Warning: Permanently added '[localhost]:61609' (ECDSA) to the list of known hosts. 2025/01/29 12:21:26 fuzzer started 2025/01/29 12:21:27 dialing manager at localhost:40187 syzkaller login: [ 76.007191] cgroup: Unknown subsys name 'net' [ 76.118810] cgroup: Unknown subsys name 'cpuset' [ 76.170586] cgroup: Unknown subsys name 'rlimit' [ 81.460456] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 92.194211] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/29 12:21:44 syscalls: 2217 2025/01/29 12:21:44 code coverage: enabled 2025/01/29 12:21:44 comparison tracing: enabled 2025/01/29 12:21:44 extra coverage: enabled 2025/01/29 12:21:44 setuid sandbox: enabled 2025/01/29 12:21:44 namespace sandbox: enabled 2025/01/29 12:21:44 Android sandbox: enabled 2025/01/29 12:21:44 fault injection: enabled 2025/01/29 12:21:44 leak checking: enabled 2025/01/29 12:21:44 net packet injection: enabled 2025/01/29 12:21:44 net device setup: enabled 2025/01/29 12:21:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 12:21:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 12:21:44 USB emulation: enabled 2025/01/29 12:21:44 hci packet injection: enabled 2025/01/29 12:21:44 wifi device emulation: enabled 2025/01/29 12:21:44 802.15.4 emulation: enabled 2025/01/29 12:21:44 fetching corpus: 50, signal 20241/21709 (executing program) 2025/01/29 12:21:44 fetching corpus: 100, signal 25737/28366 (executing program) 2025/01/29 12:21:44 fetching corpus: 150, signal 28133/31840 (executing program) 2025/01/29 12:21:45 fetching corpus: 200, signal 31347/35995 (executing program) 2025/01/29 12:21:45 fetching corpus: 250, signal 35031/40409 (executing program) 2025/01/29 12:21:45 fetching corpus: 300, signal 36706/42986 (executing program) 2025/01/29 12:21:46 fetching corpus: 350, signal 39547/46343 (executing program) 2025/01/29 12:21:46 fetching corpus: 400, signal 41515/48882 (executing program) 2025/01/29 12:21:47 fetching corpus: 450, signal 43100/50947 (executing program) 2025/01/29 12:21:47 fetching corpus: 500, signal 44083/52543 (executing program) 2025/01/29 12:21:47 fetching corpus: 550, signal 45969/54761 (executing program) 2025/01/29 12:21:48 fetching corpus: 600, signal 47124/56395 (executing program) 2025/01/29 12:21:48 fetching corpus: 650, signal 47926/57720 (executing program) 2025/01/29 12:21:49 fetching corpus: 700, signal 49466/59482 (executing program) 2025/01/29 12:21:49 fetching corpus: 750, signal 51963/61790 (executing program) 2025/01/29 12:21:50 fetching corpus: 800, signal 52436/62746 (executing program) 2025/01/29 12:21:50 fetching corpus: 850, signal 52937/63688 (executing program) 2025/01/29 12:21:50 fetching corpus: 900, signal 53470/64624 (executing program) 2025/01/29 12:21:51 fetching corpus: 950, signal 54047/65505 (executing program) 2025/01/29 12:21:51 fetching corpus: 1000, signal 54403/66314 (executing program) 2025/01/29 12:21:52 fetching corpus: 1050, signal 55548/67412 (executing program) 2025/01/29 12:21:53 fetching corpus: 1100, signal 55998/68176 (executing program) 2025/01/29 12:21:53 fetching corpus: 1150, signal 56404/68930 (executing program) 2025/01/29 12:21:54 fetching corpus: 1200, signal 57012/69727 (executing program) 2025/01/29 12:21:55 fetching corpus: 1250, signal 57622/70478 (executing program) 2025/01/29 12:21:55 fetching corpus: 1300, signal 58552/71261 (executing program) 2025/01/29 12:21:55 fetching corpus: 1350, signal 58868/71831 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/72323 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/72756 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/73237 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/73733 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/74254 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/74716 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/75178 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/75615 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/76110 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/76598 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/77111 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/77457 (executing program) 2025/01/29 12:21:55 fetching corpus: 1355, signal 58877/77457 (executing program) 2025/01/29 12:21:59 starting 8 fuzzer processes 12:21:59 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x8, 0x2000) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x138, r0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x1}, {0x7}, {0x6, 0x5}, {0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x6, 0x7}, {0x2, 0x7}, {0x7f, 0x6}, {0x96, 0x7}, {0x5, 0x5}, {0xb7, 0x3}, {0x3f, 0x4}, {0xc5, 0x6}], "721409d6194a3d09"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5, 0x6}, {0x9, 0x1}], "846015c8934155c1"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "188bb77ef9cbb907"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x1}, {0xb7, 0x7}, {0x3, 0x3}, {0x2, 0x6}, {0x19, 0x7}, {0x1}, {0x0, 0x6}, {0x9, 0x6}], "4a987a2445e7342b"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7f, 0x2}, {0x80, 0x1}, {0x4, 0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x7, 0x5}, {0x34, 0x1}, {0x0, 0x4}, {0x3, 0x3}, {0x5, 0x3}, {0x7, 0x4}, {0x9, 0x1}, {0x81, 0x6}], "1dcb8b614bb0f251"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x4, 0x1}, {0x8, 0x3}, {0x8, 0x3}, {0x51}, {0x7f, 0x3}, {0xa7, 0x3}, {0x1, 0x3}, {0x4, 0x6}, {0x66, 0x1}, {0x8}, {0x40, 0x5}, {0x80, 0x6}, {0x8, 0x5}, {0x8, 0x1}], "53dcee2c8dff994d"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0x5}], "fd3149da0b0ea7ff"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x1, 0x3}, {0xff, 0x2}, {0x2, 0x5}], "f5f904f9223283b8"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x4, 0x5}, {0x6, 0x6}, {0x9, 0x7}, {0x81, 0x3}, {0x1f, 0x1}, {0x20, 0x4}], "893182495b03a95f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x4}, {0x8, 0x5}, {0x40, 0x3}, {0x0, 0x4}, {0x3, 0x6}, {0x3f}, {0x8, 0x5}, {0x7, 0x1}, {0x6c}, {0x3d, 0x3}, {0xb7, 0x3}, {0x0, 0x3}, {0x7f, 0x4}, {0x9, 0x6}, {0x1f, 0x6}, {0xb3, 0x1}, {0x0, 0x3}, {0x20}, {0x3, 0x1}], "93eea6f6df7ce31f"}}]}, 0x138}}, 0x8000) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xfff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x120, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xa3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x15c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xc}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xba}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8000000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x82a62fa8cb5f5f50}, 