Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:35293' (ECDSA) to the list of known hosts. 2025/01/31 06:44:40 fuzzer started 2025/01/31 06:44:40 dialing manager at localhost:46401 syzkaller login: [ 69.988286] cgroup: Unknown subsys name 'net' [ 70.075730] cgroup: Unknown subsys name 'cpuset' [ 70.105642] cgroup: Unknown subsys name 'rlimit' 2025/01/31 06:44:59 syscalls: 2217 2025/01/31 06:44:59 code coverage: enabled 2025/01/31 06:44:59 comparison tracing: enabled 2025/01/31 06:44:59 extra coverage: enabled 2025/01/31 06:44:59 setuid sandbox: enabled 2025/01/31 06:44:59 namespace sandbox: enabled 2025/01/31 06:44:59 Android sandbox: enabled 2025/01/31 06:44:59 fault injection: enabled 2025/01/31 06:44:59 leak checking: enabled 2025/01/31 06:44:59 net packet injection: enabled 2025/01/31 06:44:59 net device setup: enabled 2025/01/31 06:44:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/31 06:44:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/31 06:44:59 USB emulation: enabled 2025/01/31 06:44:59 hci packet injection: enabled 2025/01/31 06:44:59 wifi device emulation: enabled 2025/01/31 06:44:59 802.15.4 emulation: enabled 2025/01/31 06:44:59 fetching corpus: 1, signal 2361/3880 (executing program) 2025/01/31 06:44:59 fetching corpus: 1, signal 2361/5357 (executing program) 2025/01/31 06:44:59 fetching corpus: 1, signal 2361/6864 (executing program) 2025/01/31 06:44:59 fetching corpus: 1, signal 2361/8377 (executing program) 2025/01/31 06:44:59 fetching corpus: 1, signal 2361/9551 (executing program) 2025/01/31 06:44:59 fetching corpus: 1, signal 2361/9551 (executing program) 2025/01/31 06:45:03 starting 8 fuzzer processes 06:45:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8000, 0x1, 0x100}) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x4, 0x1, 0x1}, 0x2}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) write$P9_RSTATu(r1, &(0x7f00000001c0)={0x59, 0x7d, 0x1, {{0x0, 0x40, 0x20, 0x0, {0x0, 0x4, 0x1}, 0xa100000, 0x9, 0x81, 0x200, 0x0, '', 0x5, 'SEG6\x00', 0x8, '\"@!\\\\\\{\\'}, 0x4, '\xc6@\\!', r3, 0xee01, 0xee00}}, 0x59) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x20900, 0x0) pread64(r4, &(0x7f0000000280)=""/9, 0x9, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x2) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RXATTRWALK(r6, &(0x7f0000000400)={0xf, 0x1f, 0x2, 0x8}, 0xf) readahead(r0, 0x100, 0x1000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000440), 0x4) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000480)='[:\\{\x00', 0x0, 0xffffffffffffffff) syncfs(r2) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x115) 06:45:03 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x164, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffffffff, 0x5, 0x5]}, @CTA_NAT_DST={0x98, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2, 0x5}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x4, 0x4}}]}}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffff801}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000002c0)) r4 = openat$cgroup_subtree(r0, &(0x7f0000000300), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xff}}, './file0\x00'}) r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000380), 0x2, 0x0) fstat(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x3}, [{0x2, 0x1, r1}, {0x2, 0x0, r1}, {0x2, 0x2, 0xee00}, {0x2, 0x2, r1}, {0x2, 0x2, r1}, {0x2, 0x1}], {0x4, 0xe}, [{0x8, 0x2, r2}, {0x8, 0x2, r6}]}, 0x64, 0x2) r7 = openat2(r0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x1, 0x1c7, 0x12}, 0x18) fcntl$getown(r7, 0x9) r8 = openat2(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x10000, 0x100, 0x12}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) readahead(r0, 0x4, 0x7) sendmsg$OSF_MSG_REMOVE(r9, &(0x7f0000001480)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001440)={&(0x7f0000000880)={0xbb8, 0x1, 0x5, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x9}, 0x0, 0x1, 0x0, 0x1000, 0x24, 'syz0\x00', "8b68b9548eb91ece9c12d2e86e86cc8c4afd68e892971cbea9bb96d80321df3e", "465c66d1285faf91b291761056e693ac60d964cce71a0ef5d943f037c6fea367", [{0x8, 0xe9a, {0x0, 0x5}}, {0x8000, 0x5, {0x3, 0x41}}, {0x6f3, 0x100, {0x1, 0xda}}, {0x7f, 0xfff, {0x3, 0x1}}, {0x3, 0x7, {0x0, 0x200}}, {0x4, 0x9, {0x3, 0x3}}, {0x8, 0x3, {0x1, 0x6}}, {0x4, 0x9a50, {0x0, 0x6cd}}, {0x5, 0xb6d9, {0x3, 0xffffffff}}, {0xff, 0x1ff, {0x0, 0x9}}, {0xe0, 0xffff, {0x1, 0x76e}}, {0x9, 0x6, {0x3, 0x7}}, {0x6, 0xc197, {0x2, 0x401}}, {0x7ff, 0x1, {0x0, 0x8000}}, {0x0, 0x1f, {0x3, 0x1}}, {0x401, 0x1, {0x1, 0x3}}, {0x4, 0x8, {0x0, 0x3}}, {0x3ff, 0x9f3, {0x2, 0x401}}, {0xfffa, 0x1ff, {0x0, 0x1f}}, {0xfff, 0x6, {0x0, 0x46}}, {0x2, 0x7, {0x0, 0x6}}, {0x1ff, 0x7fff, {0x2, 0x10001}}, {0x4, 0x40, {0x2, 0x1}}, {0x0, 0xe124, {0x3, 0x401}}, {0x2, 0xff, {0x1, 0x20}}, {0x9, 0x400, {0x2, 0xfffffffb}}, {0x67, 0x2, {0x3, 0x10000}}, {0x401, 0x49, {0x0, 0x6065}}, {0x400, 0xccef, {0x2, 0xffffff80}}, {0xfffa, 0x6, {0x2, 0x40}}, {0x4, 0x4, {0x2, 0xfffffffa}}, {0x2e00, 0x9, {0x2, 0x10001}}, {0x9, 0x17e, {0x2, 0x3}}, {0x8, 0x2, {0x1, 0x81}}, {0x0, 0x1000, {0x0, 0x8}}, {0x3f, 0x9, {0x2, 0xfffffffc}}, {0x32d, 0xa4b6, {0x1, 0x200}}, {0x4, 0x80, {0x2}}, {0x9, 0x0, {0x0, 0x10000000}}, {0x0, 0x3, {0x1, 0x808}}]}}}, {{0x254, 0x1, {{0x1, 0xc63}, 0x6, 0x1, 0x1, 0x401, 0x25, 'syz0\x00', "6839d68262589c42aa85bddf9aedc1463bbbb4316b6f930de4fe615aa9cb060d", "190324eef7646fd662b14e7c6ff3501dc61b618e75f8a5e63f199c7a3d02374d", [{0x91, 0x7, {0x3, 0x6}}, {0x3f, 0x1000, {0x0, 0x5}}, {0x6, 0x2, {0x3, 0xfffff93f}}, {0x80, 0x9, {0x1, 0x39}}, {0x5, 0x5, {0x2, 0x4}}, {0x6, 0x8059, {0x1, 0x2}}, {0xf1c, 0x8, {0x2, 0xe5}}, {0xffff, 0x6, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0x3}}, {0x5, 0x3, {0x2, 0x3f}}, {0xfc, 0x1, {0x0, 0xffffffff}}, {0x1ff, 0xa23, {0x2, 0xffffffff}}, {0x9, 0x1, {0x3, 0x9}}, {0x1, 0x316d, {0x3, 0x80}}, {0xfff, 0x2, {0x0, 0x6}}, {0x10, 0x4, {0x3, 0xffff}}, {0x1, 0xae2f, {0x2, 0x6}}, {0x8, 0x5, {0x0, 0x8}}, {0x9, 