Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:27850' (ECDSA) to the list of known hosts. 2025/05/24 07:40:53 fuzzer started 2025/05/24 07:40:54 dialing manager at localhost:46087 syzkaller login: [ 84.402038] cgroup: Unknown subsys name 'net' [ 84.570209] cgroup: Unknown subsys name 'cpuset' [ 84.653090] cgroup: Unknown subsys name 'rlimit' 2025/05/24 07:41:11 syscalls: 2214 2025/05/24 07:41:11 code coverage: enabled 2025/05/24 07:41:11 comparison tracing: enabled 2025/05/24 07:41:11 extra coverage: enabled 2025/05/24 07:41:11 setuid sandbox: enabled 2025/05/24 07:41:11 namespace sandbox: enabled 2025/05/24 07:41:11 Android sandbox: enabled 2025/05/24 07:41:11 fault injection: enabled 2025/05/24 07:41:11 leak checking: enabled 2025/05/24 07:41:11 net packet injection: enabled 2025/05/24 07:41:11 net device setup: enabled 2025/05/24 07:41:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 07:41:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 07:41:11 USB emulation: enabled 2025/05/24 07:41:11 hci packet injection: enabled 2025/05/24 07:41:11 wifi device emulation: enabled 2025/05/24 07:41:11 802.15.4 emulation: enabled 2025/05/24 07:41:11 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 07:41:13 starting 8 fuzzer processes 07:41:13 executing program 1: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x334e, 0x0, [0x7, 0xfffffffffffff000, 0x0, 0x7fff], [0xe16f, 0x8, 0x7, 0x4, 0xfffffffffffffff7, 0xca, 0x81, 0x32, 0x5, 0x81, 0x7, 0x3, 0x7247, 0x38c, 0x3, 0x4000000000, 0x9, 0x3, 0x7, 0xffffffffffffffc1, 0x4d, 0x8000000000000000, 0x4, 0x10001, 0x6, 0xffff, 0x9cd4, 0x4, 0x9, 0x6, 0x81, 0x8001, 0x8, 0x2, 0x5, 0x5, 0x9, 0x0, 0x1f, 0x81, 0x7, 0x4, 0x6, 0x7, 0x5, 0xed1, 0xffffffffffffffc8, 0x3, 0x1, 0x9, 0x8001, 0xfff, 0x1000, 0x0, 0x1, 0x2, 0x3, 0x3, 0x401, 0x0, 0x4, 0xfffffffffffffffc, 0x2, 0xff, 0x1000, 0x2, 0xbc, 0x5, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x4, 0x1, 0x0, 0x80, 0xe8a, 0xfff, 0x0, 0x80000001, 0x200, 0x100, 0xc905, 0xff, 0xfff, 0x6, 0x8, 0x5, 0x401, 0xfffffffffffffff9, 0x8, 0x100000001, 0x678, 0x7c5, 0x20, 0x6, 0x7acd, 0x100000001, 0xfffffffffffffff9, 0x1, 0x81, 0x9, 0x4, 0x0, 0x7, 0x7, 0x6, 0xffff, 0x3f, 0xff, 0x6, 0x1, 0x9, 0x7fff, 0x5, 0x0, 0x5, 0x0, 0x401]}) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x4f}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6e4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40820}, 0x40004840) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000005c0)={r0, 0x30e30257, 0x1, 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x1a4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7ff, @local, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffe01}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x960}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x43d9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb0dc}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "83a4a088129509a2586f85c5caf301842096d64159ad55eafbd93ca2583175"}}, @TIPC_NLA_NODE_ID={0x23, 0x3, "28667ae84365e660d17bc5fce196d1db899432d1e2c0e7ec512f526999ec86"}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040824}, 0x9ca9e8d530c5c899) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x24000040) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2e61ddb282a5439a1ed4fc4dc77f00e9"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "1a524871272590f40a9b931ca31ec033"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "eb51c29e5d4a8a1840fa90cd149a9f34"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "efa56e1c75445b51af85838384e86acc"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "b4fc65191a9b317b6a748cead568158b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c65461a78f5627ea26bbb07714786fcb"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2f2c2711adf1e50761a2309b49c9d93d"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000d00)=0x9) r6 = pidfd_getfd(r5, r2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x58, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x1f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4004) r8 = pidfd_getfd(r2, r0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x3f2, 0x800, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004810}, 0x804) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) 07:41:13 executing program 0: ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x5, 0x1, 0x5, 0x53, 0x4e, "7bf8bc63957f3da6112cf200278f616c05a30639f54a4febb70626d37683b435ee0d81e6d866044eea0bc2dc0ac3609d1c4336ad6eca1cecaa604c22e5f859bd671c41aee13d4b11d636c390e1ee"}, 0x57, 0x1) r0 = memfd_secret(0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000100)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000500)=0x2) r1 = syz_open_dev$vcsu(&(0x7f0000000540), 0x4, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xff, 0x7, 0x10, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x7, 0x10001, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', r2, 0x2f, 0x8, 0x2d, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, 0x8006, 0x10, 0x20}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x35491ccdb9defe03}, 0x4088025) ftruncate(r0, 0x3) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@debug}, {@cache_loose}, {@version_u}, {@fscache}, {@nodevmap}, {@nodevmap}], [{@audit}, {@pcr={'pcr', 0x3d, 0x31}}]}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000940)) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x8084}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c40)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}}}, &(0x7f0000000d40)=0xe8) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000d80)=0x0) r6 = syz_mount_image$nfs4(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x200, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000b40)="7324d75800bd07967a305dc8ceb5e54c2405fe9eaad9b42e6f311ab12b9ee74f83143f2a5e50d689c42391eceaf3e474699b932b534cf98e723e0c4f199bfc1a6abbfc95c920f46f016e1959f119a9f8b7b991d0d8caddc38c1872695ab7ae21bea06f63919f1046b1524ab2425ae36123ebfc02adafc59e77c11f64a2b53e0f620c", 0x82, 0xc525}], 0x2141005, &(0x7f0000000dc0)={[{'audit'}, {')x'}, {'syztnl0\x00'}, {'rfdno'}, {}, {'debug'}], [{@uid_gt={'uid>', r4}}, {@subj_role={'subj_role', 0x3d, 'audit'}}, {@audit}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@euid_lt={'euid<', r5}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) r7 = memfd_secret(0x80000) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0) read(r6, &(0x7f0000000e80)=""/216, 0xd8) 07:41:13 executing program 2: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x2, @local, 0x8}, {0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0xffff, [0xffff, 0x0, 0x8, 0x1f, 0xffff5144, 0x4, 0x7fffffff, 0x4]}, 0x5c) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080), 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) copy_file_range(r0, &(0x7f00000001c0)=0x1, 0xffffffffffffffff, &(0x7f0000000200)=0xe55, 0x726, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x18000040}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb9000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004014) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c008880}, 0x40480d0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000004c0)={0x1, 0xa0}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000500)={0x32, @loopback, 0x4e23, 0x4, 'nq\x00', 0x6, 0x7fff, 0x2a}, 0x2c) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) write$binfmt_misc(r4, &(0x7f00000005c0)={'syz1', "95003ca6ae28b5a087d4d60e100c38aac3f655a85182172436163c91006f77a7a59e4775946272404f29885222"}, 0x31) chroot(&(0x7f0000000600)='./file0\x00') setsockopt$packet_buf(r4, 0x107, 0x16, &(0x7f0000000640)="e2917dab3c4280681918ca4ec0ab81129175a19357efdff7c723a5e4a810f43a14b9a9065f5dcdb13519ba5b8e766341e414aa8e768ec404113d1d4135cd9b88fb826098a6542baca61efb1e3922f7b2891c09dc3a9a0a9f50d6f3a870cd40a049c4d051f70f3429e9e21db11c265130ba68233a007de30c8957a81df97714df19bcce5560f6c9665a1e48dc32b97358f556567702f4d14dd9e38c5fa0f532f1a2ce8823447f266c3388e79fb4d2940fb4d5bc3b2ab3", 0xb6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000700)={0x1, 0x5927, 0x2842, {0x5, 0xbdfe}, 0x1ff, 0x5}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000780)=0x1) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) [ 103.085024] audit: type=1400 audit(1748072473.299:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:41:13 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@dstopts={0x32, 0x9, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0x40}, @calipso={0x7, 0x30, {0x3, 0xa, 0x8, 0x8, [0x14a, 0xd321, 0x6, 0x7, 0x7]}}, @ra, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim]}, 0x50) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x303000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2aa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0xc005) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000380)=0x200) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a8040, 0x0) inotify_add_watch(r5, &(0x7f0000000400)='\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x8, &(0x7f0000000440)=[{0x9, 0x6, 0xfc}, {0x6, 0x4, 0x2, 0x2e}, {0x4, 0x1, 0xe1, 0x4ec}, {0x1, 0xe0, 0x27, 0x7ff}, {0xdf6, 0x80, 0x81, 0x1ff}, {0x1f, 0x7, 0x1, 0x5}, {0x80, 0x9, 0x3, 0x1}, {0x0, 0x8, 0x9, 0x200}]}, 0x10) mq_notify(r2, &(0x7f0000000600)={0x0, 0x21, 0x4, @thr={&(0x7f00000004c0)="89e7b1add861f324eb40232816357b02587d283c580732eb2718a48e634fa798f52b013e0c717b0b60856e30dc37ec808dfd403458345fcf221fe902f08b67f650db21438c84272489c1b1f4039c781764b7f07b8647cf0d48583a185992c3f8a713fae27c9bc007f6b983d24ac9dd831986997c18d51d445e9b4cd8055ddada5d3ddfb8897ccc7b539b2d8c4ef9753fb21ea0007af788a3582f8ceb5fa4d931f38e787521ca4d78d3ce", &(0x7f0000000580)="e7955cc5b52c39823d348bbb5c611b9343ea69fbb0f73a3918ea7d001ce233dbabcf5d4b326c88480d32c441a78b5e4a2b9b50edddf1b6a359c4269c3d1de2d67eac9b28b3"}}) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x202a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040005}, 0x4000800) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000740)={0x6, 0x2}) fstatfs(r5, &(0x7f0000000780)=""/207) fstatfs(r3, &(0x7f0000000880)=""/161) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 07:41:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x138, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9712ceaab2bb16c4846a048dd75dd0a03fbecf5c58"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "d6dc484f9aed7a430a03d571b7017710be60db3afd748c96c2b4a33cc41d0dbd97c4d148"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000010}, 0xc6) ioctl$FIOCLEX(r0, 0x5451) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x2, 0x200102) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffa78}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x100]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x158, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1970ac1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54b1b749}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66058f31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5145397}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbf37726}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fa6c889}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x48014}, 0x1) ioctl(0xffffffffffffffff, 