Warning: Permanently added '[localhost]:50849' (ECDSA) to the list of known hosts. 2025/05/23 03:40:08 fuzzer started 2025/05/23 03:40:08 dialing manager at localhost:41873 syzkaller login: [ 94.061043] cgroup: Unknown subsys name 'net' [ 94.191522] cgroup: Unknown subsys name 'cpuset' [ 94.239784] cgroup: Unknown subsys name 'rlimit' 2025/05/23 03:40:24 syscalls: 2214 2025/05/23 03:40:24 code coverage: enabled 2025/05/23 03:40:24 comparison tracing: enabled 2025/05/23 03:40:24 extra coverage: enabled 2025/05/23 03:40:24 setuid sandbox: enabled 2025/05/23 03:40:24 namespace sandbox: enabled 2025/05/23 03:40:24 Android sandbox: enabled 2025/05/23 03:40:24 fault injection: enabled 2025/05/23 03:40:24 leak checking: enabled 2025/05/23 03:40:24 net packet injection: enabled 2025/05/23 03:40:24 net device setup: enabled 2025/05/23 03:40:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/23 03:40:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/23 03:40:24 USB emulation: enabled 2025/05/23 03:40:24 hci packet injection: enabled 2025/05/23 03:40:24 wifi device emulation: enabled 2025/05/23 03:40:24 802.15.4 emulation: enabled 2025/05/23 03:40:24 fetching corpus: 0, signal 0/0 (executing program) 2025/05/23 03:40:26 starting 8 fuzzer processes 03:40:26 executing program 0: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x555c, 0xc}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r0, 0xa00, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x36}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xfe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6e}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x180) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x72}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2ef}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000806}, 0x1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd, 0x2}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x81}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x44}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c809) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x8c, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x91002008}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r3, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdb}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000d40)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x84, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c000}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffa}}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000001040)={&(0x7f0000000f00), 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xa0, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0xb7f4b0afb6e32036}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4000800) 03:40:26 executing program 1: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) mknodat$loop(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/udc', 0x44800, 0x8) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x7fff, 0x400) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000380)={0x3, 0xa52, 0x6, 0x48, 0x6d9, 0x299c0}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1fc, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x98, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x97, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdd800000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x11, 0x3, "b0a43cb24ae5e840b83736fe3d"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "b5f1bf5cc51dab1096615c3bbe6f753d09e0fd67f4d4c16e8a"}}, @TIPC_NLA_NODE_ID={0x55, 0x3, "5858eafa7b2fd6362284a6e1e56ff08008f33e69c61e4f206ef2abf3a8b1c682a7af032f1daaca72802249fff4c26cca8d732c7acf7fc6e8004f73fdb9130bee1fb6a3ac1e26ff771b2d15421e7d6ff855"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0xa6e901e233f656b2}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) renameat(r4, &(0x7f00000006c0)='./file0\x00', r0, &(0x7f0000000700)='.\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0x4, 0x8}}, './file0/file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x70, r6, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x22fa, 0x55}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xb9}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xc6}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff5d}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) mount$cgroup(0x0, &(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000980), 0x254000, &(0x7f00000009c0)={[{@subsystem='net'}, {@cpuset_v2_mode}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, '^t}$\\'}}, {@subj_role={'subj_role', 0x3d, '/dev/vcsu#\x00'}}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000a40)={0x0, 'wlan1\x00', {0x1}, 0x5ca4}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x65c}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) 03:40:26 executing program 2: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x0, 0x0, 0x7, 0x400, 0x3, 0x3, 0x6, 0x6, 0x40, 0xf7, 0x8, 0xff, 0x38, 0x1, 0x0, 0x5, 0xb20}, [{0x70000000, 0x200, 0xc5, 0x7a10, 