, "e792ee22b26c37326c69a362c90eb0"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x42b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6d4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x12}, {0x49, 0x1}, {0x6c, 0x1}, {0x6}, {0x6c, 0x1}, {0x48}]}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x502}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x4000801) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r3) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xc}}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x33}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040000) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x70}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x8004) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000680)={{0xa, 0x4e24, 0x2, @mcast1, 0x7}, {0xa, 0x4e23, 0xf0000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}, 0x6bd2, [0x800, 0x4f7, 0xfff, 0x101, 0x7ff, 0xf50, 0x5]}, 0x5c) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000700)) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0xf, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x48044) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000880)={0x77359400}, 0x10) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000008c0)=0x1) syncfs(r2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000900)=0x5, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000940)={r3, 0x7ff, 0x44, 0xa08f}) ioctl$FIONCLEX(r5, 0x5450) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3a5}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 15:16:20 executing program 3: getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) waitid(0x1, r0, &(0x7f00000000c0), 0x8, &(0x7f0000000140)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x7f]}, 0x8) sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="78991c95beaa2bb2ea6d63b86a5a01072a57ba2cb514d046fa067f439958fef73e21dc46da1ceeea41ba191ce2d829c7b8c1d05495c250dedbfaef7b0215dfb9ef6b4f80da7b5db599eec2b94072d74d562a7d6e9a3b876093f92cde34def77c8ebfea3f234d3d33ce1c5b191b3beb92913d8e8aa3049087c61e6f787a1c33d5422b57870a5ec0685b43596b0421d84522d6706c9b1899dbd47e6b5a59", 0x9d}, {&(0x7f0000000340)="c557453070a113f10be4a65b07534a59b8bd6dcce6ffc968e6f5fac9177bea0e83a44d7e6ecadee0ec7e0c7f102239699aa2e013fae5375a2524cb588f111090b12a8ebde46c11725dd4f2bcbbfb7db8b53294265f786992f2a1fbe18c2ec8cdbff709504d4c372543cbd5c55e64667dd5efc40563e78dbb8d804eedd37e4a0bcba5c3cba89433bbaf1a9dd9e99d5e914e1486fc19de587bf92a37bb8583ad38", 0xa0}, {&(0x7f0000000400)="731a435bf2dc3178997b64d108e9dde788a894bf1eb3afed4505d4e9b5bab9995b3693d7318833748b825c5940", 0x2d}, {&(0x7f0000000440)="631aab798be0cf7be383e11833761e818ae9c79e957e2146788e97b0692908f3a5f0076dabe3c280d12780", 0x2b}, {&(0x7f0000000480)="50b60d0f7791fc5bc31504d1cffdd2ee7f417e164efbafecc78931cb5a83ff6d580b5d338377290488af1ee3378571a4db2cb0fb65f3d61b57f9f4c529302fd5a85ed292c4", 0x45}], 0x5, &(0x7f0000000580)=[@ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0x17, 0x42, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty]}, @end, @ssrr={0x89, 0xb, 0x19, [@multicast2, @local]}, @timestamp_prespec={0x44, 0x24, 0xe4, 0x3, 0x9, [{@local, 0x1}, {@rand_addr=0x64010102, 0x5}, {@loopback, 0xcdb}, {@private=0xa010100, 0x6}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x88}, 0x8840) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000680)={0x7, 'ip6_vti0\x00', {0x3ff}, 0x13d8}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/zoneinfo\x00', 0x0, 0x0) write$P9_RWRITE(r2, &(0x7f0000000700)={0xb, 0x77, 0x1, 0x2}, 0xb) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_io_uring_complete(0x0) ppoll(&(0x7f0000000800)=[{r2, 0x8008}, {r3, 0x1024}, {r4, 0x148c}, {r5, 0x10}, {r6, 0x1100}], 0x5, &(0x7f0000000840)={0x0, 0x3938700}, &(0x7f0000000880)={[0x7]}, 0x8) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x180, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000009c0)={&(0x7f0000000900), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000a00)=0x3, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4d1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4485}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000bc0)={0x16, 0x7, '\x00', [@ra={0x5, 0x2, 0x100}, @jumbo, @pad1, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x18, {0x1, 0x4, 0x7f, 0x3ff, [0x7, 0x2]}}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x48) [ 92.278762] audit: type=1400 audit(1737645380.054:7): avc: denied { execmem } for pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:16:20 executing program 4: lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000, &(0x7f0000000200)={[{@huge_within_size}, {@gid={'gid', 0x3d, 0xee00}}], [{@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@seclabel}, {@permit_directio}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_eq={'fowner', 0x3d, r2}}]}) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1000) r5 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x8, 0x9, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x68, 0x1, @perf_bp={&(0x7f0000000440), 0x8}, 0x51720, 0x0, 0x0, 0x6, 