0x20000040) r5 = openat(r1, &(0x7f0000000a80)='./file0\x00', 0x200, 0x130) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8039, 0x6c}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x2fb0cb0dab0fa249) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r6, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x69}, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x45) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r1) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r8, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x20}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4890) r9 = pidfd_getfd(r5, r7, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x148, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a85e60bcf366aa94b61de7bdc8cb6393e49c7247a81cd10a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2e5b3c21bf31a862dbe95d639195f17bce87a6df49e3c006"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b8cf35800a70e080ba219cbd77847af93436328b2744c4be"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "03c0d70703cfd415273600d16669ee9e0cdf043094c79a61"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x148}, 0x1, 0x0, 0x0, 0xc834}, 0x40000) 12:21:59 executing program 1: ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = syz_open_pts(0xffffffffffffffff, 0x502) r1 = mq_open(&(0x7f0000000040)='#]\x00', 0x1, 0x8, &(0x7f0000000080)={0x5, 0x9, 0x4, 0x80000001}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0xfffffffffffffe00, 0x8000}) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000100)={0x2, 0x50}) recvmmsg$unix(r2, &(0x7f0000002140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/124, 0x7c}], 0x2, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1, &(0x7f0000000480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000600)=""/132, 0x84}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000780)=""/105, 0x69}], 0x3, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000980)=""/144, 0x90}, {&(0x7f0000000a40)=""/147, 0x93}, {&(0x7f0000000b00)=""/250, 0xfa}, {&(0x7f0000000c00)=""/95, 0x5f}, {&(0x7f0000000c80)=""/154, 0x9a}, {&(0x7f0000000d40)=""/76, 0x4c}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001e40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}, {{&(0x7f0000001ec0)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001f40)=""/88, 0x58}, {&(0x7f0000001fc0)=""/239, 0xef}], 0x2, &(0x7f0000002100)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x5, 0x1, &(0x7f0000002280)) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f00000022c0)=@v3={0x3000000, [{0x4, 0x3}, {0x1, 0x200020}], r10}, 0x18, 0x3) pread64(r2, &(0x7f0000002300)=""/11, 0xb, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000002340)=0x20) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f00000023c0)={0x1f, 0x28, '\x00', 0x0, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r15, 0x6, 0x16, &(0x7f0000002400)=[@timestamp, @window={0x3, 0x1, 0xa3}, @timestamp, @window={0x3, 0x8, 0x80}, @mss={0x2, 0x3ff}, @window={0x3, 0x200, 0x7}, @mss={0x2, 0x41}, @timestamp, @sack_perm], 0x9) fstat(r17, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = openat2(0xffffffffffffffff, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x0, 0x88, 0x5}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000002580)={{0x1, 0x1, 0x18, r22}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000002740)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002700)={&(0x7f0000002600)={0xf4, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4c72}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xf3e}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x2cf, 0x81]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24008000}, 0x4080) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r18, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x64, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x771}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9c2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf15}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3ae}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd92}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6c0}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4004005) r24 = openat$vcs(0xffffffffffffff9c, &(0x7f00000028c0), 0x402000, 0x0) r25 = openat(r12, &(0x7f0000002900)='./file0\x00', 0x40, 0x6) r26 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(r25, &(0x7f0000003300)=[{{&(0x7f0000002940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002b80)=[{&(0x7f00000029c0)="13e4bc20f9a32830dd1903ce378e9c6306d8ac1ea03ae656aa2243343074ff776d70abac1dd272be5e9d76dd9f179080f1a5b97bffede9cf5aa3f14d18b0a0f342ae4114e4cf1a011151828f0302e5762607456179acd8e75e4afff6afc6cbf9cc31ad3591877a892501f67c8e2d53067963f32f01e1329cd4e9f6d00f0147a7581a87baa0601d8ef6bd61363675be3e1e9fae1afa943e1a75366202bb203551778a430d12da63df12b64ec42c5de40dc8db2e11d0c2339c5c73495de0dc8c53bffbaf227d", 0xc5}, {&(0x7f0000002ac0)="e80b6aacaec14ae199a3740f2a0f9f9f0413896121bcc87999642e2b64cf8b196bd7820f8595caeaa8f361c05664e967a2f66bbe973f3c9c76fdfb16a3a70d6eee20ca6fb66353d7f220acaa516b3ebda8a79bb4adc7123a450d0d4b96eb65501061c47f40510ba8f0221271baaf914e83923712eb89302915e2b8330aeb6dcfa9f52829a5525004080ee81fada7cc576298b067bdf40d0127d171ea4f", 0x9d}], 0x2, &(0x7f0000003100)=[@rights={{0x20, 0x1, 0x1, [r26, r23, r7, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r20}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r16, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r6, r24, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11, r2, r14, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r19, r21, r3}}}, @cred={{0x1c, 0x1, 0x2, {r8, r21, r9}}}], 0xf8, 0x4004000}}, {{&(0x7f0000003200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r21, 0xee00}}}], 0x20}}], 0x2, 0x8000) 12:21:59 executing program 2: prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 12:21:59 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x51, 0x40, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = accept(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "62263ea63db1c971", "ba7304cd40190d5405b1caf40ca7a789", "3b6ea191", "f3e9524fa5c61564"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x10001, 