syzkaller login: [ 58.278916] sshd (239) used greatest stack depth: 24192 bytes left Warning: Permanently added '[localhost]:14532' (ECDSA) to the list of known hosts. 2024/10/17 14:14:47 fuzzer started 2024/10/17 14:14:48 dialing manager at localhost:46303 [ 75.566715] cgroup: Unknown subsys name 'net' [ 75.664715] cgroup: Unknown subsys name 'cpuset' [ 75.701079] cgroup: Unknown subsys name 'rlimit' 2024/10/17 14:15:12 syscalls: 2217 2024/10/17 14:15:12 code coverage: enabled 2024/10/17 14:15:12 comparison tracing: enabled 2024/10/17 14:15:12 extra coverage: enabled 2024/10/17 14:15:12 setuid sandbox: enabled 2024/10/17 14:15:12 namespace sandbox: enabled 2024/10/17 14:15:12 Android sandbox: enabled 2024/10/17 14:15:12 fault injection: enabled 2024/10/17 14:15:12 leak checking: enabled 2024/10/17 14:15:12 net packet injection: enabled 2024/10/17 14:15:12 net device setup: enabled 2024/10/17 14:15:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/17 14:15:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/17 14:15:12 USB emulation: enabled 2024/10/17 14:15:12 hci packet injection: enabled 2024/10/17 14:15:12 wifi device emulation: enabled 2024/10/17 14:15:12 802.15.4 emulation: enabled 2024/10/17 14:15:13 fetching corpus: 50, signal 18642/20447 (executing program) 2024/10/17 14:15:13 fetching corpus: 100, signal 30274/33667 (executing program) 2024/10/17 14:15:13 fetching corpus: 150, signal 44746/49411 (executing program) 2024/10/17 14:15:13 fetching corpus: 200, signal 49652/55677 (executing program) 2024/10/17 14:15:13 fetching corpus: 250, signal 55556/62764 (executing program) 2024/10/17 14:15:13 fetching corpus: 300, signal 60806/69121 (executing program) 2024/10/17 14:15:13 fetching corpus: 350, signal 62679/72229 (executing program) 2024/10/17 14:15:14 fetching corpus: 400, signal 65303/75992 (executing program) 2024/10/17 14:15:14 fetching corpus: 450, signal 68133/79900 (executing program) 2024/10/17 14:15:14 fetching corpus: 500, signal 70886/83632 (executing program) 2024/10/17 14:15:14 fetching corpus: 550, signal 72723/86522 (executing program) 2024/10/17 14:15:14 fetching corpus: 600, signal 74715/89519 (executing program) 2024/10/17 14:15:14 fetching corpus: 650, signal 77519/93165 (executing program) 2024/10/17 14:15:14 fetching corpus: 700, signal 79621/96141 (executing program) 2024/10/17 14:15:14 fetching corpus: 750, signal 81146/98645 (executing program) 2024/10/17 14:15:15 fetching corpus: 800, signal 84010/102195 (executing program) 2024/10/17 14:15:15 fetching corpus: 850, signal 85237/104324 (executing program) 2024/10/17 14:15:15 fetching corpus: 900, signal 86781/106701 (executing program) 2024/10/17 14:15:16 fetching corpus: 950, signal 90819/111028 (executing program) 2024/10/17 14:15:16 fetching corpus: 1000, signal 93997/114662 (executing program) 2024/10/17 14:15:17 fetching corpus: 1050, signal 95917/117245 (executing program) 2024/10/17 14:15:17 fetching corpus: 1100, signal 97991/119900 (executing program) 2024/10/17 14:15:17 fetching corpus: 1150, signal 99260/121856 (executing program) 2024/10/17 14:15:18 fetching corpus: 1200, signal 100975/124125 (executing program) 2024/10/17 14:15:18 fetching corpus: 1250, signal 102235/126027 (executing program) 2024/10/17 14:15:18 fetching corpus: 1300, signal 103331/127759 (executing program) 2024/10/17 14:15:18 fetching corpus: 1350, signal 104261/129352 (executing program) 2024/10/17 14:15:18 fetching corpus: 1400, signal 105306/131022 (executing program) 2024/10/17 14:15:19 fetching corpus: 1450, signal 106380/132653 (executing program) 2024/10/17 14:15:19 fetching corpus: 1500, signal 108257/134849 (executing program) 2024/10/17 14:15:20 fetching corpus: 1550, signal 109286/136451 (executing program) 2024/10/17 14:15:20 fetching corpus: 1600, signal 110323/138055 (executing program) 2024/10/17 14:15:20 fetching corpus: 1650, signal 112042/140027 (executing program) 2024/10/17 14:15:20 fetching corpus: 1700, signal 113057/141541 (executing program) 2024/10/17 14:15:20 fetching corpus: 1750, signal 114089/143019 (executing program) 2024/10/17 14:15:20 fetching corpus: 1800, signal 114919/144322 (executing program) 2024/10/17 14:15:21 fetching corpus: 1850, signal 116845/146378 (executing program) 2024/10/17 14:15:21 fetching corpus: 1900, signal 117845/147797 (executing program) 2024/10/17 14:15:21 fetching corpus: 1950, signal 118598/149053 (executing program) 2024/10/17 14:15:21 fetching corpus: 2000, signal 119774/150550 (executing program) 2024/10/17 14:15:21 fetching corpus: 2050, signal 121101/152103 (executing program) 2024/10/17 14:15:22 fetching corpus: 2100, signal 122015/153419 (executing program) 2024/10/17 14:15:22 fetching corpus: 2150, signal 122720/154586 (executing program) 2024/10/17 14:15:22 fetching corpus: 2200, signal 123297/155652 (executing program) 2024/10/17 14:15:22 fetching corpus: 2250, signal 124178/156850 (executing program) 2024/10/17 14:15:22 fetching corpus: 2300, signal 124961/157992 (executing program) 2024/10/17 14:15:22 fetching corpus: 2350, signal 125715/159102 (executing program) 2024/10/17 14:15:23 fetching corpus: 2400, signal 126349/160166 (executing program) 2024/10/17 14:15:23 fetching corpus: 2450, signal 127321/161381 (executing program) 2024/10/17 14:15:23 fetching corpus: 2500, signal 128011/162457 (executing program) 2024/10/17 14:15:24 fetching corpus: 2550, signal 128697/163468 (executing program) 2024/10/17 14:15:24 fetching corpus: 2600, signal 129367/164453 (executing program) 2024/10/17 14:15:24 fetching corpus: 2650, signal 130301/165547 (executing program) 2024/10/17 14:15:25 fetching corpus: 2700, signal 131154/166617 (executing program) 2024/10/17 14:15:25 fetching corpus: 2750, signal 131723/167532 (executing program) 2024/10/17 14:15:25 fetching corpus: 2800, signal 132284/168394 (executing program) 2024/10/17 14:15:26 fetching corpus: 2850, signal 132729/169241 (executing program) 2024/10/17 14:15:26 fetching corpus: 2900, signal 133085/170031 (executing program) 2024/10/17 14:15:26 fetching corpus: 2950, signal 133498/170809 (executing program) 2024/10/17 14:15:27 fetching corpus: 3000, signal 134241/171727 (executing program) 2024/10/17 14:15:27 fetching corpus: 3050, signal 134757/172544 (executing program) 2024/10/17 14:15:27 fetching corpus: 3100, signal 135608/173470 (executing program) 2024/10/17 14:15:27 fetching corpus: 3150, signal 136383/174315 (executing program) 2024/10/17 14:15:28 fetching corpus: 3200, signal 137225/175200 (executing program) 2024/10/17 14:15:28 fetching corpus: 3250, signal 137676/175905 (executing program) 2024/10/17 14:15:29 fetching corpus: 3300, signal 138515/176744 (executing program) 2024/10/17 14:15:29 fetching corpus: 3350, signal 138804/177368 (executing program) 2024/10/17 14:15:29 fetching corpus: 3400, signal 139199/178071 (executing program) 2024/10/17 14:15:29 fetching corpus: 3450, signal 139832/178826 (executing program) 2024/10/17 14:15:30 fetching corpus: 3500, signal 140318/179517 (executing program) 2024/10/17 14:15:30 fetching corpus: 3550, signal 140653/180177 (executing program) 2024/10/17 14:15:31 fetching corpus: 3600, signal 141187/180859 (executing program) 2024/10/17 14:15:31 fetching corpus: 3650, signal 141534/181495 (executing program) 2024/10/17 14:15:31 fetching corpus: 3700, signal 142223/182212 (executing program) 2024/10/17 14:15:32 fetching corpus: 3750, signal 142787/182928 (executing program) 2024/10/17 14:15:32 fetching corpus: 3800, signal 143381/183582 (executing program) 2024/10/17 14:15:32 fetching corpus: 3850, signal 143873/184246 (executing program) 2024/10/17 14:15:32 fetching corpus: 3900, signal 144271/184837 (executing program) 2024/10/17 14:15:32 fetching corpus: 3950, signal 144751/185433 (executing program) 2024/10/17 14:15:32 fetching corpus: 4000, signal 145078/185980 (executing program) 2024/10/17 14:15:33 fetching corpus: 4050, signal 145519/186562 (executing program) 2024/10/17 14:15:33 fetching corpus: 4100, signal 145925/187143 (executing program) 2024/10/17 14:15:33 fetching corpus: 4150, signal 146235/187709 (executing program) 2024/10/17 14:15:34 fetching corpus: 4200, signal 147041/188332 (executing program) 2024/10/17 14:15:34 fetching corpus: 4250, signal 147487/188854 (executing program) 2024/10/17 14:15:34 fetching corpus: 4300, signal 148491/189429 (executing program) 2024/10/17 14:15:34 fetching corpus: 4350, signal 148789/189944 (executing program) 2024/10/17 14:15:35 fetching corpus: 4400, signal 149170/190465 (executing program) 2024/10/17 14:15:35 fetching corpus: 4450, signal 149720/190977 (executing program) 2024/10/17 14:15:35 fetching corpus: 4500, signal 150276/191485 (executing program) 2024/10/17 14:15:36 fetching corpus: 4550, signal 150857/191962 (executing program) 2024/10/17 14:15:36 