Warning: Permanently added '[localhost]:1695' (ECDSA) to the list of known hosts. 2025/06/04 04:37:42 fuzzer started 2025/06/04 04:37:42 dialing manager at localhost:39055 syzkaller login: [ 100.969707] cgroup: Unknown subsys name 'net' [ 101.065883] cgroup: Unknown subsys name 'cpuset' [ 101.091210] cgroup: Unknown subsys name 'rlimit' 2025/06/04 04:38:05 syscalls: 2214 2025/06/04 04:38:05 code coverage: enabled 2025/06/04 04:38:05 comparison tracing: enabled 2025/06/04 04:38:05 extra coverage: enabled 2025/06/04 04:38:05 setuid sandbox: enabled 2025/06/04 04:38:05 namespace sandbox: enabled 2025/06/04 04:38:05 Android sandbox: enabled 2025/06/04 04:38:05 fault injection: enabled 2025/06/04 04:38:05 leak checking: enabled 2025/06/04 04:38:05 net packet injection: enabled 2025/06/04 04:38:05 net device setup: enabled 2025/06/04 04:38:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/04 04:38:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/04 04:38:05 USB emulation: enabled 2025/06/04 04:38:05 hci packet injection: enabled 2025/06/04 04:38:05 wifi device emulation: enabled 2025/06/04 04:38:05 802.15.4 emulation: enabled 2025/06/04 04:38:05 fetching corpus: 0, signal 0/0 (executing program) 2025/06/04 04:38:07 starting 8 fuzzer processes 04:38:07 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}}, 0x40) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r7, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x64}, 0x1, 0x0, 0x0, 0xa008080}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x53}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3880f968058868dcd1753e33bdb500e9"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44804}, 0x15) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000940), 0x8800) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r9, 0xf505, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980), 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x104, 0x1, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x20}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}]}}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xe595}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffe}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2af1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe751}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c00)={0x314, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TESTDATA={0xef, 0x45, "2abe948286db0e9df19157b1ec684028cea681ae1c447d0af7143c87c63e8ed6a0ed3e9079899d88378ece1483641975438dd3f9bd11b9d6dfeff0135fdb787278114ed3709d70c007fec797ccb1400e2d960101adb64f0807531c7ae2c0bb9d31027cdaccfe8cdd89cbd81053485797ccf44e50e34469cda802baeebd16272394f7c7e6a68a729bd2682806416a67ec4653e4dee105aa45c3faadbd300d681036f6089c0dfadfdd12394573fb4968d4cdb853709e2ec86b434afb3bad328f6c2cef61943fe62cc585d8b9c1819beb2e6a828f8e82c2fe64fa31371aa4e03c2ac8bdc1c48177459ef3a743"}, @NL80211_ATTR_TESTDATA={0x5e, 0x45, "28672ce8ae5f632eeddfd2fe7f6992f825da28b9c412948fe9a2f09b988bc8ad25185a0290ddcba3ac5c2cfd005088d41300795f24e0a27a00eb5a66cb825454567f05a04c2fbaa181c376cc6f0c451e4653d31a3698a1452535"}, @NL80211_ATTR_TESTDATA={0xe2, 0x45, "4a857d81894f714bf038e3bec6d26ca381156026dcc91f45a89e48b7d56f0bf5b9f11dcaf9c1d0699dace52b40d75faf50e55da3e15f6c3bbaf89a45e37b1c84fa72d053d2e18d059737f1c801ab52c1265e91f5e5ebab9f06722705472db920de4b44ce5fc50f822d92f13f41f238227aaefeb53feb6f9988f7fcbcee484d734c46e02ef988ba77893db09b3cb7d98a60d64627b293c72050203ce94114d6cff0a0fdc610bc5f1ab43d077a5f6cb93408e61a214841cfc031a59c188b8eaea706ae372e8d29c25d84ffdcaf0feb9eb62e6d78fd96d4c36a48d3f6fb879d"}, @NL80211_ATTR_TESTDATA={0x62, 0x45, "1d7dc92480f2ef42970a9997dbf0f39e18d2cb9fa4dd97cd775c43361d82d44e84cdc2b9279f46794199c76873cd0b5990274002a3a1244cffeea013253031a4a4e7c0348230658646ac0ff8334a6ba66881f95f37b12f4944b61aed834a"}, @NL80211_ATTR_TESTDATA={0x5f, 0x45, "2cce5775be55f32ed3cde26ec493e98bcd2f03a2090fd8e8c2280c4744edf3ffbc8154e7c1e45fbb9db917435a3d4edb5b3ee53997d9bf2c70cb91431e0c94725376b512e412dc453a33ec6aa1945a229f907e1a0228fd2c6e3fb7"}]}, 0x314}, 0x1, 0x0, 0x0, 0x90}, 0x800) 04:38:07 executing program 1: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2140}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x1) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x0, 0x400, 0x70bd27, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf48}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008004) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/206, 0xce}], 0x1, &(0x7f0000000400)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x1, 0x0, &(0x7f00000004c0)={0x77359400}) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000500)={0x0, {}, 0x0, {}, 0x0, 0x5, 0xc, 0xc, "1e3646b9daa49c5dc332406d0544e6732e112220dc17d3a9438effce78436eac3aee78dfcf37b98dfbc7ad677eb2e36a610a7de901b321b118000404f68c37eb", "159ea77db215756082be23ff94fd2fe35e3be79b93c65c81138044bae16feaf9", [0x9, 0xd9]}) llistxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=""/28, 0x1c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = openat2(r2, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x408300, 0x1}, 0x18) r11 = syz_io_uring_complete(0x0) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r10}, {0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r11}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}]}, 0xac}, 0x1, 0x0, 0x0, 0x4006050}, 0x20000000) r12 = openat(r8, &(0x7f0000000840)='./file0\x00', 0x4000, 