0xe7, &(0x7f00000001c0)="6216c050fa0cfa9dae8abc8e7eb07bbbdafbde551d77ee3ddf38f4178946c10b39dd652c2350df8a06bb06197c7d3538b3e7c72b2682d5533dce91faee3bedcca8e628c44ed547972030a9077ca2912a042b288b5cba6920aa9606f070c12d576ca802079ca1e5b9bc479005dcb4da58501bec88862201c972764dbd84232ac0fb805c8ccb57725867195261bcc4f1d91637f34d81498193fc68a7b1620f65ca4389690128d12e63dc387d3fe24c51deefcd5b1fcf28f3c9daa87e0141eed90680126372c7bf56041c250185dbddf7f8ac2d565c0bedd587a323f28efdf68b2a1317bd0ca0a7f2", 0x0, 0x1}]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000340)) open_tree(r2, &(0x7f0000000380)='./file0\x00', 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$TCSBRK(r2, 0x5409, 0x5) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000003c0), 0x6e, &(0x7f0000001900)=[{&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/74, 0x4a}, {&(0x7f0000001680)=""/227, 0xe3}, {&(0x7f0000001780)=""/208, 0xd0}, {&(0x7f0000001880)=""/30, 0x1e}, {&(0x7f00000018c0)=""/44, 0x2c}], 0x8, &(0x7f0000001980)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fcntl$getflags(r5, 0x401) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000001a80)={0x0, 0xffffffffffffffff, 0x48c5, 0x7, 0x101, 0x1ff}) readlink(&(0x7f0000001ac0)='./file1\x00', &(0x7f0000001b00)=""/4096, 0x1000) r6 = syz_open_dev$vcsa(&(0x7f0000002b00), 0x9, 0x2001) fcntl$addseals(r6, 0x409, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000002b80)='./file1\x00', 0xa0) [ 108.358478] audit: type=1400 audit(1738153319.588:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:21:59 executing program 4: ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1805, 0x24ed, 0xc500}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0xff, 0x3, 0x6}, {0x9, 0x8, 0x87, 0x40}, {0x8, 0x7, 0x86, 0xffffffff}, {0xff, 0x5, 0x2, 0xe473}, {0x1, 0x81, 0x0, 0x1}, {0x1000, 0x60, 0x40, 0x40}]}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xfffffff7}}, './file0\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x7b00, 0x5, 0xff, 0x8}, {0x0, 0xeb, 0x2, 0x3}, {0x800, 0xac, 0xa5, 0x3}]}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcc24}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5e6e}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x80000001}]}]}, 0xb0}}, 0x2000800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8248000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x400b0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x41) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000) readv(r3, &(0x7f0000000e80)=[{&(0x7f0000000800)=""/181, 0xb5}, {&(0x7f00000008c0)=""/232, 0xe8}, {&(0x7f00000009c0)=""/205, 0xcd}, {&(0x7f0000000ac0)=""/154, 0x9a}, {&(0x7f0000000b80)=""/238, 0xee}, {&(0x7f0000000c80)=""/94, 0x5e}, {&(0x7f0000000d00)=""/101, 0x65}, {&(0x7f0000000d80)=""/205, 0xcd}], 0x8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), 0xffffffffffffffff) r6 = fspick(r4, &(0x7f0000000f40)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000f80)={r2, 0x4, 0x1, 0x101}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffffd}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffb}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x4044000) 12:21:59 executing program 5: ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000040)="2c43b14fb2dbdd49dcfe9daf905e635670bd3d0c144352ca46ad58f02122cb4bea734c0d0c918e774d166c5b8b759c329643332eced2e2c0071e866aad30c9c299d38d45dbb28ca2b910daba72e7f2ab18951629097407d47cc8846ca76161576eb7ea4c47038d6b8bf6902dfc4a89371ba205ec4ec5dd919ab32c85e45b35dae2cacde3552398fa3ac31496530ce57b172ba53887a7b2860a3a3569295d4fcf242f1aa67e040c1eed4ff019f510f9f4216ca5e6db0174a9b1c89de5c2bf19f37f494266ea384a8f05409e365f484be39de23d938a3b92c58fbe42", 0xdb) close(0xffffffffffffffff) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x401]}, 0x8) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000180)) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)={0x2, 0x2d, "2b7dc32927b7a9c028cbd6c8f35e9d0abf2490cf8ca9ca90cd121514c7fd8d48f791174c1d95e7b50ccb4403e0"}) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={0x0, @ax25={0x3, @default, 0x8}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, 0x4}, @in={0x2, 0x4e22, @empty}, 0x7ca, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='syzkaller1\x00', 0x2, 0x5, 0x101}) r2 = dup(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd4, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4010}, 0x8001) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) read(r4, &(0x7f0000000600)=""/247, 0xf7) pwritev2(r0, &(0x7f0000000dc0)=[{&(0x7f0000000700)="90e3f64e72551938341d4bdcbd873bd8f787020a0809e31762a2cd7d9a57cb5585ddb1094bbdde4e4c875aa8500e33e21a6353975c50ae802213ed3d2c933a6b716c6ac606791e3dd957c113a7711b61225b39a89916be1ee2f678be704f9f1a7c3a79d35e202d0bddb8e0c3b2b3858e7fae0ade312a057d61d15cec9d3092167ec10b4cfaa67ebfa5fed6ec086b2953a73f002253bc6e5a5708a524534d50d690ada5f9ff57ab67f9ff6b3deb5c2f2d64822a6cc5ae393c6e13d6735aeb498bf2c482c386fd68d5085649626120ddc0e7c2cb9997155d4b1d84066551cb98", 0xdf}, {&(0x7f0000000800)="3b61357a6e34da89130f7428189ba82db6a6af738f00e7b2726e6413f58a0c9bf1eddfcd55977214f175aaf6fe193d73518dae5c17500cf606ff92", 0x3b}, {&(0x7f0000000840)="2db24a1f03363460db8cc985275a80962c4dd10fa7557d03df1b140372e1dc45f72e2b5025a54840986e308225e19f06b0744c73e53be62d3217624cc0", 0x3d}, {&(0x7f0000000880)="1a3c52563a0f76fafd23ddf45d83232d18aaa8edd4aed005d526a69986d690dcccd4b8904705f427497c32a53c9554f173b3380e1d21137af544091572255a56bd7df657d95318fa24e5af322a9a3b4673b17e236df959aad5d6be72a9e3c5b42ecead80f47b8b9df2f84eaf98b97ebd4f3b31bdb64f113aafaad47c6f12c230734438f66d3e40e00ce6a278d35d8d62c850a198d2d960d64c0b8ff42775e8623e6d41ddd6b2ab38adfdbd8e92c0eb138ecb14d06965e592ebc57b1d31fe38db09d597bd3930dcb693b12edd18c1", 0xce}, {&(0x7f0000000980)="569d3588f7728713a2b40e00dfc519c1976a7f0fe9faf2b78ada9b0680f4efb0ee277257befe2aa1754dd27326c030eaa6c3bfc9fe731b4b7ef41fd4fbd4c4551c475b601d26d99dcba1774c29d8a80bc9b4f3aab2fc1c8d30cef6a7b9b8aa3f206c14e1f685163a37ba5e387701c65ddd793f873b5fedd2b658b0878e877cb2f6258f6d9872faf09da42082c9b5", 