0x5, 0x80000001, 0x5, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0xb) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0) r7 = fspick(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000580), 0x24002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000000980)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)="795e5405db3627006fab3a0757ef17c8e9987fa64be150591cd9c67f06d2c28ca1eb758db4ee3b315c4fc73752a52f65f2da35b893feb58464bc6e", 0x3b}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r3}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x30, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r0, r1}}}], 0x110, 0x4058041}}, {{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000800)="9eaba31e075a8636345698d94df869178a97c17dffc90c462b84c533ceb47571d4359e0aee1934c5e0504bda397b81d0d57b67690f897881c6ea0ae743a776ed769ded94d30dca1f8fe5fda86453c1d6caa804889cbe8532b173f8486fdc16f371b89f640c", 0x65}, {&(0x7f0000000880)="b16bb131ea6b1415981492027911185ac261be18dc55c19e70c4091db4656babed30469f27dea75e568abe6377f8bf454577236a6f6be87605ee8ade11748f89ba84bf6e1208db4059747f0c44776716151bf81249c9bcd2fb8a47cd345902069e693824ab058bb70074ef7cc4d88b7ffcb6fb7f7073adb0f9100855180768a7673ec121c189d3519e1a", 0x8a}], 0x2, 0x0, 0x0, 0x4000000}}], 0x2, 0x90) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000a40)={0x5, &(0x7f0000000a00)=[{0x0, 0x9, 0x0, 0x9}, {0x2, 0x7f, 0x7f, 0xfffffff8}, {0x20, 0x4, 0x37, 0x8}, {0xfff8, 0x8, 0x2, 0x80000000}, {0x1, 0x2, 0x20, 0x3}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000000e80)={r11, 0x0, 0x0, [0x87f, 0x5, 0x8, 0x2, 0xfffffffffffffff9], [0x10001, 0x0, 0xba44, 0x7, 0x2, 0xfff, 0x5, 0x6, 0x743, 0x3, 0x9, 0x0, 0x7, 0x100000001, 0x0, 0x81, 0x2, 0x1, 0x1, 0x6, 0x10001, 0x2, 0x5, 0x3, 0x4, 0x200, 0x3, 0x1ff, 0x3, 0x3, 0x400, 0x0, 0x0, 0x7, 0xffffffff80000001, 0xfb, 0x3f, 0x92, 0x6, 0x40, 0x0, 0x1, 0x1000, 0x4, 0x2, 0x9, 0x29, 0x8, 0x0, 0x1127, 0x577, 0x2400, 0x5, 0x7, 0x40, 0x1, 0x1f, 0x0, 0x7, 0x8, 0xffffffff, 0x6, 0x5, 0x6, 0xffffffffffffffff, 0x3, 0xae4, 0x0, 0x8000, 0x2, 0x4, 0x5, 0xfffffffffffffe01, 0x800, 0xffffffff, 0x1f, 0x8000, 0xffff, 0x100, 0xb4, 0x5, 0x4, 0xffffffffffffff81, 0x8, 0x6, 0x3, 0x3ff, 0x6, 0xc6b, 0xfb, 0x7, 0x81, 0x9f, 0x1c0000000000, 0x56, 0x20, 0x3ff, 0xa6, 0x6, 0x1, 0x7, 0x10000, 0xfffffffffffffff9, 0x6, 0xffffffffffff071c, 0xc54, 0xd7, 0x6, 0x10001, 0xffff, 0x5, 0x7, 0x80000000, 0xffffffff, 0x5, 0xfffffffffffffffd, 0xfc000000000000, 0x40, 0xe5, 0x19d, 0xffffffffffffff81]}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r12, 0x8982, &(0x7f00000012c0)) sendmsg$IPCTNL_MSG_EXP_DELETE(r12, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x78, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x40400c2}, 0x200080b5) sendmsg$IPSET_CMD_GET_BYNAME(r12, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x50, 0xe, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004840}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001580)={{0x1, 0x1, 0x18, r6, {r2, r3}}, './file0\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r13, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x18, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000001740)={{}, 0x1, &(0x7f0000001700)=[0x3], 0x7, 0x2, [0x3, 0x1, 0x8, 0x10001]}) 15:16:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x40000) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000140)=0x5f, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)={0x3c0, 0xa, 0x3, 0x401, 0x70bd26, 0x25dfdbfc, {0x3, 0x0, 0x9}, [@typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x33}}, @typed={0x8, 0x3d, 0x0, 0x0, @u32=0x90}, @nested={0x162, 0x34, 0x0, 0x1, [@typed={0x4, 0x3a}, @generic="f9779ca82148d527438590190f1ff2a825", @generic="6aee1be6065d14e86ad7461b473b255a1b0de2414de6b6dcb1949319c8a20ea1f8ba7d0ea2f1bf4c8b0b79a1244adac5e996f1b113ca12c1b66999744b264ef349ed24dea2", @generic="471df501696e0054c401f45a08c34efd98dc70cfafb779c1d55c794351f79976052ad49f5c3d1f5877e94ab0ce3144ce81b064a9", @typed={0x8, 0x51, 0x0, 0x0, @fd=r0}, @generic="8dd72112ffebe57ad5ad71cb75de1a06e1abbd40298f10b4f9fc58d321f7810c5195fbc05765d4e76009d106b3ba92f3f3d21aad40e9e7aa", @typed={0x8, 0x27, 0x0, 0x0, @uid=0xee00}, @generic="ac972094c2030a8391d3c0181a4a933de18c6ec302569a2ad682fb77e12af7fc613c177efbcd4781779acf45eb451111ca1badbc898eb6bc3223c5823aab9e8f41e01f560351d01856338932695146fb0b95e26d249da3e2e35ba532986dd865a1f796301dde63d0f5fb312c440a6fc873c187ca526e910dac9fe96c3718c5037c51d9c809ca8878"]}, @typed={0x8, 0x1d, 0x0, 0x0, @uid=0xee01}, @nested={0x221, 0x48, 0x0, 0x1, [@generic="8bbc5995935c1cf250fbb8635ebf056b1c74887299806220f9d32937569018a830ffd5ae7cd5b6f107b4a6e9f0caa407883c82a90dd1d76ac98dd8565d8f80fc7db86901d7de55072c477d1376ff1f73c904ad9d99add35e1f955dc210242ec4611615edc95ff53275547fcec8df198e865758ea4c89263a6ab82a4492d732911d4b12559d558f3680662380d0233f843bb25fecdf4149bf8ce6c5ef86b651ddfbc08493a12db311338f276ceeb925bfdcb36ad7d0b92e11820e32a3e1486ae6b5db5af84d53e04200a82687af3f3cd00bf6aa637696322655cfd0d56f3529b5ad54e8c5438844", @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@empty}, @generic="e25671a025262bf26ab2a92e3a5c4325fb52270bf0a677908ee95cd6e3a888dd4a40d1f24fe498a5ddfa6d85e388c75e81567b01967835ee6d8877dfb64e6f51322f", @typed={0xe9, 