0x1aa, &(0x7f00000005c0)="c5f345bd834ed5edde7aee6fe2683a46b77d17dd22a2b9c9013cdc4c2dfb7a939f0da74ed39a57a274875b380fe892f7e938c69a65c4fa52da04d61eaa61f222acd27b41456d3762a787eb88fa969271a977d7294103398dd62429a158cf63a978829282453a5db049e48233d9") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc010}, 0xc0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000780)={{r1}, 0x0, 0xa, @unused=[0xffff, 0xdcb, 0x3], @subvolid=0x7}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000001780)=0x4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1c}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4d99ef2b5ff94034ae9f943d8e2aa9ac"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x404c080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 07:41:13 executing program 5: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1b0, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xdc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5ad8471d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3c8b49ce}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x70, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd187}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4080}, 0x80) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x240, r0, 0xb28, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7c5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x42}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcf8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x61, 0x3, "6c1e9d151548f4e29c5727036aaa03ca71b4e344d80df3087fbdeaaad8cfe05a60e78043bab0e4639e68b1d9d42990056af2039b2a910a6b98deae2017c11b66c98990dd2a2c688494daff8d2f200c940ed2339fb3c57d3ea1276384e9"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ff598afffadba270c1a4d1fdabae8d1ae7c7bcaa1ece"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x18045ff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x492a6269}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000005c0)) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x8e000, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000680)={0x0, 0x1f, 0x5, 0x0, 0x0, [{{}, 0x3}, {{}, 0x7}, {{r2}, 0x3}, {{r3}, 0x20}, {{r4}, 0x2}]}) r5 = syz_open_dev$vcsn(&(0x7f0000000740), 0x0, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000780)={@private=0xa010100, @empty, 0x0, 0x5, [@loopback, @remote, @private=0xa010102, @multicast1, @private=0xa010101]}, 0x24) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x2, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000900), r5) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x410) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000a00)="b45c18973a0ab63d3e43c416fb99585c488f7b108c8f77018b0b187f1d61fb9b17ab5054dcaf0d9ee247cd2694941ea4a38b6e7574f5336e260b320d9c2bf6f466c3ccaa75c50be57c77567dfc944e175ed0b3123630834990fdfa5691a07f598f72a02e55adb3b7754b28540b7acc4990072d4d2cf749df751351d2330b8064e7efe25cd7dcc6561062caa97b325c04acf600d320f7798216addb7f47555f29a4546591145e803d37ac8b338b95acbb6ff56c052290408150018799c8391a73526c9ac293a2b7ca8a8c509fafb0ecb94332d970dde8b8a2c38f682efdb94cf227b64f1d1abee7f108b811259aa16038cb88f81c4396", 0xf6) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000b80)={0x1, 0x1, 0x1000, 0x34, &(0x7f0000000b00)="636de3e6ecb17433995d0a287a9593630c13aec99e9123d3a8371efacef2723cf7141741ac37925d49b5a41429e5ae914a4536d7", 0x24, 0x0, &(0x7f0000000b40)="a8ee2f382822d64c5d9934106b5c483085db172e6f8ccf2037c0e974b27412d791a553e3"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r2, {0x5, 0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x11}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2404080c}, 0x80) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000d80)={0x274, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe56}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf74c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "2e231e98f64ba4b7e803e82eed6c16f46cf4a6a6c34287768bfea5f2ac680d76f885"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "76b26a01a91f86781249b8717d5b3529131d5215f5b1a8f171"}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc4e8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}]}]}, 0x274}}, 0x4008000) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x8c, 0x0, 0x209, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 07:41:13 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000003f80)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000000100)=""/236, 0xec}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/71, 0x47}], 0x5, &(0x7f0000000440)=""/105, 0x69}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000580)=""/239, 0xef}], 0x2, &(0x7f00000006c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000016c0)=@rc, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)=""/141, 0x8d}, {&(0x7f0000001800)=""/54, 0x36}, {&(0x7f0000001840)=""/44, 0x2c}], 0x3, &(0x7f00000018c0)=""/105, 0x69}, 0x800}, {{&(0x7f0000001940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f00000019c0)=""/124, 0x7c}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/210, 0xd2}, {&(0x7f0000001b80)=""/121, 0x79}, {&(0x7f0000001c00)=""/234, 0xea}], 0x5, &(0x7f0000001d80)=""/109, 0x6d}, 0x6}, {{&(0x7f0000001e00)=@generic, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001e80)=""/4096, 0x1000}], 0x1, &(0x7f0000002ec0)=""/147, 0x93}, 0xffffffff}, {{&(0x7f0000002f80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003000)=""/90, 0x5a}, {&(0x7f0000003080)=""/215, 0xd7}, {&(0x7f0000003180)=""/100, 0x64}, {&(0x7f0000003200)=""/174, 0xae}], 0x4, &(0x7f0000003300)=""/93, 0x5d}, 