0x9, {0x1, 0x51}}, {0x5, 0xcb, {0x0, 0x100}}, {0x4, 0xfa7, {0x0, 0x9}}, {0x4, 0x4, {0x2, 0xfff}}, {0x3ff, 0x0, {0x2, 0x7d}}, {0x8, 0x800, {0x2, 0x4d}}, {0xca, 0x10, {0x1, 0x4}}, {0x9, 0xe4, {0x1, 0x99d1}}, {0x7fff, 0x3, {0x2}}, {0x7fff, 0xff, {0x3, 0xffffffff}}, {0x401, 0x7f, {0x2, 0x1}}, {0xd08f, 0x7, {0x2, 0x7}}, {0x2, 0xfc00, {0x3, 0x1}}, {0xffe1, 0x0, {0xa634a8bfbccf3e85, 0xa5}}, {0x1, 0x4, {0x0, 0x3}}, {0xc39f, 0x0, {0x0, 0xfffff008}}, {0x4, 0x8f64, {0x2, 0x8}}, {0xf41e, 0x1, {0x0, 0x4}}, {0x7, 0x2, {0x2, 0x9}}, {0x1f, 0x7, {0x2, 0x9}}, {0x3ff, 0x4, {0x1}}, {0x6, 0x2, {0x0, 0x7d1}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0xa8, 0x4, 0x7, 0x5, 0x16, 'syz0\x00', "92af9fbd69e67e2922c4240c4137969ea54548d3282a7442c41da5bfcae7f806", "da7e9237494d4d41c87f6382d4dea5453d90cf17a23f9222ab093af6148a9f4f", [{0xf96, 0x400, {0x0, 0x7fffffff}}, {0xcb, 0x3, {0x2, 0xffffffff}}, {0xfff, 0x3, {0x0, 0x2}}, {0x7, 0x4, {0x0, 0x484e}}, {0x1ff, 0x7f, {0x3, 0x6}}, {0x5, 0x7, {0x3, 0x99}}, {0x7, 0x1, {0x3, 0x4}}, {0x1, 0xff, {0x2, 0x5}}, {0x401, 0xa4f8, {0x1, 0x94}}, {0x1000, 0x5, {0x3}}, {0xfffa, 0x3, {0x2, 0x10000}}, {0x5, 0x1f, {0x2, 0x10001}}, {0x7, 0x4ac, {0x1, 0x200}}, {0x9, 0x2, {0x0, 0x6}}, {0x0, 0x4, {0x6, 0xf4a7}}, {0x0, 0x2, {0x0, 0x9}}, {0x6, 0x8000, {0x1, 0x3ff}}, {0x1, 0x8, {0x0, 0x1ff}}, {0x8, 0x2, {0x2, 0x1000}}, {0x6, 0x9, {0x3, 0x8001}}, {0x9, 0x3034, {0x1, 0x15}}, {0x0, 0x6, {0x1, 0x1000}}, {0x6, 0x0, {0x3, 0xff}}, {0x2c, 0x100, {0x2, 0x7bd}}, {0x7, 0x7cc, {0x2, 0x4}}, {0xfffc, 0xd956, {0x3, 0x1}}, {0xfff, 0x4, {0x3, 0x7}}, {0xe, 0x24fc, {0x0, 0x933}}, {0x200, 0x7, {0x2, 0x10001}}, {0x3f, 0x5, {0x1, 0x99ab}}, {0x80, 0x7, {0x1, 0xb356}}, {0x7ff, 0xffff, {0x0, 0x4}}, {0x7, 0x20}, {0x400, 0x40, {0x2}}, {0x8c, 0xfff5, {0x2, 0x7}}, {0x3, 0x1000, {0x0, 0x3ff}}, {0xbff, 0x7, {0x1, 0x1}}, {0x40, 0xffff, {0x2, 0x1ff}}, {0xfffb, 0x9, {0x3, 0x20}}, {0x8001, 0x2, {0x1, 0xa6}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x6, 0x9, 0x6, 0x20, 0x35, 'syz1\x00', "5d6b069fff90fdfe18fa972d8f2bc8de6decd31273883dfd182776800a9ed3a5", "a14310e9f67d3245c89bffa7e618df6970bf728225a5c5bd02ba2f6882e6d1bf", [{0x16, 0x7, {0x2, 0x3f9}}, {0x6, 0xf8b, {0x2}}, {0x0, 0xfffb, {0x0, 0x7ff}}, {0x1ff, 0x9, {0x3, 0x6}}, {0x0, 0x80, {0x2, 0x10001}}, {0x18c3, 0xefd, {0x2, 0x101}}, {0x9, 0x101, {0x1, 0x4}}, {0xc86c, 0x9, {0x0, 0x1ff}}, {0xffff, 0x6, {0x0, 0x8}}, {0x40, 0x61d, {0x2, 0xf5}}, {0x80, 0x6, {0x2, 0x4b}}, {0x7, 0x7, {0x0, 0x800}}, {0x7, 0x4, {0x3, 0x4}}, {0x3, 0x7, {0x2, 0x400}}, {0xb2, 0x72, {0x1, 0x8000}}, {0xffe0, 0x9, {0x2, 0xffffffc0}}, {0x1, 0x9a5, {0x0, 0x81}}, {0xb0, 0x8, {0x2, 0x7}}, {0x3, 0x329d, {0x3, 0x80000000}}, {0x3, 0xd5, {0x3, 0x9}}, {0x9, 0x3, {0x1, 0x7}}, {0x3ff, 0xfff, {0x3, 0x5}}, {0x5, 0x80, {0x1, 0xe394}}, {0x4, 0x1ff, {0x3, 0x2}}, {0x5, 0xfff, {0x2}}, {0x2, 0x6, {0x2}}, {0x1ff, 0x4, {0x1, 0x19}}, {0x200, 0x3, {0x0, 0x6540}}, {0x2, 0x3, {0x2}}, {0x2, 0x7, {0x1, 0x1}}, {0x9, 0x9cca, {0x2, 0x1}}, {0xfffa, 0x7, {0x3, 0x6}}, {0x2, 0x8001, {0x2, 0x72998f25}}, {0xfff7, 0x4, {0x2, 0x7}}, {0x75, 0x2, {0x2, 0x5}}, {0x3ff, 0x3, {0x0, 0x9}}, {0x6, 0x1, {0x0, 0x100}}, {0x1000, 0xff80, {0x3, 0x7ff}}, {0x6, 0x2800, {0x3, 0x7}}, {0x77ae, 0x9, {0x3, 0x1000}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x25, 0x3, 0x800, 0x4c, 0x17, 'syz0\x00', "e08d2c2882d1a29fe361da06b4d54fe4564aa5dd930d35c04fff63068779d0d1", "6af7355d3a46f3c17d5cbd58b0686a98b29ec03ec773590beba9c3713761b090", [{0x9, 0x6, {0x1, 0x8}}, {0x1, 0x5, {0x0, 0x2}}, {0x7, 0x6, {0x1, 0x9}}, {0x1, 0x7f, {0x3}}, {0x20, 0x3, {0x2, 0xfff}}, {0x7, 0xfc01, {0x0, 0x2}}, {0x9, 0x800, {0x1, 0x1}}, {0x200, 0x0, {0x1, 0x601}}, {0x7ff, 0x7, {0x1, 0x4}}, {0xfff, 0x0, {0x1, 0x4}}, {0x4, 0x8, {0x3, 0x18}}, {0x8, 0x101, {0x2, 0x3}}, {0x0, 0x7fff, {0x2, 0x200}}, {0x9, 0x5, {0x0, 0x7f}}, {0x2, 0x2, {0x0, 0x80}}, {0x7f, 0x81, {0x0, 0xe19c}}, {0x7fff, 0xfe00, {0x0, 0x4}}, {0x1, 0x6, {0x1, 0x3f}}, {0x3ff, 0x63d9, {0x2, 0xcf62}}, {0x3, 0xfffc, {0x1, 0x2}}, {0x2, 0x2, {0x0, 0x8000}}, {0xb49, 0x2, {0x1, 0x1}}, {0x8000, 0x726b, {0x0, 0x1e3}}, {0x7, 0x6, {0x0, 0x10001}}, {0x1ff, 0x4, {0x2, 0x20}}, {0x9, 0x7, {0x0, 0x3}}, {0x3f, 0x3, {0x3, 0x5}}, {0x3, 0x1, {0x0, 0x9}}, {0x200, 0x1, {0x3, 0x8}}, {0x8, 0x81, {0x2, 0x401}}, {0x1, 0x2b, {0x2, 0xffffffff}}, {0x1, 0x3, {0x0, 0x3ff}}, {0x3, 0x8, {0x0, 0x9}}, {0x101, 0x7, {0x0, 0xa7}}, {0x0, 0xfff8, {0x1}}, {0x8001, 0x939, {0x2, 0x8a1}}, {0x40, 0x1, {0x2, 0x6}}, {0x7e, 0xf013, {0x2, 0x5}}, {0x9, 0x401, {0x3, 0x6}}, {0x2, 0xaa5, {0x0, 0x7ff}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x8090}, 0x90) flock(r9, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f00000014c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000001500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) connect$unix(r10, &(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e) 06:45:03 executing program 2: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4050) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x384, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xeca}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1cf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "74f1d20de2a7dd8956f2ebc01c4ff3fa2c2db17200d82f7918476bcecd4198d5f545f1"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "a025fd12fdb10e085f4f87dd7922aade18ae1bb4e22a22c522480c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffdf}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f5b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x8010}, 0x81) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000005c0)={0xffffffffffffffff, 0x2, 0x66}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x23}, @NL80211_ATTR_PMKID={0x14, 0x55, "37b2ab37f3d876c70deedee88759f0de"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x8}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_PMK={0x14, 0xfe, "3558474c180d658697c7448cd5235d1c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x80) r3 = syz_open_dev$mouse(&(0x7f0000002b00), 