fetching corpus: 4600, signal 151205/192426 (executing program) 2024/10/17 14:15:36 fetching corpus: 4650, signal 151764/192911 (executing program) 2024/10/17 14:15:36 fetching corpus: 4700, signal 152161/193327 (executing program) 2024/10/17 14:15:36 fetching corpus: 4750, signal 152425/193743 (executing program) 2024/10/17 14:15:37 fetching corpus: 4800, signal 152855/194188 (executing program) 2024/10/17 14:15:37 fetching corpus: 4850, signal 153503/194645 (executing program) 2024/10/17 14:15:37 fetching corpus: 4900, signal 153816/194805 (executing program) 2024/10/17 14:15:37 fetching corpus: 4950, signal 154130/194805 (executing program) 2024/10/17 14:15:37 fetching corpus: 5000, signal 154480/194805 (executing program) 2024/10/17 14:15:38 fetching corpus: 5050, signal 154899/194805 (executing program) 2024/10/17 14:15:38 fetching corpus: 5100, signal 155295/194805 (executing program) 2024/10/17 14:15:38 fetching corpus: 5150, signal 155838/194805 (executing program) 2024/10/17 14:15:38 fetching corpus: 5200, signal 156574/194805 (executing program) 2024/10/17 14:15:38 fetching corpus: 5250, signal 156942/194805 (executing program) 2024/10/17 14:15:39 fetching corpus: 5300, signal 157305/194805 (executing program) 2024/10/17 14:15:39 fetching corpus: 5350, signal 157860/194805 (executing program) 2024/10/17 14:15:39 fetching corpus: 5400, signal 158397/194805 (executing program) 2024/10/17 14:15:39 fetching corpus: 5450, signal 158764/194805 (executing program) 2024/10/17 14:15:39 fetching corpus: 5500, signal 159084/194805 (executing program) 2024/10/17 14:15:39 fetching corpus: 5550, signal 159394/194805 (executing program) 2024/10/17 14:15:40 fetching corpus: 5600, signal 160095/194805 (executing program) 2024/10/17 14:15:40 fetching corpus: 5650, signal 160774/194805 (executing program) 2024/10/17 14:15:40 fetching corpus: 5700, signal 161188/194805 (executing program) 2024/10/17 14:15:41 fetching corpus: 5750, signal 161565/194805 (executing program) 2024/10/17 14:15:41 fetching corpus: 5800, signal 161923/194805 (executing program) 2024/10/17 14:15:41 fetching corpus: 5850, signal 162421/194805 (executing program) 2024/10/17 14:15:42 fetching corpus: 5900, signal 162958/194805 (executing program) 2024/10/17 14:15:42 fetching corpus: 5950, signal 163280/194805 (executing program) 2024/10/17 14:15:42 fetching corpus: 6000, signal 163700/194805 (executing program) 2024/10/17 14:15:42 fetching corpus: 6050, signal 164006/194805 (executing program) 2024/10/17 14:15:42 fetching corpus: 6100, signal 164242/194805 (executing program) 2024/10/17 14:15:43 fetching corpus: 6150, signal 164585/194805 (executing program) 2024/10/17 14:15:43 fetching corpus: 6200, signal 164857/194805 (executing program) 2024/10/17 14:15:43 fetching corpus: 6250, signal 165123/194805 (executing program) 2024/10/17 14:15:44 fetching corpus: 6300, signal 165356/194805 (executing program) 2024/10/17 14:15:44 fetching corpus: 6350, signal 165609/194805 (executing program) 2024/10/17 14:15:44 fetching corpus: 6400, signal 165947/194805 (executing program) 2024/10/17 14:15:44 fetching corpus: 6450, signal 166466/194805 (executing program) 2024/10/17 14:15:45 fetching corpus: 6500, signal 167029/194805 (executing program) 2024/10/17 14:15:45 fetching corpus: 6550, signal 167420/194805 (executing program) 2024/10/17 14:15:45 fetching corpus: 6600, signal 167644/194805 (executing program) 2024/10/17 14:15:45 fetching corpus: 6650, signal 167811/194805 (executing program) 2024/10/17 14:15:46 fetching corpus: 6700, signal 168014/194805 (executing program) 2024/10/17 14:15:46 fetching corpus: 6750, signal 168356/194806 (executing program) 2024/10/17 14:15:47 fetching corpus: 6800, signal 168787/194806 (executing program) 2024/10/17 14:15:47 fetching corpus: 6850, signal 169023/194806 (executing program) 2024/10/17 14:15:47 fetching corpus: 6900, signal 169347/194806 (executing program) 2024/10/17 14:15:47 fetching corpus: 6950, signal 169755/194806 (executing program) 2024/10/17 14:15:48 fetching corpus: 7000, signal 169973/194806 (executing program) 2024/10/17 14:15:48 fetching corpus: 7050, signal 170245/194806 (executing program) 2024/10/17 14:15:48 fetching corpus: 7100, signal 170588/194806 (executing program) 2024/10/17 14:15:48 fetching corpus: 7150, signal 171039/194806 (executing program) 2024/10/17 14:15:49 fetching corpus: 7200, signal 171228/194806 (executing program) 2024/10/17 14:15:49 fetching corpus: 7250, signal 171551/194806 (executing program) 2024/10/17 14:15:50 fetching corpus: 7300, signal 171972/194806 (executing program) 2024/10/17 14:15:50 fetching corpus: 7350, signal 172130/194806 (executing program) 2024/10/17 14:15:50 fetching corpus: 7400, signal 172467/194806 (executing program) 2024/10/17 14:15:51 fetching corpus: 7450, signal 172788/194806 (executing program) 2024/10/17 14:15:51 fetching corpus: 7500, signal 173044/194806 (executing program) 2024/10/17 14:15:51 fetching corpus: 7550, signal 174262/194806 (executing program) 2024/10/17 14:15:52 fetching corpus: 7600, signal 174476/194806 (executing program) 2024/10/17 14:15:52 fetching corpus: 7650, signal 174760/194806 (executing program) 2024/10/17 14:15:52 fetching corpus: 7700, signal 174990/194806 (executing program) 2024/10/17 14:15:53 fetching corpus: 7750, signal 175243/194806 (executing program) 2024/10/17 14:15:53 fetching corpus: 7800, signal 175598/194806 (executing program) 2024/10/17 14:15:53 fetching corpus: 7850, signal 175734/194806 (executing program) 2024/10/17 14:15:54 fetching corpus: 7900, signal 176022/194806 (executing program) 2024/10/17 14:15:54 fetching corpus: 7950, signal 176327/194811 (executing program) 2024/10/17 14:15:54 fetching corpus: 8000, signal 176568/194811 (executing program) 2024/10/17 14:15:55 fetching corpus: 8050, signal 176816/194811 (executing program) 2024/10/17 14:15:55 fetching corpus: 8100, signal 177025/194811 (executing program) 2024/10/17 14:15:55 fetching corpus: 8150, signal 177284/194811 (executing program) 2024/10/17 14:15:56 fetching corpus: 8200, signal 177511/194811 (executing program) 2024/10/17 14:15:56 fetching corpus: 8250, signal 177831/194811 (executing program) 2024/10/17 14:15:56 fetching corpus: 8300, signal 178041/194811 (executing program) 2024/10/17 14:15:56 fetching corpus: 8350, signal 178239/194811 (executing program) 2024/10/17 14:15:57 fetching corpus: 8400, signal 178404/194811 (executing program) 2024/10/17 14:15:57 fetching corpus: 8450, signal 178575/194811 (executing program) 2024/10/17 14:15:57 fetching corpus: 8500, signal 178752/194811 (executing program) 2024/10/17 14:15:58 fetching corpus: 8550, signal 178990/194811 (executing program) 2024/10/17 14:15:58 fetching corpus: 8600, signal 179217/194811 (executing program) 2024/10/17 14:15:58 fetching corpus: 8650, signal 179453/194811 (executing program) 2024/10/17 14:15:59 fetching corpus: 8700, signal 179651/194811 (executing program) 2024/10/17 14:15:59 fetching corpus: 8750, signal 179901/194811 (executing program) 2024/10/17 14:15:59 fetching corpus: 8800, signal 180129/194811 (executing program) 2024/10/17 14:15:59 fetching corpus: 8850, signal 180321/194811 (executing program) 2024/10/17 14:15:59 fetching corpus: 8900, signal 180552/194811 (executing program) 2024/10/17 14:15:59 fetching corpus: 8950, signal 180703/194811 (executing program) 2024/10/17 14:16:00 fetching corpus: 9000, signal 180896/194811 (executing program) 2024/10/17 14:16:00 fetching corpus: 9050, signal 181077/194811 (executing program) 2024/10/17 14:16:00 fetching corpus: 9100, signal 181247/194811 (executing program) 2024/10/17 14:16:00 fetching corpus: 9150, signal 181530/194811 (executing program) 2024/10/17 14:16:00 fetching corpus: 9200, signal 182079/194811 (executing program) 2024/10/17 14:16:00 fetching corpus: 9250, signal 182354/194811 (executing program) [ 148.268294] hrtimer: interrupt took 5612457 ns 2024/10/17 14:16:01 fetching corpus: 9300, signal 182674/194811 (executing program) 2024/10/17 14:16:01 fetching corpus: 9350, signal 182855/194811 (executing program) 2024/10/17 14:16:01 fetching corpus: 9400, signal 183002/194811 (executing program) 2024/10/17 14:16:01 fetching corpus: 9450, signal 183175/194811 (executing program) 2024/10/17 14:16:02 fetching corpus: 9500, signal 183373/194811 (executing program) 2024/10/17 14:16:02 fetching corpus: 9550, signal 183579/194811 (executing program) 2024/10/17 14:16:02 fetching corpus: 9600, signal 183832/194813 (executing program) 2024/10/17 14:16:03 fetching corpus: 9650, signal 184012/194813 (executing program) 2024/10/17 14:16:03 fetching corpus: 9700, signal 184219/194813 (executing program) 2024/10/17 14:16:03 fetching corpus: 9750, signal 184461/194813 (executing program) 2024/10/17 14:16:04 fetching corpus: 9800, signal 