Warning: Permanently added '[localhost]:21704' (ECDSA) to the list of known hosts. 2025/05/01 11:58:25 fuzzer started 2025/05/01 11:58:25 dialing manager at localhost:43767 syzkaller login: [ 98.658166] cgroup: Unknown subsys name 'net' [ 98.802116] cgroup: Unknown subsys name 'cpuset' [ 98.884330] cgroup: Unknown subsys name 'rlimit' 2025/05/01 11:58:47 syscalls: 2214 2025/05/01 11:58:47 code coverage: enabled 2025/05/01 11:58:47 comparison tracing: enabled 2025/05/01 11:58:47 extra coverage: enabled 2025/05/01 11:58:47 setuid sandbox: enabled 2025/05/01 11:58:47 namespace sandbox: enabled 2025/05/01 11:58:47 Android sandbox: enabled 2025/05/01 11:58:47 fault injection: enabled 2025/05/01 11:58:47 leak checking: enabled 2025/05/01 11:58:47 net packet injection: enabled 2025/05/01 11:58:47 net device setup: enabled 2025/05/01 11:58:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/01 11:58:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/01 11:58:47 USB emulation: enabled 2025/05/01 11:58:47 hci packet injection: enabled 2025/05/01 11:58:47 wifi device emulation: enabled 2025/05/01 11:58:47 802.15.4 emulation: enabled 2025/05/01 11:58:47 fetching corpus: 0, signal 0/0 (executing program) 2025/05/01 11:58:49 starting 8 fuzzer processes 11:58:49 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20008080) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x24}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x48800) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x10100, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4a7}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xf41}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004010) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0xd20, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x3172}}, './file0\x00'}) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x138, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe675, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x31}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe595}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x58d}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4005}, 0x24008000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3315945602584b86}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8824897cb0332432}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200000, {0xf61, 0x1, 0x6, 0x100}}}, @NL80211_ATTR_PBSS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000a00)={0x1}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x2c}}, 0x24000001) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r0, 0xc5f696343ad1c89, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000030}, 0x2008840) pidfd_getfd(r3, r3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r1) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r5, 0x8, 0x10000, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x103e}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}}, 0x48850) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x44}}, 0x4000000) 11:58:49 executing program 1: r0 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r0) r1 = getgid() mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x5d1257cb6d80439d, &(0x7f00000000c0)={'trans=virtio,', {[{@access_client}, {@version_L}, {@access_uid={'access', 0x3d, 0xee00}}, {@mmap}, {@cache_mmap}], [{@fowner_gt={'fowner>', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xb4}}]}}) r2 = epoll_create1(0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x8001) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000600)=""/212, 0xd4}], 0x2, &(0x7f0000000740)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/66, 0x42}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/57, 0x39}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/44, 0x2c}, {&(0x7f0000000c40)=""/186, 0xba}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000ec0)=""/206, 0xce}, {&(0x7f0000000fc0)=""/28, 0x1c}, {&(0x7f0000001000)=""/53, 0x35}, {&(0x7f0000001040)=""/99, 0x63}, {&(0x7f00000010c0)=""/81, 0x51}], 0x5, &(0x7f00000011c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f0000001300)=""/203, 0xcb}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/132, 0x84}, {&(0x7f00000024c0)=""/84, 0x54}, {&(0x7f0000002540)=""/200, 0xc8}], 0x5}}], 0x5, 0x10101, &(0x7f0000002800)={0x0, 0x989680}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0, 0x0}, &(0x7f0000002880)=0xc) r13 = gettid() lstat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000002980)='./file0\x00', 0x4000, 0x20, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000200)="484fe78c0ac54a53f9e034fded3fb70164f3f88075f4d901c4044011597282705a7af32d83757ce8db081b9ec73785a2", 0x30}, {&(0x7f0000000240)="2b35c5b3d409b71b532166c5836747c6fc0b74637713cad3bbb3f8744dd21458abf18eaad44c5195920d0f990442dbb17bdfe9faefcaf46b884531759fe9538801df0b86757b476018f2f543df70310eb80d383d7be7b4efb4158f32755e573a36a6e0bcbeb1c81f39f438cfac05e969537165df2c283ad38adeefd51cd44d3c798b768f", 0x84}, {&(0x7f0000000300)="9113a5d93ccdbbf36500376626d63e9e49a8d767e2cded7e5429f6bf6c3e09a7c6d5f0413e7858e54eb0ff1a0c223e28a1e12a500a05c4a215d75a5a4a74323558", 0x41}], 0x3, &(0x7f0000002ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0xd8, 0x4}, 0x4000801) r16 = open_tree(r11, &(0x7f0000002c00)='./file0\x00', 0x1001) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002cc0)={'syztnl0\x00', &(0x7f0000002c40)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0xffffffff, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x80, 0x7, 0xfffffc00, 0xf8000}}) setsockopt$inet6_IPV6_PKTINFO(r16, 0x29, 0x32, &(0x7f0000002d00)={@mcast1, r17}, 0x14) fcntl$addseals(r6, 0x409, 0x6) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r9, 0x3309) sendmsg$NL80211_CMD_LEAVE_OCB(r10, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x880) [ 122.114238] audit: type=1400 audit(1746100729.488:7): avc: denied { execmem } for pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:58:49 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '[\']'}, {0x20, '!