0x7}, {{&(0x7f0000003380)=@x25={0x9, @remote}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003400)=""/102, 0x66}, {&(0x7f0000003480)=""/16, 0x10}, {&(0x7f00000034c0)=""/154, 0x9a}, {&(0x7f0000003580)=""/170, 0xaa}], 0x4, &(0x7f0000003680)=""/184, 0xb8}}, {{&(0x7f0000003740)=@isdn, 0x80, &(0x7f0000003b00)=[{&(0x7f00000037c0)=""/166, 0xa6}, {&(0x7f0000003880)=""/120, 0x78}, {&(0x7f0000003900)=""/30, 0x1e}, {&(0x7f0000003940)=""/144, 0x90}, {&(0x7f0000003a00)=""/83, 0x53}, {&(0x7f0000003a80)=""/77, 0x4d}], 0x6, &(0x7f0000003b80)=""/179, 0xb3}, 0x9}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/7, 0x7}], 0x1, &(0x7f0000003cc0)=""/196, 0xc4}, 0x1f}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003dc0)=""/81, 0x51}], 0x1, &(0x7f0000003e80)=""/250, 0xfa}, 0x682}], 0xa, 0x40000000, &(0x7f0000004200)={0x0, 0x3938700}) r2 = syz_open_dev$sg(&(0x7f0000004240), 0x8, 0x40000) fsetxattr$security_selinux(r2, &(0x7f0000004280), &(0x7f00000042c0)='system_u:object_r:getty_log_t:s0\x00', 0x21, 0x2) umount2(&(0x7f0000004300)='./file0\x00', 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000004340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004380)=0x14) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000043c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000004480)={'syztnl2\x00', &(0x7f0000004400)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x3, 0x9, 0x40, @mcast1, @loopback, 0x7800, 0x8, 0x1ff, 0x5}}) getsockname(r0, &(0x7f00000044c0)=@ethernet={0x0, @link_local}, &(0x7f0000004540)=0x80) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000004580)={0x2, 0x0, @local}, &(0x7f00000045c0)=0x10) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000004600)={0x0, @nfc={0x27, 0x1, 0x0, 0x6}, @phonet={0x23, 0x7, 0x0, 0x2}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x5, 0xffffffffffffff00, 0x9}) lsetxattr$security_ima(&(0x7f0000004680)='./file0\x00', &(0x7f00000046c0), &(0x7f0000004700)=@sha1={0x1, "83641a74a6cd1f8eaf319df088b16f8e3e13e8a0"}, 0x15, 0x1) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000004740)={@loopback, @rand_addr, @remote}, &(0x7f0000004780)=0xc) syz_mount_image$nfs4(&(0x7f00000047c0), &(0x7f0000004800)='./file0\x00', 0x3, 0x9, &(0x7f0000004d40)=[{&(0x7f0000004840)="d5e4d8d68cae46f4", 0x8, 0x5}, {&(0x7f0000004880)="485834d352491d40d4d0cb8c3917d6215c56639537", 0x15, 0x7}, {&(0x7f00000048c0)="fde882a193eb55a26155a336c14c636a54fd657a183458e3c83ebf2e03b9870fd3851f13f2701e36b15b4c5c0c13c9bb71aaf11e321f1574f977a128be217dd72f2ae156edba450631a0b785033fbc8bd65bd98240127ea6f8c27f804c181955c970808a607ac52880055dd4997e3ff1cdd1239949537afcf2834a7ca178", 0x7e, 0x6}, {&(0x7f0000004940)="25bda9ffac48cc15081a3b092b23aa3264b6ea27d35fe734c85117569287a6bc3793ee3df41d04413553d16b46031a559f589b06b7bd65bf2e208fd0d3c6ee0409ff62705fbedef653fc9028", 0x4c, 0x3}, {&(0x7f00000049c0)="aa3b131d", 0x4, 0x1ff}, {&(0x7f0000004a00)="a705de8e807fceb5301c4ed46d57443b04f2e85a8a9174056a7f428238bbdb0ed3ab321f642c74321fdd5ef380e92945e2e39f1d392103e5bd96061360750c8e55e854881767ded55a7fb500400b669a3daad7875b5c282a09584a762821f68abfff0dff33320ed6b2398422176620646ebadb4c7b", 0x75, 0x9}, {&(0x7f0000004a80)="e42b6d7fdc713ecb1975f4267c207de9eb82029a9f2c04545064f4091f9709749b1a8c622f53066733183fcf53928a4c7bb7ee433a128cb1c276bb416962831b82ad1f5635edffa0af35fba6db24ac03a4b9206e4e5c08260b8b525fb08d93b171b4f2bf98f0ba32c5902b939007051dd08814861ba4df958fa366ded5ed916bf9357c14404ad2030fa875cb4206bfc5ac4a0e955c4e8943a8f5259cd4becb7f715edff5ab9330fb432b2a9c046bacb58cfb774f180957b6a5919c39807336cd9c5c36e485dae1b0e0046b6d2bb29d446e297de2722ebee1365e5c7cb6", 0xdd, 0x8}, {&(0x7f0000004b80)="cf11fc20a49b30f8f69691614d497e4ded5536e995c194316c31376da5b9f90bba111b31f0b2a0382d7a15df425e43a1d7bf3a7c8a4779aead8bf30309fe7572b9d6dd60a0ad7007d2da08b465b94dac78a44d7e085bd6614c2bc1b52ed2a4a88841432d684779fbfdf539def505ed32d5dbe6c1202f8114c030ed1d842f199a3477dc0d83df25d09ea15b64d40bfe463994e23e7c4232a45caa2769052ad53a44c4a38cdd5cb96ff911f7bc8fa468e1ca2a72a562f7dd3e1c5a5c524d52", 0xbe, 0x86c2}, {&(0x7f0000004c40)="a62a12838cb47e4e479ae8b9a8ea59bc933b7f7b7aff814e7a79b7748388f035119c25964bf893f38a841dc3fed62c75435323141a9f25e851bc3e6005138d9805a59064c19259b0b76b86b218a19b783818ca1d285752f81f749a150af3b30eca25b756cefedbef592e5553f3985dce338e76544fed998a2c4851e4691dd42e628c340f6f99b21d905d38bcc8d77a5f1d5131d65b430dab85a380b01631899ad14dd91c4e361263648dbe0b541189bddfd31d0a6285c9a413a6ff371455fe343d1ad89f86cab9c638cb2d7177e84468a815f77f616d2e9940fc1656bc118537e7f7a321f36d104cd0756603999d22d2", 0xf0, 0x8}], 0x92000, &(0x7f0000004e40)={[{'!&)'}, {'\x00'}, {'security.selinux\x00'}, {}, {'-++@@$\t'}, {'syztnl2\x00'}, {}, {'[\xc6)}'}], [{@subj_type={'subj_type', 0x3d, 'security.ima\x00'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@measure}]}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000004fc0)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f00)={0x58, 0x0, 0x1000, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4ae, 0x61}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000c4}, 0x20008884) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000005000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000005040)=""/121, &(0x7f00000050c0)=0x79) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000005100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000005140)={0x1}, 0x8) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000005180)) 07:41:13 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x400200, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x40, 0x5, 0xff, 0x0, 0x5, 0x202, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x6}, 0x2001, 0x1ff4, 0x3, 0x3, 0x9, 