0x3, 0x80000000, 0x4, 0x6}], "5992684229d815ef21d6a166109499730747e2706aa18421f3b4dea1242e67807e898c7f51b0b3f378bd95d1086b882d8deecee33b05fd21a4f22be0fecb189a0878ac8fc4dac8b02a26abbe329f07f287fa2994c90d6c43af13fa62f81c40106c01bb5dfb4e2d585c1cc44d22420d42369f8f89cad328200c8f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9f2) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xffff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a00)='syz1\x00', 0x200002, 0x0) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) ppoll(&(0x7f0000000a40)=[{0xffffffffffffffff, 0x1805}, {r0, 0x2}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x5005}, {r1, 0x30}], 0x5, &(0x7f0000000ac0)={r2, r3+60000000}, &(0x7f0000000b00)={[0x4]}, 0x8) fstat(r0, &(0x7f0000000b40)) r4 = syz_open_dev$vcsa(&(0x7f0000000bc0), 0x2, 0x208901) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000c00)) r6 = eventfd2(0x8, 0x0) r7 = pidfd_getfd(r4, r6, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000c40), 0x2, 0x0) write$eventfd(r4, &(0x7f0000000c80)=0xd14, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000d00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000f00)={{r10, 0x401, 0x3ff, 0x1, 0x9fd, 0x8515, 0xeb, 0x3ff, 0x6, 0x1, 0x9, 0x27, 0x101, 0x4, 0x7}, 0x8, [0x0]}) io_setup(0x400, &(0x7f0000000f80)=0x0) r12 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r13 = fcntl$dupfd(r6, 0x406, r5) io_submit(r11, 0x4, &(0x7f0000001300)=[&(0x7f0000001000)={0x0, 0x0, 0x0, 0x8, 0x7, r12, &(0x7f0000000fc0)="decf3eb6136be28c0483aced0a529fd56a910399549d3cd98207959f0ac75ab7c03260", 0x23, 0xa0, 0x0, 0x2, r9}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x3, 0x3, r8, &(0x7f0000001040)="87dd706dee892b222bddc666a3346c965d60cfe324988463d8fb1fe73d980e575bc73f95510392730aac3c4c6619b198faf35bcc1a29511eb902f982f1cf2a0f4878afdb889bc9", 0x47, 0x6, 0x0, 0x1, r13}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x5, 0x9, r9, &(0x7f0000001100)="8f2f8ccb04c633632e929772e2a27a91e68de4c943079a58144d39d3b4b484fed8a789846e803f21be18843e196a17999fa3c43346a49ccf8221919cb1ecfd7b7ae52175d53597a15d322e30e9a3122caf310efbe9d6ee994aab8e908e3a1a4fa3d7b26d3e152a79cb583649e7d36dc88642a644b3addd52eb011bdddedc532b54694b11f371da8c95cd8ac0c5048c0d8f2ec620bd9370b1e763f1b58c6a2def5742660f22b92def0f52", 0xaa, 0x69c, 0x0, 0x2, r4}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x5, r4, &(0x7f0000001200)="086f660322da79dbdd3dff6fef81fa7bd234f3d99cae3f8d507666d99f379eeec943a7de9e9e0655784ff9f0a6886f62662b1be4b074075cccb82bd7d7f2bd1b138e7b13f03f5bc4a8925d5a2bb31a02b3c63067077c3563d72bda0ba67e0e5e53e44658d508a00f3a8208e21de03124143d92f854956d8f97300f1d8e70b184d578e64f8f1e2ef1bd2837ea", 0x8c, 0x9, 0x0, 0x2, r4}]) 03:40:26 executing program 3: ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x408600, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffffe}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x24008015) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000002c0)={'caif0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x3400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3f}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2ce4}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xac}, 0x1, 0x0, 0x0, 0x448c3}, 0x8040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) getsockname(r0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000640)=0x80) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000210}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000840)={'syztnl2\x00', r1, 0x40, 0x8, 0x9, 0x100, {{0x28, 0x4, 0x3, 0x1, 0xa0, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @private=0xa010101, {[@timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0x5, [{@rand_addr=0x64010102, 0x8}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1c, 0x3, [{0x1, 0x10, "506460438cd52afc0542e59f5511"}, {0x6, 0x6, "a095df77"}]}, @timestamp_prespec={0x44, 0x2c, 0xf2, 0x3, 0xf, [{@rand_addr=0x64010101, 0x3}, {@empty, 0xfffeffff}, {@local, 0x4}, {@local, 0xa7}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x1}]}, @end, @cipso={0x86, 0x24, 0x3, [{0x5, 0x5, "cf6f34"}, {0x7, 0x11, "b47e30e4be96915693f6a8e5d3a5c2"}, {0x0, 0x8, "267347135b91"}]}, @cipso={0x86, 0xd, 0x2, [{0x1, 0x7, "ee08317120"}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', r1, 0x6, 0x2f, 0x80, 0x6, 0x20, @private1, @loopback, 0x7, 0x7, 0x8, 0x9}}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000b80)=0xe8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xc0000004}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x1c0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x75}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @NL80211_ATTR_CSA_IES={0x148, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x12c, 0x7f, [@ht={0x2d, 0x1a, {0x2, 0x1, 0x5, 0x0, {0x7, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0x1}}, @challenge={0x10, 0x1, 0x9f}, @preq={0x82, 0x8e, @ext={{0x0, 0x1}, 0x7, 0x41, 0x6, @broadcast, 0xfd, @device_b, 0x401, 0x5, 0xa, [{{0x1}, @broadcast, 0x7}, {{0x1}, @device_b, 0xd857}, {{0x0, 0x0, 