0x3, 0x105200) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r4 = syz_open_dev$mouse(&(0x7f0000002c40), 0xcd8e, 0x82) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000002d80)={&(0x7f0000002c80), 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x84) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) pipe(&(0x7f0000002dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000002e40), r1) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x4040000) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x40, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000003040)={0x0, 0x7f, [0x76, 0x100, 0xf1e, 0xa6d, 0xffffffff, 0x3]}) pipe2(&(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r8 = syz_genetlink_get_family_id$team(&(0x7f0000003100), r1) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000041c0)={&(0x7f0000003640)={0xb50, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x15, 0x6, 0x6, 0xffffff80}, {0xffff, 0x9, 0x8, 0x7a6b}, {0x1, 0x3, 0x19, 0xffff}, {0x80, 0xff, 0x7, 0x2}, {0x6c20, 0x1f, 0x3f, 0x3ff}, {0x0, 0x6, 0x9, 0x5}, {0x5, 0x3, 0x20, 0xfffffff9}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x0, 0x40, 0x3}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe01}}, {0x8}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffe0}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe74}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1dc0}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x40}, 0x4880) 06:45:03 executing program 3: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x122) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2202, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000000c0)) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000100), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000280)=""/80, 0x50}, {&(0x7f0000000300)}], 0x3, &(0x7f0000000380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x100}, 0x40000002) r8 = fcntl$dupfd(r3, 0x406, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) mknodat$loop(r9, &(0x7f0000000500)='./file0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0xc080661a, &(0x7f0000000580)={@id={0x2, 0x0, @d}}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000000600)='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0', &(0x7f0000000640)='./file0\x00', r10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, &(0x7f0000000880)=r11) sendfile(r4, r0, &(0x7f00000008c0)=0x1000000, 0x3) r12 = syz_mount_image$msdos(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0xdee4, 0x3, &(0x7f0000000b00)=[{&(0x7f0000000980)="82a8dc4d0214480d42b2f6564d83c0ad6b26e04b8cfcc9ba461f950099d80e87721b", 0x22, 0x7}, {&(0x7f00000009c0)="820dda3a3f7e19454defd3cffa753740a03bcdc70c0787795819dae9503e352230179816ac589ae30affcc9fb094f2ab3eefabdb05c68adba0bc37e50078d12eb920bddb9f77b427bffb9a164bfa0e063d816bcc0397178329d1583eef1bc6df4146a5a0acb8a3b115f50aec44cfd274c4898b47c09badd9da2a59fa23bc71ece1f90997ce46eea559b44b2852eb554cbb7721d8fb6130378a60da2e997cf8d81ef67e5d4e05715455208deda00f8e839a7b839ba2b31afbecb33dab15aaaca10e1d76a50d3560a8e14ddf7ce03887ff63fb120032", 0xd5, 0x3}, {&(0x7f0000000ac0)="ae51db31d511aac80a9c0162174a9d2be737bbb229f11e1d3210fd", 0x1b}], 0x2900041, &(0x7f0000000b80)={[{@nodots}, {@dots}], [{@measure}, {@permit_directio}, {@obj_user={'obj_user', 0x3d, '$-!/'}}, {@fowner_gt={'fowner>', r6}}, {@dont_appraise}, {@appraise}, {@audit}, {@subj_role}, {@euid_lt={'euid<', r5}}, {@fowner_eq={'fowner', 0x3d, r7}}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000c80)={{r1}, {@void, @max}}) ioctl$F2FS_IOC_RESIZE_FS(r10, 0x4008f510, &(0x7f0000000cc0)=0x800) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000d40)=0x9, 0x10000) [ 92.820698] audit: type=1400 audit(1738305903.554:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:45:03 executing program 4: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'gretap0\x00'}) r0 = socket$inet6(0xa, 0x800, 0x80) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fe666a712451407592060a8f19da22a4e3f7ba098bdd0476eabe24b35910367e0be216a298b5f800f97bca5da6cabb15e69271ef7d93fddbacaa14cd34cc85c10ef65ba16ae3d4a905ba62c053e62e4c073d", 0x52}], 0x1, &(0x7f0000000100)=[{0xb0, 0x10c, 0x6, "0ea22aa5c56fb176242207f3e48ff0b92e6e6c0942aea7a4986ab31c98fdba87f4e0c10b4f34649cd2ae1d5e8f2ea1e977f2f3f47f06999628290d81708746fd7ba74d344df0356b7aad79ab4f282accf1a67a60b64dac401abfeca50a1da035a2850a63b8bddc205ef5b8d9ade83dc5f8da10657b9d80137b436b62ed0b01eb598ef28bdc722c6ce534df456f1148638a53fc91f036bfe639"}, {0x108, 0x0, 0x4, "6c9d989ee770abb11ab289a2cfbacdae8a19b75f1004eb21f60dc4aa202f74ae735c95efd4e0d7e68e5e2529e8b9f582b0051417194191859e955ff6e184734b66225922570555fe55b8659a0645d5525f0780661467617c961ddb11d0b697b478614ed2bcc452eafd5c8dd65f32ac2934ded597456d8e40c4744755b351995990366e2f67728d6e48743447bcbaa432713a2cd69ebcc8d8021c6a76f3eeed2d1164e4d9f25c27ff19bedc46c007a926be1f57b077aae5cfd76e6124e6ade3601f16ab042d17178e2102320f1dd95372897041be0246125b147b4ea11508719ce073364f074c1b92e3b838ed4fe4e2e6d247157f"}, {0xa0, 0xe, 0x3, "268d3a0b5a0d3c00d80fa00b425583c1870297e60f5cdcdb24954d406d2e3e2d4a6b758785e95b51e3d88873d3489cacff8546488cdedf84788201f096c74c006138823c9f2fdd8269a0ec04ab40c48358c1dba76d6b0caff7feb6b3ae51be043f5349a782779e566cc3556a15c2cbcd94cd983ee8589e6a3f026b9ae40a480dc96b0a131da23c7c41ba09cbb100"}, {0xa8, 0x114, 0x80, "c3fb2cf837cf5467117424ff24a162765463324feb2dd0ced49ab2d9b3675e1b525419eda2cebd509d98cb34261ebcba04fd9b5fc2bed4de90b06370ea431d381807fc661ce70ccc7831599d026bff3668f6311733c37d81f9babbd3636556ea5742f438f94782737eff80f073ef784fa0ded701867f6b46ec2fc334ba243d9d077b1ba8d121429a7edb527249e7dc10eedc33f80bb059b6"}], 0x300}, 0xc1) r1 = accept(r0, &(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000004c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x400200, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x10, 0x1f, 0x62, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x700, 0x10, 