Warning: Permanently added '[localhost]:18423' (ECDSA) to the list of known hosts. 2025/01/29 23:33:56 fuzzer started 2025/01/29 23:33:56 dialing manager at localhost:36977 syzkaller login: [ 68.198606] cgroup: Unknown subsys name 'net' [ 68.289775] cgroup: Unknown subsys name 'cpuset' [ 68.320863] cgroup: Unknown subsys name 'rlimit' 2025/01/29 23:34:14 syscalls: 2217 2025/01/29 23:34:14 code coverage: enabled 2025/01/29 23:34:14 comparison tracing: enabled 2025/01/29 23:34:14 extra coverage: enabled 2025/01/29 23:34:14 setuid sandbox: enabled 2025/01/29 23:34:14 namespace sandbox: enabled 2025/01/29 23:34:14 Android sandbox: enabled 2025/01/29 23:34:14 fault injection: enabled 2025/01/29 23:34:14 leak checking: enabled 2025/01/29 23:34:14 net packet injection: enabled 2025/01/29 23:34:14 net device setup: enabled 2025/01/29 23:34:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 23:34:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 23:34:14 USB emulation: enabled 2025/01/29 23:34:14 hci packet injection: enabled 2025/01/29 23:34:14 wifi device emulation: enabled 2025/01/29 23:34:14 802.15.4 emulation: enabled 2025/01/29 23:34:14 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/29 23:34:14 fetching corpus: 0, signal 0/2379 (executing program) 2025/01/29 23:34:14 fetching corpus: 0, signal 0/2379 (executing program) 2025/01/29 23:34:16 starting 8 fuzzer processes 23:34:17 executing program 0: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xddc9}}, './file0\x00'}) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000140)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) preadv2(r2, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/70, 0x46}, {&(0x7f0000000380)=""/35, 0x23}, {&(0x7f00000003c0)=""/93, 0x5d}], 0x5, 0x401, 0x6, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) fcntl$dupfd(r1, 0x406, r2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0), 0x208002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000500)={0x40000000}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0x8e}}, './file0\x00'}) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000005c0)) ioctl$RTC_UIE_OFF(r4, 0x7004) prctl$PR_GET_TIMERSLACK(0x1e) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000600)=0x4, 0x4) fcntl$setlease(r1, 0x400, 0x2) recvfrom(r5, &(0x7f0000000640)=""/79, 0x4f, 0x40002102, &(0x7f00000006c0)=@un=@file={0x0, './file0\x00'}, 0x80) 23:34:17 executing program 1: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40450d0) r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x302, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x104, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20000, 0x17}}}}, [@NL80211_ATTR_IE={0x97, 0x2a, [@fast_bss_trans={0x37, 0x71, {0x58, 0x1, "ad5b2ee870da0f0af45be082a7efc91d", "83314ccb82f2c80245be5b0b57319b65a781233dd358c1a50b3f9e79b5557e88", "25c02e1e10d3c7d7eb0371a5892342af2b93b586b8c2bf1e6a757c327b265436", [{0x1, 0x1d, "33d87b8031bb85f1728a887a82648050918c4cf57aa4294be71fe450f9"}]}}, @challenge={0x10, 0x1, 0xef}, @cf={0x4, 0x6, {0x0, 0x2, 0x0, 0x963b}}, @dsss={0x3, 0x1, 0xab}, @mic={0x8c, 0x10, {0xf16, "49eb78aa5a4e", @short="34e7384f29a5fbe3"}}]}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="1f765628695860d48f2fa5daacec0e4c07e54d794101"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@random="e658a53b5030", @device_b, @device_b}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffd}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40008850) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000700)=0x80, 0x2) r5 = syz_open_dev$vcsn(&(0x7f0000000740), 0x1, 0x40300) fcntl$setsig(r5, 0xa, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000780)={0x0, 0x2, {0xffffffffffffff77, @usage=0xffffffffffffffc1, 0x0, 0x9, 0x3a00, 0xba44, 0xa1, 0x2eba, 0x5c, @struct={0x1, 0x3}, 0x9, 0x7ca98000, [0x3, 0x8, 0x8, 0x9f25, 0x6, 0x1]}, {0x6, @struct={0x2, 0x9}, 0x0, 0x2, 0x65, 0xad1, 0x7, 0xfff, 0x0, @usage=0x6, 0x8c000000, 0x900000, [0x2, 0x40, 0x7ff, 0x4, 0x1, 0x7f]}, {0x3, @struct={0xd9, 0x7}, 0x0, 0xb5, 0xdb, 0x5, 0x7, 0xf938, 0x10, @usage=0xffffffff, 0x4, 0xfff, [0x9, 0xffffffffffffff36, 0x5, 0x7fffffff, 0x1f, 0x3ff]}, {0x40, 0x8, 0xa6d6}}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xe4, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_LABELS_MASK={0x10, 0x17, [0x7, 0x8000, 0x0]}, @CTA_NAT_SRC={0x94, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2a}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xb18}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8c0}, 0x48092) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000e00), 0x410640, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000f00)={'ip6_vti0\x00', &(0x7f0000000e80)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x81, 0x1, 0x64, @dev={0xfe, 0x80, '\x00', 0x41}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7, 0x73, 0x9ee}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xbc, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x14}, 0x40001) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x2001c001) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0xa0, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x401}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004) 23:34:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000100)={{r2}, {@void, @max}}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x1, 'veth0_to_team\x00', {}, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0xee01, 0xee00}, 0xc) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0xa080, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000240)={0x0, 0xea60}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000280)=0x6, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30) ioctl(r1, 