0x1}, @device_b, 0x38b4}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{}, @broadcast, 0x4}, {{}, @broadcast, 0xba2}, {{0x1, 0x0, 0x1}, @broadcast, 0x400}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{}, @device_b, 0x3}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @random={0x5, 0x4, "358e39c9"}, @perr={0x84, 0x2, {0x8}}, @random={0x0, 0x65, "6bf3efc690fdf71b4e371ab1acb523f5733e05034f04361b2f3228e3a07833d7281b7191e1ce110df6492d394d26f5376f895fef688c688b584b53536b866a16b2b5cac2a386478a74f4b2e55c4642cad28c3e34930e65ca8b9e60fbd7dc350ef0f3379602"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0xfff, 0x2, 0x400, 0x1800, 0x757, 0x1, 0x1, 0x800, 0xce]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1c0}}, 0x1) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe5, 0x1f}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004010}, 0x24008020) 03:40:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040094) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xda}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000810}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x801) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008014}, 0x48800) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8208008}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r4, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8864) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\xa5)\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x5c}}, 0x40001) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c080}, 0xc000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000840) [ 111.830322] audit: type=1400 audit(1747971626.967:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:40:26 executing program 5: prctl$PR_PAC_RESET_KEYS(0x36, 0x12) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'}) socket$inet6(0xa, 0x4, 0x101) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0xfffffffffffffffd, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x1, 0x2, 0xd4, {{0xa, 0x4, 0x2, 0x12, 0x28, 0x68, 0x0, 0x1f, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x41, 0x1, 0x2, [{@multicast1, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8a}]}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x20, 0x4, 0x77, {0x77, 0x31, "c7994713ceb337fd2925af10b2164d69628f6251debf111d959181ec198f46c88901a63bb36b1da50468bcc325bc99520206724ea2293619aaed00f47c470a0b47ee0a914305f89ce4bcf56933344433ca1ec26b5c2ec28d21c472414179d0e55ba5a14f4300b4c3405aa3ea40c5f50ff3fbe76264"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x20, 0xa, 0xdc, "14d4ebab6bc52bac0e4d6e55d63e6f5183939d935330be912c56c3e9d4d1e80d284c154273f4bc6fdaeac94d26b612863da6bae9bf7855366f2025c9c543c2e4761b9b7c26fced70d435c46027d3581db009e88851810d93027e1733ef786cb03c8214ff28838cd752f1f83cad0b6f8571493cec8d7796cbb15a344d9fb65c8711b2c508da6e995273e58d6e202d634c214c2d65d0d057b91d67c4498c6788367c82a0bb09e67fa39a3187c2fe77dc464a1a81c93d8e031632947a5670bd3de0faa7f44da362b3912a13e217410ca2b7a35d378dc8104eee20b300d8"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x20, 0x8001, 0x7ff, 0x1, 0x1, 0x3ff, 0x5, 0x93b, 0x1, 0x6, 0xfa2, 0x6c46}}, &(0x7f0000000540)={0x20, 0x85, 0x4}, &(0x7f0000000580)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x7fff}, &(0x7f0000000600)={0x20, 0x89, 0x2, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000700)={'veth0_to_bond\x00'}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r6, 0xe02, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000cc0)={r7, 0x8, 0x1000}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f00000010c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 03:40:27 executing program 6: ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000000)) memfd_create(&(0x7f0000000040)='],\x00', 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x184, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xd2f7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfff}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x40, 0xfffff7b0, 0x10001, {{0x16, 0x4, 0x1, 0x9, 0x58, 0x68, 0x0, 0x3e, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x34, 0xb, 0x1, 0x5, [{@loopback, 0x101}, {@broadcast, 0x1}, {@rand_addr=0x64010100, 0xa9}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xb6}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x5}]}, @generic={0x89, 0xf, "78174b451cbbb3c3cb0bdf2a6c"}]}}}}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', r0, 0x2f, 0x43, 0x7, 0x10001, 0x2a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x8, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl1\x00', r0, 0x4, 0x2, 0x1f, 0x3, 0x11, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7, 0x3f, 0x32}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24048881}, 0x40080) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x2800) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x2000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', r0, 0x4, 0x9, 0x6a, 0xbb, 0x3f, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x20, 0x8, 0x0, 