0xb, 0x0, 0x0, @binary="7aa10185ba211a97be1c24df3fe4a6e6917e9dbe0a6ab106b63283bc354ccc3e147e3ac1dd0cebf7b76fc1fc0aa89a0e88e162a77afb132012bff757efce8782af2c0b440a328bffb3ea9bf7ac19f1261d190958e7822a5380d0c1b90be9211d5c090ccef08a9bf36b90d36b7d0fe2ad23d7a653023cbecaafbc2ef2c4a850af7383f21b4c6bf30f7df5a638e395bc38d7d2da774bdca43cc0a4837d86be48a6c5ef4fbba844f0717c8d5efeebe6e7d11a6a00ef26d33de670b90b074ab6b4d6c968d19f89de610782924ac8964d9504d46cf4b0fe60f31ea220c456f45fdf58070fec934c"}]}, @generic]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000080) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x104, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x104}, 0x1, 0x0, 0x0, 0x48040}, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x763200, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f00000008c0)) sendto$inet6(r4, &(0x7f0000000900)="d91f5e19255139da43599f26d088c26306094ba72ea384a6dc02b523be3855c52ad05f23a184a8040225fb824db44d02bad08395d7a4de780c80f35dd9778d64fc6d631b1b5fbe2c56e848ced95dfa6af97f16055e85ab2e43b803c86c7e807af0b8009a0f63d9c6b302c8111a80daeab3052efa12024cf5b793ed1807d7687778bfaacaedaed9fd94b0979a98a3fd91", 0x90, 0x8044, &(0x7f00000009c0)={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x9}, 0x81}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x136}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000b40)) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000b80)={0x1, 0x44, 0xfffffff8, 0x80, 0x1, "18ab6a11719903f77f7f2dc13cb2913f6b4b77", 0x5, 0x3}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x88, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/nvram\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x1c, 0x1, '/proc/bus/input/devices\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) 15:16:20 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x17, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x40800) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$P9_RSETATTR(r0, &(0x7f0000000200)={0x7, 0x1b, 0x1}, 0x7) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @remote}, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x501, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x45}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x50}, @NL80211_ATTR_PMK={0x14, 0xfe, "e13e6380670f9d4e47a80e78c086e092"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2e}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5fc9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x43, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x30}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x100}, 0x20000000) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {0x1, 0x1}, [{0x2, 0x1, r3}, {0x2, 0x1}, {0x2, 0x1, 0xee01}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x0, 0xee01}], {0x4, 0x4}, [{0x8, 0x1, r5}, {0x8, 0x1, 0xee01}, {0x8, 0x4, 0xee01}, {0x8, 0x0, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x7, 0xee00}], {0x10, 0x4}, {0x20, 0x1}}, 0x8c, 0x3) r6 = accept(r0, 0x0, &(0x7f0000000900)) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000940)={0x0, "7c85cc0d7521e209e0471f3f5fe76387"}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001940)={0x1, 0x7, @start={r7, 0x1, "862879a0c5c897359d12392dbef2eb000700095a5cdff1fc6340189ccc46bd2b311a6f382817a98a61f46321980d6f3113357331b54f80b6d9292aca692e7622707147bfa672e6e6a8d0f978b1e19742d09b4878a339963b7d6a2ba02cd17093c0dc7428b662f31566c4739d886262c1f114c149e964a41fb2c67db6f0f3f82a00227999db714a08a257fb65335ec4e4f678e47c746648bfab21681f9555b1fa1df1d6e4ea578b3bb173ce72bb83e24be5eea00662879d7429d1e8d644a47fdfeee3268d53d1979d322938f7f43a754bf88bf34cef80bc0a933e990248fd288ec25944262fa5bd40719304203d0c55988b50e8394908e2692431858f130db9bf86bfe90aefd365d04e362ed96a05f9b07fec9401a8745e18576f89fa2c480dbaf2f410a6600f157d6ed068cbd5893f25041893099cbfdff16471f781f19999afbcecdb2a23879f837a272f5e374bfc3359463792363e829838f45188e34adaf9fde44f1af1df16f6c1423a32b02da1b4474717cdc0e47750decb7793c9b60426d82359bee57ab78f1d506b9479675bc6906a044e95610df9e73973934137ea5198a59cdee2ed1974566fad373a4db0ab4d3e0e1a558ad06e24de2e82e78a4d8e33420d8afb5aa9c373e6bdf082a0f6298f3d5cced312c7106fb13212a2cd9468719c2c514754a07034d3e350383d5f4edc54f6d35414a2bf7dd4dc11913d0c4ddd4e5a22e27dd6c592b6121ef3d029cc6f2a332cb2eaed05ace3430f02ab60994acd16b0f2c0c9b5aa6daae26d63a48f3677c11e1c81f21e5eb6f0a82abdecc663709240ba5b6f4ae9b1a02d23212abd64b7a368c973a108c9603369d99285835bd2e7fd5bcd7320aa72210f7bce4ae2f9073fabf9e2db7936d9df07796d58d3ceb67f40e46a6ed94542ec10a138e7175b4c540f0e663190b9481ad5c2ef89cc38d729aac07b47b6cae1b12475d87abbece01d3f18792897de8110d908aae07088c267c57d489f3733987cb7e5494b3ea2f48cf6ef9f7a5c8af09dade37acaf74c09d6383f1d1b6a686b17657167b18ae15618a0b78f144b929df278a6e9387d40b338e02be04f54334c4797947389f13c7d54bcaa80f2ff977a8d57c272af18af96b887fe4987202ee5da374977f759243d1a0530aeca5df4446ff3df95f267e97a9ef0c3dac264b162d72db47f5678174ca9dc489dc4947b6e41b43adce0b07d4dc1933b2e44ef3ef8399d6fd243046ff0d48f71b9e6cb8f346d4e5888883cd70aae9fbb0f604a4a9ea4b590b8935deb61bf1cffc35cd34b3cc4deaa3be8a40437777896ade9abb8e8a65221bf22e313706a60e943147fab1b6a956e4fd2779f3cfb0e1e2e6fe9da19b4c007aa5e28b7a08f28aaf5997e03ab2c466de96f2461fbb37170a62f98acf68416153f415b6151576b994d1603a3dbfe589d5bb84930", "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"}, [0x8, 