Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:23936' (ECDSA) to the list of known hosts. 2025/05/01 07:13:48 fuzzer started 2025/05/01 07:13:49 dialing manager at localhost:43767 syzkaller login: [ 101.698258] cgroup: Unknown subsys name 'net' [ 101.875613] cgroup: Unknown subsys name 'cpuset' [ 101.925799] cgroup: Unknown subsys name 'rlimit' 2025/05/01 07:14:04 syscalls: 2214 2025/05/01 07:14:04 code coverage: enabled 2025/05/01 07:14:04 comparison tracing: enabled 2025/05/01 07:14:04 extra coverage: enabled 2025/05/01 07:14:04 setuid sandbox: enabled 2025/05/01 07:14:04 namespace sandbox: enabled 2025/05/01 07:14:04 Android sandbox: enabled 2025/05/01 07:14:04 fault injection: enabled 2025/05/01 07:14:04 leak checking: enabled 2025/05/01 07:14:04 net packet injection: enabled 2025/05/01 07:14:04 net device setup: enabled 2025/05/01 07:14:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/01 07:14:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/01 07:14:04 USB emulation: enabled 2025/05/01 07:14:04 hci packet injection: enabled 2025/05/01 07:14:04 wifi device emulation: enabled 2025/05/01 07:14:04 802.15.4 emulation: enabled 2025/05/01 07:14:04 fetching corpus: 0, signal 0/0 (executing program) 2025/05/01 07:14:06 starting 8 fuzzer processes 07:14:06 executing program 0: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "6015bba65b344ab8", "511fe73537e73c3b564bed0f8bcea0f2", "68391e9c", "25d8c863b4d79ae4"}, 0x28) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000040)=""/63, &(0x7f0000000080)=0x3f) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x154, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff76e9}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6eb4fc48}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffff6be3, @local, 0x2}}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000080}, 0x2800) r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x40, 0x40000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xc7, 0x9, 0x6d0e}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000440)={0xd4, 0x5, 0x6, "57b79a5ef229729a9dbb74d4f3bc786ed01891b5a75233f5b2b082c0a96dc0d1c4d29cbb28928a25744ac74081d25d703942e24531fa18050228823e3388b07215c9b0f4100eb0cf4758825a41bc3f3615b726b9869885fbef8195ba7e412eee904d20181d77e3b0ae26636e4c129021d7cfab2cd92769b3656687bd317d0dd941c87259753a30458f8e71167a3615920c579d14162c4a5826a76badc909d9cd50009701414bf8a27b23fbf04398e61e3cb84a11e78be6f521e4def0651334bdd880a38d129c8faac2b2230e164b5e8eb6d416db"}) prctl$PR_GET_NO_NEW_PRIVS(0x27) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), r1) r2 = fsmount(r0, 0x1, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000580)={0x0, 0x6, [0xffffffffffff2471, 0xf9, 0x184, 0x7fffffff, 0x0, 0x7fffffff]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000007c0)={{r2}, r3, 0x4, @unused=[0x1, 0x5c6, 0x4, 0xe1], @subvolid=0x5}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000017c0), 0x440000, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x50, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048a0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x80}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x24000090) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x114, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x646}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2b78}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5dec}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 07:14:06 executing program 1: stat(&(0x7f0000000000)='\x00', &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000180)={'trans=virtio,', {[{@version_L}, {@loose}, {@loose}, {@cache_none}, {@cachetag}, {@cache_mmap}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@audit}]}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00') mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10000, &(0x7f0000000380)={'trans=unix,', {[{@uname={'uname', 0x3d, ')(\x99+@-'}}, {@version_u}, {@access_any}, {@afid={'afid', 0x3d, 0xfffffffffffffffb}}, {@cache_fscache}, {@fscache}, {@debug={'debug', 0x3d, 0xffffffffffffff81}}, {@nodevmap}, {@uname={'uname', 0x3d, 'FILE_CHECK'}}, {@privport}], [{@pcr={'pcr', 0x3d, 0xf}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x33, 0x33, 0x33, 0x34, 0x33, 0x39, 0x32], 0x2d, [0x63, 0x65, 0x1d, 0x32], 0x2d, [0x37, 0x34, 0x35, 0x34], 0x2d, [0x61, 0x33, 0x37, 0x34], 0x2d, [0x36, 0x38, 0x36, 0x39, 0x35, 0x66, 0x57, 0x65]}}}]}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x44) setxattr$security_capability(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)=@v1={0x1000000, [{0x8000, 0xfffffff7}]}, 0xc, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x100, 0x70bd2c, 0x200, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200060c0}, 0x844) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf00}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x44}}, 0x200c1050) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000980), &(0x7f00000009c0)=0xc) r6 = dup2(r0, r5) faccessat2(r6, &(0x7f0000000a00)='./file0\x00', 0xc0, 0x300) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r7, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa01, 0x53}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000050) r8 = socket(0x15, 0x80e, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff8181}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6024}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x800) 07:14:06 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)="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", 0xfa, 0x80000000}, {&(0x7f0000000180)="f5b6cf3b35b8d818c1a34a533d51d1673299cc654e435df6fea00b3dc2bfedf5bb4991ca1ae7429adeb3d58bf2e6140cd0131ba48d7bb784e7c61f96e1a183fef09883af8080cb876a27feb4845d560762ba42f3f965c512fa6fc2dd7915", 0x5e, 0xffffffff}, {&(0x7f0000000200)="d5038158a9add0fe7893447ec667e93b7d70271f261595e21ede45177e00b94da3c690cb22d30a804a4953e560fa4fe00b81203cc14f5d4d7fa1f67ff6a462440d04d646c50f08dacc26ee2762d8ff988f529b7a075439fd61dd55da42c8b2e7479d8aa11d55dad227c545fdac732b3f306def7bd990d3144b14512fda8733840302284eddda15a1d4433f81889659c73f6dbde30288db7c0591452424150cc8aa7c2ded17bef2416f784e83f8e38faf0416b604a9172b5cc17005456e55164fc8b3a444d0", 0xc5}, {&(0x7f0000000300)="5923a250cca07c07651859d2baf24da1af57d4d9187f2d888ff7aed6a5f4d67ccdbb86fe74188001f9dd551459c524c6075635eda708d32464f046bc4ea8ef2ad90d942e57deebb7f81769a83b4ca3f2f77cf3050bb72b701d5980e9365928f46f13b0add96c1f07d4862975281339b5040f6a131ad7", 0x76, 0x3}], 0x401, &(0x7f0000000400)={[{@fat=@flush}, {@nodots}, {@fat=@uid}, {@nodots}, {@nodots}, {@nodots}], [{@fsname={'fsname', 0x3d, '\xa8$&}#+*/'}}, {@dont_appraise}, {@smackfsroot={'smackfsroot', 0x3d, '\xda!