0x1, 0x5cff}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000640)={@loopback, @loopback, @mcast1, 0x3, 0x4, 0x800, 0x400, 0x3, 0x84100000, r4}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000700)={0x0, @can={0x1d, r4}, @hci={0x1f, 0x3, 0x3}, @nl=@unspec, 0x8001, 0x0, 0x0, 0x0, 0x7ff, &(0x7f00000006c0)='macvlan1\x00', 0x0, 0x8, 0x9}) recvmsg$unix(r2, &(0x7f0000001a80)={&(0x7f0000000780), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/142, 0x8e}, {&(0x7f00000018c0)=""/94, 0x5e}], 0x3, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x2) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001ac0)={{{@in=@private=0xa010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x7, 0x4e23, 0x6b, 0x2, 0x80, 0x80, 0x6, r5, r6}, {0x3f, 0x8000, 0x0, 0x8, 0xa69, 0x0, 0xffffffffffffff16, 0x5}, {0x200, 0x7, 0x9, 0xd64}, 0x0, 0x6e6bba, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3500, 0x0, 0x3, 0x5e, 0x8, 0x6, 0x4}}, 0xe8) fsetxattr$security_evm(r3, &(0x7f0000001bc0), &(0x7f0000001c00)=@v1={0x2, "d6"}, 0x2, 0x0) r8 = accept4$bt_l2cap(r2, &(0x7f0000001c40), &(0x7f0000001c80)=0xe, 0x80400) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) poll(&(0x7f0000001cc0)=[{r8, 0x1000}, {r9, 0x2118}], 0x2, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001d80)={'ip6tnl0\x00', &(0x7f0000001d00)={'syztnl2\x00', r5, 0x2f, 0x2, 0xc, 0x1, 0x30, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fb8, 0x7800, 0x7, 0x1}}) r10 = syz_io_uring_setup(0x8d, &(0x7f0000002180)={0x0, 0x10db, 0x10, 0x2, 0x10b, 0x0, r7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000002200), &(0x7f0000002240)) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, &(0x7f0000002280)={{0x0, 0x4, 0x3, 0x200, 0x2, 0x0, 0x10001, 0x0, 0x1ff, 0x80, 0x7, 0x81, 0x2, 0x5, 0x6}}) openat$bsg(0xffffffffffffff9c, &(0x7f0000003280), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000033c0)={'sit0\x00', &(0x7f0000003340)={'sit0\x00', 0x0, 0x4, 0x1, 0xff, 0x9, 0x51, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x1, 0x11f, 0x2}}) 06:45:03 executing program 5: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) pwrite64(r0, &(0x7f0000000040)="b4809dcde07b5738c0976004f012019aa3c782b7408a1d56bf4bd540041633989328b7c31526631d2b2b1990aa", 0x2d, 0x80000001) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f00000001c0)=""/253, 0xfd}], 0x2, &(0x7f0000000300)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000440)=""/182, 0xb6}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000000600)=""/5, 0x5}, {&(0x7f0000000640)=""/76, 0x4c}, {&(0x7f00000006c0)=""/2, 0x2}, {&(0x7f0000000700)=""/13, 0xd}], 0x8, &(0x7f00000007c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/179, 0xb3}], 0x1, &(0x7f0000000a00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xe8}}], 0x3, 0x40002120, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xd4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) pidfd_send_signal(r1, 0x1a, &(0x7f0000000d80)={0xe, 0x7}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x68, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8001}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000fc0)=0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r3) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000001100)={&(0x7f0000001000), 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r7, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4008015) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001180), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000011c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, r8, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r11, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x20008091) 06:45:03 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0xfff9}, 0x9, 0x10000000000, 0x9, 0xad5, 0x0, 0x0, 0x1}) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/4096) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001080)=""/115) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget(0x2, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000001100)=""/56) shmctl$SHM_UNLOCK(r1, 0xc) lstat(&(0x7f00000033c0)='./file0\x00', &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000003480)={{0x0, 0xee00, 0xee00, 0xee01, r2, 0x0, 0xcae}, 0x1000, 0xc6e, 0x1000, 0xc4, 0x0, 0xffffffffffffffff, 0x800}) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000003500)=""/155) r3 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000035c0)=""/179) r4 = shmget(0x2, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000003680)=""/146) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000003740)=""/48) shmctl$SHM_LOCK(r5, 0xb) 06:45:03 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd, 0x7, 0x0, 0x2, 0x0, 0x8dbbfed842e08f00}, 0x6b3) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) r1 = syz_io_uring_complete(r0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0) linkat(r1, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x1000) r3 = accept4(r1, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x80, 0x80000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000300)) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r5 = memfd_secret(0x80000) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}]}]}, 0xb8}}, 0x40000) r6 = syz_open_dev$vcsa(&(0x7f0000000500), 0xffff, 0xc8c1) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x40804) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000600)) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000700)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000800)=0xe8) mount$9p_xen(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x1080000, &(0x7f0000000840)={'trans=xen,', {[{@version_9p2000}, {@cachetag={'cachetag', 0x3d, 'sip\x00'}}, {@version_L}, {@version_9p2000}, {@version_9p2000}, {@posixacl}], [{@uid_lt={'uid<', r7}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x32, 0x0, 0x63, 0x65, 0x37, 0x66], 0x2d, [0x34, 0x39, 0x38, 0x64], 0x2d, [0x66, 