0x4, 0x7, 0xb6c7, 0x20, 0x6, 0xffffffff, 0x0, 0x9, 0x9, 0x6, 0x9, 0x1, 0x7, 0x2, 0x1, 0x90, 0x0, 0xc50, 0x80000000, 0x226, 0x9, 0x1, 0x7fff, 0x7, 0x2ea0, 0x6, 0x800, 0x400, 0x3, 0x10000, 0x2, 0xcd, 0x2, 0x0, 0xc2, 0xfffffffffffffff8, 0x4, 0x7fffffff, 0x2, 0x9e5, 0x960, 0x539, 0x3ff, 0x662, 0x3, 0x1, 0xf6e7, 0xf015, 0x0, 0x7, 0x2, 0x4, 0xfff, 0x89, 0x81, 0x0, 0x7, 0x101, 0x7, 0x1f, 0x3, 0x3a89, 0x803]}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002380)=0x0) getgroups(0x4, &(0x7f00000024c0)=[r5, r5, r4, r4]) fchown(r1, r8, r9) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000002500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 15:16:20 executing program 6: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_io_uring_setup(0x40a4, &(0x7f0000000000)={0x0, 0x57a4, 0x10, 0x0, 0xa9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x2) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) fcntl$getflags(r1, 0x40a) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000140)) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$KDDELIO(r3, 0x4b35, 0x5) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000200)=0x2, 0x10001, 0x1) ioctl$CDROM_GET_MCN(r2, 0x5311, &(0x7f0000000240)) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0xcc0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {r4, r5}}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000300)={0x0, r7, 0xffffffffffffffff, 0x9, 0x100000000, 0x2}) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000000380)={0x9, 0x16, 0x8, 0x6, "2b0bad616ae681e71b7d36512b69cdce51ae5b050541b7319574241e8682836e"}) getsockopt$inet6_udp_int(r8, 0x11, 0x64, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) [ 93.980013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.983098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.984605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.985086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.985643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.994790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.996188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.997292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.999733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.999741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.003585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.005593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.012761] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.016725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.016955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.017177] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.021693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.031180] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.031212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.038944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.044201] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.044605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.045201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.045433] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.049034] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.050407] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.055088] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.062807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.065296] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.067861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.076787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.079280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.080413] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.091867] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.101739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.110592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.116822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.116840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.126999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.127223] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.138722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.156731] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.166698] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.180488] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.207602] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.207894] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.221803] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.229598] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.063039] Bluetooth: hci3: command tx timeout [ 96.135799] Bluetooth: hci6: command tx timeout [ 96.135809] Bluetooth: hci0: command tx timeout [ 96.190673] Bluetooth: hci4: command tx timeout [ 