184644/194813 (executing program) 2024/10/17 14:16:04 fetching corpus: 9850, signal 184839/194813 (executing program) 2024/10/17 14:16:04 fetching corpus: 9900, signal 185009/194813 (executing program) 2024/10/17 14:16:05 fetching corpus: 9950, signal 185243/194813 (executing program) 2024/10/17 14:16:05 fetching corpus: 10000, signal 185451/194813 (executing program) 2024/10/17 14:16:05 fetching corpus: 10050, signal 185670/194813 (executing program) 2024/10/17 14:16:06 fetching corpus: 10100, signal 185874/194813 (executing program) 2024/10/17 14:16:06 fetching corpus: 10150, signal 186067/194813 (executing program) 2024/10/17 14:16:06 fetching corpus: 10200, signal 186255/194813 (executing program) 2024/10/17 14:16:07 fetching corpus: 10250, signal 186416/194813 (executing program) 2024/10/17 14:16:07 fetching corpus: 10300, signal 186552/194813 (executing program) 2024/10/17 14:16:07 fetching corpus: 10350, signal 186753/194813 (executing program) 2024/10/17 14:16:08 fetching corpus: 10400, signal 186978/194813 (executing program) 2024/10/17 14:16:08 fetching corpus: 10450, signal 187314/194813 (executing program) 2024/10/17 14:16:08 fetching corpus: 10500, signal 187558/194813 (executing program) 2024/10/17 14:16:09 fetching corpus: 10550, signal 187777/194813 (executing program) 2024/10/17 14:16:09 fetching corpus: 10600, signal 187895/194813 (executing program) 2024/10/17 14:16:09 fetching corpus: 10650, signal 188066/194813 (executing program) 2024/10/17 14:16:09 fetching corpus: 10700, signal 188243/194813 (executing program) 2024/10/17 14:16:10 fetching corpus: 10750, signal 188558/194813 (executing program) 2024/10/17 14:16:10 fetching corpus: 10800, signal 188687/194813 (executing program) 2024/10/17 14:16:10 fetching corpus: 10850, signal 188867/194813 (executing program) 2024/10/17 14:16:10 fetching corpus: 10876, signal 188937/194813 (executing program) 2024/10/17 14:16:10 fetching corpus: 10876, signal 188937/194813 (executing program) 2024/10/17 14:16:14 starting 8 fuzzer processes 14:16:14 executing program 0: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'U+'}, 0x16, 0x3) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose}, {@cache_mmap}, {@version_L}, {@access_client}, {@msize={'msize', 0x3d, 0x9}}, {@access_uid}, {@afid={'afid', 0x3d, 0x6}}], [{@obj_user={'obj_user', 0x3d, 'trusted.overlay.redirect\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x7, &(0x7f0000000340)={0x0, 0x989680}, 0x1, 0x1, 0x0, {0x0, r0}}, 0x3) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)={'U+', 0x6}, 0x16, 0x1) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r2, 0x0, &(0x7f0000000480)="b05f5ef1385c912a53153c107685195d6cf4ed60a531b1e61a28b74057de317414ffe3d0054b42c16191fe0cba022cc0a4dc0b9670c05d94eaae8e643bb84e5e807a071ac0c0aa5fc0dd", 0x4a, 0x2040, 0x0, {0x0, r0}}, 0xfe) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {r3}}, './file1\x00'}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2e6fd1234733fffa}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x3, 0x5, 0x0, {0x0, 0x40, 0x0, 0x40}, 0x8, 0xffffff85, 0x3}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_KEK={0x22, 0xf2, "e30b86bac91d9dc26c436dcedc41e0eacedf5a7e4019b35b5847d004a64c"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x14) lremovexattr(&(0x7f0000000700)='./file1\x00', &(0x7f0000000740)=@random={'trusted.', 'version=9p2000.L'}) io_setup(0xffff, &(0x7f0000000780)=0x0) r8 = syz_open_dev$sg(&(0x7f00000007c0), 0x8001, 0x100) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000a80)) r10 = syz_open_dev$loop(&(0x7f0000000f00), 0x9, 0x305000) r11 = signalfd(r4, &(0x7f0000000f80)={[0x101]}, 0x8) io_submit(r7, 0x9, &(0x7f00000012c0)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0xfd8, r8, &(0x7f0000000800)="13da7ba7b3ab18b89881c276664f4c8989b102c710e35e4b6fd5e612035f603e297310b03f95bbfcc680ade92c482b9572416d9ae1b142cc34546220bd71bde04e1d28a2c4ba35bebad0f6a3c8ddb8c8fd2a114149055581846e6eb089ecd81e3b47ae9b33be57cf7af79240b2451559a1ededdd4853a10b92d70ebaaba41448c05444a4646b9f8c24ee9f6926d65ce6de12f769b4921d3342a33b2fa717ac7c61f1b71deaf48e52676b67fce11e0f2b3cc671fc1605fb63f4a850550b26c58f5bcfd1738ee0400ef93b2b4aba607839ad2ac6ff825ed276d07d6c1ef2510fc0a57ca53581a855902c3f3dfc970bca939917d875f6499cf0", 0xf8, 0x697, 0x0, 0x1, r2}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000940)="5598611bff0e37c5176933d33ca262dcb68288e77f90895634386b1c565eccfe1f0abd631d482e557313a1676307723432d29127addabb1a6eb0e928dc905a214d22a5f08e35724b7975e245ff940c027176ae08ddbc0649394ca857395ceb96819c9c001313685bac57d27e3dd5d5f1252431fead11a7f510f5ee8e765ea2f4f807f3d72188b1ed27e52927c5f7927176612dd9b6c54b2cec714d0e308837061b1c20185ac271fc27720396414f50f0aa7ceab5c7660ac07f0dd944004727bcf6797021e88afcaf304980655fb0bb3b71732eeeab816966e70b7484e6b8d07589b5a3a065abbcde363b3f6c57", 0xed, 0x5, 0x0, 0x1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x2, 0x0, r9, &(0x7f0000000ac0)="6ab9fd90c2af5d8712c9e5b400ad0f9c3fb4b89f613af4ea36ab0cafbf60049a7a4d87ed1d0f16b38bedcb54549d132a07a4f761ecf0ed73b86cbcf88b029294d289a2e8f2f63e2ac7ff38f75bf2090532deac8d16f21b0d2d63b5f0ff20d185263bfa75fb2002900bb0e0f528a275ee60bd0e2000d0bf63f8767d756288ab74890c622cd8c3f9b6ea41f059c01a690b60858e5e3aec79dcd912adf42ed306668644e8c6473ba6bbef7cce6b891eee3d66a75d20d0aeb4d944ef381dac5190a2a82c913a388249a54a8dd9df95ea8c9f789224d2e680fcbdcbd97e5ef4f670d1826d920b11dfe66be96ba0", 0xeb, 0x3ff, 0x0, 0x2, r4}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x2, 0x1f, r3, &(0x7f0000000c00)="156938a6a623020ef218ec87a08ac618874819b92375ad14fc808101c8f85db65b252da178ee08e11c257593f4816eee41bc4d78dac850ced8f8993957ab3cbc762494591ae049881f77ec7c5f396b49c8e474", 0x53, 0x101, 0x0, 0x1}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x7b5a, r2, &(0x7f0000000cc0)="a72b6dcffb2761f0f9367d20b244ac2ee69797d70f5d75aead08423c6112de1666031d1198e114adcc189bc6e34e5c96ec962e50a8d24ce2103e34027dc98e55b9ff2f15bb1bacbbb2955b36b98ceadf32026fb703d8e8f996b8b6686cf9f571284c612fd6166655569d6ae3186c1988dee356af3d6b11887b6791e234432a075752d146330a44c6befa7b66440bc172d7fc22091c30d8a6af57c3a966d6c50685dfd3c216ca1085a2990d1578b4b0a63f5a3cf24301f0a2a9afe7475941f8e943b8acc9807ed80dcf1e0f85a410a9cd7f26821b6be4c6fe88cc8788bc14f20aab03d85ef4c539e7df7813e1c974", 0xee, 0x1, 0x0, 0x2, r5}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x6, 0x3, r6, &(0x7f0000000e00)="97fa60594bec40835391f13945d8b3a404731366adced9c8629d0d53128705ad1c48c109d56e8d8a27a15c7d96bc5692481e4fc24598eaa98c892bba2e7cf9e6fffc0c057cccff66963f1a481a1f7b4b911586dd276abf1ceeb0e1bcb964f31c1f52e5d1de748ba84abfc93a598c9730f42da42e35cdf7338b60d56540d99b7690c1e3235ca9861bdfd62f935857f9e0d5f5ae379aa5c8", 0x97, 0x8, 0x0, 0x3}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x3, 0x5, r10, &(0x7f0000000f40)="7953c5bdfcd4a1d93568617adbd9272bdb4c271267a52704aa580b38aaafd423952fe29ec5cc341b450b40aaee", 0x2d, 0x5, 0x0, 0x3, r11}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0xfffe, r4, &(0x7f0000001000)="988b77d3e69b4bf40e60ec053cf9edb1ab436e00e0b1f68ba906c434e56aa6212fccc748bfd7758cfd33ffb2e9793b6ef7a655b5d088dc40024010b46d6acf75fc19b68e6570ef57923d7d95b9b7df40a7cab56296c70ffdb9bdee45ef510d358e2245911e79949b5612d7c183f45d08673ab02c770c761a1e9be4d7d73a72693f53e98a3dda13e44fdedf0b208432403efc143bbc59c1e9581715a210db1fbafdd989b2582788d3c6e4277bce7576f2908acd6a368919566995caae59405292eca7bd664edbab1f43a442ea631bc54efe81d7bc2d8e9063683edf0c4c57c124b4", 0xe1, 0x3, 0x0, 0x3}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000001180)="6d7203bf3209be3c20d9cfc58492d5be3dd5217703630f5324ec72271a255f5202554c57135cfe27d4e40b5e56ee539e43f962b81d767fc112d0811213a0123f9b16afaf6dfce66fdefff51196b4ed3be4b5360f9ca7c8317509b80e3c6a47c2ca19a4cf6dfeca14b82964d851a4a532023bb5a79f12166d906c93b63996de064eb047d8704c8e66aaa1171d66355532cab0f6bf709719de1e8231133ba4b2c504733e8e3b7b731f92c734fe20453891cb4ab6604e01f063410d74fab6", 0xbd, 0x4, 0x0, 0x1}]) 14:16:14 executing program 1: lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '\x00'}) truncate(&(0x7f0000000080)='./file1\x00', 0x101) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x410402, 0x80) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@rand_addr=0x64010100, @empty}, 0xc) fallocate(r1, 0x41, 0x8, 0x8) write(r0, &(0x7f0000000140)="77fa29fbedc00a48ca3093fa6b003e41b5bb3427de0cbf3b035c4f4e98a32513bb5ca0f684dcac0bc9a4a380f883227a17f4555b131c67b2132e22f9179aeee86601cea3b521e6c121b5bd1c8ba4f0df07db604754a855fc641521e84b101aa2363092451982ef144d400746d550b6bc5cb7a3731b98e607e091093be3c68119722c8402ed50c3af5e86525b3d67c62f168a679bec3467d00b32d0b8db0cd0437efb066af442027bc51239cd741600edf7daf8551e728d33624562ff78770930da", 0xc1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x4, 0x2, 0x19, 0x0, 0xa9, 0x400, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x0, 