0x80000000, 0xe, 0x0, 0xd1, 0x0, 0x81}, r0, 0x8, 0xffffffffffffffff, 0xc) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000000c0)={0x3, 0x100}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x61, 0x20, 0x9, 0xc1, 0x0, 0x2, 0x18000, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x5185, 0x1, 0x1f, 0x4, 0x10001, 0x7ff, 0x7, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0xa) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, 0xee01, r3) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x5b, 0x6d52}, 0x100, './file0\x00'}) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000380)={0x1, 0x200, 0x0, 0x10001, 0x24000000, 0x9, 0xfffffffa, 0x3, 0x1ee, 0x1, 0x4, 0x5, 0x5, 0xd4}) r4 = open_tree(r0, &(0x7f00000003c0)='./file0\x00', 0x8101) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000400)) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000480)=0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x280200, 0x60) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast1, @in6}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000640)) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000680)=0x5, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000700)) [ 104.390799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.396323] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.403278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.414278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.418871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.523038] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.527515] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.534630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.536302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.543940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.547570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.550155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.557147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.560623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.569027] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.590620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.594887] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.622622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.657602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.658673] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.663286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.674772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.695017] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.697981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.716103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.720125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.739138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.749945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.756585] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.761000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.763835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 104.770118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 104.775679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 104.785653] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 104.794201] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 104.831156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 104.886766] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 104.892155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 104.925920] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 104.935242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.474055] Bluetooth: hci0: command tx timeout [ 106.666498] Bluetooth: hci2: command tx timeout [ 106.667259] Bluetooth: hci1: command tx timeout [ 106.728819] Bluetooth: hci3: command tx timeout [ 106.856541] Bluetooth: hci5: command tx timeout [ 106.920589] Bluetooth: hci7: command tx timeout [ 106.920636] Bluetooth: hci4: command tx timeout [ 107.049109] Bluetooth: hci6: command tx timeout [ 108.523885] Bluetooth: hci0: command tx timeout [ 108.712819] Bluetooth: hci2: command tx timeout [ 108.713522] Bluetooth: hci1: command tx timeout [ 108.777768] Bluetooth: hci3: command tx timeout [ 108.904910] Bluetooth: hci5: command tx timeout [ 108.968633] Bluetooth: hci7: command tx timeout [ 108.969292] Bluetooth: hci4: command tx timeout [ 109.096615] Bluetooth: hci6: command tx timeout [ 110.568598] Bluetooth: hci0: command tx timeout [ 110.760631] Bluetooth: hci1: command tx timeout [ 110.763732] Bluetooth: hci2: command tx timeout [ 110.824677] Bluetooth: hci3: command tx timeout [ 110.952919] Bluetooth: hci5: command tx timeout [ 111.016524] Bluetooth: hci4: command tx timeout [ 111.016561] Bluetooth: hci7: command tx timeout [ 111.144480] Bluetooth: hci6: command tx timeout [ 112.616829] Bluetooth: hci0: command tx timeout [ 112.808575] Bluetooth: hci2: command tx timeout [ 112.808630] Bluetooth: hci1: command tx timeout [ 112.874026] Bluetooth: hci3: command tx timeout [ 113.000540] Bluetooth: hci5: command tx timeout [ 113.064726] Bluetooth: hci7: command tx timeout [ 113.066058] Bluetooth: hci4: command tx timeout [ 113.193980] Bluetooth: hci6: command tx timeout [ 164.646738] syz-executor.4 (284) used greatest stack depth: 25072 bytes left [ 164.731166] syz-executor.7 (285) used greatest stack depth: 24800 bytes left [ 