0x8e}, {&(0x7f0000000a40)="84dc449a043763b59971252e71446239addfaaf9f9ec6e4ee5ebe02bcffc7e5b872c64350fb7398597dce89865696f74678bb3dc9898e8b20bf6c524331d0f6e49a1ef7e415ad5b7487a5057a34ce568d9078c0fee194b84701879db4cded8118f9acdd23bede83527dd3d0fbf209ed56f2fd3967bf93a991680a8b13af01dcab7d3b0f62b4d1127b22936187b6e47773e1af39eeae1a42af83eaefc0b018aa2dc073fad56713f93ebf8c87140fda43c33711ce04f7f11517d865de13902779f3b4b91947d01666750c8d1ccbf04f5dcd95b4928b6dc38a23441d784feafd86b7191ba29361e856bb9df3fd87e", 0xed}, {&(0x7f0000000b40)="515f7a6e699104340318ac535ca1b9044d609fe4936f1ece9102a3a5f7ce6229da598a14a0da5d094e2047b50a3e191ac9f4e49e214368a1f32280351c43afb769a54e78b004fb429b0a0242ef23e665cb40dfcbd6bd7e97e53590016ba7ce8e91b69b49281630942af25e150bd11b93e8ce8217ace0129a3408d1f7999c190acf46e9df0cea98bdb297efff3f3264d6cbdd6d137688dfdd12eadd36130240bf638aad10cd7858a11bd9", 0xaa}, {&(0x7f0000000c00)="b9db885514cc9fd798df62b88bff9a1099cc9e72456d243f4136bab01df6014d4ad33bf96ca2f896e3313f2f9547d3c3c85815d5c442041c91a41b7550a897e6819c605ce845431a6d66123d3ac2cb73af9d00ddc84fb954d894d33d2d0600096857fd691a5eed89b40ff954d7138118b2bd0060ad7dc5be303bbf", 0x7b}, {&(0x7f0000000c80)="7b4e0297161d850c87312e0a2cfff6d900604a5e852fabea6ab55c7a23ff2c9982fb7a2029f6f1e0ad6582", 0x2b}, {&(0x7f0000000cc0)="229889bfa1190cf539d851c5c65a23b767ff46b9eb94536ad551a0808bccca055020cf5a6d0ac87292c87b041b2ff8851434a1f418f8a136337cf996456f309a9a305468afa7cb627fb906ac5e3aebd3d80f105323708a605308ee6ba330a11c6b31426b6021b58fe223bbb9231d507a31664b78e8ab5b393f17a81228775e98ee2cb621eb1f426acc021ef1d17d48c0d84681c4e09310e885ba6e512eb85644ac6923052df9da7a4f872f25be985f51ec36cdcdfd517a081c75a52a936b7fcb069f46fdada48a6f85fbad6d9b068d7fb2b84d838f52f94cf242fbc724978c8717aaeb8044df717166adc26369d03e6ed77a", 0xf2}], 0xa, 0x7, 0x5, 0x59feea88f740a918) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000e80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000f00)={r5, 0x0, r0, 0xe56}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001080)={'ip_vti0\x00', &(0x7f0000000f80)={'syztnl1\x00', r3, 0x8, 0x8000, 0x10000, 0x7fff, {{0x36, 0x4, 0x1, 0x2, 0xd8, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0xa, [{@private=0xa010102, 0x101}, {@remote, 0x81}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @timestamp_addr={0x44, 0x14, 0xbc, 0x1, 0x7, [{@broadcast, 0x8001}, {@empty, 0x3}]}, @lsrr={0x83, 0x1f, 0xe9, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @broadcast, @remote, @private=0xa010102, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xe9, 0x1, 0x6, [{@broadcast, 0x3}, {@remote, 0x2}, {@private=0xa010100, 0x5}, {@multicast1, 0x9}, {@loopback}, {@empty, 0x1000}, {@local, 0x1ffc0}, {@loopback, 0xff}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0x8d, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x8}, {@broadcast, 0x1}]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000010c0)={@initdev, 0x0}, &(0x7f0000001100)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001280)={'syztnl2\x00', &(0x7f0000001200)={'sit0\x00', r3, 0x29, 0x3, 0x64, 0x8, 0x51, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7810, 0x7, 0x1e8e6360, 0x3}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000001740)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000001700)={&(0x7f0000001380)={0x364, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x41800}, 0x4) 12:21:59 executing program 6: ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000000)=0x6) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000540)={0x5, 0x71, 0x80, 0x7, 0x2, 0x5}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x4, 0x3, &(0x7f0000001480)=[{&(0x7f0000001280)="506aa56fa3d740711c56c87db54ea1c214e7cadd896b340b283c3ff7d605286866304125045dc528179df3c2c07d444a483c7f3704f4ce87d3388aff970d8dfbb16cefa8b9eeab183ac2e819ee32a8f0c084008116b119a995dbcaef6adeba9413f85b16b616b35c7a40a419a47d8c31c5906f4470f2f005b2ee3871d17dcc712c612589a4a10ef49225e59f43b882e3", 0x90, 0x6}, {&(0x7f0000001340)="0a6c8281e73cdd7dc0ba59a1e7649f036d73c7f24f85b8db0d93709032d7fa0404c19d5330bc83ddb46f86de2bdf5dbd710d362e47ac7ccc608d0c9d53d0529f1692903ec776d0bae6620f4a2b5cb4cbaf8c7f0a41fa3fc78f02aa5c384afca275283a410da4dbea13f35d4ee60b005e76941b4629151820dcedaa3684ec762429376828f90ec1c38a", 0x89, 0x7}, {&(0x7f0000001400)="1fbbdb2c12e1f9d5803f3c6077cf575adbedbf4721e2bd147680996728187e44cf49bbdedc7e5271924331f713d962b8adc331d35c0e8a9cc00aab20e9e5b61ee8b0286082445c687a9f51b210a33d2f", 0x50, 0x8}], 0x1e93bf760d0fdee6, &(0x7f0000001500)={[{@fat=@umask={'umask', 0x3d, 0xfffffffffffffffb}}, {@numtail}], [{@uid_lt}]}) io_submit(0x0, 0x4, &(0x7f0000001680)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000fc0)="2ff07d63a59c78dc24d56ed9c9a219b614b4121be2710073af7612724382f13b39ff81ecab992ddae52b647c335269c1257ae29948e31429c10762cc04a27932fe007d6f0f68c2139c9ca4071cdc9aedb0b2c9eb90565bb253cea0df5140d058b4485c5accdf7dd24ce9c64bd231", 0x6e, 0x4, 0x0, 0x2}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f0000001080)="20fc963235512aa9e17a5001c2e7a6517fbb6304477f8a2430a8ca01aaf71073f49c6a1819eb9be963a06dce0692", 0x2e, 0x2, 0x0, 0x1, r1}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000001100)="4b938a73c704f39638eb08b0a7bb13d5a40bd620928e6f3dd8f21be489a6993bf700d2466e3c64424903de765aade84ec233ee323a3443aafe961f306466c288143b9410d037e3185a7236137887fa8e3af9a26c8b5f1480d3c8fe893ead1a7990f0cdf295ce4983cb0f0a3fb6bf74c7504aab1c150ceb965f1de02e53c48a8ea2cdc9ff5c6afcbadfea0efbfbc4ebc5ba4093610b1ff2baa278b9eb2d130a750d0e946b", 0xa4, 0x0, 0x0, 0x2, r1}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f0000001580)="5548ca0867caf075644b11530b1be247ccc930a3a87981b9824bb924fda2a4c6dbfab155c289263eb7f30f503e6f2652085e6bc64ab28ec4cd53159787e15062f2d5456c9c7027ea18072c740de0665159904c310c202f956965882fe6db5a359c6a8b2353d054ec1754d37a98097a18794f67ffb6dd0ed6a4385510ad3c38f406fb226159d687bc762440cea74dae3ed7", 0x91, 0x7fff, 0x0, 0x2, r1}]) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000016c0)='bic\x00', 0x4) ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f0000001700)={0x2, 0xd}) fcntl$getownex(r1, 0x10, &(0x7f0000001740)) r4 = openat2(r3, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x22c580, 0x1, 0x5}, 0x18) r5 = accept$packet(r1, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000001880)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r1, {r7}}, './file0\x00'}) faccessat(r1, &(0x7f0000001900)='.