0x8) ioctl$RTC_VL_CLR(r12, 0x7014) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r9) r13 = fsmount(r4, 0x0, 0x83) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r0) sendmsg$TIPC_NL_MEDIA_SET(r13, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x170, r14, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x14c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xc2ed, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x636000}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6041}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5537}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004010) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000b80), r11) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000c00)={0x0, @hci={0x1f, 0x4, 0x1}, @rc={0x1f, @none}, @xdp={0x2c, 0x2, 0x0, 0x2a}, 0x0, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000bc0)='ip6_vti0\x00', 0x2ca, 0x100000000, 0x7}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x20, 0x0, 0x20, @remote, @private1, 0x1, 0x8000, 0x2, 0x3f}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x9, 0x200, 0x45, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x0, 0x62, 0x200}}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f0000001440)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000e00)={0x5f8, r15, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x2b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc396}}, {0x8, 0x7, 0x100}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xfff, 0x0, 0x4, 0x1}, {0x823c, 0x1, 0x5a, 0x100}, {0xf89e, 0x93, 0x0, 0x3c76}, {0x0, 0xff, 0x4, 0x3ff}, {0x9, 0x8, 0x3f, 0xff}, {0x9, 0xff, 0x2, 0x4}, {0x8, 0x2, 0x8, 0x8000}, {0x5, 0x6, 0xff, 0x4}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x5, 0x0, 0x7}, {0x4, 0x2f, 0x3, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r18}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x6, 0x2, 0x4}, {0x8001, 0x1, 0x0, 0x1}, {0x8, 0x7, 0x40, 0xfffffffb}, {0x7, 0xff, 0x6, 0x9}, {0x8001, 0x7, 0x9}, {0x400, 0x0, 0x4, 0x7fffffff}, {0x1, 0xfd, 0x81, 0x80}, {0x1, 0x15, 0x6, 0x7}, {0x4, 0x4, 0x5, 0x993}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40040) 04:38:08 executing program 2: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0x1, 0x80, 0x9, 0x101, 0xfffffffffffffe01]}, &(0x7f0000000080)=0x78) r0 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x100, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x10000) r1 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f00000001c0)="4822b3041a57afd03403a76d516dab90cfe949aadd0441496496515385167ec7b852b73656b3e9eb27158c2c", 0x2c) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000200)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/thermal', 0x4200, 0x108) getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000280)={@multicast1, @dev, @loopback}, &(0x7f00000002c0)=0xc) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}]}, 0x40}}, 0x8010) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000480)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x170, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xd4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe57}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f78cc0693f6b518c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "df5f6fe3e6b380c1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d54564d52056d0495e8b25b82ec0d52d662a773e04cdc01c5448aabdd83fcfd8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f1cc6f932817b98460e5e76beebff27520e698b1dd8ecabd"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="810cb849294615528cfe0fa9de793f86c87fb798aec90893"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "afe3076bbd7349cf"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8f82894ef0224dee1130e6c1246fccbe16697f5b4f3ab4cb873f41f43f226dac"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="79a33851569f867ba4b6e634ccd3dfd8fd8de1090c8ff8d8"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a5c17ee6f6188a9f9c990afe07bc80a8100602c4921795372eb46313610eb4fc"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="61d2ff24ec0c5d71583d0f570993d70d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff9}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5b8460401f30960ab60885372fb63053696ded6576fcaed730efa00db388f402"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "702d5802e8f6363a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ce089177b5e42fed"}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20040040}, 0x40014) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000700)={0x5, 0x1, 0xffffffff, 0x4, 0xd, "93ce21146f6036f2cc8336edc8f328c072f08e"}) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) r5 = dup3(r1, r2, 0x0) openat$incfs(r5, &(0x7f0000000740)='.pending_reads\x00', 0x2000, 0x1) r6 = openat$incfs(r4, &(0x7f0000000780)='.pending_reads\x00', 0x123600, 0x1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, &(0x7f00000007c0)) 04:38:08 executing program 3: prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x88d4) ioctl$KDDISABIO(r1, 0x4b37) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x48, 0xd, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000001a00)=""/202) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001b00)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000001b40)={0x0, @aes256, 0x0, @desc1}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001b80)=[r2, r0, 0xffffffffffffffff, r1], 