Warning: Permanently added '[localhost]:36372' (ECDSA) to the list of known hosts. 2025/04/28 18:37:20 fuzzer started 2025/04/28 18:37:21 dialing manager at localhost:46629 syzkaller login: [ 107.855818] cgroup: Unknown subsys name 'net' [ 108.037356] cgroup: Unknown subsys name 'cpuset' [ 108.133792] cgroup: Unknown subsys name 'rlimit' 2025/04/28 18:37:37 syscalls: 2214 2025/04/28 18:37:37 code coverage: enabled 2025/04/28 18:37:37 comparison tracing: enabled 2025/04/28 18:37:37 extra coverage: enabled 2025/04/28 18:37:37 setuid sandbox: enabled 2025/04/28 18:37:37 namespace sandbox: enabled 2025/04/28 18:37:37 Android sandbox: enabled 2025/04/28 18:37:37 fault injection: enabled 2025/04/28 18:37:37 leak checking: enabled 2025/04/28 18:37:37 net packet injection: enabled 2025/04/28 18:37:37 net device setup: enabled 2025/04/28 18:37:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/28 18:37:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/28 18:37:37 USB emulation: enabled 2025/04/28 18:37:37 hci packet injection: enabled 2025/04/28 18:37:37 wifi device emulation: enabled 2025/04/28 18:37:37 802.15.4 emulation: enabled 2025/04/28 18:37:37 fetching corpus: 0, signal 0/0 (executing program) 2025/04/28 18:37:39 starting 8 fuzzer processes 18:37:39 executing program 0: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "b8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e4, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x81}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0xb984}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1000}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xef}, {0x8, 0xb, 0x200}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x810}, 0x4005) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @adiantum, 0x4, @desc1}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x20004800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040085) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000840)={@remote, @broadcast}, &(0x7f0000000880)=0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x24c, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3e}}}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x1}, @device_b}}, @NL80211_ATTR_FRAME={0x1ec, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1f}, @device_a, @broadcast, @device_b, {0x0, 0x4}}, {0x0, 0x0, 0x1, 0x0, 0x34}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_a, @random="b79ea522c7ba", @initial, {0x2, 0x5}}, {0xb, 0x1, 0x0, 0x1, 0x1}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20048004}, 0x4048081) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000c40)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000dc0)={'sit0\x00', 0x0, 0x2f, 0x3, 0x6e, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8000, 0x8, 0xffff0001}}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x2c}}, 0x4000000) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x174, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3c3e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xaa0}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8a}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x283}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xc8, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff678d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x16989122}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x54}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x269}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x56f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x22}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x33}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc0000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x401}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}]}, 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x4801) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001280), 0x2001, 0x0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0xb0, r2, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1c}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x83, 0xc5, "28ceb19f82682dcef9486da37e0c2d0901a9d119ffc155bcaee620c6edb1c83ad14d7a0acfd066fa1fd5c30e39082029fe9a53840aebf772b873f1ff2c6e0f9ae451deda7458f513ac4b8d3ec1d34a7bfbba48252628680fc103cf3bfc26a2005bed486401198e90d9067243ae1ddf71a61ce8321fe1010980629b8da474cd"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) dup3(0xffffffffffffffff, r4, 0x80000) socket$nl_audit(0x10, 0x3, 0x9) 18:37:39 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x91c6ab7305052ed4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x97}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}}, 0x200c0000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x140, 0x3, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_NAT_DST={0xd8, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x43}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x200}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xa3}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6bb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000004}, 0x8001) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x7]}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff0a}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8880}, 0x80) socket(0x1f, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000540)={{r2}, 0x3, 0x854, 