0x84f7, &(0x7f0000000340)="73daa63aabf724cf44d5a8460bf805790d6eb1b5246bf4a9f4a2961494a7081d20f47ffb80555b4f16db32dcf55eea79d72e8b647ceeba95843898bde4705a35c73e6d5e6534b6aff5d980dded67f738f394aec35d25aec796a55f6f8725b985ab310d06fc044370fabde6f44f156b2d53c8ec457ee9c8b196501722e0e17618640628b0bad1ca0a17a7c3513146d8bb264e9e3e12") r5 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x200081, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r3) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x911, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x20008481) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x73d, &(0x7f0000000640)=""/218) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000780)={{r1}, 0x0, 0x14, @unused=[0xff, 0x4cd, 0x9, 0x20], @subvolid=0xfff}) 23:34:17 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=""/133, 0x85}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x80000, 0x106) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1bc, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x49}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x30000000, @private0, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80, @empty, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x34, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}}}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb77d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40800}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, 0x1, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x75ef}}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000014}, 0x800) r3 = syz_mount_image$iso9660(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x3, 0x0, &(0x7f0000000600), 0x800000, &(0x7f0000000640)={[{@nojoliet}, {@map_normal}, {@session={'session', 0x3d, 0x20}}, {@dmode={'dmode', 0x3d, 0x3c5}}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@appraise}, {@fowner_lt={'fowner<', 0xee01}}, {@dont_measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000740)) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x8, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000800), 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x62}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1000}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x4000000) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000a00)=[{{0x0, 0xea60}, 0x3, 0x3, 0x80000000}, {{0x77359400}, 0x1, 0x1000, 0x4}, {{0x77359400}, 0xa, 0x1f, 0x5}, {{r4, r5/1000+10000}, 0xe8915dd1c584f300, 0xae5d, 0x3}, {{}, 0x3, 0x8, 0x49}, {{0x0, 0xea60}, 0x3, 0x68, 0x8000}, {{r6, r7/1000+60000}, 0x11, 0x5, 0x7}], 0xa8) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2dc, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2fd0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xafd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4000000000000}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) sync_file_range(r0, 0x20, 0x7fffffff, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000f40)={0x3, 0x40, '\x00', 0x0, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) lgetxattr(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)=@known='system.posix_acl_default\x00', &(0x7f0000001000)=""/215, 0xd7) ioctl$KDENABIO(r1, 0x4b36) 23:34:17 executing program 3: write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x4, 0x0, 0xfb}}, 0x14) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f0000000180)=""/150, 0x96}], 0x2, 0x9f07, 0xffffffff) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)) epoll_pwait2(r0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x1f, 0x8, 0x188, 0x2a, @empty, @rand_addr=' \x01\x00', 0x7, 0x8, 0x1, 0x5}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) ioctl$FIOCLEX(r0, 0x5451) clock_gettime(0x0, &(0x7f0000008180)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f00000005c0)=@generic, 0x80, &(0x7f0000002780)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/123, 0x7b}, {&(0x7f00000026c0)=""/72, 0x48}, {&(0x7f0000002740)=""/33, 0x21}], 0x5, &(0x7f0000002800)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003800)=@l2tp6, 0x80, &(0x7f0000003940)=[{&(0x7f0000003880)=""/167, 0xa7}], 0x1, &(0x7f0000003980)=""/68, 0x44}, 0xff}, {{&(0x7f0000003a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000003a80)=""/56, 0x38}, {&(0x7f0000003ac0)=""/165, 0xa5}, {&(0x7f0000003b80)=""/226, 0xe2}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/241, 0xf1}], 0x6}, 0xa239}, {{0x0, 0x0, &(0x7f0000006440)=[{&(0x7f0000005e00)=""/153, 0x99}, {&(0x7f0000005ec0)=""/149, 0x95}, {&(0x7f0000005f80)=""/93, 0x5d}, {&(0x7f0000006000)=""/130, 0x82}, {&(0x7f00000060c0)=""/236, 0xec}, {&(0x7f00000061c0)}, {&(0x7f0000006200)=""/30, 0x1e}, {&(0x7f0000006240)=""/252, 0xfc}, {&(0x7f0000006340)=""/197, 0xc5}], 0x9, &(0x7f0000006500)=""/4096, 0x1000}, 0x80000000}, {{&(0x7f0000007500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000007700)=[{&(0x7f0000007580)=""/163, 0xa3}, {&(0x7f0000007640)=""/158, 0x9e}], 0x2, &(0x7f0000007740)=""/193, 0xc1}}, {{&(0x7f0000007840)=@pptp, 0x80, &(0x7f00000078c0)}, 0xffff}, {{&(0x7f0000007900)=@x25={0x9, @remote}, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007980)=""/241, 0xf1}, {&(0x7f0000007a80)=""/61, 0x3d}, {&(0x7f0000007ac0)}, {&(0x7f0000007b00)=""/240, 0xf0}, {&(0x7f0000007c00)=""/171, 0xab}, {&(0x7f0000007cc0)=""/234, 0xea}, {&(0x7f0000007dc0)=""/168, 0xa8}, {&(0x7f0000007e80)=""/61, 0x3d}], 0x8, &(0x7f0000007f40)=""/103, 0x67}, 0x8}], 0x7, 