#\\'}, {}, {0x20, '(){*^'}, {0x20, '::\xb4-){#\''}, {0x20, '\''}, {}, {}], 0xa, "5fddd4dc67924d1d973aa4a5fecc65a1e160f603388fa47a1d1a2a49430f7aa3b24fea83b4"}, 0x4c) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x220, 0x13, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2a, 0x0, 0x1f, 0x9, {0x4e20, 0x4e23, [0x2, 0x4, 0x8], [0xffffffff, 0xfffffffa, 0x3fe, 0x200], 0x0, [0x9, 0x2]}, 0x27a, 0x3ff}, [@INET_DIAG_REQ_BYTECODE={0x79, 0x1, "896fb2ed6b3753dc64ee79bf61b042b7b44151719453d4c4770cdc3761fd71235ed96540a57fff41a3a96a7991972769d493cba0e070781abc861e34651e07ade6a57a369f069320b8b8a99b7c1c8a3dc0e8ce6d381363f10435655dcb9fbf0cfafb488865e75920a5af3af306d7b452af80bd4a87"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "e40b5868caef901e814a6858c94d2737de62d58839cac1678bd9df98ad85e23ff82f8bc1d50ab5ae71de8f660ce219de4e2df3c2c7f941882b0466df2f2e342ef2d1aadc851e5818d621e50f152e88ed8ce521"}]}, 0x220}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000480)={0x7, 0x7fff, 0x4, 0x4, 0x7, "a974d95a2e66ef34ac12e0895c759124c45dde", 0x1ff, 0x4}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x6a0200, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000015c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096, 0x1000, 0x0, &(0x7f0000001500)=""/143, 0x8f}, &(0x7f0000001600)=0x40) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000001640)) statfs(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)=""/111) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000001740)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001780), 0x4000, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000017c0)={0x80, 0xb5a5, 0xfffffffd, 0x200, 0x5, "fa985157205f5c836d4caaa478edc2d5d0949b"}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000001800)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001880)="10d07d5305d4376f7e5905a1eb12b2bf", 0x10) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f00000018c0)) open_tree(r2, &(0x7f0000001900)='./file0\x00', 0x108901) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0x98, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x13}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 11:58:49 executing program 2: ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000000000)) ioctl$CDROM_MEDIA_CHANGED(0xffffffffffffffff, 0x5325, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x200000a0}, 0x4020004) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f00000002c0)={0xb2, 0x62, 0x4, 0x8, 0x20, 0x5}) r2 = creat(&(0x7f0000000600)='./file0\x00', 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r3, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x13}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000014) ioctl$CDROMSEEK(r2, 0x5316, &(0x7f00000007c0)={0x7, 0x1b, 0x8, 0x7, 0xaa, 0x81}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x71}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = open(&(0x7f0000000980)='./file0\x00', 0x400, 0x8) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f00000009c0)=0x7) memfd_create(&(0x7f0000000a00)='mcast_rejoin_count\x00', 0x3) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x29}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) 11:58:49 executing program 4: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9a0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008014}, 0xc800) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000810}, 0x3ce456f397e3b60) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x54}, 0x44084) sendto$unix(r0, &(0x7f0000000480)="4dea1d2ef47e482cf2b10929918e1c7227240693856117b3ac17d988b3ae258ae98baaeeb1610470e47512c709bce19ce458d5898617d9ff9f044be3808241405f1642abe1061f2d109b560e35627c5111528df187c219de80fb5d6df8bf528fbf0af8d135a55843bf237b5dc51c16bfc08089b16c424361d3c967ab91c0805689032d397a52070f5c0e39093dd08ea3b95da270ecbffa927c85cb297982cf1736f565ca9a8d6165ec1309cef10a50f6be78adbbe05e2b788cf5d6f8b676ae4f4582874abeff6ae945d97de12e8c875efcf26bff2fb3bb35c0", 0xd9, 0x4000, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x400448dc, &(0x7f00000009c0)="cfe0fa4a277ea9") mount$cgroup2(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x20, &(0x7f0000000a80)={[{@subsystem='pids'}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r3, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1000, 0x39}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0xc005) bind(r2, &(0x7f0000000c80)=@xdp={0x2c, 0x8, 0x0, 0x33}, 0x80) sendto$inet6(r1, &(0x7f0000000d00)="6f2cc0fe88e72a4a4d0c5ffae0a7361ea34aa736e6d1410fe4ec748f842c1f022a965a5b37c3565e343cc27b2e56d2084802368c935010f8c501c301801b5f8dedd9ed64d5611a30707d96a4e92c7e8ba736fa2d1da7f6e60bd660a8bc4f9ab5d3edee54ab5296baa2d3359721d5efea6d2a0660d007323696c701dc00bd7e94b6dd6a7581a11f4e62476cd61eb05837679bcd0fdd8173fe55288990c220d073998448392bb89d08fc3c3b1f90a1afc0972a45b6b659b6092d75c042d6db52bd92bac6e098683f4f4aa549552b54a247945b353a58a51e6c94bdc674998567fc6386ad21f59d4c2dadc082355c61d2b8193cac2d6dba9e7b", 0xf8, 0x4000, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e00), 0x80002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000e40)={0x7fff, {{0xa, 0x4e22, 0x955, @loopback, 0x4ec}}, 0x1, 0x7, [{{0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}}, {{0xa, 0x4e23, 0x18, @mcast2, 0x6}}, {{0xa, 0x4e22, 0x7fff, @private1, 0x1b}}, {{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}}, {{0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {{0xa, 0x4e22, 0xfffffc01, @loopback, 0x6}}, {{0xa, 0x4e21, 0x5, @mcast1, 0x7f}}]}, 0x410) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xac, r3, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffa, 0x30}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7fff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x64, 0x5b, "5422eb2fbebaedf5dbb46cc2a673fc344117c0d74170eaa31ddf71aa4c2c42d3d1ab1c2fa6cf35e6133a99bf2a518e5ad9a80e548b6e9086596602898a523f54acf99cb113625667a08846c52651c4175b77429d8ed154b3a954d100ec0798ec"}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000001400)=0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001440)='veno\x00', 