0x401}) recvmsg$unix(r2, &(0x7f0000000b00)={&(0x7f0000000580), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)=""/201, 0xc9}], 0x4, &(0x7f0000000a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x2000) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000e40), 0x4000, 0x0) getsockname$packet(r10, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000f00)={0x5ff, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000009f00)) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f000000a000)={&(0x7f0000009f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000009fc0)={&(0x7f0000009f80)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r11, &(0x7f000000a100)={&(0x7f000000a040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000000a0c0)={&(0x7f000000a080)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f000000a200)={&(0x7f000000a140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000a1c0)={&(0x7f000000a180)={0x38, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x880) ioctl$LOOP_SET_FD(r10, 0x4c00, r5) fsetxattr$system_posix_acl(r4, &(0x7f000000a240)='system.posix_acl_access\x00', &(0x7f000000a480)={{}, {0x1, 0x2}, [{0x2, 0x6, r7}, {0x2, 0x4, r7}, {0x2, 0x4, r7}, {0x2, 0x2}, {0x2, 0x1, r7}, {0x2, 0x5, r7}], {0x4, 0x1}, [{0x8, 0x2}], {0x10, 0x1}, {0x20, 0x1}}, 0x5c, 0x2) 18:37:39 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xd167]}, 0x8, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6105}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) open_by_handle_at(r1, &(0x7f0000000180)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0xcdbf, 0x6, 0x2, 0xc20000, 0x4, 0x401}}, 0x800ec0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0xa400, 0x0) fcntl$setpipe(r2, 0x407, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, {0xa, 0x4e22, 0x3, @local, 0xcaf1}, 0x7, [0x1000, 0x2, 0x7ff, 0x6, 0x3, 0x200, 0xfffffff8, 0xff]}, 0x5c) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000380), 0x2, 0x200200) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f00000003c0)=0x1) bind$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x2, @any, 0x3ff}, 0xe) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000440)) ptrace$cont(0x9, 0x0, 0x8, 0x25) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000480)={0x2, 0x0, 0x6, 0x9, 0x1f, "3acc0fb92c62982160d71d11daa9e208215e23", 0x2, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMPLAYMSF(r4, 0x5303, &(0x7f0000000500)={0x9, 0x3f, 0xff, 0x0, 0x3, 0x4}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000540)={0x81, "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"}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x134, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x19}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x2]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6de}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffff83}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0x1]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcd}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xfffff000, 0x6, 0x9, 0x416, 0x1000]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc0}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x497}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x369}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x623}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffff00}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x398}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb7a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfe9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3f, 0x1, 0x4, 0x0, 0x4]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffb}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x8804) 18:37:39 executing program 3: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='netpci0\x00', 0x10) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0xfffa, &(0x7f0000000080)=0x2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x2c0400d4}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0xc) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') r1 = socket$inet6(0xa, 0x6, 0x7) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000480)=""/237, &(0x7f0000000580)=0xed) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$eventfd(r3, &(0x7f0000000600)=0x6, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000680)) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044804}, 0x40874) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa8, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xfff}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xa}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x7}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x17}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x100}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x81}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x33}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffda}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4c004) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0x204080, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000980)=r6, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000009c0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000a00)=0x28) fdatasync(0xffffffffffffffff) [ 125.790323] audit: type=1400 audit(1745865459.275:7): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:37:39 