Warning: Permanently added '[localhost]:58345' (ECDSA) to the list of known hosts. 2025/06/07 13:39:49 fuzzer started 2025/06/07 13:39:49 dialing manager at localhost:40003 syzkaller login: [ 102.283249] cgroup: Unknown subsys name 'net' [ 102.427232] cgroup: Unknown subsys name 'cpuset' [ 102.459292] cgroup: Unknown subsys name 'rlimit' 2025/06/07 13:40:14 syscalls: 2214 2025/06/07 13:40:14 code coverage: enabled 2025/06/07 13:40:14 comparison tracing: enabled 2025/06/07 13:40:14 extra coverage: enabled 2025/06/07 13:40:14 setuid sandbox: enabled 2025/06/07 13:40:14 namespace sandbox: enabled 2025/06/07 13:40:14 Android sandbox: enabled 2025/06/07 13:40:14 fault injection: enabled 2025/06/07 13:40:14 leak checking: enabled 2025/06/07 13:40:14 net packet injection: enabled 2025/06/07 13:40:14 net device setup: enabled 2025/06/07 13:40:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/07 13:40:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/07 13:40:14 USB emulation: enabled 2025/06/07 13:40:14 hci packet injection: enabled 2025/06/07 13:40:14 wifi device emulation: enabled 2025/06/07 13:40:14 802.15.4 emulation: enabled 2025/06/07 13:40:14 fetching corpus: 0, signal 0/0 (executing program) 2025/06/07 13:40:16 starting 8 fuzzer processes 13:40:16 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840)={0x0, @loopback, @local}, &(0x7f0000001880)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f00000018c0)={0x120, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x75}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xab}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x45}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x20040001) rt_sigprocmask(0x0, &(0x7f0000001a80)={[0x1000]}, &(0x7f0000001ac0), 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) rt_sigsuspend(&(0x7f0000001c00)={[0x2]}, 0x8) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c80)={0x1bc, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe674}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ab5896532c93373df26ed3cb7e3fd708"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9f28bbc74dc3fd9c41216048f6d679750686a2aa6db947a70e49211098f8c695"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "648f5a623234958127dd204966d268436552ea97cbdc04b05745344d42931531"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_KEY={0xc8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "18770dd95260d9804019d6d953174b3d"}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fe0000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x7}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x71}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x48000}, 0x20000010) prctl$PR_SET_THP_DISABLE(0x29, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)={0xf4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffff183}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x884}, 0x20004001) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002080)={@rand_addr=0x64010100, @local}, 0x8) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0), 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x30, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40400}, 0x0) r4 = syz_io_uring_complete(0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x6c, 0x9, 0x6, 0x101, 0x0, 0x0, {0xe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x800}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800c044}, 0x0) r5 = signalfd(r4, &(0x7f0000002580)={[0xfffffffffffffff7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000011) 13:40:16 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80800) fcntl$setpipe(r0, 0x407, 0x6) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r0, 0x4000}, {r0, 0x1}, {0xffffffffffffffff, 0x8000}, {r0, 0x8000}, {r0, 0xd000}, {r1, 0x504}, {r0}], 0x7, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0)={[0x3]}, 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1f, 0x8, 0x8, 0x9, 0x7ff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000280)={0x7, 0x7f, 0x19d3}, 0xc) fstatfs(r0, &(0x7f00000002c0)=""/61) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x80}, {0xa, 0x4e22, 0xd1c00000, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x76a, [0x1, 0x7fff, 0x2aa2, 0x0, 0x7fff, 0x6, 0x8000]}, 0x5c) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) kcmp(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, r1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x22000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000440)=0x5, 