0x66, 0x30, 0x61], 0x2d, [0x65, 0x37], 0x2d, [0x36, 0x33, 0x32, 0x66, 0x63, 0x61, 0x63, 0x66]}}}]}}) r8 = dup(r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 94.276681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.282568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.283844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.287316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.294583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.297147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.306275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.308218] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.308722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.313233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.315745] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.317793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.326748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.329418] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.331401] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.333399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.336511] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.338470] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.366752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.368965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.383628] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.384634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.407961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.418461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.422394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.424441] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.434249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.434581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.438165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.442876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.444357] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.445742] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.449175] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.457603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.460262] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.463342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.467372] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.468538] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.469663] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.473676] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.475326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.476586] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.477652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.479279] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.479302] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.482021] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.485447] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.491205] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.414119] Bluetooth: hci0: command tx timeout [ 96.476191] Bluetooth: hci3: command tx timeout [ 96.476210] Bluetooth: hci2: command tx timeout [ 96.476691] Bluetooth: hci1: command tx timeout [ 96.540013] Bluetooth: hci7: command tx timeout [ 96.540740] Bluetooth: hci5: command tx timeout [ 96.541599] Bluetooth: hci6: command tx timeout [ 96.541754] Bluetooth: hci4: command tx timeout [ 98.460999] Bluetooth: hci0: command tx timeout [ 98.524501] Bluetooth: hci3: command tx timeout [ 98.526464] Bluetooth: hci1: command tx timeout [ 98.527413] Bluetooth: hci2: command tx timeout [ 98.588095] Bluetooth: hci6: command tx timeout [ 98.589196] Bluetooth: hci5: command tx timeout [ 98.590130] Bluetooth: hci4: command tx timeout [ 98.591041] Bluetooth: hci7: command tx timeout [ 100.508159] Bluetooth: hci0: command tx timeout [ 100.572222] Bluetooth: hci3: command tx timeout [ 100.572719] Bluetooth: hci1: command tx timeout [ 100.572794] Bluetooth: hci2: command tx timeout [ 100.636087] Bluetooth: hci4: command tx timeout [ 100.636564] Bluetooth: hci6: command tx timeout [ 100.636590] Bluetooth: hci7: command tx timeout [ 100.637071] Bluetooth: hci5: command tx timeout [ 102.556017] Bluetooth: hci0: command tx timeout [ 102.620213] Bluetooth: hci3: command tx timeout [ 102.620252] Bluetooth: hci1: command tx timeout [ 102.621151] Bluetooth: hci2: command tx timeout [ 102.684231] Bluetooth: hci4: command tx timeout [ 102.684726] Bluetooth: hci5: command tx timeout [ 102.685266] Bluetooth: hci7: command tx timeout [ 102.685699] Bluetooth: hci6: command tx timeout [ 154.764347] syz-executor.6 (287) used greatest stack depth: 23568 bytes left [ 157.178276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.180069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.182447] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.183487] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.185626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.191372] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.191430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.200621] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.200668] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.203803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.208349] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.214069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.252315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.262382] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.262662] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.268146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.272123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.272632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.276626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.277751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.279042