$%'}}, {@fowner_eq}]}) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000540)={[0x1000000]}, 0x8) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x320410}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}}, 0x8090) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f00000006c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {r1, r2}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000740)=0x2, 0x4) r5 = syz_mount_image$tmpfs(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x7f, 0x0, &(0x7f0000000800), 0x10, &(0x7f0000000840)={[{@mode={'mode', 0x3d, 0xc28}}, {@huge_always}, {@mode={'mode', 0x3d, 0x2}}, {@nr_inodes={'nr_inodes', 0x3d, [0x0, 0x30, 0x65, 0x37]}}, {@size={'size', 0x3d, [0x65, 0x30, 0x33, 0x25, 0x31, 0x38]}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x37, 0x34, 0x37, 0x30, 0x35, 0x6e, 0x31], 0x2d, [0x62, 0x39, 0x30, 0x37], 0x2d, [0x62, 0x32, 0x35, 0x33], 0x2d, [0x65, 0x23471d436b6c870a, 0x32, 0x30], 0x2d, [0x6e, 0x65, 0x66, 0x65, 0x37, 0x63, 0x64, 0x65]}}}]}) r6 = openat$incfs(r5, &(0x7f0000000900)='.pending_reads\x00', 0x402, 0x1) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x14}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4094}, 0x80) timerfd_create(0x3, 0x800) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, 0x3, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8eeb}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x798}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x41}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/power/pm_test', 0x80040, 0x28) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000cc0)={&(0x7f0000000c00)=""/191, 0xbf}) ioctl$SG_GET_SCSI_ID(r7, 0x2276, &(0x7f0000000d00)) ioctl$FICLONE(r4, 0x40049409, r4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000d40)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0xc1) getpeername(r7, &(0x7f0000000f40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000fc0)=0x80) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000001000), &(0x7f0000001040)=0x4) 07:14:06 executing program 3: r0 = socket$inet6(0xa, 0xa, 0x3) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) recvmmsg(r0, &(0x7f0000001340)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/38, 0x26}, {&(0x7f0000001180)=""/195, 0xc3}], 0x4, &(0x7f00000012c0)=""/87, 0x57}, 0xffff}], 0x1, 0x20, &(0x7f0000001380)={0x0, 0x989680}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000013c0)={0x7, 'batadv_slave_1\x00', {0x1}, 0x3}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001400)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000001440)) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000001480)=0x4b0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000001500)=0x5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x8855) fsetxattr$security_ima(r0, &(0x7f0000001680), &(0x7f00000016c0)=@v1={0x2, "539b14a69146633cfeecabb5b51e150a751ad950"}, 0x15, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001700)={{0x1, 0x1, 0x18, r5, {0x86cf}}, './file0/file0\x00'}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000001740)=0x7) syz_genetlink_get_family_id$ipvs(&(0x7f0000001780), r5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001840)={0xe4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2f23}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008060}, 0x8040) epoll_pwait2(r6, &(0x7f00000019c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8) [ 118.403816] audit: type=1400 audit(1746083646.267:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:14:06 executing program 4: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x306, @broadcast}, 0x60, {0x2, 0x4e23, @multicast1}, 'geneve0\x00'}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="d09750c913fcecf0132f1029cccaa484cf11fb9d42e1f3da6f5876a2858ce5efb2c2efbe17c6f237e058b9fe92f634b724bec6457a9dba665b0dd7fac09d15db463d5dea66efb06afef17fcd677656f08038892ee8c8c3baca76780caa8eec687b95d48e2cbb3d50dfb08484f4f3830f3305f738c9f1243818b1cc2055558b90bae260a4c5ca916aa127492b37c8536d990b941bebdf929190", 0x99) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x80000000, 0x1, 0x5, 0xfff, 0x33}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a8, r1, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x4e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x240}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd794}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x372}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffc00}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x74c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x53}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x54}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x306}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40854}, 