0x5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001480)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) readlinkat(r6, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)=""/96, 0x60) 11:58:49 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x1) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x1, 0x1, 0x1}}, 0x14) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000080)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001240)={0x3, &(0x7f00000011c0)=[{0x1, 0x1000, &(0x7f0000000100)="807d71cca5d5af89b44f14fd9b50d361939a2e112b97e91fbd2a2c84ff245b12f516d33d183fc4b07067937cae26f13a219ceb833feeeca92bfff91aa8e888ff235fa9fd1fa21258de0698eba277d1e3a4fc516d4a130629bb331530ca4239087e721d9fb43794da27585e4889f11568c22d2283286d1b7949d4934db7b9ef4b6525ed81da7bc6022530a318e5d82c25fb84ab2a0623a2936c770a8c24e2f7cc17b7c4e83996c9c781f85e54b85f00c0545214e5651068cb5e708b73dd85c8dd5673cd405b71171de556065950072b49a1537b4c9846377d8f337bc86a4cb504c47f78d49080120fd2e9fdd4be51c1091ec5e599c8c5c07224df5877d3342734ddbf7313e78dda2aeab6124a851468e8b4cfde302c94e1bd205f2bfc1518340848ace47f128cf4bcca1f8f199c09ee34868f80760503bd63c12e848343cfbdd317ab8fe99b9b6fe9cffe61ef6112e447ce287de089518c1d804496fe9300ddf7b69e11ac60e826723406a384eea9e4c98fadee1f2ce5802fbbd74abf25544fbb098432350021c307b72d29a2da4c399887255e77baa550e1b078b042c06c6dc0c6a7c8cba6b51a2fa0fa3a64ff9037966931cf7fb723b0776c326960594378dee5dfba8ecc011dd4138c98ff7ba7037a57f65440320c3b117f3732173d6ad8d0204d1e845bfc5f7a300ce95bec8bfd582ae230463525acb639d3ca10e953d3a8dca8cba2cfbbd28e0aec9bd46ad4a3820ef05e6cfd17cfd4dd8a39040174855a91d7f88551ab5c8584d33cb965134c0b3582451faea1a3fcde0a521104e9793b11649e4a4394b7bf050e82883c8b496843285459b14f37075d541f2c4626a665c53ff422b639da416c9441314f67627092e5b03c444908e49c608aa3a849bcdadf63ea075ff195f0964f54f8e6178e7158f4087123eccaef07b148d28b634c5df830237d1accfe2fe7486453b9915012bd171513deadded563b52b05a63998b50886d083b74cfdd7cfca7af3516fab3b0c0762e3fbe77a67a8a7d94fb96af3689f45782fbcf90e6142235018ef6a8fd455cb7824a8fe90cbf13b990e3de358150fefca6adcfeed2daf98278270ea1427fbf08e31b3388730ff955f795a32b1f9f6dc31b9dd1534b52ae3e48a0c2dbd26ae0c2391cc8929ecb8009ca6051b18108bad57d5a0c1b176e5dcdf1162c5f39701f7fe670f0306db9e5e8655bc64c02728b63c3be68c7922be6f9fa440af0e5b34a47021b797f6faa09891574a836faa1d7665c2c93906d2042c7a26ad977e42695fdaef0b1d54571e1bd398c8a3eaa61ce8dda30d93d699ed69a0aae46fab1a857610adcfa7ea7e737d47f854978907b1cec475fb051f13db06391aae8b022863f7a6fd69377bb8af1989a047a02ab5c03e3d6304bfee3295d149b49cf2027a8efdbd32d40ddabed9f36511845d2a567b1e961fdac22d30c62ca0999e7579c146de6f828d8d765a5f19f881c6e9c8f906b67f5a32d00c9bbc9895da205dac09ef4a1d63c51927b4ed5cfa21f4e4fedd74cc917f8d2c035af8a25b8832027343f2bbf48cfb4c77ea49afedc965356ecf40cd99cd22e29210c73a32f12a5fe6ce1787233953b66056adf774a019c509a0322d2ac1cc141c7bcedc51f76b968ea52d639613646d35e5dd563d7f1026d38fa607a91e83c2dc5966a1a31024110c2ecf70418ef3459b33ee0c95e7d08bd5715a7a98c6e6a9e85613b5af965fb6081bed610b09bf03e9bb7466aae2646a65e28c4eff05eeff271207041270b8d61283a9c8af6150ceaff6e3dda4d517e950fbaab27bd7ffd23cc2073e471ea3d570e76e903175ccb99890e5f23146d2372a8248176226ce8a644625da0c49f07224d40069997b41ad38b44296e74e4514c64b4e6879d95dd47a69d73d75ea8b84b953a9edf1397d1df7f59692b1996c8a188332bd25d18ae979278271325eb37a5d69bfcefe4d05a91292a627b38c23dc58ddab4940004e886b8b3a918181ced7ecb8ad56bef64af600d57b6a83561283a71953843836d515e31ac1bd68a04403bdd587a46eb9228a9e7ab7ecf65f74e43935e40bac281b6c6759a38db1d696dfe60a15ca9b505edda489efa50df91acf6125925324d442c5d6ede7ee8d577ae2adce41673e0a224256462dda9cdb13a27c2e6b876cbdf426689c5f84878845c303d571bb5f4a7ee951b0404f369cb52cdd21b632052c7aebcc74971f0ce0d1d55f8e7aee14cb5e4a431460af7b53ea1b27e5133ecd9d3a30e0cd868c4a8441488e55490b9b4ee63792535d3c4ffa47b6da3472400ccbfcab4ebe22362c4f0ee64b5e62a13fb25e0143d9407bf2f9477c73641f3e28311e1144cf2a3b02d4e9d0e54827c8ad061a753c58e835b37665ccb561843ed54c224d50f978d7f3b55985c69ad5471034824cff2ccaae86ced6b2d2fda22172919bb59b66b4e9dd21be5bb351bc0844ffde7bc31551172ecb9ba08019383f8b67647a587366409c7890a9748e882867884277abb444256d9d7d4d7253d6eb85c1cdff9bbde7d0eac1ec20d04b9ead165f02905a56a9f46c58131a345e500a8245f467406566f0e59652bd48ca83c13bc43063a740db4202704b36b7ebdc79f303ca855c4b18721f3329fc9ed0adc39f1d6cea26c3aa2a61626d91433907c5e39b2023fa9a91a55bf2cfb89e49c5a3b5d884953c33b1537cff8639699476c5c70e3dc34768b34dc4e26b6c5174ceb9b96adf56c68665128a47e8af1c34b1a1a20ada94df13965d1f3ffa1f205e4e757852691a43e68c297060407109f857fa189b1efc74829dfd0d3a48331c92cba16e773aae47418e687501fe17385e9afc0993884a07fea7d299fca288582d6ff636d55d644fd3dee996aefb38c3c712c15e3c9d25926c72acc6b2a13b22f9f844a4a84c6c7953aade305fa52655b5574bd631cc6ae9fde45bcb0337fa244929eb5ae02398f02f0a73e90065b4e3da1da7967e8a07508f2e689a7c53f805f9521a84164521cb8926b54d32d5a62b0a5819809444d487854832b3a6267167b4f56710628472d33ae9c841111eadd9547ccad02fc35109d453bd344ed4e6c7e4828b91265981d7a7172fa0affd925164b29b56f49abf234c12b096cb90770566404cef89416de83d50e55767f5d553929f5a4174feb7d9651cb8797f478cd06c9a97ad769c61d5b5fd8ff654b6bb983cd0f4d38c897f7d717d903c5fd2e35f602747032309c4a3ef335a48ffc958eadc6c44435823ae5ec8aad29ff034c1d2990e23f6e1899d515c1bf97a9c657439c51a6ad6405de8d32e3c88ffeebb597711bd9b4bb5ad8f803a15132667a3b7135d89b553be5a7b0c5670a6eb7aaad9436c02842fd8f535bb94b59c0618c9c64bdbe4d8dc5215e1deb35a11763a52a6f2cab86e7883249e2b307ab48ac6c05acfb8be77ad04c9c5d7392acf5e93cf66775c16b88f00936b91e417552e7f858cd2a35d768e5cabb5ccf01a3762caac9b63ff2851b8c3dec183cd777412035dd3b10c2b23e710ac3c087ae2acd7271f931e18355533c50a3aeb8ab999b700b9b020463162a6eb39e4ca8902c27162c1073066f58a5fb3e25006e28307d8250fee181002ca51deb7e9d83a4d5299431ee9b63852e597ad736794eaf11b32df613eba2a9327be14ddfd1fef5a2833c2d08106056789e210efa4296197b289fd06f3b7120ec62fd3ffb48d270dae0fc9effce58254bf8bb123aa4fea400755e7b26ea1562