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.279105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.281157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.282568] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.285328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.286107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.291487] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.294438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.306052] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.316255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.318248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.319577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.320865] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.333364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.340049] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.341670] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.343446] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.344359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.346545] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.353532] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.356599] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.370257] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.372525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.375758] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.378356] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.405136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.419631] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.438292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.260274] Bluetooth: hci0: command tx timeout [ 159.324238] Bluetooth: hci2: command tx timeout [ 159.324538] Bluetooth: hci1: command tx timeout [ 159.388031] Bluetooth: hci3: command tx timeout [ 159.388296] Bluetooth: hci5: command tx timeout [ 159.452005] Bluetooth: hci6: command tx timeout [ 159.452072] Bluetooth: hci4: command tx timeout [ 159.516416] Bluetooth: hci7: command tx timeout [ 161.308028] Bluetooth: hci0: command tx timeout [ 161.372353] Bluetooth: hci1: command tx timeout [ 161.373461] Bluetooth: hci2: command tx timeout [ 161.436047] Bluetooth: hci5: command tx timeout [ 161.437160] Bluetooth: hci3: command tx timeout [ 161.500284] Bluetooth: hci6: command tx timeout [ 161.501242] Bluetooth: hci4: command tx timeout [ 161.564334] Bluetooth: hci7: command tx timeout [ 163.355992] Bluetooth: hci0: command tx timeout [ 163.420951] Bluetooth: hci2: command tx timeout [ 163.421405] Bluetooth: hci1: command tx timeout [ 163.483998] Bluetooth: hci5: command tx timeout [ 163.484030] Bluetooth: hci3: command tx timeout [ 163.547970] Bluetooth: hci6: command tx timeout [ 163.548998] Bluetooth: hci4: command tx timeout [ 163.611989] Bluetooth: hci7: command tx timeout [ 165.403973] Bluetooth: hci0: command tx timeout [ 165.467989] Bluetooth: hci1: command tx timeout [ 165.468495] Bluetooth: hci2: command tx timeout [ 165.532356] Bluetooth: hci3: command tx timeout [ 165.533518] Bluetooth: hci5: command tx timeout [ 165.596409] Bluetooth: hci4: command tx timeout [ 165.596482] Bluetooth: hci6: command tx timeout [ 165.659963] Bluetooth: hci7: command tx timeout [ 218.986395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.989399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.994232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.999251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.002983] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.005090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.179960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.184300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.192052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.199325] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.204827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.207017] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.243107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.245418] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.246602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.247291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.250668] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.256031] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.257451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.258553] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.259485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.287532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.301710] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.303265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.330219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.332139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.350790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.364852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.373209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.382333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.385245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.388370] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.393163] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.394691] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.414806] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.421740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.453674] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.462770] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.465616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.477162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.486059] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.490972] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.534585] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.668065] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.672969] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.681400] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.685292] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.686708] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.084076] Bluetooth: hci0: command tx timeout [ 221.277042] Bluetooth: hci1: command tx timeout [ 221.340383] Bluetooth: hci2: command tx timeout [ 221.403999] Bluetooth: hci3: command tx timeout [ 221.468110] Bluetooth: hci5: command tx timeout [ 221.468784] Bluetooth: hci4: command tx timeout [ 221.532082] Bluetooth: hci6: command tx timeout [ 221.788025] Bluetooth: hci7: command tx timeout [ 223.133112] Bluetooth: hci0: command tx timeout [ 223.326187] Bluetooth: hci1: command tx timeout [ 223.388011] Bluetooth: hci2: command tx timeout [ 223.452002] Bluetooth: hci3: command tx timeout [ 223.516041] Bluetooth: hci4: command tx timeout [ 223.516685] Bluetooth: hci5: command tx timeout [ 223.580046] Bluetooth: hci6: command tx timeout [ 223.836128] Bluetooth: hci7: command tx timeout [ 225.180011] Bluetooth: hci0: command tx timeout [ 225.372032] Bluetooth: hci1: command tx timeout [ 225.435975] Bluetooth: hci2: command tx timeout [ 225.499959] Bluetooth: hci3: command tx timeout [ 225.564002] Bluetooth: hci5: command tx timeout [ 225.564522] Bluetooth: hci4: command tx timeout [ 225.629043] Bluetooth: hci6: command tx timeout [ 225.884957] Bluetooth: hci7: command tx timeout [ 227.229936] Bluetooth: hci0: command tx timeout [ 227.421341] Bluetooth: hci1: command tx timeout [ 227.485163] Bluetooth: hci2: command tx timeout [ 227.550941] Bluetooth: hci3: command tx timeout [ 227.614030] Bluetooth: hci4: command tx timeout [ 227.614056] Bluetooth: hci5: command tx timeout [ 227.678018] Bluetooth: hci6: command tx timeout [ 227.934074] Bluetooth: hci7: command tx timeout [ 281.899785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.902281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.910413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.918451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.926167] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.929251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.163672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.167098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.170257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.178708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.185376] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.188351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.234789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.241210] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.251813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.259428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.262201] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.264174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.279263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.288562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.305204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.321253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.326267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.328244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.375630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.381669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.384309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.392995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.398215] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.404709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.438684] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.447444] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.453245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.456105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.465219] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.495105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.498778] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.505564] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.523397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.524720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.536487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.537733] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.548720] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.551889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.579539] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.581278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.583465] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.600039] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 283.996922] Bluetooth: hci0: command tx timeout [ 284.251960] Bluetooth: hci1: command tx timeout [ 284.316069] Bluetooth: hci2: command tx timeout [ 284.445125] Bluetooth: hci3: command tx timeout [ 284.508213] Bluetooth: hci4: command tx timeout [ 284.699957] Bluetooth: hci7: command tx timeout [ 284.699979] Bluetooth: hci6: command tx timeout [ 284.766894] Bluetooth: hci5: command tx timeout [ 286.044912] Bluetooth: hci0: command tx timeout [ 286.299950] Bluetooth: hci1: command tx timeout [ 286.365016] Bluetooth: hci2: command tx timeout [ 286.492932] Bluetooth: hci3: command tx timeout [ 286.555929] Bluetooth: hci4: command tx timeout [ 286.749902] Bluetooth: hci6: command tx timeout [ 286.749916] Bluetooth: hci7: command tx timeout [ 286.812892] Bluetooth: hci5: command tx timeout [ 288.092037] Bluetooth: hci0: command tx timeout [ 288.348014] Bluetooth: hci1: command tx timeout [ 288.413055] Bluetooth: hci2: command tx timeout [ 288.540923] Bluetooth: hci3: command tx timeout [ 288.606005] Bluetooth: hci4: command tx timeout [ 288.796891] Bluetooth: hci6: command tx timeout [ 288.796929] Bluetooth: hci7: command tx timeout [ 288.860902] Bluetooth: hci5: command tx timeout [ 290.141196] Bluetooth: hci0: command tx timeout [ 