0x4) r7 = openat(r5, &(0x7f0000000480)='./file0\x00', 0x103800, 0x10) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x14) 13:40:16 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x37}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004055) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x40040) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008808) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}}, 0x400) r5 = socket(0x2, 0x800, 0x3) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc80a4}, 0x20000002) r6 = request_key(&(0x7f0000000780)='id_resolver\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)='802.15.4 MAC\x00', 0xffffffffffffffff) keyctl$search(0xa, 0x0, &(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x2}, r6) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x73b8e84f613a46e1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x4c}}, 0x80d0) r9 = fsmount(r3, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xdb035c42a570356c}, 0x4000000) [ 128.816378] audit: type=1400 audit(1749303616.472:7): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:40:16 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0xf010, 0x40, 0x6, 0x9d7f, {{0xd, 0x4, 0x0, 0x4, 0x34, 0x66, 0x0, 0xc0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@generic={0x89, 0x12, "b419a15d7403807074c6824a83ffd300"}, @timestamp={0x44, 0xc, 0x53, 0x0, 0xf, [0x3, 0x6]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r2 = open_tree(r1, &(0x7f0000000100)='./file1\x00', 0x8801) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2d4, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={@with_ht={{{}, {0x5}, @broadcast, @device_a, @from_mac, {0x7, 0x1}}, @ver_80211n={0x0, 0x7f, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x8, @void}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x260, 0x33, @data_frame={@no_qos=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5000}, @device_a, @random="43e24aa3150b", @device_a, {0x9, 0x6}}, @a_msdu=[{@device_a, @broadcast, 0x6e, "27d78ce36610c780b27cdd1433e2c9df1733a287e19bd2e7d616070ba994f716378ab69db741097658725810915702e6dc95e35aa4f371ca0d5cef2745a68ba6af5761490c66e7e716b85b2898cbdf8335adb4bbce5e445d4389c9da963e9e7af04d3ee23973375c23899701eef9"}, {@broadcast, @broadcast, 0xf4, "ae85ced67a02810bafc5e8f8f80484ccbec3e3e6fa8d713a1e8bf2658614cd3660d73c2c456aa08858a09d46e1ad33ab929af26843506790fecb39788c99e00ed8f63a975f8bd864b59d04655916e076eef34aa33b43d30047534882f3b64b9ec025f9e0abe72e55ca572cce4978b9e3667ba954e3d7088d302629b3105a504582aa1895bee9333d4a38fb4bf6c239188bcc9e256d1cccb532e98c8fe3bdde7b058630862c313f4fed2d3d87eae8ee8273a96f5deaed3276f8afc3e09c72c7241fab43b80dabd32ae2a336facba40e0d868954051abb5b3ce4d0258bc23d0a7366e735e7014471cafe4ae0d55827658ca271941b"}, {@device_a, @broadcast, 0xb3, "6332b6f5684d8314d9bd66e9adc8a58efeeb48021d53093206a020a07e12a49a42de213fd18a4976316498cf66b19d747e197dd1aa7c480b2fe496ab811fd694de6380b19ea2cea159cf36254a4697e727db73741b831eac7016c4088f0cc028acd27b81b619d16d6075550a0de952e6e966715c991edc58ba47e0cccd104837321621e7cf3faab01fc7bee2576d529de7d7f586dd9f5e1624bb6b3969cb30f409ac74f7342385c17961e1c1edebf98af668d9"}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0xc5}, 0xc0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) r5 = socket(0x1a, 0x1, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000780)={0x20000000}) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000007c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x128, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x736}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe0f9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1d000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x62c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4f1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4692}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x20}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff8}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4040800}, 0x4) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb46}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x43}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x269}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) connect$packet(r2, &(0x7f0000000c80)={0x11, 