executing program 5: ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x6) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c, 0x0) getsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000100)={{0x5, 0x3}, 'port0\x00', 0x8, 0x181040, 0x29, 0x3, 0xa0e, 0x67c, 0x5, 0x0, 0x0, 0x8}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000001c0)={'raw\x00', 0x0, [0x10, 0x800, 0x0, 0x7ff, 0x1]}, &(0x7f0000000240)=0x54) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x5, 0x0, 0x0, {0xc}, [@CTA_LABELS={0x2c, 0x16, 0x1, 0x0, [0xc8, 0x5, 0x7fff, 0x400, 0x4, 0x2, 0x9, 0x8, 0x7ac6, 0xffb]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0xc00}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x5, 0x2, 0x0, 0x263]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20040800) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @loopback}, &(0x7f0000000400)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000440)={{0x3a, @multicast2, 0x4e20, 0x2, 'wlc\x00', 0x4, 0xffffffff, 0x51}, {@local, 0x4e23, 0x2000, 0x9, 0x0, 0x8}}, 0x44) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x400000, 0x0) getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=0x1000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001540)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6c}) r3 = syz_open_dev$vcsu(&(0x7f0000001580), 0x1b0, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000015c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@private=0xa010101, 0x4e24, 0x0, 0x4e20, 0x9, 0x2, 0xe0, 0x20, 0x2c}, {0xfff, 0x115e, 0x5, 0x7, 0x64e6d7f4, 0x5, 0x1, 0x100}, {0x9, 0x7, 0x3, 0x1ff}, 0x40, 0x6e6bbe, 0xa91a37ce3b7582f5, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4d5, 0xff}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x3, 0x2, 0x1, 0xac8, 0xf05, 0x7fffffff}}, 0xe8) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000016c0), 0x480000, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000001700)=0xb49, 0x4) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xc4, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba31}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb011}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x840}, 0x850) mknodat$loop(r3, &(0x7f0000001900)='./file0\x00', 0x80, 0x1) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000001940)) fdatasync(r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044000}, 0x20008080) 18:37:39 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffff, 0x533995824f64f8b7) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @rc={0x1f, @any, 0x8}, @xdp={0x2c, 0x4, 0x0, 0x19}, @isdn={0x22, 0x3, 0x8, 0x1f, 0x6}, 0x7, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8001, 0x200, 0x8001}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21404}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x20}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x300080c1}, 0x20000041) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x25, 0x6, 0x204, 0x20, @empty, @empty, 0x7800, 0x7, 0x2, 0x80}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'sit0\x00', r1, 0x2f, 0xb1, 0xff, 0x7, 0x1d, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x7800, 0xc20, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', r1, 0x29, 0xb9, 0x5, 0x2, 0x30, @dev={0xfe, 0x80, '\x00', 0x2a}, @mcast2, 0x700, 0x80, 0x3, 0x8}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000980)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'syztnl0\x00', r1, 0x4, 0x1, 0x7, 0x61, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x10, 0x10, 0xff, 0xffffffd9}}) getpeername$packet(r2, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000bc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'ip6_vti0\x00', r1, 0x2f, 0x8, 0x3, 0x1, 0x2, @remote, @empty, 0x16, 0x80, 0x29, 0x20000000}}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000015c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={&(0x7f0000000cc0)={0x8c0, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r3}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x619}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x0, 0x6, 0xfff}, {0x1, 0xff, 0x3, 0x3}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r1}, {0xdc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xac80}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x0, 0x2, 0x7}, {0x4, 0x7, 0x97, 0x6}, {0x7, 0x2, 0x4, 0x1}, {0x5, 0x3d, 0xfd, 0x3f17}]}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xdb}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7b}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8, 0x1, r1}, {0x13c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x180000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r10}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe04}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3ff, 0x9, 0xe4, 0x80000000}, {0x200, 0x4, 0x40, 0x4}, {0x101, 0x1f, 0xc2, 0x9bc}, {0xfff, 0x66, 0x20, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x8c0}, 0x1, 0x0, 0x0, 0x11}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0xd3, &(0x7f0000001600)=""/80, &(0x7f0000001680)=0x50) chroot(&(0x7f00000016c0)='./file0\x00') getpeername$unix(r2, &(0x7f0000001700), &(0x7f0000001780)=0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) ioctl$MON_IOCX_GET(r11, 0x40189206, &(0x7f0000001940)={&(0x7f0000001800), &(0x7f0000001840)=""/230, 0xe6}) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f00000019c0)) 