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r2, {r4}}, './file0\x00'}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000001d00)) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000001d40)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001d80)) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000001dc0)='(\x00', &(0x7f0000001e00)="cf48fd451cadaec8e3939733b9619aeab2e9d60be58637a5ad1607ce6f8fbce8fd9874050c24968a1d8b1490b6d2e7aafd200725e5dfa1c610b978a39101fa050215c28f69d0a43fe92eb910d5a16d68a46c9259d1901c726842928b47422b2a081e6628357ed99797223df4ceaf36458ad7fabc1af1e705a4738ff0693ce19763a732fe17512c6ad2a18c551a7c2870a7eea702744096a5d0bd6dd45b4e7ca59297a3830b55a1ab4f607839cd767e85ffd7958f741e81113c3a5e7779ad91270cc8cf95a0708ede574f736f4c84d2c6ebad5eb5d34ac71cb3af17", 0xdb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000001f00)={'security\x00', 0x2, [{}, {}]}, 0x48) [ 126.416333] audit: type=1400 audit(1749011888.079:7): avc: denied { execmem } for pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:38:08 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x1, 0x70bd2b, 0x7, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x49}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5be37bf8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x19b601fa}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008010}, 0x48881) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x145000, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f00000001c0)="8bffbbdd0cdfcddb25cf6a339fa333b8d110347a65a28776ad5f9e17c8777839558656adf5a7bfd485125339db2d8c23e24bd69a29a22cbf31e210af24611ab0f013d277f0b6b3516821f31af51cce1131279b3bfc93ec6ee54efe40a9d1d909253020a54200d64bc5e48f270f407faa2f", 0x71) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x8005) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x21c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb7}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfc2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3b5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x24f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4008001}, 0x40) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5a8f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x50}}, 0x801) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x84, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x84}}, 0x4000005) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x68, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x801d, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0x54) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "115292bb02765be80378ca504e33e0d79cbf184bb4ce8f0aa186b847892185eb"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044054}, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r5 = socket(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000013c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001200)={0x16c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xd}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6f7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x300}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff56b0}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2515}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000001400)=""/71) 04:38:08 executing program 5: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8a7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf0}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x81) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/dmi', 0x101000, 0x63) recvmmsg$unix(r0, &(0x7f0000007740)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000200)=""/71, 0x47}], 0x2, &(0x7f00000002c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000001540)=[{&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/11, 0xb}, {&(0x7f0000000400)=""/25, 0x19}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000500)=""/17, 0x11}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x6}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/103, 0x67}, {&(0x7f0000001640)=""/179, 0xb3}, {&(0x7f0000001700)=""/57, 0x39}, {&(0x7f0000001740)=""/78, 0x4e}], 0x4}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001800)=""/74, 0x4a}, {&(0x7f0000001880)=""/144, 0x90}, {&(0x7f0000001940)=""/210, 0xd2}], 0x3, &(0x7f0000001a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001c40)=""/11, 0xb}, {&(0x7f0000001c80)=""/11, 0xb}, {&(0x7f0000001cc0)=""/172, 0xac}], 0x3, &(0x7f0000001dc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001e80), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000001f00)=""/230, 0xe6}, {&(0x7f0000002000)=""/79, 0x4f}, {&(0x7f0000002080)=""/17, 0x11}, {&(0x7f00000020c0)=""/94, 0x5e}, {&(0x7f0000002140)=""/129, 0x81}, {&(0x7f0000002200)=""/210, 0xd2}, {&(0x7f0000002300)=""/137, 0x89}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/236, 0xec}, {&(0x7f00000034c0)=""/230, 0xe6}], 0xa}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000003700)=""/54, 0x36}, {&(0x7f0000003740)=""/58, 0x3a}, {&(0x7f0000003780)=""/227, 0xe3}, {&(0x7f0000003880)=""/69, 0x45}, {&(0x7f0000003900)=""/22, 0x16}], 0x5, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000003a40), 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/50, 0x32}, {&(0x7f0000004b00)=""/228, 0xe4}, {&(0x7f0000004c00)=""/246, 0xf6}, {&(0x7f0000004d00)=""/27, 0x1b}, {&(0x7f0000004d40)=""/218, 0xda}, {&(0x7f0000004e40)=""/158, 