0x1c, r0, 0x1, 0x20, 0x6, @broadcast}, 0x14) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0xc1) ioctl$FIONCLEX(r5, 0x5450) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000e40)={'veth1_to_batadv\x00', {0x2, 0x0, @empty}}) 13:40:16 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_pl', 0x76a0d8078dfce92e, 0x104) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'gretap0\x00'}) clone3(&(0x7f0000000340)={0x200000, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xe}, &(0x7f0000000240)=""/117, 0x75, &(0x7f00000002c0)=""/15, &(0x7f0000000300)=[0x0, 0x0], 0x2, {r0}}, 0x58) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000003c0)={0x0, 0x4, 0x7fff}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000007c0)={0x0, 0x8, @start={r2, 0x0, "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", "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"}, [0x8, 0x80, 0x0, 0x20, 0x615fb6af, 0x88, 0x5842, 0x0, 0xda39, 0x8001, 0x8, 0x400, 0x3f, 0x5, 0x4, 0x8, 0x7fffffff, 0xff, 0x2, 0xc70, 0x8, 0x9, 0x81, 0x3, 0x0, 0x0, 0x9d4b, 0x9, 0x7, 0x20, 0x3, 0x7, 0xec2, 0x8, 0x2, 0x6, 0x7, 0x730, 0x7, 0xffffffff, 0x2, 0x400, 0x5, 0x3, 0x8000, 0x1000000000000000, 0x797b, 0x800, 0x8, 0x5ece9bf9, 0x4, 0x8000, 0x4, 0x4bdc, 0xfffffffffffffff7, 0xfb04, 0x5375, 0x7fff, 0x5, 0x8001, 0x4, 0x10000, 0x4, 0x10001]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = dup(r4) r6 = accept4$inet(r0, &(0x7f0000001200)={0x2, 0x0, @initdev}, &(0x7f0000001240)=0x10, 0x100000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001280)={r3, 0x5, 0x1, [0x12, 0x9ef, 0x7, 0x1, 0xd5], [0x10000, 0xffffffffffffffff, 0xea, 0xffff, 0x100000000000, 0x0, 0x3, 0x4, 0x5, 0xda, 0x3, 0x80000000, 0x80000000, 0x4, 0x100000001, 0x3ff, 0x3ff, 0x7, 0x2, 0x7fff, 0x1, 0x5, 0xfffffffffffffffa, 0x8000, 0x100000001, 0x6, 0x1, 0x28000000000, 0x400, 0x8, 0x50e8, 0x5, 0x80, 0x8, 0xccad00000000, 0x80000000, 0x7, 0x35, 0x1ff, 0x100000000, 0x1, 0x0, 0x7ff, 0x100000000, 0x9, 0xffffffff, 0x8, 0x1, 0x8, 0x3f, 0x248a, 0x30000, 0x2, 0x1000000000000000, 0x6, 0x6, 0x5, 0x1, 0xaf, 0xfffffffffffffffd, 0xc9, 0xffffffffffffff7f, 0xb6c, 0x100000001, 0x0, 0x0, 0x0, 0x1, 0x2, 0x7, 0x8, 0x3, 0x20, 0x3, 0x634, 0x2e80, 0x4, 0x4, 0x63, 0xffffffffffff0000, 0x1000, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x8, 0x4, 0x13, 0x5, 0x1ff, 0x3, 0x5, 0x2, 0x2, 0x891, 0xbec, 0x3, 0x200, 0x42, 0x200, 0x6, 0x81, 0x4, 0x7, 0x3c, 0x8, 0x2, 0x0, 0x20, 0x8001, 0x0, 0x7775d483, 0x1, 0xffffffffffffff81, 0xfffffffffffffffe, 0x1, 0x8, 0x7, 0x40, 0xd36, 0x6]}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f00000016c0)={{r6}, {@val={r7}, @actul_num={@void, 0x4, 0x4d}}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000001700)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000108}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xb2}, 0x20000080) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x98, 0x2, 0x9, 0xf05, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb16}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_TUPLE={0x6c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r9 = accept4$inet6(r8, &(0x7f00000019c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001a00)=0x1c, 0x800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001a40)={"59f08d05e105644d202d33955e31b38b", 0x0, 0x0, {0x33e, 0x3}, {0x4}, 0x7fffffff, [0x7f, 0x6, 0x20, 0x0, 0x4, 0xf53, 0x20, 0x1, 0x81, 0x6, 0x3, 0x4, 0x4, 0x0, 0x49, 0xfffffffffffffff7]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001b40)={r2, "760371d6607e9e68dc98cbb1071fa0d7"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000002b40)={{r9}, r10, 0x18, @unused=[0xfff, 0x100, 0xffffffffffff0001], @devid=r11}) membarrier(0x9, 0x0) 13:40:16 executing program 5: pidfd_send_signal(0xffffffffffffffff, 0xc, &(0x7f0000000000)={0x3c, 0x40, 0x8}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x0, 0x1000, 0x1e, &(0x7f0000000100)="6661ca90507a35c8f8f3733967d4cf751e69150b1c22d515982d2621fff1", 0xa1, 0x0, &(0x7f0000000140)="a96b0d56af90e0e6f7d1ae2f4cbcde201bc2c807a4e44a4a916c2651af81994335e67097e0bf958555fa379c88ef62232923b4c08870891a12feafa2660c87c21ac3a1dbeb79602e90ce20b340decd3269cfc114372373abc068f2d0ff236d0684d8a80f1c98c38e911269ed676863151a78f7463885bd50181e05e6c8b025d6520ff1b6ed3a411e82685436efb611441ce04d29eac047ac6e8b5f49f0fb9d473f"}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x6, 0x0, 0x5, 