0x7}, 0x62, 0x1, 0x1, 0x2, 0x1000, 0x4, 0x101, 0x0, 0x81, 0x0, 0x6}, 0x0, 0x1, r2, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) readv(r4, &(0x7f0000000780)=[{&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f00000005c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000700)=""/106, 0x6a}], 0x6) io_setup(0x228, &(0x7f0000000800)=0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) r7 = open(&(0x7f0000000900)='./file0\x00', 0x4080, 0xc9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) io_submit(r5, 0x3, &(0x7f0000000c00)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x5, r6, &(0x7f0000000840)="f504f7c8297aed2e8d15a9219833b5b8a2c6eedc835ac07b66cf3a853b0ba3d94f4e09595ca7900b89f46dc9338bdd4aa7ace24a2bab456fd02e7d3ff0039e10cd8c94a5117ca36122169427b49d87b1e8cb38d6ca13996aa4d8ad1c75ab5de27efef1494c36d3c140ef8b602d97d065751104fb6a8f6d51fc10bd348b7e5bac1f9cab8d40ed5b33433b3ba503cda4274ee04638f1d36eb25f6e02a67df97d75d078bceecbab955015f33c214c53decbeedb6d107b7545653158eb", 0xbb, 0x0, 0x0, 0x1, r7}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x3, r8, &(0x7f00000009c0)="2962e9711d4ee6a0711c6ea4cd22e95e8f43e92a043cc2a2640e6158d4c9b1e00bfc2a12d662f3b215c1630bbdd2f5632511529406a7cf9c54c988a5b18da2c95401525e182bab4b07ac6b8e1ea8aa7ab19336f74ff58cf71d4a151dcf0227c95c42a583fcadacc65810e81b7d27e259d7d7af7235aa7ae77adf0b157fc0444fe4a64bd05abbc9726e8bc40bcc6a604482742a3f165ec47167966efb19a12bb05d673c1f19d0ecf56e3f42e876e52a4ed0d3d0f9ca840660b785e44fd7957fab0bea415e8a1b4a657c15fec15ba1725d2ce0bc36eba61f352311fc0ce380c6532bd320affa710dd630286e02cb07", 0xee, 0x0, 0x0, 0x2, r9}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x5, 0x2aa4, r3, &(0x7f0000000b40)="ed9624b95768e5cacb20b943701c5ffd56b3bb1e29aeefaa49fd11ae425c63edbd07dd9019d3212fc49f6c82a7c01d2bcc4b47b9c0f529449e44d74b71698d1691b8", 0x42, 0x4, 0x0, 0x1, r1}]) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000c40)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 'none\x00', 0x22, 0x3bc, 0xc}, 0x2c) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000c80)={'filter\x00', 0xa1, "2119cc6682f052a464d190a59d068d38c98ef58959503e10199fcc444a8700135275c1e096f581a0a8b9116a1d017864516e476c0964c64d2c3505b11f5c1ddfe7aec351b47b52f34b80f1885656e07262cb30e5fc5fd4c30d97bd79bd66f8b7eee55c0eef72e1d8815afd8d8a39d504e1869abbde9f60d9a7054db628e3dec3a7077963ec5bac0aa98f491b32e72bdd63cd11c02e35dab552b81bce7a6dc06b93"}, &(0x7f0000000d80)=0xc5) setsockopt(r7, 0x101, 0x5, &(0x7f0000000dc0)="b509018741cf71ed5f829c5659e3d336e8d0f32008e58c72255f0b3df804c0b4518e3366781fe634a1dc1c81c47c6c472ab0209ea169eb69ebea009b353213023f730ae003fbf629019023f0d399c2a26985ea8331cd11652ce636c6c772c7cea4e8ef6a0f6d24a6c5a897b509ada64c38b99c303ff640553aeba60ae5c65471a28395707db9fe48a145dcebb470", 0x8e) 14:16:14 executing program 2: sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x4, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x30) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x4, 0x4) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x400, 0x70bd28, 0xcd35, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6d3abad2bf"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "18b2be2cb4a54c9dded49426ae"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "56a2c18edc"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4008090) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8f}], @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x600}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) fcntl$setflags(r2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendfile(r4, r2, 0x0, 0x9) r5 = accept(r0, 0x0, &(0x7f00000004c0)) listen(r5, 0x80000001) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, r6, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x64, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "12d590e5ca303acc8b4e1616b7"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "cdf28d4d24"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '_\'m\"='}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x4850}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000880)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="c2744f5d39fa48b1b73005d137f8815b21e9aa2b624a9e3a1f902b0ef2222808e1bc6198443e56dee7b0e30752dbb2b8376afbe7fea6dc3f0ff14a68", 0x3c}, {&(0x7f0000000900)="6f13d7b6afd11e0b6def0a61d88b32e3933b2b8166e8ea27028c31bd878a867d9619cacc604f1d54c7881a91f8bc24ba63806ad46770ac22db1e034416b1d387ef897a81bc68e094c08ef801ef95b3c3261af6e32c685178ec4bce21025fc9917cd1547d0874226884d46e895cd593497ad315c4bc80f96e9c9e12e4418a205ef1efbbfcae69d91fc16ad7f6db16e9141dfafff645a710a7fce1219b3248e3dcafb790551ed8", 0xa6}, {&(0x7f00000009c0)="100f759b5ab5ca3c1e1c354c11f4fac693551304fb523d4aee3f2e5fd0e9", 0x1e}, {&(0x7f0000000a00)="47ef5d10d680061e75b68542b756a8b11be05477a96c8bfb84d38c0f815553d299a1793e79ab6bfa9836babcdfa0228d8120c8d3ac532f2aade086b2c1d1c584e8a3afa47f77b5943019890c5c045092481c376970fd14ce07b7cf7cfea2a26842f49418a853702367eeddc2660a797ba21652c3d14166fe0560cb75885997a62b42142d10fbf412c6448d3241ef274a9b97353ef4e9bf1db2738cc6b9f40535f92047152ec2a2459732ae7f8a7d109f7e7bd8d15519da1d", 0xb8}, {&(0x7f0000000ac0)="215942252a143074a9da0e73ac580bcfab4004d22f786a5d0d23cdae14ed72b61c75f3373dde888ab881b5595b64d857de175d0572f9c57325fa834a7c873911cc8328733413dfc089153764b90ad97867b10c45c3944eba423d720363044b49612b0a4a0f2feaa1db8528aab8ea35b49a075d561781335c5862dc2ebb5679a446af4a0d4a9b3fc60f46770da321ef5084bb80c010e9431ed58fbb3a29e48e5284550dbb81981a5430eacc1efe7833191a1b39c2339450e6b741b0352c8500331b1944f12a5faa692d758a78d0f9ed5f7151c76889f0", 0xd6}], 0x5, &(0x7f0000000c40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}], 0x18}, 0xc080) 14:16:14 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffef3c}}, './file0\x00'}) renameat2(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat2(r1, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x761000, 0x4, 0x26646fae4fc56edf}, 0x18) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x73}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000002c0)=r0, 0x1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}]}, 0x5c}}, 0x24008080) r4 = openat$incfs(r1, &(0x7f0000000440)='.pending_reads\x00', 0x20002, 0xa4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x6}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000009c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000600)={0x350, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x204, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2}, {0x1}, {0x6}, {0x1, 0x6}, {0x4, 0x3}, {0x4, 0x4}, {0x6, 0x3}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x2}, {0x6, 0x9}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0x6}, {0x6, 0x6}, {0x7, 0x1}, {0x6, 0x9}, {0x4, 0xb}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x7}, {0x1, 0x5}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x2, 0x7}, {0x1, 0x4}, {0x1}, {0x7, 0x4}, {0x4}, {0x1, 0x9}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x4, 0x9d02, 0x2, 0x8000, 0xffff, 0x80]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x16, 0x5, 0x12, 0x5, 0x5]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2}, {0x0, 0x9}, {0x2, 0x1}, {0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x2}, {0x7, 0x4}, {0x7, 0x5}, {0x3, 0xa}, {0x7, 0x1}, {0x2, 0x7}, {0x4, 0x4}, {0x3, 0x8}, {0x5, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x5, 0x3}, {0x4, 0x8}, {0x3, 0xa}, {0x2, 0x2}, {0x3, 0x1}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0x1}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x7}, {0x3, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0xa}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {}, {0x1, 0x6}, {0x3, 0x2}, {0x5, 0x8}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0x1}, {0x7, 0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x0, 0x6}, {0x5, 0xa}, {0x3, 0x7}, {0x7, 0x1}, {0x6, 0x4}, {0x5}, {0x1}, {0x7, 0x9}, {0x0, 0x8}, {0x1}, {0x3, 0x7}, {0x3, 0x9}, {0x4, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x5, 0x1c}, {0x1, 0x5}, {0x4, 0x6}, {0x3, 0x5}, {0x1, 0x1}, {0x5, 0x9}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0x9}, {0x3}, {0x2, 0x2}, {0x5, 0x1}, {0x6, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x3, 0x9}]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x7}, {0x3, 0x5}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x8}, {0x2, 0xa}, {0x6, 0x2}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x7, 0x4}, {0x6, 0x3}, {}, {0x0, 0xa}, {0x6, 0x2}, {0x7, 0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x7}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x1, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x5, 0xa}, {0x3, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x9}, {0x0, 0xa}, {0x2, 