0x40000010) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x9, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24048002) getsockname$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, &(0x7f0000000600)=0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x190, r3, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a94cdf53c95208f5bd85f84d7e7368ec229cc87ab53c6bfe0e14cff73f5fb88e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "223b749fa7e7a4df"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "881a16da5c5d2826"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d4cd208f9cf64c65"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="713ce980c00273ba63b274549c192c58"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc00000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "02e9412612422b31"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="80afd0f8c135481feeafc80cfbce1dc5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="25c5b18e1fe6a849b5dbb7c6870a5224"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="55caafcfeaf910380da381720154e2d8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "779d45dd60c45fcc"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3fd6867451fa5c05ebce24b42cb23f92"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ac0d5463d269e2aa02e74bf3c66678277c4e204ad0c03950a48b3481a361b8c2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6865c98f5ece8aec85db1b99c786a278"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cd52697760b4b0e5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d032065802bb7fb880926e3c79ff68baa030890062e78ca958f60eaaa7157f42"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "980287d6f3174985"}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x20400d4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000940)={0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x92}]}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x110, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5090}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000bc0)) r5 = accept(0xffffffffffffffff, &(0x7f0000000c00)=@nfc_llcp, &(0x7f0000000c80)=0x80) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r6, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44041}, 0x800) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000e00)={'macvlan0\x00', {0x2, 0x0, @remote}}) 07:14:06 executing program 5: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x128, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44012}, 0x200000c0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0xd, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000844}, 0x4000) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r0, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x24004050) r1 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="0438547166209e2aadb3d375f677ec40cbf18d0f7c80d1610e1d714e361e99faa34f1469498ef3d6571f2b0610dcb8dd8833e1f6612608c8b5cb328c2bf149fe85cd8b72696add0516b2680b2c18948d88e9038cc013c152838372ca9fba21275b74b45ef6fa7838db17bdc8e161872703241d38599ff9a36dc9507436cd79285b9d5fb63d111366dea18a7388a386504e734af160eb5c7991bea8f12924133f0bf14a3b5c11628eea2b25272d6c0090ea0e7ad6b3085fed8f46710b520cb25337134803d20c0633c7dd7aad2dc69d9d1f1afffc", 0xd4, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f00000006c0)="333166bbac00de97256534531777d7fdf79516ec67003ded1473e33e8d236325cac8daa021f62922ee9ee00e5db1a9634f766d421a41fa60451297f7ef7f10cc744653a0fca300d34ba870c2ac65845ed7d66a4d3f2c313ecb5dfb1ddb2ed4dbeb4201d81c42f8dc0c9fcc4d5779241a0ca71952b7d0f9a4afafabea174dc1c4aa56236186cb3d76d19675871aa1b156e52eb14857535faf774653b841ce62e1db210da420", 0xa5) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x8824) r2 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x900, 0x2) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000008c0)=0x2, 0x4) recvmsg$unix(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/146, 0x92}, {&(0x7f00000009c0)=""/254, 0xfe}, {&(0x7f0000000ac0)=""/225, 0xe1}, {&(0x7f0000000bc0)=""/99, 0x63}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/184, 0xb8}], 0x7, &(0x7f0000002d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0x141) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000030c0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003080)={&(0x7f0000002f40)={0x10c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x38}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4001) r8 = accept4(r2, 0x0, &(0x7f0000003100), 0x80c00) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003200)={'ip6gre0\x00', &(0x7f0000003180)={'ip6_vti0\x00', 0x0, 0x29, 0xa3, 0x7f, 0x7fffffff, 0x8, @local, @remote, 0x700, 0x700, 0x6, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000003380)={'syztnl0\x00', &(0x7f0000003300)={'ip6gre0\x00', 0x0, 0x2f, 0x37, 0x8a, 0x0, 0x4, @private2, @mcast2, 0x40, 0x8000, 0x5414, 0x76}}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000033c0)={@mcast2, 0x0}, &(0x7f0000003400)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000003640)={@loopback, 0x0}, &(0x7f0000003680)=0x14) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000036c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f00000037c0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000003940)={'syztnl0\x00', &(0x7f00000038c0)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x80000001, 0xae8, {{0xd, 0x4, 0x2, 0x4, 0x34, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x1b, 0x43, [@private=0xa010100, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000003cc0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003ac0)={0x1a0, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 07:14:06 executing program 6: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffff9c, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x4, @desc2}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) getdents64(r0, &(0x7f0000000080)=""/86, 