0x40002040, &(0x7f00000081c0)={r3, r4+60000000}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000008240), r5) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000008440)={&(0x7f0000008200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008400)={&(0x7f0000008280)={0x174, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfdd0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaec}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd0f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xada2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1b1a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3fa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1400000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x11}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000008480)={{0x1, 0x1, 0x18, r0, {0x5ed2}}, './file0\x00'}) fcntl$setpipe(r7, 0x407, 0x3) r8 = openat2(0xffffffffffffff9c, &(0x7f0000008500)='./file1\x00', &(0x7f0000008540)={0x2c080, 0x180}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000084c0), r8) r9 = openat$incfs(r8, &(0x7f0000008580)='.log\x00', 0x444000, 0x1e0) write$P9_RSTAT(r9, &(0x7f00000085c0)={0x51, 0x7d, 0x1, {0x0, 0x4a, 0xbb, 0xffff, {0x1, 0x3, 0x5}, 0x20100000, 0x38000000, 0x1, 0x10001, 0x1, '\x00', 0x2, '\',', 0x9, 'ip6_vti0\x00', 0xb, 'ip6erspan0\x00'}}, 0x51) [ 88.371462] audit: type=1400 audit(1738193657.111:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:34:17 executing program 5: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1ac, r0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x6a}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x174, 0x33, @mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_a, @device_a, @initial, {0x9, 0x7}}, @ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x10, 0x22, @random=0x8, @void, @void, [{0xdd, 0x61, "c8c4393fc73404701b206df3b5517c5ffc3a597565e9b304a25b924f8f4ae4c41b25273f7e7862570eac6923d0eb4c607f88e5448bfd9808e9c83df2fd8e7a84f6a9e8e49373a0292efa689441f2abf9ee2ac0ed204e4b6c321da201be8fc97b07"}, {0xdd, 0xe9, "d34070686a57590a169c62f9e1bc653205bd78dcd30ff55354607551380da3ebf5f244b791acb2f391a22df54a494fb521297f2c74b71001a30cc4b5b8d4e8368dd1e6207b09ef92ee6e46a329575f919f3d735ce122fa0ba6358d3683326c45ef6bdba96337b9bc81ed2150c3b99d4f52e8195b7f4537b19f87bc9a217545f0a6ea723d02490dd8c2efedd14cba41938f462bdac24212cc3ee83e2ddb739734ac90dadbbbecb24034239ecc4d6e71dbd44abea720c5fedc18ad8619f33b9c4806ab86ea36e51a5d3aefadc870b9edeba683ff3ca4098c8852ad80a487409a0c1c6e6876aa861c1d80"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000040}, 0x8040) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40050}, 0x45) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000740)={0x1, 0x4, 0xeb, &(0x7f0000000640)=""/235}) r4 = creat(&(0x7f0000000780)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000007c0)={0x0, 0x3f, 0x0, [0x1, 0x4, 0xe31, 0x7, 0x9], [0xfffffffffffffff7, 0x4, 0x16, 0x3, 0x13, 0xff, 0xb6, 0x21, 0x0, 0x100, 0xffffffff, 0x1, 0xfffffffffffffffe, 0x4, 0x3, 0x2, 0x6180, 0x80, 0xfffffffffffffcbf, 0x7, 0xfffffffffffffffb, 0x8, 0x8, 0x6, 0x1, 0x0, 0x5, 0x8, 0xd2bd, 0x80, 0x1, 0x5, 0x80000000, 0x9, 0x8001, 0x2, 0x8001, 0x7, 0xf69, 0x2, 0x9, 0x7, 0x8, 0x0, 0xffffffff80000001, 0x6, 0xfffffffffffffff0, 0x0, 0x7, 0x1ff, 0x6, 0x3f, 0x7, 0x3, 0xfffffffffffffe00, 0x5, 0x0, 0x59, 0x4990, 0xffffffff, 0x80000001, 0xdce, 0x8, 0xfffffffffffffffc, 0x7, 0x100000001, 0x81, 0x200, 0x0, 0x7, 0x200, 0xfffffffffffffffb, 0xbb, 0x7, 0x60000, 0x3, 0x80000000, 0x3, 0x155f, 0x7ff, 0x7fff, 0x100000001, 0x0, 0x80000001, 0xc1d4, 0x4, 0x8001, 0x1, 0x100000001, 0x80000001, 0x0, 0x2, 0x9, 0x8000, 0xca93, 0x1000000, 0x7, 0x17a, 0x0, 0x6, 0x1, 0xfffffffffffffff7, 0xb429, 0x2, 0x9, 0x1, 0x9, 0xb710, 0xfffffffffffffff7, 0x3, 0xfff, 0xe5d6, 0x81, 0xdd, 0xfffffffffffffffc, 0x8, 0x0, 0x6, 0x0, 0x598000000, 0x1]}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r0, 0x401, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x1b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000d00)={'ip6erspan0\x00', {0x2, 0x0, @multicast1}}) getsockopt$inet_buf(r4, 0x0, 0x26, &(0x7f0000000d40)=""/133, &(0x7f0000000e00)=0x85) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r3, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000ec0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2000, @fd_index=0x9, 0xfffffffffffffff7, &(0x7f0000000e40)=""/73, 0x49, 0x11, 0x1}, 0x8ba) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4009c}, 0x1) setxattr$trusted_overlay_opaque(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040), &(0x7f0000001080), 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 23:34:17 executing program 6: sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x148, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xed, 0x2, "69affe5bb37c72a0f7067ec29351ecd87fad752ecc13a94a52dcb71b7ffeeb183c6c5d06ac2bf5d71bdc70b7227f091d8ff2d17ad860fcb15aab347226c38238d30671e688987855d5e0042230076d7b960feebb5cc843fe781f3aa956143c2fd0164daaf90b44d8b157c258f7c525974914d7f27a5a2e76c193343a3fd6c62c5ac8018d90fef9e7034fee1d00d3a5826ae251ba7b3a08be306ca20d427b7c0d37d7b0fbc09f4a7008abead41170bc185827777ae90463becd3432cb4ee52ab1c509b4aa8bb4264b1dde24701eef9b442dcc8a15e66865d22840f2e33aa950e8b94da23977e7e3f3d9"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x4000051) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a12}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000080}, 0x200008c0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x327c25bef5a3a783}, 0x4000) r0 = socket(0x5, 0x800, 0xfffffff7) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x453, 0x910, 0x70bd27, 0x25dfdbfe, "9946bb377e1922e608b8368ab06b2fb5b0b7f5eb71f4fe0f2a98569519b8388c0170137fd07dc4abe3e1662147778392272fdbca1c3eabe25a4f17cc2175d84dfde743e808f6f221bd8d7e2d23f42f3589a067053bdd", ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe0, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x99}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8c}, 