\x00', 0x80) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001940)={0x0, 0x1001}, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000001980)) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f00000019c0)=0xc) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44854}, 0x20040000) 12:21:59 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x6) close(0xffffffffffffffff) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0xa2}, {r0, 0x8120}, {0xffffffffffffffff, 0x1201}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x755}, {0xffffffffffffffff, 0x40}, {}], 0x7, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x3]}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x0}) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = signalfd(r0, &(0x7f0000000200)={[0x9]}, 0x8) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) unlinkat(r2, &(0x7f0000000380)='./file0\x00', 0x0) getsockname$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000400)=0x1c) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r2, 0x0) r5 = syz_io_uring_complete(r4) ioctl$PTP_PIN_GETFUNC(r5, 0xc0603d06, &(0x7f0000000440)={'\x00', 0x20, 0x2, 0x1}) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000004c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0x5c41}}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x4e21, 0x0, 0x4e21, 0x9, 0xa, 0x1c0, 0x0, 0x88, r1, 0xee00}, {0x10001, 0x20, 0xf03c, 0x1ff, 0xc65f, 0x20, 0x3, 0x200}, {0x0, 0x7ff, 0xfffffffffffffffa}, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x3c}, 0x2, @in=@broadcast, 0x3507, 0x1, 0x1, 0x2, 0x9, 0x3, 0x5}}, 0xe8) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r2) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000007c0)={@in={{0x2, 0x4e22, @private=0xa010102}}, 0x0, 0x0, 0x1a, 0x0, "b1097ff1868555160aafcb0dec662f6309d46e377c83d45ac74c506359a3e91ac0fc7a026f3739003b3eb318d1e1bcbf0fe53ab95662cc95144541717aecd4678708d9c00d0464f9ef133aa17dc9741c"}, 0xd8) [ 109.804658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.855261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.856228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.857918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.861312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.900170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.930019] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.931281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.936345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.948652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.954232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 109.957109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.959113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.960021] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 109.964042] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 109.965786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.968693] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.977079] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 109.977184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.980919] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 109.984282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 109.997088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.998103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.016363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.017307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.018377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 110.019327] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.020885] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 110.021620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.023236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.024393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.029419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.031181] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.033521] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.044805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 110.048897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.053006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.103333] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 110.106439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.113410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.115949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.123882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.125524] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.127027] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.178932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 110.184988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.195553] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 110.197252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.140104] Bluetooth: hci2: command tx timeout [ 112.140156] Bluetooth: hci7: command tx timeout [ 112.140898] Bluetooth: hci1: command tx timeout [ 112.267872] Bluetooth: hci0: command tx timeout [ 112.331808] Bluetooth: hci3: command tx timeout [ 112.395819] Bluetooth: hci6: command tx timeout [ 112.397120] Bluetooth: hci5: command tx timeout [ 112.397218] Bluetooth: hci4: command tx timeout [ 114.188440] Bluetooth: hci7: command tx timeout [ 114.188857] Bluetooth: hci2: command tx timeout [ 114.189067] Bluetooth: hci1: command tx timeout [ 114.342226] Bluetooth: hci0: command tx timeout [ 114.379822] Bluetooth: hci3: command tx timeout [ 114.443862] Bluetooth: hci5: command tx timeout [ 114.444384] Bluetooth: hci6: command tx timeout [ 114.445662] Bluetooth: hci4: command tx timeout [ 116.236051] Bluetooth: hci7: command tx timeout [ 116.236287] Bluetooth: hci2: command tx timeout [ 116.236845] Bluetooth: hci1: command tx timeout [ 116.364909] Bluetooth: hci0: command tx timeout [ 116.429863] Bluetooth: hci3: command tx timeout [ 116.492844] Bluetooth: hci4: command tx timeout [ 116.492889] Bluetooth: hci6: command tx timeout [ 116.493298] Bluetooth: hci5: command tx timeout [ 118.285958] Bluetooth: hci2: command tx timeout [ 118.286052] Bluetooth: hci1: command tx timeout [ 118.286465] Bluetooth: hci7: command tx timeout [ 118.413193] Bluetooth: hci0: command tx timeout [ 118.477750] Bluetooth: hci3: command tx timeout [ 118.539910] Bluetooth: hci5: command tx timeout [ 118.540034] Bluetooth: hci6: command tx timeout [ 118.540426] Bluetooth: hci4: command tx timeout [ 