18:37:39 executing program 6: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x7, 0x80000000, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40, 0x7800, 0x5, 0x9}}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) kcmp(0xffffffffffffffff, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffffffffffc1, 0x2000) fsetxattr$security_selinux(r1, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x3) getdents(r1, &(0x7f00000001c0)=""/130, 0x82) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PEERS={0xf8, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7176aec3aed32e1082145b161142a6166320579871d7e6247e0a32c159ff3946"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cf9748599ff94ed5fb2e63e67f29364506453b0f44b410aa36bdb346d046d011"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "54ffa622043d827e0bb8893866118279a4153080fd31892c713f2d5bba2ce912"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20014800) r2 = openat$cgroup_type(r1, &(0x7f0000000480), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000008c0)={0x14, 0x1, {0x4, @struct={0x9, 0x9}, 0x0, 0xff, 0x9, 0x7f, 0x1, 0x2, 0x2, @struct={0x7fffffff}, 0x97, 0x75, [0xfffffffffffffffc, 0x3, 0x6, 0x7, 0x3cc, 0x21ed2a4]}, {0x7, @struct={0x187ca647, 0xffff}, r3, 0x0, 0x0, 0x2, 0x40000000, 0x5, 0x20, @usage=0x9, 0x4, 0x3, [0x5, 0x20, 0xfffffffffffffffb, 0x680, 0x3ff, 0x80000000]}, {0x3b, @usage=0xa0, 0x0, 0x9, 0x401, 0x3, 0x6, 0x6, 0x4f, @usage, 0xbd, 0x68e, [0x1, 0x7f, 0xa609, 0x0, 0x7, 0xffff]}, {0x5, 0x3ff, 0x2}}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000cc0)=0x5) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x13c, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffc}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x14}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1a2b}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040080) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000f40), 0x620a80, 0x0) ioctl$CDROM_LAST_WRITTEN(r5, 0x5395, &(0x7f0000000f80)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0x81) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000010c0), 0x8841, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x12001}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 18:37:39 executing program 7: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x2f, 0x9, 0x7, 0x7, 0x0, 0x7, 0x808, 0x996cc0add19a8441, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff025f, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x4400, 0x5, 0x35ac, 0x5, 0x7fff, 0x0, 0x3, 0x0, 0xbc, 0x0, 0xb8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)=0x4) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x482002, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000140)=0x7fff) ioctl$CDROMCLOSETRAY(r1, 0x5319) ioctl$FIOCLEX(r0, 0x5451) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x6, 0x0, [0x4, 0xfffffffffffffffa, 0x2ae, 0x9], [0xd11e, 0x3ff, 0x0, 0x10000000, 0x3, 0xffffffff, 0x88, 0x4, 0x8, 0x0, 0x1, 0x2, 0xfff, 0x7, 0x3, 0xe6, 0x0, 0x8, 0x1, 0x5, 0x96, 0x8, 0x4, 0x6, 0x1, 0x7ff, 0x60ab, 0x2, 0x1f, 0xffff, 0xe3ec, 0x4, 0x3, 0x9, 0x80000001, 0x9, 0x1, 0x100000000, 0x39, 0x10000, 0xfff0000000000000, 0xb5a, 0xa82, 0x8, 0x200, 0x1000, 0x1, 0x9, 0x9, 0x4, 0x4, 0xcec9, 0x2, 0x41b, 0xc9, 0x4c80, 0x5c201706, 0xe025, 0x3, 0x1, 0x3, 0x5, 0x1f, 0x6, 0x0, 0x3f753fd7, 0xfff, 0x6, 0x3, 0x4, 0x0, 0x4, 0x40, 0x4, 0xffffffff, 0x6, 0x0, 0x1, 0x7f, 0x9, 0x8, 0x3f, 0x8, 0xf0ef, 0x20, 0xffffffffffff7fff, 0x7, 0x1f, 0x8, 0x800000000, 0x3, 0x5, 0x0, 0x1a3b, 0xffffffff, 0x2, 0xffffffff, 0x8, 0x0, 0x5, 0x1000, 0x0, 0x1, 0x3ff, 0x40, 0x0, 0x0, 0x3, 0x1000, 0x100, 0x5, 0x3, 0x4, 0xcd, 0x7, 0xcf29, 0x80000000, 0x6, 0x5, 0x7, 0x4]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000005c0)=0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000009c0)={{'\x00', 0x1}, {0xffffffffffffffff}, 0x0, 0x0, 0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)="0320ff45a95acd48824ab019f90951c7b3408b7cbba623756f1485a73b8809a8c5ffa58512656986648b6eebed71ffe705421155f3fdd98d24a6297cb24749344c79885eba142933ca939a5e0e93fe226cfd06ee443ebdf0e7e4621101ecd057d6e694c07d9fd4474f35517ce48f96c0209688e1bfba338174f5fbbbc6bce3b7a52cd7bf1814915130ba7fb34f4092361a86c690328933c46f7b7b265c86c606eb81a8157cf4dbabe3be64dbaec4e10d2d8433f038fa2bc97e948e8b77e0658abeb148198038f3", 0xc7, 0x0, &(0x7f0000000780)={0x2, 0x18e, {0x1, 0xc, 0xda, "408fd4b748fff3f442d1bdddddfbee2d4ec7fc44f9a6118341b13ce776b25f129c6678fcf894b3286b758e14dabe0cfa697f91f78d0700727076f94076dce142ea4dc224edd5f382ce38c2ed16c2ca6d913be396b5be2dc32fc3e8ecc001fb1e18235319e71f1f2773f606f1e1a9c8569dedd15e953ec371cb6c8967f72b08d79010d58c5bdd8642b3a0d043a4d1a46a645b4d16e16a30e255b4e23daf51726f4e83f80a0dcb45c783f6cea9998b1cdf3481c7fbd1c56e5d504de866bde7c881bf6a00fd3bee8e368aebaf7556d4561826b4fc5e9f7eace7585e", 0xa7, "6351a3cd9a8c3bdf2a7759eccccb01fbfc6cf1dd3e39cce3515e97957a594f5c25c8f007955c4618f7d6554acfa25854c87cd7bb8f9c20cf08815ef8bc6165ec4538605937219b72b97d7c0ef50ac36d470a061436cf5faa10296e602bbda61220b0c5fa992f5651a0b1762951a12abbdf84622d5f02344c3fd3c16a10ab18cc649df04746dc75eb5fe5a43cc76086b0c63afe76d5a229da1dbf5d1d5f29026dc319c9098211bc"}, 0x7f, "a15acd92a1ab4b6da6e2b6859331d5d10438548b35eb805c9ddaf531179bd9939d115458c4c868e5ebd97c1813829e901f30ae4de8813d9486fc1cc73ac3d850c5c347eb74f411e36f2e11b60ce3885cf502b769557e49d46467553a93b1024ce4bc6ad83f426fb8653d73247073cfa0a7172d331c005277e0fc889d5fd054"}, 