0xfffff001}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'sit0\x00', r4, 0x29, 0x1, 0x8, 0x12c, 0x32, @empty, @local, 0x8, 0x40, 0xa7df, 0x14f}}) r5 = socket$netlink(0x10, 0x3, 0x13) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001440)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)={0x170, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe6d}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x31f1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fafa0cc044ed75831fc7953d4076cee5ee43c22d76902355c0fa98c0226e0620e8"}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x30000800}, 0x4040000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r5) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x30, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xaa}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x884) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) 03:40:27 executing program 7: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:udev_rules_t:s0\x00', 0x22, 0x1) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) r1 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x25}}, './file0\x00'}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffe00, 0x3, [{0x0, 0xffff, 0x1f, '\x00', 0x2e01}, {0x39ba, 0x5, 0x2, '\x00', 0x2100}, {0x10001, 0x7fb, 0x1b2f, '\x00', 0x100}]}) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000002c0)=0x4) r3 = syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x5, 0x7, &(0x7f0000000840)=[{&(0x7f0000000380)="9f59adce4f3cbb824b1c6d0e6212cd205f79547afef52f484c3a832b57ebddd4d93676d250d711eb5db8", 0x2a, 0x42a}, {&(0x7f00000003c0)="66ca6dc65251fea1c595fdb121381d4006ea6b1749d0089bf78c0a1e117ed2309651c339ff08bbe4", 0x28, 0x1}, {&(0x7f0000000400)="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", 0xfc, 0x3f}, {&(0x7f0000000500)="bc2ef8b329da6efb9f7230785b71e59249384cb0", 0x14, 0x1}, {&(0x7f0000000540)="7ca0c87372a8871c9306d3182805339f0a267c08dd2fc2675a244b6701be363d0c4a9a5599813e68c7da623252cd81ed243a8cae7e6cd29d6fd1b5f479f95e836211e01943ea4dd5621c7cec10f09c12661fa57e70020d400512d3be3f07a80222a955f50757d1a4cd5a594ba591da0f201aa4b12c7d19062f2dded08c503513041890a9ffa96740a5db747b634e324e1569d16f4addf2183c0f4379554e064737c7145d46587bc58bea80fab9e1e8bcaa5c556a8ae7b225b042792388eef83bc5f8c3c3b13d9a1685d444ace4", 0xcd, 0xedb}, {&(0x7f0000000640)="3d7404421890cdcd326496993446f50bf3dcfa3f33b47e2118381d40ff533f1419d6870311e4ceef494164b82ae654ccb41a62fd4110ac5a543b42f21a71136d1c1a45280b35690b1e0b216f4c1079264e727936c93a32558800464aa2107e7ec8819279ccf175c92e107af789f1f30cc6e08481a93bb03180a774bded3910ddff9b7442fff100b829028d69e370bf39c6cd2758c3eb48ba357b083d4491562424488eb4e419a8eb188585e08c1d4c86e5c66bbba0f72d641e5ebeb14fe8c968d1ade02a97", 0xc5, 0x2}, {&(0x7f0000000740)="422de5c3e9b88654b8cb5e8e8c38268c9ed99ad9bdd512b3584068fecc8efbe05b5389a6256217e9f927cde7f4d129009b5a221f0bcaa23a4b4ff8188fa1ad241964d00399aad4e5560e6d00304ef655a21cb98ab0caef1ce6518c4d86c43721a1f674af5fc650f134de950dce8bff4fa8c4d22c73f2d716a0c5ae42fd7c6ba877de760b47bfd82827892b111f6c22fa55f5f188ff2d2cd939ed5d3b2a7cc6175e5f3f7631f15c01756c64a54289825f8ad2293fbde0697f069ec47dae206fe73096c02d71066e8c6a0424a0c24f7f954712322794ea188f59812186c680165ed6c5cfbfebfeaa", 0xe7, 0xffffffff80000000}], 0x1000, &(0x7f0000000900)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x38, 0x38, 0x35]}}, {@size={'size', 0x3d, [0x70, 0x78, 0x39, 0x78, 0x30]}}], [{@dont_measure}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0xf748dad55c5651bb, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000009c0)={0x401, {0x0, 0x7fff, 0x100, 0x8, 0x5}}) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000a00)={'ipvlan0\x00', {0x2, 0x0, @multicast2}}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x763, 0x66}}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}}, 0x41050) read(r3, &(0x7f0000000b40)=""/194, 0xc2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$cgroup_ro(r5, &(0x7f0000000c80)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000cc0)) preadv2(r4, &(0x7f0000001d00)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1, 0x3, 0x2, 0x9) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000001d80)={'TPROXY\x00'}, &(0x7f0000001dc0)=0x1e) [ 113.100860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.104166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.107194] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.118670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.123477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.163489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.169663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.173699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.181768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.187664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.232023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.236521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.243392] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.252227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.257442] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.279528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.284094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.297194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.313522] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.316734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.379432] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.401564] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.408583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.419604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.429472] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.440721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.445970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.456691] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.458268] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.463024] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.480484] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.496387] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.504749] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.532903] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.538218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.546227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.580326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.587375] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.635703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.662379] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.180535] Bluetooth: hci0: command tx timeout [ 115.243054] Bluetooth: hci1: command tx timeout [ 115.307175] Bluetooth: hci2: command tx timeout [ 115.371194] Bluetooth: hci3: command tx timeout [ 115.628308] Bluetooth: hci5: command tx timeout [ 115.692367] Bluetooth: hci6: command tx timeout [ 115.756051] Bluetooth: hci7: command tx timeout [ 115.820102] Bluetooth: hci4: command tx timeout [ 117.228963] Bluetooth: hci0: command tx timeout [ 117.291149] Bluetooth: hci1: command tx timeout [ 117.356235] Bluetooth: hci2: command tx timeout [ 117.420146] Bluetooth: hci3: command tx timeout [ 117.676279] Bluetooth: hci5: command tx timeout [ 117.739047] Bluetooth: hci6: command tx timeout [ 117.806088] Bluetooth: hci7: command tx timeout [ 117.866993] Bluetooth: hci4: command tx timeout [ 119.276080] Bluetooth: hci0: command tx timeout [ 119.340086] Bluetooth: hci1: command tx timeout [ 119.402980] Bluetooth: hci2: command tx timeout [ 119.467011] Bluetooth: hci3: command tx timeout [ 119.723364] Bluetooth: hci5: command tx timeout [ 119.788001] Bluetooth: hci6: command tx timeout [ 119.851047] Bluetooth: hci7: command tx timeout [ 119.915395] Bluetooth: hci4: command tx timeout [ 121.324058] Bluetooth: hci0: command tx timeout [ 121.387038] Bluetooth: hci1: command tx timeout [ 121.452216] Bluetooth: hci2: command tx timeout [ 121.516133] Bluetooth: hci3: command tx timeout [ 121.771118] Bluetooth: hci5: command tx timeout [ 121.835295] Bluetooth: hci6: command tx timeout [ 121.900111] Bluetooth: hci7: command tx timeout [ 121.963223] Bluetooth: hci4: command tx timeout [ 175.955186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.956880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.960195] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.962644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.964277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.127477] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.134244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.135681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.146620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.148506] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.203848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.207166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.209281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.214400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.216239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.319986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.345198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.348188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.376314] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.382630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.391665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.405527] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.410162] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.415084] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.421367] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.435229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.437851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.448680] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.449694] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.456371] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.459405] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.468388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.470152] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.472278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.474270] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.519768] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.528227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.534979] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.540193] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.550993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.028982] Bluetooth: hci0: command tx timeout [ 178.219199] Bluetooth: hci1: command tx timeout [ 178.283997] Bluetooth: hci2: command tx timeout [ 178.476048] Bluetooth: hci3: command tx timeout [ 178.603085] Bluetooth: hci5: command tx timeout [ 178.667201] Bluetooth: hci6: command tx timeout [ 178.668005] Bluetooth: hci7: command tx timeout [ 178.668025] Bluetooth: hci4: command tx timeout [ 180.076973] Bluetooth: hci0: command tx timeout [ 180.267257] Bluetooth: hci1: command tx timeout [ 180.331043] Bluetooth: hci2: command tx timeout [ 180.524192] Bluetooth: hci3: command tx timeout [ 180.653008] Bluetooth: hci5: command tx timeout [ 180.715129] Bluetooth: hci7: command tx timeout [ 180.715434] Bluetooth: hci6: command tx timeout [ 180.716306] Bluetooth: hci4: command tx timeout [ 182.124982] Bluetooth: hci0: command tx timeout [ 182.314995] Bluetooth: hci1: command tx timeout [ 182.379124] Bluetooth: hci2: command tx timeout [ 182.572033] Bluetooth: hci3: command tx timeout [ 182.700990] Bluetooth: hci5: command tx timeout [ 182.763037] Bluetooth: hci7: command tx timeout [ 182.763057] Bluetooth: hci4: command tx timeout [ 182.763100] Bluetooth: hci6: command tx timeout [ 184.171283] Bluetooth: hci0: command tx timeout [ 184.363033] Bluetooth: hci1: command tx timeout [ 184.428019] Bluetooth: hci2: command tx timeout [ 184.619165] Bluetooth: hci3: command tx timeout [ 184.747249] Bluetooth: hci5: command tx timeout [ 184.811501] Bluetooth: hci7: command tx timeout [ 184.811628] Bluetooth: hci6: command tx timeout [ 184.812605] Bluetooth: hci4: command tx timeout [ 238.463956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.469890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.474834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.486102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.494815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.633574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.652501] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.656408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.668608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.679676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.740048] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.742107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.744351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.753353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.756337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.850731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.858527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.863403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.865385] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.868185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.871795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.873498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.875957] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.880633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.883885] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.894359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.904333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.906417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.924578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.930496] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.955038] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.990484] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.002289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.049466] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.055152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.059329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.060966] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.090425] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.124473] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.135260] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.555142] Bluetooth: hci0: command tx timeout [ 240.747757] Bluetooth: hci1: command tx timeout [ 240.811050] Bluetooth: hci2: command tx timeout [ 241.003092] Bluetooth: hci4: command tx timeout [ 241.067990] Bluetooth: hci3: command tx timeout [ 241.131486] Bluetooth: hci6: command tx timeout [ 241.387369] Bluetooth: hci7: command tx timeout [ 241.388281] Bluetooth: hci5: command tx timeout [ 242.603024] Bluetooth: hci0: command tx timeout [ 242.796021] Bluetooth: hci1: command tx timeout [ 242.859320] Bluetooth: hci2: command tx timeout [ 243.051058] Bluetooth: hci4: command tx timeout [ 243.115050] Bluetooth: hci3: command tx timeout [ 243.179038] Bluetooth: hci6: command tx timeout [ 243.435237] Bluetooth: hci5: command tx timeout [ 243.435585] Bluetooth: hci7: command tx timeout [ 244.652068] Bluetooth: hci0: command tx timeout [ 244.843013] Bluetooth: hci1: command tx timeout [ 244.907161] Bluetooth: hci2: command tx timeout [ 245.099264] Bluetooth: hci4: command tx timeout [ 245.163152] Bluetooth: hci3: command tx timeout [ 245.227264] Bluetooth: hci6: command tx timeout [ 245.483295] Bluetooth: hci5: command tx timeout [ 245.483465] Bluetooth: hci7: command tx timeout [ 246.700032] Bluetooth: hci0: command tx timeout [ 246.892025] Bluetooth: hci1: command tx timeout [ 246.955287] Bluetooth: hci2: command tx timeout [ 247.147185] Bluetooth: hci4: command tx timeout [ 247.212650] Bluetooth: hci3: command tx timeout [ 247.275001] Bluetooth: hci6: command tx timeout [ 247.531117] Bluetooth: hci5: command tx timeout [ 247.532286] Bluetooth: hci7: command tx timeout [ 301.057790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.064219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.071413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.083158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.094314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.371611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.374568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.378227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.385411] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.395657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.505637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.510600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.519992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.521555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.528513] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.534465] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.550065] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.559186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.589455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.595480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.737527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.754870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.768132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.783693] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.786012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.798098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.799902] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.808690] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.862421] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.867376] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.870215] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.876066] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.887667] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.897360] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.921169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.970787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.992623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.000430] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.023526] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.028661] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.151060] Bluetooth: hci0: command tx timeout [ 303.467044] Bluetooth: hci1: command tx timeout [ 303.595093] Bluetooth: hci2: command tx timeout [ 303.660383] Bluetooth: hci3: command tx timeout [ 303.916294] Bluetooth: hci4: command tx timeout [ 304.107183] Bluetooth: hci7: command tx timeout [ 304.108191] Bluetooth: hci6: command tx timeout [ 304.109349] Bluetooth: hci5: command tx timeout [ 305.195447] Bluetooth: hci0: command tx timeout [ 305.515266] Bluetooth: hci1: command tx timeout [ 305.643060] Bluetooth: hci2: command tx timeout [ 305.707463] Bluetooth: hci3: command tx timeout [ 305.963244] Bluetooth: hci4: command tx timeout [ 306.155066] Bluetooth: hci6: command tx timeout [ 306.155094] Bluetooth: hci5: command tx timeout [ 306.155571] Bluetooth: hci7: command tx timeout [ 307.242992] Bluetooth: hci0: command tx timeout [ 307.564946] Bluetooth: hci1: command tx timeout [ 307.691214] Bluetooth: hci2: command tx timeout [ 307.755001] Bluetooth: hci3: command tx timeout [ 308.011365] Bluetooth: hci4: command tx timeout [ 308.203214] Bluetooth: hci5: command tx timeout [ 308.203716] Bluetooth: hci7: command tx timeout [ 308.203980] Bluetooth: hci6: command tx timeout [ 309.291020] Bluetooth: hci0: command tx timeout [ 309.610981] Bluetooth: hci1: command tx timeout [ 309.739002] Bluetooth: hci2: command tx timeout [ 309.804139] Bluetooth: hci3: command tx timeout [ 310.059362] Bluetooth: hci4: command tx timeout [ 310.251440] Bluetooth: hci6: command tx timeout [ 310.251507] Bluetooth: hci7: command tx timeout [ 310.252251] Bluetooth: hci5: command tx timeout [ 