e61c0cdfe88a22e417b4ea853ecbf4420898028bf8f3588918a701c61a85c49158e9f44ee0d9c108c45b7c1c1e5a4f8a31957d09dbaf5e1ad14d0c348b3419504ad361a08e4fac04db1d182778a8525bee28dd47d773ff3a568693870d7a6bb18a9e5fd986547cc002a1a3874c588a6733b866c838076f14223bdf6d4f9e89ae30584f716130f3f48ede78be68194a3d1c288ff6c118be2b8a2716ff5126ce2014c7ff973069d199219d2689d1455595df253934c9f262920a4ba8f18717b5693935995654dcdb1a26a9b7a6b32aa54c2419e5b76b3b21d7f517dea7e68bed6f93a156c8f6c16a7f2d4125ce16654df5a11e93898a3a4c18155add921d9d951c69718ae5f8172f9bcdff78aa98407af7925424a6a50e5be27bc17b41c8cb2daaef6cade1092be721190792c75d9b91ae561434cd46e48b123b3ad5b79d4422dadf7d7b14ba9116588998e7a9d8b20431a33862c50c478b05d53c99b48c3666afd9a35a2b65c2a9a041ca3bcde63a15e2a912c0a9bc496c1808af1db93437d471d203f4f325abaa1c1a1b78d5d4c56fe5273061862a8f82694776c6d18b825f21a601e34b53901a6191b6d1e0b58119434ba105dbbf6d3148da51d303c4e21807c440300cf541909d5f8cbda23368ab0abc65964d050d7864a596a542a8c79dbb6682dd73f413db4dff1b33ef2aeceb46158eef8bc964f9aaecaf9224bfa7757a9abf0a12271ddf1141b98cbc2d8122b365e448b16f46c6315efbe59c864ae9bd738391f478a3f3fe75a7fe836229119639107b9833af455259a8e7f202debc7e11434420162955560337c9c575e5796ec39a8fb5c9a94516cde8041e83ee14ea4db0084b4f3f2ba2bacfc1d88080786f37ec3f432ebe5bb24753904653bacb6ecc9d61b1737d42207384cb2c0373c216074f1dd0a273c68b5916400409ee15aab888e0ffc5d6845d766f9e4f79ddee3d5a7349cabf52ca70e8353def5b1142a3e1ab7a8c302c3d43fa7de91f5c5f495bb03b1868146455b2d93eea0d40bd16eb630be7077df901f7432e551d6bf2f4b9d3f6899e9cb23f6575160a8515e91d000e05261fe59afe2b481339636a053d449fd3f3c40499afd95ceaab13d3d2fa5be90f3a9d8e3a50eceb0692a8b72b870dd7594b0d3faa7be906445fe50f4f88b5479fd97259ae2e62937f770e5740d45d9cb4dcde6a52317ab0e0c9e7630b01e2e05e7077dce94513064682ac5f0ee5b74e6256ad499b11977436018aa3ae3b67dbe5cd487f15df64c9ea1afdd1e5591172f16ab8960e9f8d5b493c5870365ea1838263c871b8dc501440b028b60e2fb8e31b4ded3750dc599a10142a75e07db7d0a4aeaf9d68f30c4b1403241960f3ebc6a24526c5ac4435e318272d4720c12b6fb53e3e13ce706fde4204cec2a0923e2bd48201870062496e19ffd0afbb249abbc731ed3ea713d11c56f6b0162f3c68a103e0e58d26d3c88d1b16fe45820d0194cfd0f9059526ff561a9cde7c8eeda6c18f5c4fab06aef68390594b6054d6fd90a4dd4f110af87af43a337ad1fa85ae44271b92d753490b02359426a5cccb7f1c96c6f3ec396373244d9ce77895ce77c7290fefce932a940efbd318e748bc593ad066cf514d89874f72b963a3c5446488477e00f7b478291db1dc1ddc8e636a54c72170d1fb5492b5251eb24de9a5223c03382d71b6cfaa48285f4406daf86d78eb668d1c630387195be894bafe5fb5a41ff7dd5de92b4a6fdb5a56ded4dfc0893853c8a407dcc7caae343aa11936d87a7d95d0b1ea49d9862e460ebcd84b5ac70cc447e81b5de8a90c5979be8df88f1df591e13ff927fc164a3641c158d31e141b902101ba6ade46663a735d9eddcd3cad37f55d6b57f03e4017dd9b836a50b2a886ca48ad0de224d8adc54e650ebae42a4369f150606d810ecf4963fefa93a37a46f13dc57e912e4ba90e2bd3115b43106adb8d8c12b06dcf5170ca72f1b78701c69e1a1f8015aaa1a49a347e5683b275eda679cd369fdbaf57b8a32c7a8", 0x1, 0x1}, {0x5, 0xe, &(0x7f0000001100)="bf01f31958bc3136615738f1c81c", 0x1, 0x1}, {0x4, 0x4b, &(0x7f0000001140)="e52ec8236dfcf98a0283e0a77cd2ad69c32e6562b9b715866e32d5df5247ad92c4c37e652c1e3f0f9c7439538110706b470ffcaba6ade3607999e3a5e2a46470c1cdc912e6614fa0ba8c46"}]}) pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000012c0)) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001300), 0x80, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000001340)=""/26) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000001380)=""/178) sendto(r1, &(0x7f0000001440)="a0dcaaaf67bfc14b95d70630fba821607721115217cc487bed578a057aba7845fc428119dfbbc4549ee8038d4a62b24096060b48b78dafaadddffa819c336d34161a4c91603a603fd14ef1", 0x4b, 0x24008814, &(0x7f00000014c0)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x80) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r2) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001740)={&(0x7f0000001540), 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x130, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc29}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1d2}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x50d00000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x72}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x6c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:ping_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_io_uring_complete(0x0) write$9p(r6, &(0x7f00000018c0)="e89a8586618ee1adb709e9450e87ed12e7059740298ce3933e4954594aed8bb101dc7b087226222779940c1ef079280e921dc7a41d6d6c38f6f3c0d09778b5d239654cb8807f3ae6aff6f1bb0137be27a819ac66f24be1c09775bb82bbbdd442176bf4697b231345e7cd5947a501ed9128c0e4a235f926063c96100fd30f73efc80364370689c7a7c09c30e8f37b4cf2c13024886dd81bdd886e", 0x9a) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000001980)={0x2, 0x7, 0x5da, 0x8510, 0x3}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40810}, 0x8000) 11:58:49 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="7bb054e63230c2bf13ba846bdc2b245827ab3b2b2bde7379ab01450e3e047a087c68359bd8d0649dfa3b37d8c4f71c7c8979c9ba5e3d035664bc0b3c2188ef7367bc2a5070204c872a42db8be04822c6d1eefe9d766b742ed338662085b13a8d927934a7a57f05fb9e633fbf7d543c9b41c5231354b2252cdb8459c73da15658b06b34b7ad131f903783fc904421b539a03b795d1e87282a19220a7b779dcb54f15056b189ce03211cd3c7f77c8fac51bd614364825be63c581dacdcf5ef3c5b93d4274cacf97b22f9b5c1d6e326ab6203b8a74c7fad5f27d151b0d6d814efe977709f0b76870700b37c7d9ac7f434c305", 0xf1}, {&(0x7f0000000180)="a61e7b2c0caae86c1bd4875245530e905973aa97b9c35727f8dbe8263a1e5d663ebb15f17273e055f724197bb5ce3492913e9a3c24a960e1a10caeb2f3374061da9483e2da1ed67cad645c04516a3a2cf342574bd5a8b1172f542141d4239473fbe42ca8d78aada7e20e21cec077c36e03fbdb3e91d358b0e252c4857c5c7392e1679abecbd822", 0x87}], 0x2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000280)) fcntl$setsig(r0, 0xa, 