172.506797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.511631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.513196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.515635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.515949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.516783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.518247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.520051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.521547] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.523356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.524843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.526891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.529872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.534461] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.535807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.542010] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.551520] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.552904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.573358] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.574393] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 172.575909] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.578476] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.581090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 172.594188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.597067] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 172.599586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.602964] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.603151] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 172.605168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.606976] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.608088] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 172.609802] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 172.609813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.611806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 172.616280] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 172.617896] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 172.619009] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 172.619032] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 172.628296] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 172.631031] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.632122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.634257] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 172.637943] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 172.640108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.641385] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 172.642559] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 172.660226] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 172.661521] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.626080] Bluetooth: hci2: command tx timeout [ 174.627078] Bluetooth: hci0: command tx timeout [ 174.627777] Bluetooth: hci1: command tx timeout [ 174.668271] Bluetooth: hci3: command tx timeout [ 174.731809] Bluetooth: hci6: command tx timeout [ 174.747761] Bluetooth: hci7: command tx timeout [ 174.748409] Bluetooth: hci4: command tx timeout [ 174.749062] Bluetooth: hci5: command tx timeout [ 176.652049] Bluetooth: hci0: command tx timeout [ 176.652594] Bluetooth: hci1: command tx timeout [ 176.653924] Bluetooth: hci2: command tx timeout [ 176.715755] Bluetooth: hci3: command tx timeout [ 176.780826] Bluetooth: hci7: command tx timeout [ 176.781307] Bluetooth: hci5: command tx timeout [ 176.782044] Bluetooth: hci4: command tx timeout [ 176.782498] Bluetooth: hci6: command tx timeout [ 178.700862] Bluetooth: hci0: command tx timeout [ 178.701405] Bluetooth: hci1: command tx timeout [ 178.702573] Bluetooth: hci2: command tx timeout [ 178.764274] Bluetooth: hci3: command tx timeout [ 178.828133] Bluetooth: hci6: command tx timeout [ 178.829923] Bluetooth: hci4: command tx timeout [ 178.831303] Bluetooth: hci5: command tx timeout [ 178.832828] Bluetooth: hci7: command tx timeout [ 180.748853] Bluetooth: hci0: command tx timeout [ 180.750308] Bluetooth: hci2: command tx timeout [ 180.751506] Bluetooth: hci1: command tx timeout [ 180.811888] Bluetooth: hci3: command tx timeout [ 180.875949] Bluetooth: hci5: command tx timeout [ 180.876456] Bluetooth: hci4: command tx timeout [ 180.878762] Bluetooth: hci6: command tx timeout [ 180.879245] Bluetooth: hci7: command tx timeout [ 235.105129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.107411] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.109447] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.112555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.115603] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.120434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.237119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.239838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.241790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.252925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.256525] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.258412] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.290819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.293650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.295136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.302850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.305588] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.308055] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.308101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.313369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.329888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.337628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.339643] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.343114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.363312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.378457] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.403531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.413251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.424652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 