0x219}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}}, 0x810) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000d80)={&(0x7f0000000d00)=""/109, 0x6d}) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$addseals(r1, 0x409, 0x4) [ 127.148733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.150412] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.153731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.154713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.156328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.158028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.161799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.164577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.166798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.168035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.206946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.210755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.212256] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.216364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.218471] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.255834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.258487] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.259855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.265875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.268325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.282666] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.294416] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.296324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.319376] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.322317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.394683] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.400246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.419596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.425239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.433265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.437216] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.452867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.457447] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.459088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.466918] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.468498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.470859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.491234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.520028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.524282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.230234] Bluetooth: hci0: command tx timeout [ 129.230974] Bluetooth: hci1: command tx timeout [ 129.291200] Bluetooth: hci3: command tx timeout [ 129.292155] Bluetooth: hci2: command tx timeout [ 129.356441] Bluetooth: hci4: command tx timeout [ 129.547169] Bluetooth: hci6: command tx timeout [ 129.612227] Bluetooth: hci7: command tx timeout [ 129.613441] Bluetooth: hci5: command tx timeout [ 131.275431] Bluetooth: hci1: command tx timeout [ 131.275982] Bluetooth: hci0: command tx timeout [ 131.339260] Bluetooth: hci3: command tx timeout [ 131.339784] Bluetooth: hci2: command tx timeout [ 131.404033] Bluetooth: hci4: command tx timeout [ 131.595186] Bluetooth: hci6: command tx timeout [ 131.661459] Bluetooth: hci7: command tx timeout [ 131.661992] Bluetooth: hci5: command tx timeout [ 133.323491] Bluetooth: hci1: command tx timeout [ 133.324506] Bluetooth: hci0: command tx timeout [ 133.387199] Bluetooth: hci3: command tx timeout [ 133.387749] Bluetooth: hci2: command tx timeout [ 133.451138] Bluetooth: hci4: command tx timeout [ 133.645471] Bluetooth: hci6: command tx timeout [ 133.707231] Bluetooth: hci5: command tx timeout [ 133.707747] Bluetooth: hci7: command tx timeout [ 135.371175] Bluetooth: hci1: command tx timeout [ 135.371698] Bluetooth: hci0: command tx timeout [ 135.435488] Bluetooth: hci3: command tx timeout [ 135.436180] Bluetooth: hci2: command tx timeout [ 135.499159] Bluetooth: hci4: command tx timeout [ 135.692390] Bluetooth: hci6: command tx timeout [ 135.755231] Bluetooth: hci7: command tx timeout [ 135.755753] Bluetooth: hci5: command tx timeout [ 187.602881] syz-executor.1 (295) used greatest stack depth: 24616 bytes left [ 190.057867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.060557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.062548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.073623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.082585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.086146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.094403] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.095684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.099912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.101696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.137973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.143643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.150611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.154490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.159901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.195604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.204674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