0x9e}, {&(0x7f0000004f00)=""/166, 0xa6}], 0x8, &(0x7f0000005040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000005140)=@abs, 0x6e, &(0x7f0000005340)=[{&(0x7f00000051c0)}, {&(0x7f0000005200)=""/246, 0xf6}, {&(0x7f0000005300)=""/36, 0x24}], 0x3}}, {{&(0x7f0000005380)=@abs, 0x6e, &(0x7f0000007600)=[{&(0x7f0000005400)=""/100, 0x64}, {&(0x7f0000005480)=""/56, 0x38}, {&(0x7f00000054c0)}, {&(0x7f0000005500)=""/237, 0xed}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/4096, 0x1000}], 0x6, &(0x7f0000007680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0xa, 0x40012142, &(0x7f00000079c0)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000007cc0)={'ip6gre0\x00', &(0x7f0000007c40)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x2, 0x7, 0x6b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x700, 0x349, 0x10001}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000007e00)={&(0x7f0000007a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007dc0)={&(0x7f0000007d00)={0x88, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10000051) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000007e40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) connect(r7, &(0x7f0000007e80)=@isdn={0x22, 0x0, 0xfa, 0x80}, 0x80) r8 = syz_mount_image$msdos(&(0x7f0000007f00), &(0x7f0000007f40)='./file0\x00', 0x100000000, 0x4, &(0x7f0000008100)=[{&(0x7f0000007f80)="fbd67e6e41d660447d9e", 0xa, 0x9}, {&(0x7f0000007fc0)="a9f6af985e5c4d487610031d9eee3eda47b65259124387bce38c9142d65ec98ec5fc4cdda03338a331ed99b26bf92c533ec0961d5cd66c3434b089dc4f41739a004a64294da21c8f94a4d1645a3feb7f7f8b352736b6de25", 0x58, 0x3}, {&(0x7f0000008040)="f5cf61a10970a89dac21be0fda4089f9be599f2bdc8c3c71fcb26ecd05cffe54a0d8f52e430b6c7c7940609650cc5ef08c4c618fccb0c19889a749049ada084a7d4fa419a98fcfeca0cc471b1e260704b544353e61c268722a042e8ba6a1f86cec", 0x61, 0x579}, {&(0x7f00000080c0)="57a9cf9835", 0x5, 0x3}], 0x1000800, &(0x7f0000008180)={[{@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@dots}], [{@subj_type={'subj_type', 0x3d, '\x00'}}, {@appraise}]}) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f00000081c0)={{0x7f, 0x24}, 0x100, './file0\x00'}) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000008300), 0x560c1, 0x0) getpeername$packet(r9, &(0x7f0000008340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000008380)=0x14) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000083c0)={0x3, 0x5, 0x401}) r10 = fsmount(r5, 0x0, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000008400)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r10, r11, 0x0) r12 = openat$hpet(0xffffffffffffff9c, &(0x7f0000008440), 0x240, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_RESIZE(r12, 0x50009403, &(0x7f0000008480)={{r13}, {@val, @actul_num={@void, 0x0, 0x70}}}) fallocate(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000084c0), 0xffffffffffffffff) 04:38:08 executing program 6: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gre0\x00'}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'vxcan1\x00', {0x2, 0x0, @dev}}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$CDROM_SELECT_DISK(r0, 0x5322, 0x100000000) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000180)={0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000200), 0x10000, 0x80) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000240)) write$sndseq(r1, &(0x7f0000000280)=[{0x7f, 0x6, 0x9, 0x8, @tick=0x9f, {0x27, 0x4}, {0xfe, 0x1f}, @addr={0xff, 0x9}}, {0x5, 0x1f, 0x20, 0x8, @time={0x80, 0x8}, {0x8, 0xff}, {0x20, 0x4}, @connect={{0x99, 0x1f}, {0x9, 0xb9}}}], 0x38) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x40380, 0x1a0) r5 = perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0x97, 0x1, 0x80, 0x1, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000300), 0xe}, 0x4e040, 0x1, 0x10000, 0x6, 0x9, 0x800, 0x1ff, 0x0, 0x2, 0x0, 0x9}, r3, 0x5, r0, 0x2ef3d274437c0f4f) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000003c0)={0x8, 0x7, 0x4, 0x0, 0x0, [{{r3}, 0x20}, {{r3}, 0x401}, {{r5}, 0x5}, {{}, 0x2}]}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x40400, 0x0) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f0000000500)) 04:38:08 executing program 7: ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x9) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) flistxattr(r1, &(0x7f0000000080)=""/162, 0xa2) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000001140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f0000001180)) mkdirat(r2, &(0x7f00000011c0)='./file0\x00', 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000001200), &(0x7f0000001240)=0xc) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001280), 0x12140, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xec, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x26, 0xa9, @random="2ecb7dfe281b6143acd625c987051a47bee82cacaf526313b963f3941288331e3c8c"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xe8d}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_NODE_NAME={0x15, 0xa8, @random="a74b00f0767738b502fb67374e6c602b69"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0xec}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000001480)={0x1, 0xffffffff}) io_setup(0x80000000, &(0x7f00000014c0)=0x0) r6 = socket$inet(0x2, 0xa, 0x5) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000015c0)='/proc/slabinfo\x00', 0x0, 