235.429012] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.434325] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.444425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.469203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.504073] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.525447] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.526381] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 235.540103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.541059] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.583817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.586298] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.590998] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.604889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.605918] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.655558] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 235.696323] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.702155] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 235.703443] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.705887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.196789] Bluetooth: hci0: command tx timeout [ 237.324777] Bluetooth: hci1: command tx timeout [ 237.398767] Bluetooth: hci3: command tx timeout [ 237.399922] Bluetooth: hci2: command tx timeout [ 237.538895] Bluetooth: hci4: command tx timeout [ 237.835797] Bluetooth: hci6: command tx timeout [ 237.900815] Bluetooth: hci5: command tx timeout [ 237.901986] Bluetooth: hci7: command tx timeout [ 239.243870] Bluetooth: hci0: command tx timeout [ 239.371775] Bluetooth: hci1: command tx timeout [ 239.435791] Bluetooth: hci2: command tx timeout [ 239.436010] Bluetooth: hci3: command tx timeout [ 239.564801] Bluetooth: hci4: command tx timeout [ 239.885748] Bluetooth: hci6: command tx timeout [ 239.947840] Bluetooth: hci7: command tx timeout [ 239.947939] Bluetooth: hci5: command tx timeout [ 241.319777] Bluetooth: hci0: command tx timeout [ 241.419776] Bluetooth: hci1: command tx timeout [ 241.495712] Bluetooth: hci2: command tx timeout [ 241.495731] Bluetooth: hci3: command tx timeout [ 241.615774] Bluetooth: hci4: command tx timeout [ 241.932774] Bluetooth: hci6: command tx timeout [ 241.999792] Bluetooth: hci5: command tx timeout [ 241.999878] Bluetooth: hci7: command tx timeout [ 243.339762] Bluetooth: hci0: command tx timeout [ 243.467863] Bluetooth: hci1: command tx timeout [ 243.531771] Bluetooth: hci2: command tx timeout [ 243.531809] Bluetooth: hci3: command tx timeout [ 243.659832] Bluetooth: hci4: command tx timeout [ 243.988947] Bluetooth: hci6: command tx timeout [ 244.044041] Bluetooth: hci7: command tx timeout [ 244.044068] Bluetooth: hci5: command tx timeout [ 297.327032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.335321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.338513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.373061] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.406048] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.414730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.432983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.434238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.435382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.440257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.441874] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 297.443182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.568223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.586812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.587967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.622583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.633831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 297.638785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.639624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.656840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.658571] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.659953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.662344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.664521] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.666107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.676458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.689891] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.690794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.701883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.707996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.711942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.718111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 297.724785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.727235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.729155] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 297.734825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.798918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.838116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.871500] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.888298] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.892816] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 297.894046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.989750] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.005000] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.040976] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.093956] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.102925] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 298.114903] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.467923] Bluetooth: hci1: command tx timeout [ 299.467962] Bluetooth: hci0: command tx timeout [ 299.723995] Bluetooth: hci2: command tx timeout [ 299.724045] Bluetooth: hci3: command tx timeout [ 299.854859] Bluetooth: hci4: command tx timeout [ 299.919844] Bluetooth: hci5: command tx timeout [ 299.989791] Bluetooth: hci6: command tx timeout [ 300.192729] Bluetooth: hci7: command tx timeout [ 301.515806] Bluetooth: hci0: command tx timeout [ 301.516830] Bluetooth: hci1: command tx timeout [ 301.771781] Bluetooth: hci2: command tx timeout [ 301.772882] Bluetooth: hci3: command tx timeout [ 301.899766] Bluetooth: hci4: command tx timeout [ 301.965768] Bluetooth: hci5: command tx timeout [ 302.044601] Bluetooth: hci6: command tx timeout [ 