.206377] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.208065] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.210880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.212423] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.215343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.216690] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.217675] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.237019] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.249223] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.252017] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.257276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.258901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.263535] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.264426] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.271311] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.287905] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.338364] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.341964] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.346886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.349329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.353252] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.360338] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.364742] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.139348] Bluetooth: hci0: command tx timeout [ 192.139399] Bluetooth: hci1: command tx timeout [ 192.204198] Bluetooth: hci2: command tx timeout [ 192.331200] Bluetooth: hci5: command tx timeout [ 192.331222] Bluetooth: hci3: command tx timeout [ 192.395155] Bluetooth: hci4: command tx timeout [ 192.459344] Bluetooth: hci7: command tx timeout [ 192.459491] Bluetooth: hci6: command tx timeout [ 194.187604] Bluetooth: hci1: command tx timeout [ 194.188109] Bluetooth: hci0: command tx timeout [ 194.252281] Bluetooth: hci2: command tx timeout [ 194.379199] Bluetooth: hci5: command tx timeout [ 194.381426] Bluetooth: hci3: command tx timeout [ 194.443290] Bluetooth: hci4: command tx timeout [ 194.508304] Bluetooth: hci6: command tx timeout [ 194.508361] Bluetooth: hci7: command tx timeout [ 196.236265] Bluetooth: hci1: command tx timeout [ 196.236316] Bluetooth: hci0: command tx timeout [ 196.300085] Bluetooth: hci2: command tx timeout [ 196.428136] Bluetooth: hci3: command tx timeout [ 196.428167] Bluetooth: hci5: command tx timeout [ 196.491590] Bluetooth: hci4: command tx timeout [ 196.555127] Bluetooth: hci7: command tx timeout [ 196.555539] Bluetooth: hci6: command tx timeout [ 198.283289] Bluetooth: hci0: command tx timeout [ 198.284262] Bluetooth: hci1: command tx timeout [ 198.347163] Bluetooth: hci2: command tx timeout [ 198.475161] Bluetooth: hci3: command tx timeout [ 198.475181] Bluetooth: hci5: command tx timeout [ 198.540385] Bluetooth: hci4: command tx timeout [ 198.603850] Bluetooth: hci6: command tx timeout [ 198.603948] Bluetooth: hci7: command tx timeout [ 252.767526] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.774877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.776304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.787111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.796794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.908807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.916376] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.918595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.924386] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.926911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.964864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.978454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.979834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.986977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.008749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.085811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.092464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.104138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.116270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.118668] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.139577] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.151959] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.167977] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.170005] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.179569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.197488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.223599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.234774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.239823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.242646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.244923] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.251577] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.257126] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.260658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.260937] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.264859] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 253.272613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.286667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.289820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.375787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.859953] Bluetooth: hci0: command tx timeout [ 254.989101] Bluetooth: hci1: command tx timeout [ 255.051497] Bluetooth: hci2: command tx timeout [ 255.179568] Bluetooth: hci3: command tx timeout [ 255.371255] Bluetooth: hci4: command tx timeout [ 255.372020] Bluetooth: hci7: command tx timeout [ 255.435518] Bluetooth: hci6: command tx timeout [ 255.437427] Bluetooth: hci5: command tx timeout [ 256.907664] Bluetooth: hci0: command tx timeout [ 257.035481] Bluetooth: hci1: command tx timeout [ 257.100079] Bluetooth: hci2: command tx timeout [ 257.228112] Bluetooth: hci3: command tx timeout [ 257.420350] Bluetooth: hci7: command tx timeout [ 257.421932] Bluetooth: hci4: command tx timeout [ 257.485508] Bluetooth: hci5: command tx timeout [ 257.487156] Bluetooth: hci6: command tx timeout [ 258.955692] Bluetooth: hci0: command tx timeout [ 259.084080] Bluetooth: hci1: command tx timeout [ 259.147120] Bluetooth: hci2: command tx timeout [ 259.275151] Bluetooth: hci3: command tx timeout [ 259.468361] Bluetooth: hci7: command tx timeout [ 259.468884] Bluetooth: hci4: command tx timeout [ 259.531436] Bluetooth: hci6: command tx timeout [ 259.531925] Bluetooth: hci5: command tx timeout [ 261.004357] Bluetooth: hci0: command tx timeout [ 261.131126] Bluetooth: hci1: command tx timeout [ 261.196177] Bluetooth: hci2: command tx timeout [ 261.324154] Bluetooth: hci3: command tx timeout [ 261.517088] Bluetooth: hci7: command tx timeout [ 261.518708] Bluetooth: hci4: command tx timeout [ 261.579234] Bluetooth: hci5: command tx timeout [ 261.580561] Bluetooth: hci6: command tx timeout [ 315.323491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.325244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.326640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.330728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.332759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.478347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.495485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.513626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.516347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.518118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.545023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.547645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.549943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.576022] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.579409] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.631103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.642336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.653190] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.765426] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.776284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.794222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.811385] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.851660] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.854000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.857556] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.859492] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.862238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.869699] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.881221] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.889240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.893084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.895394] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 315.896355] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.900627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.903541] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.954877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.962849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.030419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.036841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.083675] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.390142] Bluetooth: hci0: command tx timeout [ 317.643420] Bluetooth: hci2: command tx timeout [ 317.645488] Bluetooth: hci1: command tx timeout [ 317.906645] Bluetooth: hci3: command tx timeout [ 317.963231] Bluetooth: hci7: command tx timeout [ 317.964770] Bluetooth: hci6: command tx timeout [ 318.027367] Bluetooth: hci4: command tx timeout [ 318.155436] Bluetooth: hci5: command tx timeout [ 319.435131] Bluetooth: hci0: command tx timeout [ 319.691438] Bluetooth: hci1: command tx timeout [ 319.691968] Bluetooth: hci2: command tx timeout [ 319.947110] Bluetooth: hci3: command tx timeout [ 320.011301] Bluetooth: hci6: command tx timeout [ 320.011790] Bluetooth: hci7: command tx timeout [ 320.075151] Bluetooth: hci4: command tx timeout [ 320.203215] Bluetooth: hci5: command tx timeout [ 321.483391] Bluetooth: hci0: command tx timeout [ 321.739648] Bluetooth: hci1: command tx timeout [ 321.740240] Bluetooth: hci2: command tx timeout [ 321.995603] Bluetooth: hci3: command tx timeout [ 322.059179] Bluetooth: hci7: command tx timeout [ 322.059692] Bluetooth: hci6: command tx timeout [ 322.123466] Bluetooth: hci4: command tx timeout [ 322.252070] Bluetooth: hci5: command tx timeout [ 323.532572] Bluetooth: hci0: command tx timeout [ 323.787422] Bluetooth: hci1: command tx timeout [ 323.788387] Bluetooth: hci2: command tx timeout [ 324.043234] Bluetooth: hci3: command tx timeout [ 324.107188] Bluetooth: hci7: command tx timeout [ 324.107687] Bluetooth: hci6: command tx timeout [ 324.171476] Bluetooth: hci4: command tx timeout [ 324.300470] Bluetooth: hci5: command tx timeout [ 378.144672] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.148957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.152603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.164458] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.167378] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.211832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.215967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.219358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.228556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.236990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.290674] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.292778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.296872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.317199] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.326447] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.341809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.343537] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.345142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.359271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.363392] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.431757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.437106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.441472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.449023] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.451425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.472713] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.490346] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.491714] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.520858] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.525329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.526612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.531494] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.534332] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.540019] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 378.563834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.564860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.573500] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.599584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.612973] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.643392] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.235343] Bluetooth: hci0: command tx timeout [ 380.299180] Bluetooth: hci1: command tx timeout [ 380.363789] Bluetooth: hci2: command tx timeout [ 380.427802] Bluetooth: hci3: command tx timeout [ 380.491176] Bluetooth: hci4: command tx timeout [ 380.619433] Bluetooth: hci7: command tx timeout [ 380.683170] Bluetooth: hci6: command tx timeout [ 380.747165] Bluetooth: hci5: command tx timeout [ 382.283144] Bluetooth: hci0: command tx timeout [ 382.349102] Bluetooth: hci1: command tx timeout [ 382.411262] Bluetooth: hci2: command tx timeout [ 382.475365] Bluetooth: hci3: command tx timeout [ 382.541400] Bluetooth: hci4: command tx timeout [ 382.668239] Bluetooth: hci7: command tx timeout [ 382.731329] Bluetooth: hci6: command tx timeout [ 382.795139] Bluetooth: hci5: command tx timeout [ 384.332830] Bluetooth: hci0: command tx timeout [ 384.395926] Bluetooth: hci1: command tx timeout [ 384.459169] Bluetooth: hci2: command tx timeout [ 384.526335] Bluetooth: hci3: command tx timeout [ 384.588252] Bluetooth: hci4: command tx timeout [ 384.716160] Bluetooth: hci7: command tx timeout [ 384.779145] Bluetooth: hci6: command tx timeout [ 384.843141] Bluetooth: hci5: command tx timeout [ 386.379109] Bluetooth: hci0: command tx timeout [ 386.443329] Bluetooth: hci1: command tx timeout [ 386.509104] Bluetooth: hci2: command tx timeout [ 386.572494] Bluetooth: hci3: command tx timeout [ 386.635122] Bluetooth: hci4: command tx timeout [ 386.765186] Bluetooth: hci7: command tx timeout [ 386.827180] Bluetooth: hci6: command tx timeout [ 386.892404] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 18:42:49 Registers: info registers vcpu 0 RAX=ffff88800da15340 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff813508dd RDI=fffffbfff0b83758 RBP=ffffffff85c1bac0 RSP=ffff88806ce08960 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b0c2 R11=000000000002498b R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce08a48 RIP=ffffffff81518567 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb1a1845540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff387e2fd8 CR3=000000002b016000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2e7473696c6b63616c622d7665646266 XMM01=00666e6f632e7473696c6b63616c622d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888033b4ff58 RCX=ffff888033b4f744 RDX=0000000000000001 RSI=ffffffff85c1bac0 RDI=ffff888036d4ddc0 RBP=ffffffff85c1bac0 RSP=ffff888033b4f738 R8 =0000000000000001 R9 =ffff888033b4f830 R10=000000000003b0c2 R11=00000000000c39fb R12=ffffffff81350bc2 R13=0000000000000206 R14=ffff888036d4d340 R15=0000000000000002 RIP=ffffffff8151823a RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9e3242df88 CR3=000000001395a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000