0x0) io_cancel(r5, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0x8001, r6, &(0x7f0000001500)="7f882a3005f11b95ddfcbe2a7886cad1400a0381bc0a120a725fd772c20ac4c82b584e1e4e070b8189a09af866219ae2c989141ad35aaed640c7d76f80c6293c6efeb492a50a2d4c3b10eb7421bbe01e4d4a1167446511bc7b5eec6917b8691ff3545025e0168da10f12b7c8bf62eb0ea65cfbebbfd0e0ae8e30c5174e0d1be30db139c0b9eca8c8c70b4230d035254eacbab0cbf9a2e1326de1a12e731c6beba83e6917fa58", 0xa6, 0x6, 0x0, 0x1, r7}, &(0x7f0000001640)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000001680)={'macvtap0\x00', {0x2, 0x0, @remote}}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000016c0), 0x20000, 0x0) fcntl$getflags(r8, 0x40a) [ 127.750370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.756201] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.759992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.764287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.770016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.774188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.776087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.783182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.786402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.795778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.864166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.871162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.873734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.901093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.912130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.934901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.937242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.940422] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.942390] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.945273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.947645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.956708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.963258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.978226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.001829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.065368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.070261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.073954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.081483] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.095337] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.097501] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.126279] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.131081] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.136227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.144492] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.146278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.170197] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.189274] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.204574] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.268793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.817246] Bluetooth: hci1: command tx timeout [ 129.881112] Bluetooth: hci0: command tx timeout [ 130.009246] Bluetooth: hci3: command tx timeout [ 130.010447] Bluetooth: hci2: command tx timeout [ 130.074344] Bluetooth: hci4: command tx timeout [ 130.265246] Bluetooth: hci7: command tx timeout [ 130.328825] Bluetooth: hci6: command tx timeout [ 130.330010] Bluetooth: hci5: command tx timeout [ 131.865770] Bluetooth: hci1: command tx timeout [ 131.929664] Bluetooth: hci0: command tx timeout [ 132.056791] Bluetooth: hci3: command tx timeout [ 132.057439] Bluetooth: hci2: command tx timeout [ 132.121194] Bluetooth: hci4: command tx timeout [ 132.312843] Bluetooth: hci7: command tx timeout [ 132.377155] Bluetooth: hci5: command tx timeout [ 132.378201] Bluetooth: hci6: command tx timeout [ 133.913811] Bluetooth: hci1: command tx timeout [ 133.977704] Bluetooth: hci0: command tx timeout [ 134.104718] Bluetooth: hci3: command tx timeout [ 134.105212] Bluetooth: hci2: command tx timeout [ 134.170684] Bluetooth: hci4: command tx timeout [ 134.361642] Bluetooth: hci7: command tx timeout [ 134.424709] Bluetooth: hci6: command tx timeout [ 134.425180] Bluetooth: hci5: command tx timeout [ 135.961990] Bluetooth: hci1: command tx timeout [ 136.024906] Bluetooth: hci0: command tx timeout [ 136.153321] Bluetooth: hci3: command tx timeout [ 136.155066] Bluetooth: hci2: command tx timeout [ 136.216769] Bluetooth: hci4: command tx timeout [ 136.409198] Bluetooth: hci7: command tx timeout [ 136.473557] Bluetooth: hci5: command tx timeout [ 136.475355] Bluetooth: hci6: command tx timeout [ 190.828571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.831531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.834376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.841464] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.851115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.922125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.924740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.926817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.931107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.941883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.943229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.954032] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.958299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.964176] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