0x9}, {0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0xa}, {0x6, 0x7}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x8}, {0x6, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x3}, {0x4, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0x2}, {0x1, 0x7}, {0x2}, {0x7, 0x6}, {}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0x1}, {0x5, 0xa}, {0x4, 0x9}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x16, 0x6c, 0x12, 0x12, 0x6c, 0x24, 0x36, 0x1, 0x12, 0x16, 0x2, 0x5, 0x6c, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x2, 0x7}, {0x7, 0x1}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x3}, {0x3, 0x5}, {0x7, 0x8}, {0x3, 0x9}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x3}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x9}, {0x5, 0x9}, {0x7, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{}, {0x3, 0x1}, {0x7, 0x5}, {0x7, 0x5}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x3}, {0x3, 0x8}, {0x4, 0x9}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x1}, {0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x2}, {0x4, 0x8}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x4}, {0x3, 0x4}, {0x2, 0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x9}, {0x0, 0x9}, {0x2}, {0x2, 0x4}, {0x7, 0x5}, {0x4, 0xa}, {0x2}, {0x0, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x5, 0x1}, {0x7, 0x6}, {0x7}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x6}, {0x4, 0x9}, {0x4, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x3, 0x8}, {0x7, 0xa}, {0x0, 0x1}, {0x6}, {0x2, 0x4}, {0x5, 0x5}, {0x3, 0xa}, {0x4, 0x5}, {0x0, 0x4}, {0x5, 0x5}, {0x7, 0x6}, {0x5, 0x5}, {0x7, 0x8}, {0x3, 0x7}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0xa}, {0x6, 0x6}, {0x7, 0x1}, {0x3, 0x1}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0xa}, {0x4, 0x3}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0x4}, {0x3, 0x3}, {0x3, 0x7}, {0x1, 0x8}, {0x3, 0x6}, {0x6, 0xa}, {0x6, 0x5}, {0x1, 0x18}, {0x6, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x3}, {0x6, 0x3}, {0x3}, {0x7, 0x9}, {0x1, 0x3}]}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_SETUP={0x34, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x20}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x84}, @NL80211_ATTR_MESH_SETUP={0xd4, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xb9, 0x3, "7c3d0c4f13242c2284f8f33c534a73cbb79a0eb5e66b2a0a41bb22518d71fba3f9c1b98e642c2c2330c6036d2763b3e61bf64e48a4a47001126c425e813c14f277280d62e5c311dc0c4ee9cc5807a485db0a4f365ae0f6e326d8f7a1b73fcd0411d21ebae1a1a7c6df0d591c2956f504fd47c74731b26a8a5a5cc0533b075c22fd61b44591e2ab6dd7bb855524011d50e485bde067a94d7f14b4bd3e3ec9b389b4f69d82d7bdd732f2c2b65fa53d111b6995c7fd2a"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x400}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x350}, 0x1, 0x0, 0x0, 0x10000014}, 0x24000050) epoll_pwait2(r4, &(0x7f0000000a00)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000a40), &(0x7f0000000a80)={[0x68]}, 0x8) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000dc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b00)={0x244, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x118, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3ddd3705eee3f16e}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xdd2a80ff0dc626af}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x20008000}, 0x404c014) r6 = syz_open_procfs(0x0, &(0x7f0000000e00)='net/raw\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/kernel/uevent_seqnum', 0x80, 0x10) openat$incfs(r7, &(0x7f0000000f80)='.log\x00', 0x600, 0x50) [ 161.469577] audit: type=1400 audit(1729174574.145:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:16:14 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x8, 0x8, 0x0, 'queue0\x00', 0x5}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000000c0)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x24008850) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000300)={0x402, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000006340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000006380)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000006440)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000006580)={&(0x7f0000006480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006540)={&(0x7f00000064c0)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x48000) r4 = perf_event_open(&(0x7f00000065c0)={0x3, 0x80, 0x5, 0x81, 0xa0, 0x2, 0x0, 0x100000000, 0xbb0655ad6d3be018, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xa17d, 0x3}, 0x80, 0x8, 0x7fff, 0x6, 0x9, 0xaa13, 0x8, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xc, r3, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000006640)={{0x1, 0x1, 0x18, r3, {0xffff}}, './file0\x00'}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000006680)={"63ff96090c42e05e97adffd22ec94151", 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, 0x7, [0x0, 0xffffffff, 0x0, 0x4, 0x4, 0x24, 0x2, 0x346, 0x4c, 0x100000001, 0x9, 0x8, 0x3, 0x3f, 0x100000001, 0x101]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000006780)={0x0, 0x9, 0x80000000, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000006b80)={{r5}, r6, 0x6, @unused=[0x401, 0x6, 0x20, 0x7], @devid=r7}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000007b80)={'erspan0\x00'}) fallocate(r4, 0x18, 0x20, 0x4) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007bc0), 0x200, 0x0) tee(r4, r8, 0x59, 0x8) 14:16:14 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x842, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000080)={0x8000, 0xe}) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f0000000140)={[0x36]}, 0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000180)={{0x0, 0x4, 0x2, 0x4, 0x4, 0x9, 0x2, 0x5, 0x4, 0x1, 0x800, 0x10000, 0x4, 0x2}, 0x8, [0x0]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x111880, 0x80) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000280)={0x200000, 0xa}) r4 = dup(r0) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f00000002c0)="4782400c7f5f8aecb9f99d1f284512d1cc37864cc8da0479e82cea3613cc67dda22330ba5052275a0dd6eb3a73ec71ea3354592d49bdb7af1b988386ace272b0856e694ce4abd4f4477536595114db2f2846674b99ea40d0cbe9e7d12ecbf0236f856baeba5218b44fb063187a96c103bd0ee7bcc911ac7e10343c8ee17f33019ff08ec3417197bac2e8da5c16540f624ed34b96b20bfa38e03bb4f0190525f71a8623a1af5ae8ca4a726342b626d60280a262975686b7b49db1033f", 0xbc}], 0x1, 0x1) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '/dev/ptp0\x00'}, {0x20, '}+'}, {0x20, '$}'}, {0x20, '/dev/ptp0\x00'}, {0x20, '\x00'}, {0x20, '/dev/ptp0\x00'}, {0x20, ')$+]%+*'}], 0xa, "db830525f3092a5ec033a8c262f6363695c8489dcd473969808ec231e19b3ea5f1d283a6000e0b35bc791c8a6ba33c69ebea957c10bc96f5e1ddca07bc5dc332172424128774f0f4d73ba17ecfb3655b60ced234addf73929079266e60e52fce67f0362bdd"}, 0xa1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000480)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {0x101, 0xffffffff}}, '.\x00'}) epoll_pwait(r6, &(0x7f0000000500)=[{}, {}, {}], 0x3, 0xfffffffd, &(0x7f0000000540)={[0x20]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000580)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000780)={0x2, 0x56, "9051c0aa0da7fc38d51dd7dc663edc0406cd9195e3bf7982f49d265800f43a21f1e2171a5eee5f390828fdb34ae5de0018191e0ab88569f0dd95303cf7b94e6cab32e1fb35f27c5967281f557f43121c8048c2dec15c"}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) sendto$packet(r8, &(0x7f0000000840)="2bbe723ddb3a0b5c3f1e95934088d7c71b247dca0523593138761848", 0x1c, 0x702e6cdea2c56894, &(0x7f0000000940)={0x11, 0x19, 0x0, 0x1, 0x81, 0x6, @multicast}, 0x14) 14:16:14 executing program 7: pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x3000001, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000e86000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, r0) mlock2(&(0x7f0000f22000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000f10000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000f2c000/0x1000)=nil, 0x1000, 0x8, r1) munmap(&(0x7f0000ea7000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) mbind(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0xd5, 0x4, 0x7) mlock(&(0x7f0000e45000/0x2000)=nil, 0x2000) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, r2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000009, r2) shmat(0xffffffffffffffff, &(0x7f0000f1f000/0x4000)=nil, 0x2000) pkey_mprotect(&(0x7f0000c58000/0x4000)=nil, 0x4000, 0x8, 0xffffffffffffffff) 14:16:14 executing program 6: msgrcv(0xffffffffffffffff, &(0x7f0000000000)={0x0, ""/82}, 0x5a, 0x3, 0x1000) r0 = msgget$private(0x0, 0x400) msgsnd(r0, &(0x7f0000000080)={0x2, "fb8e09ad457e0db63ee8fbc55d3b913d4c452a538316b6304273aa4efecc3d02be4a7b2e41911ce5cde2ec297db042e0acc79811ef2e8f9a9f222f7413e2ff2673bd1244f24648c924e1273498d36206d39530545684feb341c426cd5257a1762be874647381dcc4f8f6256a57e8b4f413ec2a6bad"}, 