302.220816] Bluetooth: hci7: command tx timeout [ 303.564526] Bluetooth: hci1: command tx timeout [ 303.564559] Bluetooth: hci0: command tx timeout [ 303.821839] Bluetooth: hci3: command tx timeout [ 303.821861] Bluetooth: hci2: command tx timeout [ 303.953848] Bluetooth: hci4: command tx timeout [ 304.022145] Bluetooth: hci5: command tx timeout [ 304.086931] Bluetooth: hci6: command tx timeout [ 304.271914] Bluetooth: hci7: command tx timeout [ 305.613836] Bluetooth: hci1: command tx timeout [ 305.625784] Bluetooth: hci0: command tx timeout [ 305.867862] Bluetooth: hci3: command tx timeout [ 305.868342] Bluetooth: hci2: command tx timeout [ 305.999118] Bluetooth: hci4: command tx timeout [ 306.060794] Bluetooth: hci5: command tx timeout [ 306.125752] Bluetooth: hci6: command tx timeout [ 306.316887] Bluetooth: hci7: command tx timeout [ 359.659938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.664110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.665838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.668903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.672492] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 359.674201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.810337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.812023] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.813119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.815458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.817351] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 359.818460] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.849316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.855139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.873950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.884462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.892128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 359.893243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.969394] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.972003] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.990792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.994147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.996062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.003153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.019750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.019810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.026582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.036138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.037007] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.041314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.046775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 360.053301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.064379] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.076062] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 360.082812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.082829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 360.083512] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.087289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.096106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.106169] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.107603] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 360.108844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.125422] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.129881] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.131319] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.137032] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.142895] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 360.144623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.743787] Bluetooth: hci0: command tx timeout [ 361.870730] Bluetooth: hci1: command tx timeout [ 361.934730] Bluetooth: hci2: command tx timeout [ 362.135773] Bluetooth: hci4: command tx timeout [ 362.203954] Bluetooth: hci7: command tx timeout [ 362.205165] Bluetooth: hci5: command tx timeout [ 362.251774] Bluetooth: hci6: command tx timeout [ 362.252611] Bluetooth: hci3: command tx timeout [ 363.793688] Bluetooth: hci0: command tx timeout [ 363.949341] Bluetooth: hci1: command tx timeout [ 363.984492] Bluetooth: hci2: command tx timeout [ 364.173773] Bluetooth: hci4: command tx timeout [ 364.235893] Bluetooth: hci5: command tx timeout [ 364.236436] Bluetooth: hci7: command tx timeout [ 364.300543] Bluetooth: hci3: command tx timeout [ 364.301119] Bluetooth: hci6: command tx timeout [ 365.835902] Bluetooth: hci0: command tx timeout [ 365.964831] Bluetooth: hci1: command tx timeout [ 366.033732] Bluetooth: hci2: command tx timeout [ 366.277692] Bluetooth: hci4: command tx timeout [ 366.285447] Bluetooth: hci7: command tx timeout [ 366.286033] Bluetooth: hci5: command tx timeout [ 366.353795] Bluetooth: hci6: command tx timeout [ 366.353872] Bluetooth: hci3: command tx timeout [ 367.884695] Bluetooth: hci0: command tx timeout [ 368.014709] Bluetooth: hci1: command tx timeout [ 368.076731] Bluetooth: hci2: command tx timeout [ 368.332841] Bluetooth: hci5: command tx timeout [ 368.333481] Bluetooth: hci7: command tx timeout [ 368.334368] Bluetooth: hci4: command tx timeout [ 368.395712] Bluetooth: hci3: command tx timeout [ 368.396955] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:27:06 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff86bfb7d8 RDX=1ffff1100d9c1348 RSI=ffff88802e8278f8 RDI=ffff88806ce09a40 RBP=ffff88802e8278f8 RSP=ffff88806ce099a0 R8 =ffffffff86bfb7dc R9 =ffff88806ce09a80 R10=000000000003ab8c R11=00000000000c16e2 R12=0000000000000008 R13=ffff88806ce09a88 R14=ffff88802e827900 R15=ffff88806ce09a40 RIP=ffffffff81348c8f RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8c269c1368 CR3=0000000018536000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888037e30001 RBX=ffff88806cf099e0 RCX=0000000000000001 RDX=ffff888037e2f901 RSI=ffff888037e2f8f8 RDI=ffff88806cf099f0 RBP=ffff888037e2f8f8 RSP=ffff88806cf09938 R8 =0000000000000001 R9 =ffff88806cf09a20 R10=000000000003ab8c R11=000000000002440a R12=0000000000000008 R13=ffff888037e28000 R14=ffff888037e2f8f8 R15=ffff88806cf099e0 RIP=ffffffff81348d0d RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560cb6c4d080 CR3=000000002228e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000