96.190720] Bluetooth: hci2: command tx timeout [ 96.191755] Bluetooth: hci1: command tx timeout [ 96.350565] Bluetooth: hci7: command tx timeout [ 96.350790] Bluetooth: hci5: command tx timeout [ 98.110635] Bluetooth: hci3: command tx timeout [ 98.174631] Bluetooth: hci0: command tx timeout [ 98.175284] Bluetooth: hci6: command tx timeout [ 98.238864] Bluetooth: hci1: command tx timeout [ 98.238929] Bluetooth: hci4: command tx timeout [ 98.239123] Bluetooth: hci2: command tx timeout [ 98.368556] Bluetooth: hci5: command tx timeout [ 98.368581] Bluetooth: hci7: command tx timeout [ 100.162585] Bluetooth: hci3: command tx timeout [ 100.227548] Bluetooth: hci6: command tx timeout [ 100.227646] Bluetooth: hci0: command tx timeout [ 100.292220] Bluetooth: hci4: command tx timeout [ 100.292251] Bluetooth: hci1: command tx timeout [ 100.292334] Bluetooth: hci2: command tx timeout [ 100.418644] Bluetooth: hci5: command tx timeout [ 100.421543] Bluetooth: hci7: command tx timeout [ 102.206653] Bluetooth: hci3: command tx timeout [ 102.270659] Bluetooth: hci0: command tx timeout [ 102.270793] Bluetooth: hci6: command tx timeout [ 102.334818] Bluetooth: hci4: command tx timeout [ 102.334962] Bluetooth: hci1: command tx timeout [ 102.335763] Bluetooth: hci2: command tx timeout [ 102.462791] Bluetooth: hci7: command tx timeout [ 102.462902] Bluetooth: hci5: command tx timeout [ 154.035357] syz-executor.5 (288) used greatest stack depth: 23296 bytes left [ 156.428202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.431800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.432346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.434784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.438547] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.439068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.730290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.733731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.735775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.739562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.753395] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.754989] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.756799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.756827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.758879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.762075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.765585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.777413] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.779691] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.780619] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.781115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.794597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.801705] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.802171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.838150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.854060] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.857364] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.861978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.862084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.867649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.878571] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.880973] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.897909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.899495] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.909086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.911422] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.923695] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.928881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.941732] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.942559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.949024] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.949980] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.950666] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.952178] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.952739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.962938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.972976] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.978908] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.526773] Bluetooth: hci0: command tx timeout [ 158.846678] Bluetooth: hci3: command tx timeout [ 158.847190] Bluetooth: hci2: command tx timeout [ 158.847321] Bluetooth: hci1: command tx timeout [ 159.039578] Bluetooth: hci5: command tx timeout [ 159.039627] Bluetooth: hci4: command tx timeout [ 159.040144] Bluetooth: hci6: command tx timeout [ 159.103549] Bluetooth: hci7: command tx timeout [ 160.575720] Bluetooth: hci0: command tx timeout [ 160.894543] Bluetooth: hci1: command tx timeout [ 160.897659] Bluetooth: hci3: command tx timeout [ 160.897804] Bluetooth: hci2: command tx timeout [ 161.087339] Bluetooth: hci4: command tx timeout [ 161.087394] Bluetooth: hci6: command tx timeout [ 161.088147] Bluetooth: hci5: command tx timeout [ 