0x7d, 0x0) msgrcv(r0, &(0x7f0000000100)={0x0, ""/180}, 0xbc, 0x3, 0x2000) msgsnd(r0, &(0x7f00000001c0)={0x3, "74b2d908587314b28a594126803d4967203cad4512a16dc6555190518d0c1b8e5ee0253aa40dd754426395ae208d697f22420ebe27b967ce39799143430a2a39dff853601f482c3c46bd57b4aedb3402d4cf090b7b5a417b1dd1e8b0f2fc8837d3417e6912f479b1718100a4bff75fcdccd76fbdcbad92a501ebd31e484e4383b7f0129ed22fb292988e3cd499df0d7fd5cf58d64fb2aef32248c58b8f652d2a8f0c4a9b2e5b310d7a12536b6a75598ceda9b62e5c9dcf1afc619086ea65b5bbee87ca0d209ea69145624cbb99cbe0b7bcad27c6582669e325e1b098f4d004db873ff74644c06685cbf0cf4c"}, 0xf4, 0x800) r1 = msgget(0x0, 0x40) msgctl$IPC_RMID(r1, 0x0) msgrcv(r1, &(0x7f00000002c0)={0x0, ""/100}, 0x6c, 0x3, 0x1800) msgrcv(r0, &(0x7f0000000340)={0x0, ""/235}, 0xf3, 0x3, 0x1000) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000440)=""/165) msgsnd(r1, &(0x7f0000000500)={0x3, "6340258445fa4e081cddb76a0dca596866c37d4cd2d913bce2d6d347b035bcad5ca110d52a6885f85b16092ab77f00d5f0c6184d763255d41cce8b13e59f1ac62720e81f459a9bfd7550a491557b55b288455ff10f6ac1683ecc0eba7a43b63ff38dae0caac6d3236687e4271a91d913caa9050ed504f71bf4a4e94d2848b1dbf2d76fb5d0d24ffc222a67fc25939529282ea00ff12a11b6d2bd746975f787a0124d6301be7ab7dc8afe726ce957c74fcfae10cdfb6b4aafb8ef5abb202b946abb1db50fd97585da13416e943674398d52"}, 0xd9, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000600)=""/209) msgrcv(r1, &(0x7f0000000700)={0x0, ""/97}, 0x69, 0x3, 0x1800) r2 = msgget(0x0, 0x190) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_RMID(r1, 0x0) msgrcv(r1, &(0x7f0000000780)={0x0, ""/124}, 0x84, 0x2, 0x800) msgsnd(r1, &(0x7f0000000840)={0x0, "f5b8d2041a9e24c75170e7ce0f69585c91805c8eb41522ec322dcb560de5789cce20ce9dd2455aaf0cafbcd0cf5a2d10e40bf3f93c7f4a77cc6fbc67b0758e52cba126a1f03df6a2f3c8237f14b67c245624487bd2e4b6872058fa44748114444eafdfced1f1833d4cd841894b70f32b9e56583b45de080f97d128951b25a1ce6c33d444c933b4a1c98726e14c303e96b76121069e40ba67dbbed125b01d6970a8a5553d96c06835ec5cde1db2332e6560314f64192df40e099253ad2831"}, 0xc6, 0x0) r3 = msgget(0x0, 0x223) msgsnd(r3, &(0x7f0000000940)={0x0, "f8d0784a5883d38f70e5dcca016257a7bab84c9f214916af1c7c438685bed50dac74b974ba9687dde81d724a7cb5cd391b466127ae31709bdc84ff2f973269be971c29eb7a89af687a66"}, 0x52, 0x800) [ 162.942513] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.944119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.959326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.961332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.966514] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.967254] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.973212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.004180] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.005274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.009753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.013550] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.019018] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.027203] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 163.030788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.034321] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.036256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.037212] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 163.038482] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 163.040875] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 163.042699] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.043832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.043892] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 163.044821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 163.046809] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 163.047787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 163.047952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.049236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.050668] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.051880] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.052883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.054016] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 163.054143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.058296] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 163.065239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.075496] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.077250] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.090525] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.102595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.114182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.133486] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.139155] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.139330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.146129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.148963] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.150487] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.154058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.165295] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.167297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.057764] Bluetooth: hci1: command tx timeout [ 165.121180] Bluetooth: hci6: command tx timeout [ 165.185204] Bluetooth: hci4: command tx timeout [ 165.187073] Bluetooth: hci7: command tx timeout [ 165.187174] Bluetooth: hci5: command tx timeout [ 165.188071] Bluetooth: hci2: command tx timeout [ 165.249079] Bluetooth: hci0: command tx timeout [ 165.250676] Bluetooth: hci3: command tx timeout [ 167.105166] Bluetooth: hci1: command tx timeout [ 167.171002] Bluetooth: hci6: command tx timeout [ 167.233007] Bluetooth: hci2: command tx timeout [ 167.234336] Bluetooth: hci5: command tx timeout [ 167.235380] Bluetooth: hci4: command tx timeout [ 167.235616] Bluetooth: hci7: command tx timeout [ 167.298019] Bluetooth: hci0: command tx timeout [ 167.298456] Bluetooth: hci3: command tx timeout [ 169.154169] Bluetooth: hci1: command tx timeout [ 169.217991] Bluetooth: hci6: command tx timeout [ 169.281124] Bluetooth: hci7: command tx timeout [ 169.282169] Bluetooth: hci4: command tx timeout [ 169.282540] Bluetooth: hci5: command tx timeout [ 169.282777] Bluetooth: hci2: command tx timeout [ 169.345096] Bluetooth: hci0: command tx timeout [ 169.345449] Bluetooth: hci3: command tx timeout [ 171.201094] Bluetooth: hci1: command tx timeout [ 171.265015] Bluetooth: hci6: command tx timeout [ 171.329089] Bluetooth: hci2: command tx timeout [ 171.329227] Bluetooth: hci4: command tx timeout [ 171.329453] Bluetooth: hci5: command tx timeout [ 171.329882] Bluetooth: hci7: command tx timeout [ 171.393024] Bluetooth: hci3: command tx timeout [ 171.393381] Bluetooth: hci0: command tx timeout [ 225.556125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.558832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.560082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.570341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.575073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.576207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.579202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.580271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.581666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.587680] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.589301] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.590403] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.630240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.635114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.638555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.643427] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.649945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.652554] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.658679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.673850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.675477] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.687641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.689699] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.691659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.749501] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.758735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.764157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.780265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.782877] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.784740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.830593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.837716] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 