0x90a6, 0x227, 0x8ae}, {0x8001, 0xfffffff8, 0x400, 0xffffffff, 0x5, 0x5bf7}], ['\x00', '\x00', '\x00']}) r1 = signalfd(r0, &(0x7f0000000400)={[0x2]}, 0x8) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000440)={{r2}, 0x4, 0x4, 0x8a0f}) readlinkat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=""/120, 0x78) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x101800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', r4, 0x4, 0x1, 0x4, 0x5, 0x69, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x41}, 0x40, 0x0, 0x5, 0x400}}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000680)=""/4096) r5 = syz_mount_image$nfs4(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x18, 0x1, &(0x7f00000017c0)=[{&(0x7f0000001740)="d963efa076dafeaac156842ea9626229aafc0325fcd0099f613352a3ea157abb258f23a327ff823054d1851f7b66653ab4ca227824a1e18384e824cc2d017029713bfc876edd708ef8dded8d52930c7b0b", 0x51, 0xfffffffffffffffc}], 0x2000000, &(0x7f0000001800)={[{}, {'\'^*\\:&.[%\'%%'}, {'batadv_slave_0\x00'}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, 'ip6_vti0\x00'}}]}) renameat2(r3, &(0x7f0000001680)='./file0\x00', r5, &(0x7f0000001880)='./file0\x00', 0x5) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001940), 0x20842, 0x0) mount$9p_fd(0x0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900), 0x104000, &(0x7f0000001980)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@msize={'msize', 0x3d, 0x2}}, {@mmap}, {@nodevmap}, {@fscache}, {@access_client}, {@aname={'aname', 0x3d, 'ipvs\x00'}}], [{@dont_measure}, {@appraise_type}, {@obj_user={'obj_user', 0x3d, '\xac)/!\\@\x04#'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001a80), 0x800, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x1, r7, r5) 13:40:16 executing program 6: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "acdc9a0dad"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4800) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20008040) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40100) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r2, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x40000) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000600)=""/47) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000640)={0x0, 0x0, 0xd78c}) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xf0, r5, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x92}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xcb7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40841}, 0x8000) r6 = perf_event_open$cgroup(&(0x7f00000020c0)={0x0, 0x80, 0x1, 0x0, 0x20, 0x0, 0x0, 0xf4a, 0x10000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000002080), 0x5}, 0x4090, 0x1, 0x4, 0x8, 0x3, 0x9, 0x4, 0x0, 0xfffffff9, 0x0, 0x100}, r3, 0x5, 0xffffffffffffffff, 0x5) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) r7 = signalfd4(r4, &(0x7f0000002140)={[0xffffffff80000000]}, 0x8, 0x80800) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000002180), &(0x7f00000021c0)='./file0\x00', 0x8, 0x1) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002200), 0x8040, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000002580)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002540)={&(0x7f00000022c0)={0x248, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7f, 0xe000, 0x7, 0xfe, 0x53a1, 0x7, 0x581]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x0, 0x9, 0x40, 0x2, 0x100, 0xffe0, 0x4]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x8}, {0x7, 0x4}, {}]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x800, 0x0, 0x4, 0x7f, 0x1, 0xa736, 0x1f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x800, 0xab, 0xffff, 0x8, 0x9, 0x1, 0xfffd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0xa}, {0x5, 0x7}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0x5}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x3}, {0x0, 0xa}, {0x7, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0x4}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x6}, {0x7, 0x2}, {0x3, 0x9}, {0x4, 0xa}, {0x7, 0x3}, {0x3, 0x5}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x8}, {0x4}, {0x5, 0x3}, {0x2, 0x7}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x2}, {0x3, 0x5}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xed6, 0x3, 0x8, 0x6, 0x3, 0xbab3, 0x8000, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x200, 0x200, 0x80, 0x200, 