0x20000040) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000900)={&(0x7f0000000780), 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf8, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5c, 0xa8, @random="fe522d012faa67f923e16c3d3ed06d19a1be606c71d347350547dfdd2b4deca66007d7eb58434104adb28ac2f0f377133b7f7bfb3f31724987ee07cf257c0193abaea5d3a52e458fa5fd2352df849fecde7d6e593a75c08e"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5bfbe5fd}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x101}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1f}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x90}, 0x24000001) pipe(&(0x7f0000005b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000005c80)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005c40)={&(0x7f0000005c00)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = accept(r2, &(0x7f0000005cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, &(0x7f0000005d40)=0x80) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000005e40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005e00)={&(0x7f0000005dc0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x68051) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000005e80), 0x10b802, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005f00), r3) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000005fc0)={&(0x7f0000005ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005f80)={&(0x7f0000005f40)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0xd}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40000) socketpair(0xa, 0x6, 0xfffffff8, &(0x7f0000006000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000006040)={0x0, 0xffffffff, 0x1, [0x6, 0xffffffff, 0x2, 0x0, 0x7], [0xaad, 0x800, 0x7f, 0x400000000, 0x1, 0xffffffffffff0563, 0x9, 0x101, 0x1, 0x9, 0x1, 0x40000000000, 0x2, 0x40, 0x80, 0x3, 0xfffffffffffffffe, 0x5, 0x2, 0x2, 0x1, 0x800000000000000, 0xffffffffffffffc0, 0x900, 0x1, 0x1ff, 0xfffffffffffffc01, 0x2, 0x1e, 0x4, 0x7, 0x3ff, 0x1, 0x5, 0x4, 0x2, 0xef, 0x0, 0x7, 0x1, 0x6, 0x7, 0x3, 0x78, 0x400, 0x48f3, 0x1, 0x3, 0x10000, 0x0, 0x823feef, 0x0, 0x3, 0x100, 0x0, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x9, 0xa0000000000000, 0x8, 0x2, 0xf, 0x1, 0xffffffff, 0x1, 0x7, 0x400, 0x0, 0x4, 0x8000, 0x5823, 0x6, 0x7, 0x40, 0x2, 0x8000, 0x2, 0x8, 0x3, 0x1, 0x400, 0x8, 0x3, 0x4, 0xffffffffffffff1a, 0x943, 0x7, 0x80000001, 0x100, 0x9, 0x45, 0x20, 0x13, 0x100000000000000, 0x0, 0x2, 0x8, 0x6f7, 0x9, 0x6, 0x2, 0x1, 0x1000, 0x0, 0x7fffffff, 0xffffffff7fffffff, 0xc58, 0x77, 0x2, 0x8, 0xffffffffffffff00, 0xff, 0x4, 0xfffffffffffffffa, 0x4eb4, 0x7fffffff, 0x2, 0x8000]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000006480)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000006780)={&(0x7f00000064c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006740)={&(0x7f0000006500)={0x240, 0x1, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_EXP={0x128, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x118, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xb8c1}}, @NFQA_PAYLOAD={0xf8, 0xa, "632bdf179e1d06ad289d29b568b45c57fb5ec519989840605f121bbdcbed173541bd5a98e2324fd3c8dc5db9e479749d57de7b29138f57c06db812d98390bbab615303dc7bbc113b63389507334d0a388d10d9a1538ed601475f1111983c4bef092be3b2b1a77244320e5338d1ccd008eb6aed6f414261b3f674adaec87d3262288828b5d201f3fbcd8adde2e819f49c9f8c802c3c7919a21c05e6148ca640b53cb103d842707b8702ed6fdd51b59194e18ce4b049724bef1e07a6720dc91f7ef86c4d1f274f7a7018db276336185352d835609a5f04d3b46674350ca922c7c8eb4dc6587a90f567b4fdaf5a8fe7e04ad8bde35d"}]}, 0x240}, 0x1, 0x0, 0x0, 0x40044}, 0x20000180) bind$packet(r7, &(0x7f00000067c0)={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000006800)) 23:34:17 executing program 7: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x1) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x9) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="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", 0x1000, 0x800) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001080), 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000010c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000001140)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001180)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r3, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x8d32d29a, 0x1d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000005) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000001300)={0xcf1, 0x1, 0x7f, 0x8001, 0x8}, 0xc) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000001340)=0x4) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000001380)={0x6, 0x800, 0x81}) timerfd_create(0x2, 0x80800) r4 = accept(r1, &(0x7f00000013c0)=@qipcrtr, &(0x7f0000001440)=0x80) recvfrom$unix(r4, &(0x7f0000001480)=""/230, 0xe6, 0x40002000, &(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/devices/kprobe', 0x101000, 0x4) r6 = socket(0x29, 0x800, 0x9) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) [ 