.978174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.051840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.058936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.061597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.074925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.081695] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.092394] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.094015] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.108212] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.111330] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.114032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.122424] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.127806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.133169] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.135391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.137462] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.141450] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.196167] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.196996] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.197551] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.224910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.242131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.246463] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.251433] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.275104] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.276893] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.921980] Bluetooth: hci0: command tx timeout [ 193.050690] Bluetooth: hci1: command tx timeout [ 193.051558] Bluetooth: hci2: command tx timeout [ 193.240746] Bluetooth: hci4: command tx timeout [ 193.368772] Bluetooth: hci7: command tx timeout [ 193.369513] Bluetooth: hci5: command tx timeout [ 193.370144] Bluetooth: hci3: command tx timeout [ 193.432794] Bluetooth: hci6: command tx timeout [ 194.968785] Bluetooth: hci0: command tx timeout [ 195.097455] Bluetooth: hci2: command tx timeout [ 195.098366] Bluetooth: hci1: command tx timeout [ 195.291690] Bluetooth: hci4: command tx timeout [ 195.418778] Bluetooth: hci3: command tx timeout [ 195.420300] Bluetooth: hci5: command tx timeout [ 195.421129] Bluetooth: hci7: command tx timeout [ 195.480709] Bluetooth: hci6: command tx timeout [ 197.017185] Bluetooth: hci0: command tx timeout [ 197.144870] Bluetooth: hci2: command tx timeout [ 197.145464] Bluetooth: hci1: command tx timeout [ 197.337663] Bluetooth: hci4: command tx timeout [ 197.465008] Bluetooth: hci3: command tx timeout [ 197.465511] Bluetooth: hci5: command tx timeout [ 197.466244] Bluetooth: hci7: command tx timeout [ 197.529683] Bluetooth: hci6: command tx timeout [ 199.064733] Bluetooth: hci0: command tx timeout [ 199.192778] Bluetooth: hci1: command tx timeout [ 199.193316] Bluetooth: hci2: command tx timeout [ 199.385694] Bluetooth: hci4: command tx timeout [ 199.513696] Bluetooth: hci7: command tx timeout [ 199.514236] Bluetooth: hci5: command tx timeout [ 199.515006] Bluetooth: hci3: command tx timeout [ 199.577645] Bluetooth: hci6: command tx timeout [ 252.730402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.736859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.742151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.746394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.750124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.760325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.761581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.773234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.777118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.781987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.992522] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.997157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.000258] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.008093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.021010] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.139803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.143293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.145390] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.147564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.179944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.188395] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.211393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.219142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.221453] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.224131] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.241057] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.246222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.247435] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.247682] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.254160] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.265654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.271166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.275754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.292162] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.297039] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.299539] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.345879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.357284] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.391928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.398188] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.808895] Bluetooth: hci1: command tx timeout [ 254.872706] Bluetooth: hci0: command tx timeout [ 255.131684] Bluetooth: hci2: command tx timeout [ 255.384714] Bluetooth: hci6: command tx timeout [ 255.448856] Bluetooth: hci4: command tx timeout [ 255.448942] Bluetooth: hci3: command tx timeout [ 255.576715] Bluetooth: hci7: command tx timeout [ 255.576766] Bluetooth: hci5: command tx timeout [ 256.857054] Bluetooth: hci1: command tx timeout [ 256.920683] Bluetooth: hci0: command tx timeout [ 257.177069] Bluetooth: hci2: command tx timeout [ 257.435634] Bluetooth: hci6: command tx timeout [ 257.496722] Bluetooth: hci4: command tx timeout [ 257.497241] Bluetooth: hci3: command tx timeout [ 257.624759] Bluetooth: hci7: command tx timeout [ 257.625695] Bluetooth: hci5: command tx timeout [ 258.905708] Bluetooth: hci1: command tx timeout [ 258.971885] Bluetooth: hci0: command tx timeout [ 259.225034] Bluetooth: hci2: command tx timeout [ 259.483246] Bluetooth: hci6: command tx timeout [ 259.546243] Bluetooth: hci3: command tx timeout [ 259.546266] Bluetooth: hci4: command tx timeout [ 259.673076] Bluetooth: hci7: command tx timeout [ 259.673917] Bluetooth: hci5: command tx timeout [ 260.953773] Bluetooth: hci1: command tx timeout [ 261.016902] Bluetooth: hci0: command tx timeout [ 261.272890] Bluetooth: hci2: command tx timeout [ 261.529756] Bluetooth: hci6: command tx timeout [ 261.592685] Bluetooth: hci4: command tx timeout [ 261.594799] Bluetooth: hci3: command tx timeout [ 261.721806] Bluetooth: hci5: command tx timeout [ 261.721910] Bluetooth: hci7: command tx timeout [ 315.056975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.066939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.071018] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.083387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.092144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.315000] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.320259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.322725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.340389] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.345957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.348263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.354295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.366496] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.384902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.415164] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.539908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.543300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.564131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.585778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.604203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.615111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.622196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.636922] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.637816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.644400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.644418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.651181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.653512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.655116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.661222] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.667208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.684963] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.687249] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.688759] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.776688] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.786978] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.805261] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.817200] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.823534] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 315.849231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.145706] Bluetooth: hci0: command tx timeout [ 317.401683] Bluetooth: hci1: command tx timeout [ 317.465709] Bluetooth: hci2: command tx timeout [ 317.720715] Bluetooth: hci3: command tx timeout [ 317.848759] Bluetooth: hci4: command tx timeout [ 317.913075] Bluetooth: hci6: command tx timeout [ 317.976945] Bluetooth: hci5: command tx timeout [ 317.976979] Bluetooth: hci7: command tx timeout [ 319.194942] Bluetooth: hci0: command tx timeout [ 319.449908] Bluetooth: hci1: command tx timeout [ 319.514644] Bluetooth: hci2: command tx timeout [ 319.768683] Bluetooth: hci3: command tx timeout [ 319.897805] Bluetooth: hci4: command tx timeout [ 319.961869] Bluetooth: hci6: command tx timeout [ 320.024912] Bluetooth: hci5: command tx timeout [ 320.024943] Bluetooth: hci7: command tx timeout [ 321.242883] Bluetooth: hci0: command tx timeout [ 321.496717] Bluetooth: hci1: command tx timeout [ 321.561005] Bluetooth: hci2: command tx timeout [ 321.816896] Bluetooth: hci3: command tx timeout [ 321.944685] Bluetooth: hci4: command tx timeout [ 322.008701] Bluetooth: hci6: command tx timeout [ 322.072725] Bluetooth: hci7: command tx timeout [ 322.072768] Bluetooth: hci5: command tx timeout [ 323.289880] Bluetooth: hci0: command tx timeout [ 323.544707] Bluetooth: hci1: command tx timeout [ 323.610638] Bluetooth: hci2: command tx timeout [ 323.864871] Bluetooth: hci3: command tx timeout [ 323.995665] Bluetooth: hci4: command tx timeout [ 324.057777] Bluetooth: hci6: command tx timeout [ 324.121040] Bluetooth: hci7: command tx timeout [ 324.121110] Bluetooth: hci5: command tx timeout [ 377.843247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.847660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.853190] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.867175] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.871792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.161048] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.166231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.176956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.201247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.206861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.211557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.217172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.236919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.246130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.257412] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.283989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.307152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.333883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.375793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.380420] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.385785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.388179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.390245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.396318] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.399146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.407811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.410090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.430368] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.430378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.436098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.439500] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.449148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.452744] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.460845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.464744] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.468024] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.470361] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.478214] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.486354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.496064] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.930673] Bluetooth: hci0: command tx timeout [ 380.312976] Bluetooth: hci1: command tx timeout [ 380.376683] Bluetooth: hci2: command tx timeout [ 380.504899] Bluetooth: hci3: command tx timeout [ 380.568715] Bluetooth: hci6: command tx timeout [ 380.568739] Bluetooth: hci5: command tx timeout [ 380.633691] Bluetooth: hci4: command tx timeout [ 380.633725] Bluetooth: hci7: command tx timeout [ 381.976957] Bluetooth: hci0: command tx timeout [ 382.360991] Bluetooth: hci1: command tx timeout [ 382.424864] Bluetooth: hci2: command tx timeout [ 382.552804] Bluetooth: hci3: command tx timeout [ 382.617304] Bluetooth: hci5: command tx timeout [ 382.618154] Bluetooth: hci6: command tx timeout [ 382.681698] Bluetooth: hci4: command tx timeout [ 382.682169] Bluetooth: hci7: command tx timeout [ 384.024760] Bluetooth: hci0: command tx timeout [ 384.408795] Bluetooth: hci1: command tx timeout [ 384.473755] Bluetooth: hci2: command tx timeout [ 384.601862] Bluetooth: hci3: command tx timeout [ 384.665128] Bluetooth: hci5: command tx timeout [ 384.665561] Bluetooth: hci6: command tx timeout [ 384.728679] Bluetooth: hci7: command tx timeout [ 384.728741] Bluetooth: hci4: command tx timeout [ 386.072694] Bluetooth: hci0: command tx timeout [ 386.457010] Bluetooth: hci1: command tx timeout [ 386.520687] Bluetooth: hci2: command tx timeout [ 386.648697] Bluetooth: hci3: command tx timeout [ 386.712824] Bluetooth: hci6: command tx timeout [ 386.713895] Bluetooth: hci5: command tx timeout [ 386.776705] Bluetooth: hci7: command tx timeout [ 386.777844] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 04:43:11 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888030470000 RCX=0000000000000010 RDX=0000000000000004 RSI=ffff888030470aa8 RDI=ffff888030470000 RBP=ffff888030470a58 RSP=ffff88806ce08ca0 R8 =0000000000080000 R9 =0000000000000010 R10=0000000000000000 R11=0000000000000000 R12=ffff888030470aa8 R13=0000000000000002 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81519607 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd0d9a08000 CR3=0000000019d9d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000000000766e65 XMM04=6c665f7465735f5854435f43414d4800 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffea0001b79580 RCX=ffffffff8190f08c RDX=ffff888038793700 RSI=0000000000000008 RDI=ffffea0001b79580 RBP=0000000000000001 RSP=ffff88802e1ef838 R8 =0000000000000000 R9 =fffff9400036f2b0 R10=0000000000000001 R11=0000000000000001 R12=000000006de56025 R13=00007f3aa7768000 R14=ffff88802e1efce0 R15=0000000000000000 RIP=ffffffff81aeff50 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563f2aa304c8 CR3=000000002c899000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000