161.150546] Bluetooth: hci7: command tx timeout [ 162.622547] Bluetooth: hci0: command tx timeout [ 162.943574] Bluetooth: hci3: command tx timeout [ 162.943682] Bluetooth: hci1: command tx timeout [ 162.943704] Bluetooth: hci2: command tx timeout [ 163.134780] Bluetooth: hci5: command tx timeout [ 163.135530] Bluetooth: hci4: command tx timeout [ 163.135623] Bluetooth: hci6: command tx timeout [ 163.198815] Bluetooth: hci7: command tx timeout [ 164.674622] Bluetooth: hci0: command tx timeout [ 164.991515] Bluetooth: hci2: command tx timeout [ 164.991549] Bluetooth: hci3: command tx timeout [ 164.991651] Bluetooth: hci1: command tx timeout [ 165.185219] Bluetooth: hci5: command tx timeout [ 165.186761] Bluetooth: hci6: command tx timeout [ 165.186797] Bluetooth: hci4: command tx timeout [ 165.246558] Bluetooth: hci7: command tx timeout [ 218.698404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.699256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.699778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.708092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.709119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.711683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.145242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.151139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.154725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.177171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.182958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.184043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.185042] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.220670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.254833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.256806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.272658] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.280412] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.349264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.355015] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.357008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.372307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.392090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.396036] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.401061] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.401934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.402387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.406121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.406716] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.422350] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.429515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.430458] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.430919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.446134] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.461828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.480598] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.481076] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.482637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.484209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.547821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.559213] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.599893] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.602052] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.620478] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.646285] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.662565] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.669552] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.673527] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.734545] Bluetooth: hci0: command tx timeout [ 221.439129] Bluetooth: hci1: command tx timeout [ 221.439657] Bluetooth: hci3: command tx timeout [ 221.439822] Bluetooth: hci2: command tx timeout [ 221.641576] Bluetooth: hci5: command tx timeout [ 221.642019] Bluetooth: hci4: command tx timeout [ 221.694578] Bluetooth: hci7: command tx timeout [ 221.698887] Bluetooth: hci6: command tx timeout [ 222.782546] Bluetooth: hci0: command tx timeout [ 223.487571] Bluetooth: hci2: command tx timeout [ 223.487694] Bluetooth: hci3: command tx timeout [ 223.487755] Bluetooth: hci1: command tx timeout [ 223.682579] Bluetooth: hci4: command tx timeout [ 223.686819] Bluetooth: hci5: command tx timeout [ 223.743584] Bluetooth: hci6: command tx timeout [ 223.743694] Bluetooth: hci7: command tx timeout [ 224.830531] Bluetooth: hci0: command tx timeout [ 225.534542] Bluetooth: hci2: command tx timeout [ 225.534674] Bluetooth: hci1: command tx timeout [ 225.534780] Bluetooth: hci3: command tx timeout [ 225.726657] Bluetooth: hci4: command tx timeout [ 225.726776] Bluetooth: hci5: command tx timeout [ 225.791488] Bluetooth: hci6: command tx timeout [ 225.791605] Bluetooth: hci7: command tx timeout [ 226.879648] Bluetooth: hci0: command tx timeout [ 227.582545] Bluetooth: hci2: command tx timeout [ 227.582654] Bluetooth: hci3: command tx timeout [ 227.582754] Bluetooth: hci1: command tx timeout [ 227.774679] Bluetooth: hci5: command tx timeout [ 227.775258] Bluetooth: hci4: command tx timeout [ 227.840591] Bluetooth: hci7: command tx timeout [ 227.840706] Bluetooth: hci6: command tx timeout [ 259.598302] hrtimer: interrupt took 6861356 ns [ 281.545104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.546649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.571544] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.625547] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.634944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.689223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.778181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.779918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.783000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.787692] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.789033] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.791593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.793212] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.794603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.805688] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.815809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.821705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.823064] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.827606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.827708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.836687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.842793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.848137] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.849308] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.852755] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.854344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.869655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.870844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.874534] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.876328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.877906] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.879850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.880947] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.883835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.897835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.899788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.904470] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.910743] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.916007] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.928565] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.933587] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.942968] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.953100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.962574] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.969941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.981695] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.992786] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.998711] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 283.838633] Bluetooth: hci1: command tx timeout [ 283.839051] Bluetooth: hci0: command tx timeout [ 283.903578] Bluetooth: hci4: command tx timeout [ 283.903914] Bluetooth: hci2: command tx timeout [ 283.966918] Bluetooth: hci3: command tx timeout [ 283.970224] Bluetooth: hci5: command tx timeout [ 284.031505] Bluetooth: hci6: command tx timeout [ 284.095877] Bluetooth: hci7: command tx timeout [ 285.886806] Bluetooth: hci0: command tx timeout [ 285.886999] Bluetooth: hci1: command tx timeout [ 285.951538] Bluetooth: hci2: command tx timeout [ 285.951641] Bluetooth: hci4: command tx timeout [ 286.014672] Bluetooth: hci3: command tx timeout [ 286.014780] Bluetooth: hci5: command tx timeout [ 286.079516] Bluetooth: hci6: command tx timeout [ 286.142670] Bluetooth: hci7: command tx timeout [ 287.947463] Bluetooth: hci1: command tx timeout [ 287.947579] Bluetooth: hci0: command tx timeout [ 287.999203] Bluetooth: hci4: command tx timeout [ 288.000991] Bluetooth: hci2: command tx timeout [ 288.062624] Bluetooth: hci5: command tx timeout [ 288.063335] Bluetooth: hci3: command tx timeout [ 288.128534] Bluetooth: hci6: command tx timeout [ 288.191493] Bluetooth: hci7: command tx timeout [ 289.983364] Bluetooth: hci0: command tx timeout [ 289.983655] Bluetooth: hci1: command tx timeout [ 290.046547] Bluetooth: hci4: command tx timeout [ 290.046649] Bluetooth: hci2: command tx timeout [ 290.110585] Bluetooth: hci5: command tx timeout [ 290.110685] Bluetooth: hci3: command tx timeout [ 290.174494] Bluetooth: hci6: command tx timeout [ 290.238594] Bluetooth: hci7: command tx timeout [ 