89.716720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.729086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.736402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.742583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.747305] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.750649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.910067] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.920299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.921992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.924029] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.927046] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.929150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.931603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.936983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.942289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.944642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.945695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.968664] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.972076] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.986173] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.986446] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.988059] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.994435] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.996634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.015682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.033410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.050333] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.059800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.085967] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.089603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.090792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.092933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.101464] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.101600] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.104658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.105123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.107612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.110463] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.116734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.120628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.128948] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.135631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.144382] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.145834] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.157885] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.178397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.181126] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.183093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.800975] Bluetooth: hci0: command tx timeout [ 91.993022] Bluetooth: hci3: command tx timeout [ 92.056294] Bluetooth: hci1: command tx timeout [ 92.120391] Bluetooth: hci2: command tx timeout [ 92.184355] Bluetooth: hci4: command tx timeout [ 92.184435] Bluetooth: hci5: command tx timeout [ 92.248377] Bluetooth: hci6: command tx timeout [ 92.248401] Bluetooth: hci7: command tx timeout [ 93.848302] Bluetooth: hci0: command tx timeout [ 94.040306] Bluetooth: hci3: command tx timeout [ 94.104646] Bluetooth: hci1: command tx timeout [ 94.170234] Bluetooth: hci2: command tx timeout [ 94.232359] Bluetooth: hci4: command tx timeout [ 94.233413] Bluetooth: hci5: command tx timeout [ 94.296302] Bluetooth: hci7: command tx timeout [ 94.298218] Bluetooth: hci6: command tx timeout [ 95.898228] Bluetooth: hci0: command tx timeout [ 96.089427] Bluetooth: hci3: command tx timeout [ 96.153313] Bluetooth: hci1: command tx timeout [ 96.216370] Bluetooth: hci2: command tx timeout [ 96.281503] Bluetooth: hci5: command tx timeout [ 96.281528] Bluetooth: hci4: command tx timeout [ 96.347240] Bluetooth: hci6: command tx timeout [ 96.347280] Bluetooth: hci7: command tx timeout [ 97.945334] Bluetooth: hci0: command tx timeout [ 98.138314] Bluetooth: hci3: command tx timeout [ 98.200242] Bluetooth: hci1: command tx timeout [ 98.265604] Bluetooth: hci2: command tx timeout [ 98.328303] Bluetooth: hci4: command tx timeout [ 98.329867] Bluetooth: hci5: command tx timeout [ 98.392752] Bluetooth: hci7: command tx timeout [ 98.393620] Bluetooth: hci6: command tx timeout [ 149.478141] syz-executor.1 (281) used greatest stack depth: 24160 bytes left [ 152.261561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.263883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.266824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.270690] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.274872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.281704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.286318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.287853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.290944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.305379] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.324130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.327293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.329434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.363623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.365688] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.368029] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.383811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.386272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.390738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.394722] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.398747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.402089] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.404369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.411574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.413120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.414524] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.419341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.420570] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.421800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.425394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.438258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.440691] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