0x1f) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x20}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x101}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x800}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfffd}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x11) getpeername(r0, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000480)=0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x2, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000640)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/class/scsi_disk', 0x60000, 0x70) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf86, 0x51}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$CDROMPLAYBLK(r2, 0x5317, &(0x7f00000007c0)={0x1, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000900)={r3, @rand_addr=0x64010102, @multicast1}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x11c, r5, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x36}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc2e}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @private2, 0x20}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3b5891}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x44011}, 0x20000000) 11:58:49 executing program 7: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x64, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @dead_binder_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x9, 0x2, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x30}, @fd}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}], 0xd2, 0x0, &(0x7f0000000140)="10f0bb48dd4bc9224f1e68b5a739302c593609007fa36555c7824ff8a36a668a1abd7d9bec194eb841e7b5e7bc4916a04948b75fe3bbd7bc29e2b1b50c2b4c89078ec9bbe663f3fa5a0ccc1e4c16eb17f9dc928226b2d1cbfe7b02bdac4bbb602dc2ce149709db7726f63f24bfd155cbf6fde42ffc7b4d1ff668ec0c5a2421cf81f93722f4def6ae060931710851f71a55a09293709fc67d58870c337a7870e5ad2cd160afc2d840ef7fb5eaa70201ebf2c8d59689620d035969ed5da5d5cffb12fc504014d1d57f542f08ad3db2edce1183"}) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000002c0)={0x1, 0x100000000, 0xfff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000340)={'ipvlan0\x00', 0x7529}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000380)={'syz_tun\x00', {0x2, 0x0, @loopback}}) dup(0xffffffffffffffff) fdatasync(r1) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000003c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/hid_sunplus', 0x610102, 0x120) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000480)={0x6, 0x4}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000580)={&(0x7f00000004c0)=""/149, 0x95, 0x3, 0x1}) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000600)) r6 = fsopen(&(0x7f0000000a00)='devpts\x00', 0x1) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000a40), &(0x7f0000000a80), 0x2, 0x3) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) [ 123.496851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.510077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.513475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.521764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.532004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.692660] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.703316] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.714854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.716166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.718398] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.728602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.733445] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.735004] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.739568] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.741005] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.742033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.745100] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.746052] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.749313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.749325] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.753081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.754181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.755294] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.761751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.763207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.763653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.765281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.766193] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.769100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.772069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.774218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.777744] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 123.780528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.799423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.803854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.806356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.814475] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.823554] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.824221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.827090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 125.577756] Bluetooth: hci0: command tx timeout [ 125.830773] Bluetooth: hci2: command tx timeout [ 125.831856] Bluetooth: hci1: command tx timeout [ 125.894888] Bluetooth: hci5: command tx timeout [ 125.895751] Bluetooth: hci6: command tx timeout [ 125.896386] Bluetooth: hci3: command tx timeout [ 125.897077] Bluetooth: hci4: command tx timeout [ 125.897157] Bluetooth: hci7: command tx timeout [ 127.622902] Bluetooth: hci0: command tx timeout [ 127.879451] Bluetooth: hci1: command tx timeout [ 127.880156] Bluetooth: hci2: command tx timeout [ 127.943202] Bluetooth: hci3: command tx timeout [ 127.944102] Bluetooth: hci7: command tx timeout [ 127.944239] Bluetooth: hci4: command tx timeout [ 127.944578] Bluetooth: hci6: command tx timeout [ 127.945097] Bluetooth: hci5: command tx timeout [ 129.670714] Bluetooth: hci0: command tx timeout [ 129.926809] Bluetooth: hci1: command tx timeout [ 