225.860070] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 225.860084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.870175] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.870243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 225.872983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.884189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.898161] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.903730] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.911728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.913309] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 225.913373] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.916345] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.937282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 225.945454] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.946083] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.948179] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 227.649328] Bluetooth: hci1: command tx timeout [ 227.649378] Bluetooth: hci0: command tx timeout [ 227.843099] Bluetooth: hci3: command tx timeout [ 227.844190] Bluetooth: hci2: command tx timeout [ 227.905018] Bluetooth: hci4: command tx timeout [ 227.970069] Bluetooth: hci7: command tx timeout [ 228.033295] Bluetooth: hci6: command tx timeout [ 228.033809] Bluetooth: hci5: command tx timeout [ 229.697044] Bluetooth: hci0: command tx timeout [ 229.697119] Bluetooth: hci1: command tx timeout [ 229.889251] Bluetooth: hci3: command tx timeout [ 229.890308] Bluetooth: hci2: command tx timeout [ 229.952999] Bluetooth: hci4: command tx timeout [ 230.016984] Bluetooth: hci7: command tx timeout [ 230.081132] Bluetooth: hci5: command tx timeout [ 230.081638] Bluetooth: hci6: command tx timeout [ 231.745109] Bluetooth: hci1: command tx timeout [ 231.747933] Bluetooth: hci0: command tx timeout [ 231.937075] Bluetooth: hci2: command tx timeout [ 231.937477] Bluetooth: hci3: command tx timeout [ 232.001926] Bluetooth: hci4: command tx timeout [ 232.065118] Bluetooth: hci7: command tx timeout [ 232.129098] Bluetooth: hci6: command tx timeout [ 232.131956] Bluetooth: hci5: command tx timeout [ 233.793026] Bluetooth: hci0: command tx timeout [ 233.793082] Bluetooth: hci1: command tx timeout [ 233.985108] Bluetooth: hci3: command tx timeout [ 233.985524] Bluetooth: hci2: command tx timeout [ 234.049131] Bluetooth: hci4: command tx timeout [ 234.113008] Bluetooth: hci7: command tx timeout [ 234.176982] Bluetooth: hci5: command tx timeout [ 234.177086] Bluetooth: hci6: command tx timeout [ 285.671017] syz-executor.5 (3617) used greatest stack depth: 23808 bytes left [ 287.832708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.835200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.841030] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.852542] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.860983] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 287.862750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.216323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.220068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.220952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.222501] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.224414] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.230401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.232109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.233258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.234164] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.237752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.240097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.242239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.243595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.245409] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.247222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.251240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.275135] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 288.277787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.279523] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.289191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.291330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.308151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.309443] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.310383] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.333288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.345271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.365003] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 288.365840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.368406] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.371131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.376120] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 288.378133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 288.389655] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 288.391101] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.392768] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 288.394813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.499485] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.506008] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.508121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.524264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.527117] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 288.528198] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 289.928223] Bluetooth: hci0: command tx timeout [ 290.305063] Bluetooth: hci3: command tx timeout [ 290.305208] Bluetooth: hci1: command tx timeout [ 290.369071] Bluetooth: hci4: command tx timeout [ 290.369119] Bluetooth: hci2: command tx timeout [ 290.433103] Bluetooth: hci5: command tx timeout [ 290.497978] Bluetooth: hci7: command tx timeout [ 290.625232] Bluetooth: hci6: command tx timeout [ 291.969937] Bluetooth: hci0: command tx timeout [ 292.353005] Bluetooth: hci1: command tx timeout [ 292.354228] Bluetooth: hci3: command tx timeout [ 292.417028] Bluetooth: hci4: command tx timeout [ 292.418097] Bluetooth: hci2: command tx timeout [ 292.481145] Bluetooth: hci5: command tx timeout [ 292.546939] Bluetooth: hci7: command tx timeout [ 292.672954] Bluetooth: hci6: command tx timeout [ 294.016953] Bluetooth: hci0: command tx timeout [ 294.402100] Bluetooth: hci1: command tx timeout [ 294.403382] Bluetooth: hci3: command tx timeout [ 294.465300] Bluetooth: hci2: command tx timeout [ 294.466361] Bluetooth: hci4: command tx timeout [ 294.529934] Bluetooth: hci5: command tx timeout [ 294.593152] Bluetooth: hci7: command tx timeout [ 294.720957] Bluetooth: hci6: command tx timeout [ 296.066923] Bluetooth: hci0: command tx timeout [ 296.449047] Bluetooth: hci1: command tx timeout [ 296.450355] Bluetooth: hci3: command tx timeout [ 296.513016] Bluetooth: hci2: command tx timeout [ 296.514096] Bluetooth: hci4: command tx timeout [ 296.577064] Bluetooth: hci5: command tx timeout [ 296.641032] Bluetooth: hci7: command tx timeout [ 296.768991] Bluetooth: hci6: command tx timeout [ 350.444394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.447781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.451262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.459314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.462493] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 350.463544] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.806225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.815069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.818259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.821480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.823301] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 350.826978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.927220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.932224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.933240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.935595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.937074] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 350.938045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.995395] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.998181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.999319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.002618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.005579] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 351.008374] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.070195] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.072165] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.078290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.079430] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 