.442278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.467015] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.469763] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.471704] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.509588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.513009] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.516850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.518788] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.525843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.529630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.531064] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.535927] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.542564] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.545782] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.549786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.559225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.328369] Bluetooth: hci1: command tx timeout [ 154.392319] Bluetooth: hci0: command tx timeout [ 154.521336] Bluetooth: hci2: command tx timeout [ 154.522680] Bluetooth: hci5: command tx timeout [ 154.522718] Bluetooth: hci3: command tx timeout [ 154.523823] Bluetooth: hci4: command tx timeout [ 154.584365] Bluetooth: hci7: command tx timeout [ 154.650250] Bluetooth: hci6: command tx timeout [ 156.376320] Bluetooth: hci1: command tx timeout [ 156.441308] Bluetooth: hci0: command tx timeout [ 156.568253] Bluetooth: hci4: command tx timeout [ 156.568751] Bluetooth: hci3: command tx timeout [ 156.569840] Bluetooth: hci5: command tx timeout [ 156.570338] Bluetooth: hci2: command tx timeout [ 156.632226] Bluetooth: hci7: command tx timeout [ 156.696363] Bluetooth: hci6: command tx timeout [ 158.425548] Bluetooth: hci1: command tx timeout [ 158.489304] Bluetooth: hci0: command tx timeout [ 158.616290] Bluetooth: hci2: command tx timeout [ 158.616778] Bluetooth: hci5: command tx timeout [ 158.617337] Bluetooth: hci3: command tx timeout [ 158.617755] Bluetooth: hci4: command tx timeout [ 158.680238] Bluetooth: hci7: command tx timeout [ 158.744352] Bluetooth: hci6: command tx timeout [ 160.472412] Bluetooth: hci1: command tx timeout [ 160.537304] Bluetooth: hci0: command tx timeout [ 160.664439] Bluetooth: hci5: command tx timeout [ 160.665143] Bluetooth: hci4: command tx timeout [ 160.665842] Bluetooth: hci3: command tx timeout [ 160.666218] Bluetooth: hci2: command tx timeout [ 160.728278] Bluetooth: hci7: command tx timeout [ 160.792291] Bluetooth: hci6: command tx timeout [ 211.825591] syz-executor.2 (3494) used greatest stack depth: 23896 bytes left [ 214.052735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.056357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.058503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.060903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.063073] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.064454] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.128560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.135509] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.137767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.151096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.153988] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.155133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.247181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.251819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.257320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.257794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.259850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.263424] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.267084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.268117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.281959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.284560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.286412] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.287332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.372134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.385780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.386701] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.398560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.406333] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.421565] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.436583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.442467] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.444611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.447996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.450726] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.453864] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.454968] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.456101] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.473746] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.474919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.481807] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.483333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.536037] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.581794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.637516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.683430] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.692415] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.703980] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.089443] Bluetooth: hci0: command tx timeout [ 216.216434] Bluetooth: hci1: command tx timeout [ 216.345483] Bluetooth: hci3: command tx timeout [ 216.346244] Bluetooth: hci2: command tx timeout [ 216.537063] Bluetooth: hci6: command tx timeout [ 216.537801] Bluetooth: hci4: command tx timeout [ 216.538472] Bluetooth: hci5: command tx timeout [ 216.921250] Bluetooth: hci7: command tx timeout [ 218.136496] Bluetooth: hci0: command tx timeout [ 218.264427] Bluetooth: hci1: command tx timeout [ 218.392262] Bluetooth: hci2: command tx timeout [ 218.392719] Bluetooth: hci3: command tx timeout [ 218.585356] Bluetooth: hci5: command tx timeout [ 218.585826] Bluetooth: hci4: command tx timeout [ 218.586484] Bluetooth: hci6: command tx timeout [ 218.969212] Bluetooth: hci7: command tx timeout [ 220.186041] Bluetooth: hci0: command tx timeout [ 220.313308] Bluetooth: hci1: command tx timeout [ 220.441323] Bluetooth: hci3: command tx timeout [ 220.441826] Bluetooth: hci2: command tx timeout [ 220.633626] Bluetooth: hci5: command tx timeout [ 220.634498] Bluetooth: hci6: command tx timeout [ 220.634922] Bluetooth: hci4: command tx timeout [ 221.017258] Bluetooth: hci7: command tx timeout [ 222.233263] Bluetooth: hci0: command tx timeout [ 222.361294] Bluetooth: hci1: command tx timeout [ 222.489235] Bluetooth: hci3: command tx timeout [ 222.489722] Bluetooth: hci2: command tx timeout [ 222.683194] Bluetooth: hci5: command tx timeout [ 222.683290] Bluetooth: hci4: command tx timeout [ 222.683679] Bluetooth: hci6: command tx timeout [ 223.065234] Bluetooth: hci7: command tx timeout [ 276.455483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.464679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.467112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.475975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.482357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.484652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.650484] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.653559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.657523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.666715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.673576] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.676793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.847844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.855386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.859308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.872907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.883584] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.889719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.929748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.946803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.964054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.965446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.970891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.976637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.979504] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.980728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.985682] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.990412] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.992508] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.992554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.002348] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.006950] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.008734] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.018306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.024360] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.030791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.031633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.033397] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.036375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.050541] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.058027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.088829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.090229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.100039] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.103403] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.104888] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.109640] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.111674] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.552244] Bluetooth: hci0: command tx timeout [ 278.744238] Bluetooth: hci1: command tx timeout [ 278.936534] Bluetooth: hci2: command tx timeout [ 279.064248] Bluetooth: hci5: command tx timeout [ 279.128263] Bluetooth: hci3: command tx timeout [ 279.129230] Bluetooth: hci4: command tx timeout [ 279.192325] Bluetooth: hci6: command tx timeout [ 279.192429] Bluetooth: hci7: command tx timeout [ 280.601630] Bluetooth: hci0: command tx timeout [ 280.793186] Bluetooth: hci1: command tx timeout [ 280.985250] Bluetooth: hci2: command tx timeout [ 281.112216] Bluetooth: hci5: command tx timeout [ 281.177266] Bluetooth: hci4: command tx timeout [ 281.177312] Bluetooth: hci3: command tx timeout [ 281.240655] Bluetooth: hci6: command tx timeout [ 281.240701] Bluetooth: hci7: command tx timeout [ 282.648587] Bluetooth: hci0: command tx timeout [ 282.840568] Bluetooth: hci1: command tx timeout [ 283.033513] Bluetooth: hci2: command tx timeout [ 283.160411] Bluetooth: hci5: command tx timeout [ 283.224338] Bluetooth: hci3: command tx timeout [ 283.224476] Bluetooth: hci4: command tx timeout [ 283.288361] Bluetooth: hci7: command tx timeout [ 283.289305] Bluetooth: hci6: command tx timeout [ 284.696235] Bluetooth: hci0: command tx timeout [ 284.888269] Bluetooth: hci1: command tx timeout [ 285.080254] Bluetooth: hci2: command tx timeout [ 285.209183] Bluetooth: hci5: command tx timeout [ 285.272233] Bluetooth: hci3: command tx timeout [ 285.272264] Bluetooth: hci4: command tx timeout [ 285.336223] Bluetooth: hci6: command tx timeout [ 285.336393] Bluetooth: hci7: command tx timeout [ 338.668622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.671640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.679699] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.688571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.692669] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.697913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.929810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.937896] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.945964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.960354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.965512] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.971301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.026490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.038622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.040971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.045318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.053701] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.059502] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.061744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.064635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.065082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.067705] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.067839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.070892] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.074273] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.083903] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.085602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.092917] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.094466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.100616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.111535] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.120690] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.131832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.134030] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.138884] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.140748] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.144368] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.144514] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.150934] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.151934] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.155730] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.164547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.215517] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.227626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.246266] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.269878] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.272671] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.280568] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.761262] Bluetooth: hci0: command tx timeout [ 341.016226] Bluetooth: hci1: command tx timeout [ 341.210212] Bluetooth: hci6: command tx timeout [ 341.211085] Bluetooth: hci5: command tx timeout [ 341.211899] Bluetooth: hci3: command tx timeout [ 341.336232] Bluetooth: hci4: command tx timeout [ 341.336297] Bluetooth: hci2: command tx timeout [ 341.401330] Bluetooth: hci7: command tx timeout [ 342.809301] Bluetooth: hci0: command tx timeout [ 343.065182] Bluetooth: hci1: command tx timeout [ 343.256355] Bluetooth: hci3: command tx timeout [ 343.256389] Bluetooth: hci6: command tx timeout [ 343.257428] Bluetooth: hci5: command tx timeout [ 343.384685] Bluetooth: hci4: command tx timeout [ 343.385414] Bluetooth: hci2: command tx timeout [ 343.448416] Bluetooth: hci7: command tx timeout [ 344.856218] Bluetooth: hci0: command tx timeout [ 345.112244] Bluetooth: hci1: command tx timeout [ 345.306166] Bluetooth: hci5: command tx timeout [ 345.306206] Bluetooth: hci6: command tx timeout [ 345.306659] Bluetooth: hci3: command tx timeout [ 345.432268] Bluetooth: hci4: command tx timeout [ 345.432294] Bluetooth: hci2: command tx timeout [ 345.496368] Bluetooth: hci7: command tx timeout [ 346.904268] Bluetooth: hci0: command tx timeout [ 347.161210] Bluetooth: hci1: command tx timeout [ 347.352218] Bluetooth: hci6: command tx timeout [ 347.352654] Bluetooth: hci3: command tx timeout [ 347.352696] Bluetooth: hci5: command tx timeout [ 347.480236] Bluetooth: hci2: command tx timeout [ 347.480314] Bluetooth: hci4: command tx timeout [ 347.544270] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:39:25 Registers: info registers vcpu 0 RAX=ffff88802c2c0001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802c2bf901 RSI=ffff88802c2bf8f8 RDI=ffff88802c2bf938 RBP=ffff88802c2bf980 RSP=ffff88802c2bf850 R8 =0000000000000001 R9 =ffff88802c2bf968 R10=000000000003ab5c R11=00000000000069fb R12=ffff88802c2bf988 R13=ffff88802c2b8000 R14=ffff88802c2bf8f8 R15=ffff88802c2bf928 RIP=ffffffff81348d51 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f55ff8f1020 CR3=0000000033dae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000ffffff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000252ca RBX=0000000000000001 RCX=ffffffff81aeefac RDX=00000000000252dd RSI=000000000000aeef RDI=ffffffff86851d72 RBP=ffff88806cf09ad0 RSP=ffff88806cf09a08 R8 =ffffffff86851d00 R9 =ffff88806cf09ab8 R10=000000000003ab5c R11=00000000000252ca R12=ffff88806cf09ad8 R13=ffff88806cf09ac0 R14=ffff88806cf09ab9 R15=ffff88806cf09a78 RIP=ffffffff813490f4 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fceb7c28368 CR3=00000000355f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000