0x56) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000140)=0xd37e) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4000800) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x11c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x82}, 0x4000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000005c0)=0x81) poll(&(0x7f0000000600)=[{r0, 0x8000}], 0x1, 0xf0e) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000640)="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") r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000740), 0x240002, 0x0) fcntl$setflags(r5, 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000840)) 07:14:06 executing program 7: recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/216, 0xd8, 0x2000, 0x0, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x3000000, &(0x7f00000001c0)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x5}}, {@noextend}], [{@obj_type={'obj_type', 0x3d, '\''}}]}}) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x0, 0xea60}}) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100}, 0x8) r1 = io_uring_setup(0x48c1, &(0x7f0000000380)={0x0, 0x845f, 0x8, 0x0, 0x93}) r2 = openat$cgroup_ro(r0, &(0x7f0000000400)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$sock_void(r3, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000480)) openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2cc8}}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) futimesat(r3, &(0x7f0000000580)='./file0\x00', &(0x7f0000000640)={{r4, r5/1000+60000}, {r6, r7/1000+10000}}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000007c0)={'nat\x00', 0x0, 0x3, 0xf9, [0xb8bf, 0xffffffffffffffff, 0x10001, 0x4, 0x9, 0x1], 0x1, &(0x7f0000000680)=[{}], &(0x7f00000006c0)=""/249}, &(0x7f0000000840)=0x78) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="92a396d6693a"}]}, 0x34}}, 0x4000890) [ 119.773260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.774774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.776210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.779745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.781701] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.826318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.827629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.828730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.831365] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.832945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.865428] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.869494] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.873930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.885615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.890495] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.938479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.943463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.945210] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.950329] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.954250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.956009] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.966708] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.969400] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.973510] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.978207] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.981444] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.983772] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.986028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.988940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.991332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.000764] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.006496] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 120.010559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.019590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.040807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.060202] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.061541] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.067440] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.103179] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.127418] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.801841] Bluetooth: hci0: command tx timeout [ 121.864989] Bluetooth: hci1: command tx timeout [ 121.929001] Bluetooth: hci2: command tx timeout [ 122.057193] Bluetooth: hci3: command tx timeout [ 122.120964] Bluetooth: hci6: command tx timeout [ 122.121655] Bluetooth: hci5: command tx timeout [ 122.185175] Bluetooth: hci4: command tx timeout [ 122.249021] Bluetooth: hci7: command tx timeout [ 123.848946] Bluetooth: hci0: command tx timeout [ 123.914888] Bluetooth: hci1: command tx timeout [ 123.978263] Bluetooth: hci2: command tx timeout [ 124.104938] Bluetooth: hci3: command tx timeout [ 124.170147] Bluetooth: hci5: command tx timeout [ 124.170562] Bluetooth: hci6: command tx timeout [ 124.234036] Bluetooth: hci4: command tx timeout [ 124.298896] Bluetooth: hci7: command tx timeout [ 125.897409] Bluetooth: hci0: command tx timeout [ 125.961516] Bluetooth: hci1: command tx timeout [ 126.025115] Bluetooth: hci2: command tx timeout [ 126.153092] Bluetooth: hci3: command tx timeout [ 126.218127] Bluetooth: hci6: command tx timeout [ 126.218567] Bluetooth: hci5: command tx timeout [ 126.281202] Bluetooth: hci4: command tx timeout [ 126.345304] Bluetooth: hci7: command tx timeout [ 127.946899] Bluetooth: hci0: command tx timeout [ 128.008954] Bluetooth: hci1: command tx timeout [ 128.072945] Bluetooth: hci2: command tx timeout [ 128.201164] Bluetooth: hci3: command tx timeout [ 128.265028] Bluetooth: hci6: command tx timeout [ 128.265439] Bluetooth: hci5: command tx timeout [ 128.328945] Bluetooth: hci4: command tx timeout [ 128.392972] Bluetooth: hci7: command tx timeout [ 179.752714] syz-executor.3 (295) used greatest stack