166.792678] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.794338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.795689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.801767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.804812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.835686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.839386] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.843855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.851076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.857956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.906728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.912983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.914237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.934676] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.938640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.979965] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.992139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.011898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.018789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.019689] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.043664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.046526] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.060514] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.064688] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.067212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.068648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.097510] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 167.107028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.111130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.117361] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 167.127858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.137625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 167.152353] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.160051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.166772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 167.176812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.185745] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.188850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 167.255122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.299909] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 168.872642] Bluetooth: hci0: command tx timeout [ 168.936580] Bluetooth: hci1: command tx timeout [ 169.001486] Bluetooth: hci2: command tx timeout [ 169.128511] Bluetooth: hci3: command tx timeout [ 169.128959] Bluetooth: hci4: command tx timeout [ 169.192565] Bluetooth: hci5: command tx timeout [ 169.320694] Bluetooth: hci6: command tx timeout [ 169.386445] Bluetooth: hci7: command tx timeout [ 170.920507] Bluetooth: hci0: command tx timeout [ 170.985463] Bluetooth: hci1: command tx timeout [ 171.049325] Bluetooth: hci2: command tx timeout [ 171.176473] Bluetooth: hci3: command tx timeout [ 171.176904] Bluetooth: hci4: command tx timeout [ 171.240655] Bluetooth: hci5: command tx timeout [ 171.370887] Bluetooth: hci6: command tx timeout [ 171.434458] Bluetooth: hci7: command tx timeout [ 172.970471] Bluetooth: hci0: command tx timeout [ 173.032719] Bluetooth: hci1: command tx timeout [ 173.098449] Bluetooth: hci2: command tx timeout [ 173.224676] Bluetooth: hci4: command tx timeout [ 173.225140] Bluetooth: hci3: command tx timeout [ 173.288467] Bluetooth: hci5: command tx timeout [ 173.416576] Bluetooth: hci6: command tx timeout [ 173.480501] Bluetooth: hci7: command tx timeout [ 175.016657] Bluetooth: hci0: command tx timeout [ 175.080461] Bluetooth: hci1: command tx timeout [ 175.145467] Bluetooth: hci2: command tx timeout [ 175.273484] Bluetooth: hci3: command tx timeout [ 175.273521] Bluetooth: hci4: command tx timeout [ 175.336741] Bluetooth: hci5: command tx timeout [ 175.464718] Bluetooth: hci6: command tx timeout [ 175.530947] Bluetooth: hci7: command tx timeout [ 229.176208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.179625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.182045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.188004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.194254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.234332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.244087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.246952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.260048] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.269735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.331250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.351057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.354298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.415905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.442361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.450781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.492136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.493659] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.501909] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.501965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.527835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.538013] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.566153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.570718] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.571982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.575147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.586094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.599352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.603423] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.614102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.616931] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.619700] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.625248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.632774] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.634936] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.637160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.642161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.652876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.700798] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.749889] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.208499] Bluetooth: hci0: command tx timeout [ 231.337827] Bluetooth: hci1: command tx timeout [ 231.593515] Bluetooth: hci2: command tx timeout [ 231.656572] Bluetooth: hci6: command tx timeout [ 231.657215] Bluetooth: hci3: command tx timeout [ 231.722459] Bluetooth: hci4: command tx timeout [ 231.784704] Bluetooth: hci7: command tx timeout [ 231.785996] Bluetooth: hci5: command tx timeout [ 233.256831] Bluetooth: hci0: command tx timeout [ 233.385168] Bluetooth: hci1: command tx timeout [ 233.640489] Bluetooth: hci2: command tx timeout [ 233.704567] Bluetooth: hci3: command tx timeout [ 233.705026] Bluetooth: hci6: command tx timeout [ 233.768751] Bluetooth: hci4: command tx timeout [ 233.832657] Bluetooth: hci5: command tx timeout [ 233.833108] Bluetooth: hci7: command tx timeout [ 235.304514] Bluetooth: hci0: command tx timeout [ 235.433932] Bluetooth: hci1: command tx timeout [ 235.689496] Bluetooth: hci2: command tx timeout [ 235.753992] Bluetooth: hci3: command tx timeout [ 235.754509] Bluetooth: hci6: command tx timeout [ 235.816577] Bluetooth: hci4: command tx timeout [ 235.880706] Bluetooth: hci7: command tx timeout [ 235.881160] Bluetooth: hci5: command tx timeout [ 237.352747] Bluetooth: hci0: command tx timeout [ 237.481640] Bluetooth: hci1: command tx timeout [ 237.736488] Bluetooth: hci2: command tx timeout [ 237.801513] Bluetooth: hci6: command tx timeout [ 237.801969] Bluetooth: hci3: command tx timeout [ 237.864717] Bluetooth: hci4: command tx timeout [ 237.928607] Bluetooth: hci7: command tx timeout [ 237.929046] Bluetooth: hci5: command tx timeout [ 291.391804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.399070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.402928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.419004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.426770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.534535] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.538068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.540893] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.543307] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.545768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.550816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.556206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.564127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.574972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.583850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.708086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.713939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.720829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.746902] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.749240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.775224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.777134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.785885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.786083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.822919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.931341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.961041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.981536] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.025040] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.047866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.049844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.058776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.075642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 292.094773] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 292.100795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 292.120653] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.137319] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 292.150109] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 292.209992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.213201] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.481586] Bluetooth: hci0: command tx timeout [ 293.608537] Bluetooth: hci1: command tx timeout [ 293.609526] Bluetooth: hci2: command tx timeout [ 293.864506] Bluetooth: hci3: command tx timeout [ 293.928489] Bluetooth: hci4: command tx timeout [ 294.185627] Bluetooth: hci5: command tx timeout [ 294.248501] Bluetooth: hci7: command tx timeout [ 294.378630] Bluetooth: hci6: command tx timeout [ 295.530450] Bluetooth: hci0: command tx timeout [ 295.658029] Bluetooth: hci2: command tx timeout [ 295.658621] Bluetooth: hci1: command tx timeout [ 295.912522] Bluetooth: hci3: command tx timeout [ 295.977477] Bluetooth: hci4: command tx timeout [ 296.232526] Bluetooth: hci5: command tx timeout [ 296.297749] Bluetooth: hci7: command tx timeout [ 296.425501] Bluetooth: hci6: command tx timeout [ 297.576715] Bluetooth: hci0: command tx timeout [ 297.706208] Bluetooth: hci2: command tx timeout [ 297.706656] Bluetooth: hci1: command tx timeout [ 297.962446] Bluetooth: hci3: command tx timeout [ 298.025434] Bluetooth: hci4: command tx timeout [ 298.281973] Bluetooth: hci5: command tx timeout [ 298.345696] Bluetooth: hci7: command tx timeout [ 298.474035] Bluetooth: hci6: command tx timeout [ 299.625469] Bluetooth: hci0: command tx timeout [ 299.753482] Bluetooth: hci2: command tx timeout [ 299.753907] Bluetooth: hci1: command tx timeout [ 300.010628] Bluetooth: hci3: command tx timeout [ 300.073498] Bluetooth: hci4: command tx timeout [ 300.329468] Bluetooth: hci5: command tx timeout [ 300.392565] Bluetooth: hci7: command tx timeout [ 300.520468] Bluetooth: hci6: command tx timeout [ 353.745007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.751644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.757542] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.767911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.777567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.926356] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.932202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.934937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.947458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.954918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.001530] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.005518] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.015654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.031144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.038986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.128104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.140441] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.155469] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.181657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.186723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.218825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.224754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 354.237928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.238304] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.253689] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 354.258881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.271136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.304187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.304514] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.320975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.323468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.333010] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.336219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.358022] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 354.374969] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.394066] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.401258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.407287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 354.428526] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 354.438883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.817645] Bluetooth: hci0: command tx timeout [ 356.010618] Bluetooth: hci1: command tx timeout [ 356.073547] Bluetooth: hci2: command tx timeout [ 356.328601] Bluetooth: hci3: command tx timeout [ 356.520545] Bluetooth: hci5: command tx timeout [ 356.520656] Bluetooth: hci4: command tx timeout [ 356.584502] Bluetooth: hci7: command tx timeout [ 356.713535] Bluetooth: hci6: command tx timeout [ 357.864614] Bluetooth: hci0: command tx timeout [ 358.058445] Bluetooth: hci1: command tx timeout [ 358.120465] Bluetooth: hci2: command tx timeout [ 358.378431] Bluetooth: hci3: command tx timeout [ 358.568722] Bluetooth: hci4: command tx timeout [ 358.569237] Bluetooth: hci5: command tx timeout [ 358.632480] Bluetooth: hci7: command tx timeout [ 358.760908] Bluetooth: hci6: command tx timeout [ 359.912498] Bluetooth: hci0: command tx timeout [ 360.104633] Bluetooth: hci1: command tx timeout [ 360.169698] Bluetooth: hci2: command tx timeout [ 360.424687] Bluetooth: hci3: command tx timeout [ 360.617478] Bluetooth: hci5: command tx timeout [ 360.617984] Bluetooth: hci4: command tx timeout [ 360.681436] Bluetooth: hci7: command tx timeout [ 360.808635] Bluetooth: hci6: command tx timeout [ 361.960581] Bluetooth: hci0: command tx timeout [ 362.152698] Bluetooth: hci1: command tx timeout [ 362.216663] Bluetooth: hci2: command tx timeout [ 362.472641] Bluetooth: hci3: command tx timeout [ 362.664621] Bluetooth: hci4: command tx timeout [ 362.665125] Bluetooth: hci5: command tx timeout [ 362.729467] Bluetooth: hci7: command tx timeout [ 362.856748] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:46:22 Registers: info registers vcpu 0 RAX=ffffffff8143ae68 RBX=ffffffff81604230 RCX=ffff8880096177a4 RDX=1ffff110012c2f15 RSI=ffffffff8143ae68 RDI=ffff888009617918 RBP=ffff8880096178e8 RSP=ffff888009617848 R8 =0000000000000001 R9 =ffff888009617890 R10=000000000003b67d R11=000000000000b2c3 R12=ffff888009617918 R13=0000000000000000 R14=ffff888009601b80 R15=ffff88802a7e0680 RIP=ffffffff81604234 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4aa3fc46f4 CR3=000000002c934000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f4aa3fd347000007f4aa3fd2f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=ffff88802c6fb700 RCX=0000000000000000 RDX=0000000000000005 RSI=0000000000000000 RDI=ffffffff85c1d1c0 RBP=ffff88802c6fc158 RSP=ffff8880317a7110 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff88802c6fc180 R13=0000000000000003 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81518e20 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f74f51d9368 CR3=0000000031ac7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000