351.082076] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.084505] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 351.085356] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.093815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.096551] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.099226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.104082] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.108510] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.112015] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 351.115681] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.118682] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 351.120235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.123268] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.130489] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 351.132256] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 351.138763] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.141209] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 351.143004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.165701] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 351.167983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.513021] Bluetooth: hci0: command tx timeout [ 352.898046] Bluetooth: hci1: command tx timeout [ 352.961055] Bluetooth: hci2: command tx timeout [ 353.089899] Bluetooth: hci3: command tx timeout [ 353.217227] Bluetooth: hci6: command tx timeout [ 353.217247] Bluetooth: hci4: command tx timeout [ 353.218141] Bluetooth: hci5: command tx timeout [ 353.218265] Bluetooth: hci7: command tx timeout [ 354.562050] Bluetooth: hci0: command tx timeout [ 354.945026] Bluetooth: hci1: command tx timeout [ 355.009061] Bluetooth: hci2: command tx timeout [ 355.136919] Bluetooth: hci3: command tx timeout [ 355.265541] Bluetooth: hci7: command tx timeout [ 355.266096] Bluetooth: hci6: command tx timeout [ 355.266428] Bluetooth: hci5: command tx timeout [ 355.266794] Bluetooth: hci4: command tx timeout [ 356.609076] Bluetooth: hci0: command tx timeout [ 356.992969] Bluetooth: hci1: command tx timeout [ 357.056920] Bluetooth: hci2: command tx timeout [ 357.184949] Bluetooth: hci3: command tx timeout [ 357.313065] Bluetooth: hci7: command tx timeout [ 357.313219] Bluetooth: hci4: command tx timeout [ 357.313497] Bluetooth: hci5: command tx timeout [ 357.313763] Bluetooth: hci6: command tx timeout [ 358.658126] Bluetooth: hci0: command tx timeout [ 359.041129] Bluetooth: hci1: command tx timeout [ 359.105073] Bluetooth: hci2: command tx timeout [ 359.232941] Bluetooth: hci3: command tx timeout [ 359.361040] Bluetooth: hci4: command tx timeout [ 359.361446] Bluetooth: hci6: command tx timeout [ 359.361773] Bluetooth: hci7: command tx timeout [ 359.362266] Bluetooth: hci5: command tx timeout [ 413.074384] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.075731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.077611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.087088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.093101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.098319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.489208] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.493018] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.497453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.504653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.523350] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.525235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.532875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.541300] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.547138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.552306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.555535] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.579736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.582208] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 413.583226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 413.586773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.588774] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 413.589810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.590961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.591521] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.599445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.606558] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 413.607676] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.616270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.620170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.623443] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.626704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.627912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.628523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.628718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.632360] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 413.633150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.636766] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.640344] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 413.641415] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 413.643028] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 413.643976] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 413.648013] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 413.649465] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 413.651294] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 413.651404] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.661513] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 413.669106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.168970] Bluetooth: hci0: command tx timeout [ 415.553268] Bluetooth: hci2: command tx timeout [ 415.617580] Bluetooth: hci6: command tx timeout [ 415.680983] Bluetooth: hci4: command tx timeout [ 415.682282] Bluetooth: hci3: command tx timeout [ 415.744986] Bluetooth: hci7: command tx timeout [ 415.745921] Bluetooth: hci5: command tx timeout [ 415.745938] Bluetooth: hci1: command tx timeout [ 417.217048] Bluetooth: hci0: command tx timeout [ 417.600927] Bluetooth: hci2: command tx timeout [ 417.665300] Bluetooth: hci6: command tx timeout [ 417.729951] Bluetooth: hci3: command tx timeout [ 417.729976] Bluetooth: hci4: command tx timeout [ 417.792940] Bluetooth: hci1: command tx timeout [ 417.793458] Bluetooth: hci7: command tx timeout [ 417.793962] Bluetooth: hci5: command tx timeout [ 419.265980] Bluetooth: hci0: command tx timeout [ 419.649068] Bluetooth: hci2: command tx timeout [ 419.712904] Bluetooth: hci6: command tx timeout [ 419.777135] Bluetooth: hci4: command tx timeout [ 419.780030] Bluetooth: hci3: command tx timeout [ 419.840962] Bluetooth: hci5: command tx timeout [ 419.841314] Bluetooth: hci1: command tx timeout [ 419.842657] Bluetooth: hci7: command tx timeout [ 421.312931] Bluetooth: hci0: command tx timeout [ 421.697056] Bluetooth: hci2: command tx timeout [ 421.760908] Bluetooth: hci6: command tx timeout [ 421.825006] Bluetooth: hci3: command tx timeout [ 421.826277] Bluetooth: hci4: command tx timeout [ 421.888939] Bluetooth: hci7: command tx timeout [ 421.889357] Bluetooth: hci1: command tx timeout [ 421.889390] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 14:21:17 Registers: info registers vcpu 0 RAX=ffffea00001dd2c0 RBX=ffffea00001dd300 RCX=ffffffff8169c989 RDX=ffff88803117b700 RSI=ffffffff8169c82e RDI=0000000000000006 RBP=00000000000000a8 RSP=ffff888031f27b58 R8 =0000000000000000 R9 =fffff9400003ba58 R10=00000000000001c2 R11=0000000000000001 R12=ffffea00001dd2c0 R13=dffffc0000000000 R14=00000000000001c2 R15=000000000000009d RIP=ffffffff8169c836 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f688345e540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f688352f710 CR3=0000000031f46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000002 RBX=0000000000000097 RCX=1ffffffff0fdb923 RDX=1ffff1100175f4bc RSI=0000000000000008 RDI=ffffffff87ed4eb0 RBP=ffff88800baf9b80 RSP=ffff888016277430 R8 =0000000000000000 R9 =fffffbfff0fda9d6 R10=ffffffff87ed4eb7 R11=00000000000c2f81 R12=0000000000000008 R13=ffff88800bafa5c0 R14=0000000000000100 R15=0000000000000000 RIP=ffffffff812ef5e9 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557e3f1400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558f98c09080 CR3=000000002d862000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000ff00000000000000 XMM02=00000000000000000000ff0000000000 XMM03=000000ff0000000000000000ff000000 XMM04=ff00000000000000ff00000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000