depth: 25224 bytes left [ 179.873694] syz-executor.0 (292) used greatest stack depth: 25168 bytes left [ 180.090708] syz-executor.6 (293) used greatest stack depth: 25128 bytes left [ 180.144316] syz-executor.7 (294) used greatest stack depth: 24680 bytes left [ 182.366166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.370621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.371782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.373709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.374332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.378600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.381203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.385409] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.387407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.394098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.441314] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.453053] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.461750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.465643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.476267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.552971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.567018] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.571563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.584630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.601696] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.740581] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.741947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.756643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.761366] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.765410] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.767626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.772819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.778561] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.791015] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.796091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.806767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.812026] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.817301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.891384] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 182.893117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.898386] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 182.907344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.915916] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 182.960634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 182.975763] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.457944] Bluetooth: hci1: command tx timeout [ 184.458005] Bluetooth: hci0: command tx timeout [ 184.521080] Bluetooth: hci2: command tx timeout [ 184.713052] Bluetooth: hci3: command tx timeout [ 184.840972] Bluetooth: hci6: command tx timeout [ 184.905218] Bluetooth: hci5: command tx timeout [ 184.969204] Bluetooth: hci4: command tx timeout [ 185.032942] Bluetooth: hci7: command tx timeout [ 186.504998] Bluetooth: hci1: command tx timeout [ 186.505510] Bluetooth: hci0: command tx timeout [ 186.569953] Bluetooth: hci2: command tx timeout [ 186.761240] Bluetooth: hci3: command tx timeout [ 186.889295] Bluetooth: hci6: command tx timeout [ 186.953141] Bluetooth: hci5: command tx timeout [ 187.017007] Bluetooth: hci4: command tx timeout [ 187.081972] Bluetooth: hci7: command tx timeout [ 188.553906] Bluetooth: hci0: command tx timeout [ 188.554035] Bluetooth: hci1: command tx timeout [ 188.617373] Bluetooth: hci2: command tx timeout [ 188.810930] Bluetooth: hci3: command tx timeout [ 188.938675] Bluetooth: hci6: command tx timeout [ 189.002256] Bluetooth: hci5: command tx timeout [ 189.064946] Bluetooth: hci4: command tx timeout [ 189.130909] Bluetooth: hci7: command tx timeout [ 190.601000] Bluetooth: hci0: command tx timeout [ 190.601018] Bluetooth: hci1: command tx timeout [ 190.664983] Bluetooth: hci2: command tx timeout [ 190.856951] Bluetooth: hci3: command tx timeout [ 190.986929] Bluetooth: hci6: command tx timeout [ 191.051126] Bluetooth: hci5: command tx timeout [ 191.113095] Bluetooth: hci4: command tx timeout [ 191.176946] Bluetooth: hci7: command tx timeout [ 244.639024] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.644135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.646815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.657605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.662246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.786489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.790309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.793346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.797608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.805452] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.809654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.813592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.816052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.824501] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.846551] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.877743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.894554] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.923403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.946982] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.952417] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.959249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.959676] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.964284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.968658] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.974913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.978120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.981027] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.996338] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.006456] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.007789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.016351] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.024417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 