363.391426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.394791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.406411] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.416299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.426670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.525155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.527833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.534517] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.541035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.550516] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.786602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.792399] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.808188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.813363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.820571] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.867554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.873215] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.874627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.887156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.890310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.929881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.934058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.935077] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.936182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.941192] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.941385] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.945234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.951317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.954665] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.959223] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.964967] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.965245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.974378] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.976373] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.976542] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.032624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.036761] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.039901] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.062343] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.067446] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.484192] Bluetooth: hci0: command tx timeout [ 365.611979] Bluetooth: hci1: command tx timeout [ 365.931390] Bluetooth: hci2: command tx timeout [ 365.995114] Bluetooth: hci3: command tx timeout [ 366.059048] Bluetooth: hci5: command tx timeout [ 366.188063] Bluetooth: hci4: command tx timeout [ 366.189235] Bluetooth: hci7: command tx timeout [ 366.189340] Bluetooth: hci6: command tx timeout [ 367.531380] Bluetooth: hci0: command tx timeout [ 367.659629] Bluetooth: hci1: command tx timeout [ 367.979994] Bluetooth: hci2: command tx timeout [ 368.043990] Bluetooth: hci3: command tx timeout [ 368.107262] Bluetooth: hci5: command tx timeout [ 368.235035] Bluetooth: hci4: command tx timeout [ 368.235828] Bluetooth: hci6: command tx timeout [ 368.236557] Bluetooth: hci7: command tx timeout [ 369.580973] Bluetooth: hci0: command tx timeout [ 369.708946] Bluetooth: hci1: command tx timeout [ 370.028070] Bluetooth: hci2: command tx timeout [ 370.091074] Bluetooth: hci3: command tx timeout [ 370.155271] Bluetooth: hci5: command tx timeout [ 370.283052] Bluetooth: hci7: command tx timeout [ 370.283526] Bluetooth: hci4: command tx timeout [ 370.284376] Bluetooth: hci6: command tx timeout [ 371.628341] Bluetooth: hci0: command tx timeout [ 371.757024] Bluetooth: hci1: command tx timeout [ 372.075306] Bluetooth: hci2: command tx timeout [ 372.140009] Bluetooth: hci3: command tx timeout [ 372.202984] Bluetooth: hci5: command tx timeout [ 372.331396] Bluetooth: hci4: command tx timeout [ 372.331419] Bluetooth: hci6: command tx timeout [ 372.331943] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:45:27 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea0001b39540 RCX=ffffffff819c4f0a RDX=ffff88802fd58000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff88802751f878 R8 =0000000000000000 R9 =fffff940003672a8 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=00007fc903dcd000 R14=ffff88802751fce0 R15=ffff88800e490e68 RIP=ffffffff819c4f0a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5634000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8e6c41a368 CR3=00000000293ab000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff84a8ed51 RDX=ffff888018558000 RSI=0000000000000001 RDI=0000000000000005 RBP=ffffffff852ee860 RSP=ffff888038ce7c38 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000005 R14=0000000000000004 R15=00007f8b28bd9fff RIP=ffffffff81737d77 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8b28bdb540 00000000 00000000 GS =0000 ffff8880e5734000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8b28d3b270 CR3=00000000290c9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000