343.608172] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.609879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.613602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.614932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.617871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.623578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.626164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.628658] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.629822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.636882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.639000] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.640344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.762202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.775830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.777769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.779077] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.779294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.795328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.797689] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.798851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.821783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.837678] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.842542] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.843861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.072738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.078560] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.082268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.088610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.092174] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.094475] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.230308] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.253000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.256625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.264899] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.265931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.277733] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.279284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.289052] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.300817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.313284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.321277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.322522] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.329548] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.350369] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.350641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.382985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.399854] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.402664] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.663505] Bluetooth: hci1: command tx timeout [ 345.726595] Bluetooth: hci0: command tx timeout [ 345.894486] Bluetooth: hci3: command tx timeout [ 345.922074] Bluetooth: hci2: command tx timeout [ 346.111060] Bluetooth: hci4: command tx timeout [ 346.366533] Bluetooth: hci5: command tx timeout [ 346.494587] Bluetooth: hci6: command tx timeout [ 346.606999] Bluetooth: hci7: command tx timeout [ 347.713604] Bluetooth: hci1: command tx timeout [ 347.775576] Bluetooth: hci0: command tx timeout [ 347.903774] Bluetooth: hci3: command tx timeout [ 347.966621] Bluetooth: hci2: command tx timeout [ 348.158494] Bluetooth: hci4: command tx timeout [ 348.423532] Bluetooth: hci5: command tx timeout [ 348.555111] Bluetooth: hci6: command tx timeout [ 348.671207] Bluetooth: hci7: command tx timeout [ 349.758483] Bluetooth: hci1: command tx timeout [ 349.822500] Bluetooth: hci0: command tx timeout [ 349.950481] Bluetooth: hci3: command tx timeout [ 350.029491] Bluetooth: hci2: command tx timeout [ 350.206555] Bluetooth: hci4: command tx timeout [ 350.462505] Bluetooth: hci5: command tx timeout [ 350.592449] Bluetooth: hci6: command tx timeout [ 350.718565] Bluetooth: hci7: command tx timeout [ 351.808427] Bluetooth: hci1: command tx timeout [ 351.870475] Bluetooth: hci0: command tx timeout [ 351.998507] Bluetooth: hci3: command tx timeout [ 352.064559] Bluetooth: hci2: command tx timeout [ 352.255573] Bluetooth: hci4: command tx timeout [ 352.511567] Bluetooth: hci5: command tx timeout [ 352.639423] Bluetooth: hci6: command tx timeout [ 352.766577] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:21:28 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff85c18ca0 RBP=ffffffff85c18ca0 RSP=ffff88802a22f9d8 R8 =00000000ffffffff R9 =ffffed1001a7f841 R10=0000000000000000 R11=0000000000000001 R12=ffff888028af3780 R13=0000000000000000 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff84a8de87 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd520f84540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559be4dc24c8 CR3=0000000033384000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffea0000de0440 RCX=ffff8880161179d8 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffea0000de0468 RBP=0000000037811000 RSP=ffff888016117778 R8 =0000000000000000 R9 =0000000000000000 R10=ffffed1006f02200 R11=0000000000000001 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffea0000de0474 RIP=ffffffff81a3774a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc1cc28f78 CR3=000000002a9e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000