245.033206] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.037367] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.054158] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 245.069058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.072604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.086434] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.094051] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.097227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.730956] Bluetooth: hci0: command tx timeout [ 246.921180] Bluetooth: hci1: command tx timeout [ 246.922252] Bluetooth: hci2: command tx timeout [ 247.049013] Bluetooth: hci3: command tx timeout [ 247.113206] Bluetooth: hci6: command tx timeout [ 247.176979] Bluetooth: hci7: command tx timeout [ 247.177598] Bluetooth: hci5: command tx timeout [ 247.240954] Bluetooth: hci4: command tx timeout [ 248.777186] Bluetooth: hci0: command tx timeout [ 248.971100] Bluetooth: hci1: command tx timeout [ 248.971562] Bluetooth: hci2: command tx timeout [ 249.096938] Bluetooth: hci3: command tx timeout [ 249.161150] Bluetooth: hci6: command tx timeout [ 249.226898] Bluetooth: hci5: command tx timeout [ 249.227342] Bluetooth: hci7: command tx timeout [ 249.288944] Bluetooth: hci4: command tx timeout [ 250.825632] Bluetooth: hci0: command tx timeout [ 251.017150] Bluetooth: hci2: command tx timeout [ 251.017610] Bluetooth: hci1: command tx timeout [ 251.145135] Bluetooth: hci3: command tx timeout [ 251.208959] Bluetooth: hci6: command tx timeout [ 251.273083] Bluetooth: hci5: command tx timeout [ 251.273544] Bluetooth: hci7: command tx timeout [ 251.337265] Bluetooth: hci4: command tx timeout [ 252.872926] Bluetooth: hci0: command tx timeout [ 253.065168] Bluetooth: hci1: command tx timeout [ 253.065649] Bluetooth: hci2: command tx timeout [ 253.192922] Bluetooth: hci3: command tx timeout [ 253.257435] Bluetooth: hci6: command tx timeout [ 253.322118] Bluetooth: hci7: command tx timeout [ 253.322554] Bluetooth: hci5: command tx timeout [ 253.384948] Bluetooth: hci4: command tx timeout [ 307.105930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.110239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.114449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.126154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.129807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.168664] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.173353] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.178689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.188309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.192622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.236461] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.242501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.251545] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.259783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.265232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.518980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.527796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.530490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.563526] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.564255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.565409] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.600373] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.600835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.604157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.612500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.616174] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.618411] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.634453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.639502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.674393] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.879983] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.885066] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.888620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.925783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.980900] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.656052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.676398] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.710344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.752000] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.785999] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.193966] Bluetooth: hci0: command tx timeout [ 309.257419] Bluetooth: hci1: command tx timeout [ 309.385020] Bluetooth: hci2: command tx timeout [ 309.769011] Bluetooth: hci4: command tx timeout [ 309.897218] Bluetooth: hci3: command tx timeout [ 309.960952] Bluetooth: hci5: command tx timeout [ 310.410924] Bluetooth: hci6: command tx timeout [ 310.857236] Bluetooth: hci7: command tx timeout [ 311.241944] Bluetooth: hci0: command tx timeout [ 311.306226] Bluetooth: hci1: command tx timeout [ 311.433992] Bluetooth: hci2: command tx timeout [ 311.818903] Bluetooth: hci4: command tx timeout [ 311.945003] Bluetooth: hci3: command tx timeout [ 312.008981] Bluetooth: hci5: command tx timeout [ 312.456951] Bluetooth: hci6: command tx timeout [ 312.907060] Bluetooth: hci7: command tx timeout [ 313.289053] Bluetooth: hci0: command tx timeout [ 313.353108] Bluetooth: hci1: command tx timeout [ 313.482261] Bluetooth: hci2: command tx timeout [ 