290.396992] Bluetooth: hci1: command tx timeout [ 290.460089] Bluetooth: hci2: command tx timeout [ 290.588010] Bluetooth: hci3: command tx timeout [ 290.652018] Bluetooth: hci4: command tx timeout [ 290.844013] Bluetooth: hci7: command tx timeout [ 290.845021] Bluetooth: hci6: command tx timeout [ 290.907914] Bluetooth: hci5: command tx timeout [ 344.239369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.248790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.254976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.268313] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.277366] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.283277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.367153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.370147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.374315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.380530] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.384190] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.386266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.429807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.440444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.443314] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.460053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.464167] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.475090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.502789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.517362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.536760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.541210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.544138] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.545901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.664301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.667630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.671205] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.691350] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.694518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.698122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.702408] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.712182] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.713400] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.715917] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.725248] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.729127] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.734507] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.737692] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.756176] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.765055] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.765099] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.787410] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.799170] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.801763] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.811276] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.832369] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.846284] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.875554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.333311] Bluetooth: hci0: command tx timeout [ 346.460134] Bluetooth: hci1: command tx timeout [ 346.523990] Bluetooth: hci2: command tx timeout [ 346.587985] Bluetooth: hci3: command tx timeout [ 346.844594] Bluetooth: hci4: command tx timeout [ 346.844636] Bluetooth: hci6: command tx timeout [ 346.907971] Bluetooth: hci5: command tx timeout [ 346.972101] Bluetooth: hci7: command tx timeout [ 348.381899] Bluetooth: hci0: command tx timeout [ 348.507913] Bluetooth: hci1: command tx timeout [ 348.571926] Bluetooth: hci2: command tx timeout [ 348.635966] Bluetooth: hci3: command tx timeout [ 348.893910] Bluetooth: hci6: command tx timeout [ 348.893948] Bluetooth: hci4: command tx timeout [ 348.956038] Bluetooth: hci5: command tx timeout [ 349.020176] Bluetooth: hci7: command tx timeout [ 350.427941] Bluetooth: hci0: command tx timeout [ 350.557885] Bluetooth: hci1: command tx timeout [ 350.619940] Bluetooth: hci2: command tx timeout [ 350.683910] Bluetooth: hci3: command tx timeout [ 350.939922] Bluetooth: hci6: command tx timeout [ 350.940965] Bluetooth: hci4: command tx timeout [ 351.004912] Bluetooth: hci5: command tx timeout [ 351.068927] Bluetooth: hci7: command tx timeout [ 352.476926] Bluetooth: hci0: command tx timeout [ 352.605986] Bluetooth: hci1: command tx timeout [ 352.667971] Bluetooth: hci2: command tx timeout [ 352.731921] Bluetooth: hci3: command tx timeout [ 352.988992] Bluetooth: hci4: command tx timeout [ 352.989072] Bluetooth: hci6: command tx timeout [ 353.051991] Bluetooth: hci5: command tx timeout [ 353.116152] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 06:50:09 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888014f03780 RCX=1ffffffff0fe34ea RDX=dffffc0000000000 RSI=0000000000000040 RDI=ffffffff87f1a750 RBP=ffff888014f03780 RSP=ffff88803ca97368 R8 =0000000000000000 R9 =fffffbfff0fe0de6 R10=ffffffff87f06f37 R11=ffff88806ce40310 R12=ffff88806ce40310 R13=00000000ffffffff R14=ffff888008c4f780 R15=ffffea000035c180 RIP=ffffffff814fd0de RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f01359c5478 CR3=000000000b594000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000006d69747465 XMM04=006d6f72667663657200796164666f65 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=8000000000000025 RCX=ffffffff8199b177 RDX=ffff88803cad0000 RSI=ffffffff8199b185 RDI=0000000000000005 RBP=000000000000005f RSP=ffff8880361ef868 R8 =0000000000000000 R9 =fffff9400003b546 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=00007f8b58fa1000 R14=ffff8880361efce8 R15=ffff88803d635d08 RIP=ffffffff8171a438 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6660bf0008 CR3=00000000337e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000