129.927359] Bluetooth: hci2: command tx timeout [ 129.990944] Bluetooth: hci6: command tx timeout [ 129.991491] Bluetooth: hci3: command tx timeout [ 129.992103] Bluetooth: hci4: command tx timeout [ 129.992557] Bluetooth: hci5: command tx timeout [ 129.993054] Bluetooth: hci7: command tx timeout [ 131.718940] Bluetooth: hci0: command tx timeout [ 131.974752] Bluetooth: hci2: command tx timeout [ 131.975278] Bluetooth: hci1: command tx timeout [ 132.038822] Bluetooth: hci3: command tx timeout [ 132.039347] Bluetooth: hci5: command tx timeout [ 132.039854] Bluetooth: hci4: command tx timeout [ 132.040342] Bluetooth: hci6: command tx timeout [ 132.040838] Bluetooth: hci7: command tx timeout [ 186.289195] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.351276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.352814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.381489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.393707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.396568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.398495] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.398941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.402231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.404914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.439026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.442247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.447538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.449148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.450464] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.451911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.454280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.454316] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.456048] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.457444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.459322] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.467276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.471077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.475232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.476347] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.477925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.480937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.482261] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 186.484432] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.485990] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 186.489469] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.491141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 186.497753] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.498799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.503030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.504034] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.510496] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 186.511228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.514061] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.522251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.423136] Bluetooth: hci0: command tx timeout [ 188.486952] Bluetooth: hci2: command tx timeout [ 188.550840] Bluetooth: hci4: command tx timeout [ 188.550857] Bluetooth: hci6: command tx timeout [ 188.551330] Bluetooth: hci3: command tx timeout [ 188.552793] Bluetooth: hci1: command tx timeout [ 188.615080] Bluetooth: hci5: command tx timeout [ 188.615109] Bluetooth: hci7: command tx timeout [ 190.471509] Bluetooth: hci0: command tx timeout [ 190.536704] Bluetooth: hci2: command tx timeout [ 190.599105] Bluetooth: hci3: command tx timeout [ 190.600301] Bluetooth: hci6: command tx timeout [ 190.600650] Bluetooth: hci4: command tx timeout [ 190.601498] Bluetooth: hci1: command tx timeout [ 190.662756] Bluetooth: hci7: command tx timeout [ 190.663436] Bluetooth: hci5: command tx timeout [ 192.518708] Bluetooth: hci0: command tx timeout [ 192.583062] Bluetooth: hci2: command tx timeout [ 192.646979] Bluetooth: hci1: command tx timeout [ 192.648462] Bluetooth: hci6: command tx timeout [ 192.649722] Bluetooth: hci3: command tx timeout [ 192.649759] Bluetooth: hci4: command tx timeout [ 192.710952] Bluetooth: hci5: command tx timeout [ 192.712595] Bluetooth: hci7: command tx timeout [ 194.566750] Bluetooth: hci0: command tx timeout [ 194.630704] Bluetooth: hci2: command tx timeout [ 194.694762] Bluetooth: hci4: command tx timeout [ 194.695276] Bluetooth: hci3: command tx timeout [ 194.695814] Bluetooth: hci1: command tx timeout [ 194.696287] Bluetooth: hci6: command tx timeout [ 194.759368] Bluetooth: hci7: command tx timeout [ 194.759391] Bluetooth: hci5: command tx timeout [ 248.872332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.874348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.876106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.880132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.886489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.926641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.928853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.930721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.940465] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.942525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.992352] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.996534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.999638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.004281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.006526] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.104252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.112945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.128328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.141397] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.150416] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.150989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