313.865171] Bluetooth: hci4: command tx timeout [ 313.993939] Bluetooth: hci3: command tx timeout [ 314.057331] Bluetooth: hci5: command tx timeout [ 314.505253] Bluetooth: hci6: command tx timeout [ 314.953245] Bluetooth: hci7: command tx timeout [ 315.337916] Bluetooth: hci0: command tx timeout [ 315.402732] Bluetooth: hci1: command tx timeout [ 315.529943] Bluetooth: hci2: command tx timeout [ 315.914887] Bluetooth: hci4: command tx timeout [ 316.040961] Bluetooth: hci3: command tx timeout [ 316.106936] Bluetooth: hci5: command tx timeout [ 316.554890] Bluetooth: hci6: command tx timeout [ 317.000965] Bluetooth: hci7: command tx timeout [ 369.375838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.384661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.392815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.407041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.419812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.503932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.533741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.541518] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.549448] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.557480] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.734508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.736642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.743273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.747460] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.753274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.757469] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.765343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.776595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.784624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.788169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.879545] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.895986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.901186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.918410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.926546] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.091210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.099809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.105367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.122578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.130771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.236333] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 370.243463] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 370.263368] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 370.269014] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 370.279289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 370.381585] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.391366] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.398302] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.467407] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.495312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.465163] Bluetooth: hci0: command tx timeout [ 371.657191] Bluetooth: hci1: command tx timeout [ 371.912974] Bluetooth: hci2: command tx timeout [ 371.913743] Bluetooth: hci3: command tx timeout [ 372.041075] Bluetooth: hci4: command tx timeout [ 372.297200] Bluetooth: hci5: command tx timeout [ 372.362018] Bluetooth: hci7: command tx timeout [ 372.617168] Bluetooth: hci6: command tx timeout [ 373.513919] Bluetooth: hci0: command tx timeout [ 373.705934] Bluetooth: hci1: command tx timeout [ 373.961941] Bluetooth: hci2: command tx timeout [ 373.962433] Bluetooth: hci3: command tx timeout [ 374.088919] Bluetooth: hci4: command tx timeout [ 374.345326] Bluetooth: hci5: command tx timeout [ 374.409295] Bluetooth: hci7: command tx timeout [ 374.665428] Bluetooth: hci6: command tx timeout [ 375.561903] Bluetooth: hci0: command tx timeout [ 375.752933] Bluetooth: hci1: command tx timeout [ 376.009137] Bluetooth: hci3: command tx timeout [ 376.009651] Bluetooth: hci2: command tx timeout [ 376.136982] Bluetooth: hci4: command tx timeout [ 376.392979] Bluetooth: hci5: command tx timeout [ 376.457016] Bluetooth: hci7: command tx timeout [ 376.712930] Bluetooth: hci6: command tx timeout [ 377.608933] Bluetooth: hci0: command tx timeout [ 377.800919] Bluetooth: hci1: command tx timeout [ 378.057933] Bluetooth: hci2: command tx timeout [ 378.058415] Bluetooth: hci3: command tx timeout [ 378.184951] Bluetooth: hci4: command tx timeout [ 378.440999] Bluetooth: hci5: command tx timeout [ 378.504920] Bluetooth: hci7: command tx timeout [ 378.760955] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:19:07 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888016b2fba8 RCX=ffffffff867b34fe RDX=1ffff11002d65f20 RSI=0000000000000000 RDI=ffff888016b2f900 RBP=ffff888016b2f950 RSP=ffff888016b2f888 R8 =ffffffff867b3502 R9 =ffff888016b2f938 R10=000000000003b145 R11=0000000000007ce9 R12=ffff888016b2f958 R13=ffff888016b2f940 R14=ffff888016b2fba8 R15=ffff888016b2f8f8 RIP=ffffffff81351fbc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5647000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb9e662f260 CR3=000000002cdc2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888033d87a60 RCX=ffffffff86785a84 RDX=ffff888033d88001 RSI=0000000000000001 RDI=ffff88806cf08a88 RBP=ffff888033d80000 RSP=ffff88806cf08a08 R8 =ffffffff86785a88 R9 =0000000000000001 R10=000000000003b145 R11=000000000000031f R12=ffff888033d87901 R13=ffff88806cf08ac0 R14=ffff888033d879b8 R15=ffff88806cf08a78 RIP=ffffffff81350bae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa2fe4ef540 00000000 00000000 GS =0000 ffff8880e5747000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b009bfe4c8 CR3=000000002bc82000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000