.166072] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.192821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.201333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.206991] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.215999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.225975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.231529] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.237258] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.239310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.247488] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.255374] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.264815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.265724] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.272176] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.273131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.301508] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.325783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.345519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 249.364168] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.951001] Bluetooth: hci0: command tx timeout [ 251.014845] Bluetooth: hci1: command tx timeout [ 251.078734] Bluetooth: hci3: command tx timeout [ 251.334801] Bluetooth: hci2: command tx timeout [ 251.335899] Bluetooth: hci4: command tx timeout [ 251.398768] Bluetooth: hci6: command tx timeout [ 251.462895] Bluetooth: hci5: command tx timeout [ 251.463748] Bluetooth: hci7: command tx timeout [ 252.999295] Bluetooth: hci0: command tx timeout [ 253.062769] Bluetooth: hci1: command tx timeout [ 253.126737] Bluetooth: hci3: command tx timeout [ 253.383735] Bluetooth: hci2: command tx timeout [ 253.384282] Bluetooth: hci4: command tx timeout [ 253.447459] Bluetooth: hci6: command tx timeout [ 253.511016] Bluetooth: hci5: command tx timeout [ 253.511517] Bluetooth: hci7: command tx timeout [ 255.046838] Bluetooth: hci0: command tx timeout [ 255.110702] Bluetooth: hci1: command tx timeout [ 255.174959] Bluetooth: hci3: command tx timeout [ 255.430794] Bluetooth: hci4: command tx timeout [ 255.431358] Bluetooth: hci2: command tx timeout [ 255.495226] Bluetooth: hci6: command tx timeout [ 255.559784] Bluetooth: hci7: command tx timeout [ 255.560351] Bluetooth: hci5: command tx timeout [ 257.095044] Bluetooth: hci0: command tx timeout [ 257.159696] Bluetooth: hci1: command tx timeout [ 257.223021] Bluetooth: hci3: command tx timeout [ 257.479039] Bluetooth: hci4: command tx timeout [ 257.480794] Bluetooth: hci2: command tx timeout [ 257.542821] Bluetooth: hci6: command tx timeout [ 257.607184] Bluetooth: hci7: command tx timeout [ 257.608502] Bluetooth: hci5: command tx timeout [ 311.519150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.524827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.526182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.533134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.540785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.575449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.580118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.582081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.588520] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.592019] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.593653] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.597027] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.599967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.612007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.622449] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.774318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.782520] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.788712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.795221] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.797915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.810137] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.813732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.847365] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.861973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.869065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.871511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.880072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.909014] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.921546] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.936782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.967436] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.974478] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.977440] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.980430] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.983975] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.987055] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.006268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.009395] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.031442] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.035212] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.607214] Bluetooth: hci0: command tx timeout [ 313.671969] Bluetooth: hci1: command tx timeout [ 313.734907] Bluetooth: hci2: command tx timeout [ 313.927700] Bluetooth: hci4: command tx timeout [ 313.928444] Bluetooth: hci3: command tx timeout [ 313.990727] Bluetooth: hci5: command tx timeout [ 314.119712] Bluetooth: hci7: command tx timeout [ 314.120432] Bluetooth: hci6: command tx timeout [ 315.655687] Bluetooth: hci0: command tx timeout [ 315.719971] Bluetooth: hci1: command tx timeout [ 315.783984] Bluetooth: hci2: command tx timeout [ 315.976286] Bluetooth: hci3: command tx timeout [ 315.976818] Bluetooth: hci4: command tx timeout [ 316.038797] Bluetooth: hci5: command tx timeout [ 316.167118] Bluetooth: hci7: command tx timeout [ 316.168698] Bluetooth: hci6: command tx timeout [ 317.704158] Bluetooth: hci0: command tx timeout [ 317.767703] Bluetooth: hci1: command tx timeout [ 317.831685] Bluetooth: hci2: command tx timeout [ 318.023770] Bluetooth: hci4: command tx timeout [ 318.023895] Bluetooth: hci3: command tx timeout [ 318.087733] Bluetooth: hci5: command tx timeout [ 318.215155] Bluetooth: hci7: command tx timeout [ 318.215679] Bluetooth: hci6: command tx timeout [ 319.753671] Bluetooth: hci0: command tx timeout [ 319.816056] Bluetooth: hci1: command tx timeout [ 319.880874] Bluetooth: hci2: command tx timeout [ 320.071768] Bluetooth: hci3: command tx timeout [ 320.071880] Bluetooth: hci4: command tx timeout [ 320.135043] Bluetooth: hci5: command tx timeout [ 320.262754] Bluetooth: hci6: command tx timeout [ 320.262900] Bluetooth: hci7: command tx timeout [ 374.211020] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.241461] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.250246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.266211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.270560] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.333500] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.335920] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.346167] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.356185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.360444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.363248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.364171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.365813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.366586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.368318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.369802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.372368] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.374445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.386829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.401714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.477219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.496288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.497996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.509611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.517004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.582791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.590688] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.607278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.612779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.629966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.641920] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.642977] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.672193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.674203] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.678967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.702776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.707911] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.710700] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.721880] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.727937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.390802] Bluetooth: hci0: command tx timeout [ 376.391868] Bluetooth: hci2: command tx timeout [ 376.454695] Bluetooth: hci1: command tx timeout [ 376.455487] Bluetooth: hci3: command tx timeout [ 376.582744] Bluetooth: hci4: command tx timeout [ 376.774702] Bluetooth: hci5: command tx timeout [ 376.839212] Bluetooth: hci6: command tx timeout [ 376.840168] Bluetooth: hci7: command tx timeout [ 378.439493] Bluetooth: hci0: command tx timeout [ 378.440094] Bluetooth: hci2: command tx timeout [ 378.503052] Bluetooth: hci1: command tx timeout [ 378.504778] Bluetooth: hci3: command tx timeout [ 378.631950] Bluetooth: hci4: command tx timeout [ 378.824789] Bluetooth: hci5: command tx timeout [ 378.886835] Bluetooth: hci7: command tx timeout [ 378.887329] Bluetooth: hci6: command tx timeout [ 380.486874] Bluetooth: hci0: command tx timeout [ 380.487406] Bluetooth: hci2: command tx timeout [ 380.551043] Bluetooth: hci3: command tx timeout [ 380.551580] Bluetooth: hci1: command tx timeout [ 380.678753] Bluetooth: hci4: command tx timeout [ 380.871694] Bluetooth: hci5: command tx timeout [ 380.934866] Bluetooth: hci6: command tx timeout [ 380.936380] Bluetooth: hci7: command tx timeout [ 382.534740] Bluetooth: hci2: command tx timeout [ 382.536129] Bluetooth: hci0: command tx timeout [ 382.598736] Bluetooth: hci1: command tx timeout [ 382.600128] Bluetooth: hci3: command tx timeout [ 382.726737] Bluetooth: hci4: command tx timeout [ 382.918958] Bluetooth: hci5: command tx timeout [ 382.983383] Bluetooth: hci6: command tx timeout [ 382.985336] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 12:03:54 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888027e87cc8 RCX=ffff88806ce089cc RDX=0000000000000002 RSI=ffffffff85c1bac0 RDI=ffff88802e3ac228 RBP=ffff888027e80000 RSP=ffff88806ce089f8 R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b145 R11=00000000000226b8 R12=ffff88806ce08a01 R13=ffff88806ce08ac0 R14=ffff888027e87c98 R15=ffff88806ce08a78 RIP=ffffffff815b7866 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5647000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9a07227368 CR3=000000001679e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880277ff668 RCX=ffffffff81bbf972 RDX=ffff888015701bc0 RSI=0000000000000008 RDI=ffffffff85a11240 RBP=ffff8880277ff638 RSP=ffff8880277ff5f0 R8 =0000000000000001 R9 =fffff940000a7c36 R10=0000000000000000 R11=0000000000001390 R12=ffff888013a90cc0 R13=1ffff11004effece R14=1ffff11004effecd R15=ffff8880277ff670 RIP=ffffffff81ae2010 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5747000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff47eac96f4 CR3=00000000321e1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007ff47ead847000007ff47ead7f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000