0x9d95, 0xf257]}}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x36, 0x30, 0x3, 0x2, 0x1b, 0x6, 0x5, 0x8, 0x0, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x2, 0x24, 0x36, 0x1b, 0xb, 0x36, 0x24, 0x48, 0x16, 0x1, 0x2, 0x6c, 0x24, 0x1b, 0x30, 0x60, 0x1b, 0x7f, 0x78, 0x6c, 0x6]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x3, 0x6}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0xa}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x4}, {0x6, 0x9}, {}, {0x4, 0x7}, {0x0, 0x5}, {0x2, 0x5}, {0x2, 0x2}, {0x0, 0x6}, {0x1}, {0x1, 0x2}, {0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x7}, {0x3, 0x3}, {0x4, 0xa}, {0x6, 0x7}, {0x2, 0x8}, {0x4, 0x1}, {0x2}, {0x3, 0x7}, {0x6, 0x1}, {0x7, 0x6}, {0x6, 0x2}, {0x7, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0xa}, {0x6, 0x2}, {0x3, 0x4}, {0x4, 0x4}, {0x7, 0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x5}, {0x7, 0xa}, {0x5, 0x2}, {0x2, 0x2}, {0x6}, {0x2, 0x9}, {0x3, 0x8}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x4}, {0x5}, {0x7, 0x5}, {0x5, 0x3}, {0x2, 0x5}, {0x7, 0x8}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x3}, {}, {0x7, 0x4}, {0x0, 0x4}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x60, 0x60, 0x1b, 0x5, 0x5, 0x6c, 0x36, 0x4, 0x2, 0x12, 0xb]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x24, 0x48, 0x4, 0x12, 0x6, 0x3, 0x1b, 0x3, 0x1b, 0x4a, 0x1, 0x9, 0x1b, 0x6, 0x60]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0xa}, {0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x8}, {0x4, 0x2}, {}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x6, 0x4}, {0x2, 0x5}, {0x7, 0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x1, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0xf}, {0x0, 0x9}, {0x5, 0x7}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x4, 0x4}, {0x5, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x8}, {0x7, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x3}, {0x3, 0x7}, {0x3, 0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0xa}, {0x6}, {0x4, 0x3}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x2}, {0x5, 0x5}, {0x7, 0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x1}, {}, {0x1, 0x9}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2d, 0x4, 0x9, 0x12, 0x3, 0x36, 0x16, 0x9, 0x6c, 0x30, 0x24, 0x6c, 0x18, 0x30, 0x4, 0x24, 0x4]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3f, 0x6c, 0x9, 0x12, 0x5, 0x61, 0x9, 0x48, 0x18, 0x30, 0x9, 0x1b, 0x6c, 0x1, 0x48, 0x0, 0x33, 0x60, 0xc, 0x24, 0x50, 0x30]}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0xc011}, 0x8004) 13:40:16 executing program 7: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00) r0 = memfd_secret(0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000000c0)={0x4, {{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x44}, 0x800}}, {{0xa, 0x4e20, 0x101, @mcast1, 0x8}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x9, 0x200}}, './file0\x00'}) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x80, 0x4041) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000002c0)={{r3}, 0x7, &(0x7f0000000280)=[0x10001, 0x0, 0x6, 0x8000, 0xa74f, 0x5, 0x0], 0x7, 0x2, [0x5, 0x9, 0x8000, 0x2]}) r4 = openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000700)=0x0) socketpair(0x3b, 0x80007, 0x10000, &(0x7f0000000740)={0xffffffffffffffff}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = signalfd4(r0, &(0x7f0000000780)={[0x101]}, 0x8, 0x80000) sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000400)="50de174049a802d6dfacb71f92fe", 0xe}, {&(0x7f0000000440)="73e9060934c9c228dc44ada4670d3927015e0dfdd00d079057b19afa6b8fd2b229959df29924d3b24b91a1cb87ca3af6ebbc5fa188436e91b11ca4d9b291380951d1822f319db8cef3669a33672971a94312b329db54fd8fb1a07346d231e16c343b17710160684c2d220dd0ae8f6b097100e31a8f5a20e7a42b186b5091bb34077606093210a64dbb2bdf30dd747a2fa3231515e715846b1735b54c4d53c6296710d051d8ea855baa207797dbdf9c231db3", 0xb2}, {&(0x7f0000000500)="d30c03920171d1902211b2a23003240e4094723d538c21704e85cb36a5d2abf0f3e119c901b54424b4d05cf564ec674a2f61386317225406a260e640d283e6acf429490c7ee813f9bf2a8fda8250199b453a9c2ae7ec7b80d2758cf7889680939e088d1d2eab077aa2eed8680c68643051d22caa280b2d06f7956ed94d8393e19f74e005c76e3ba994928bb66a0f5ccc19ae96c5b8aa0f5068cef90291ef223c74f53172c58bd615da6e22597c8d560930aee4aa33e16cbdd647352d738755fb9c443eb94392a56cccff88cf81674ae238cab6d4b61fa7224741e8891abdc4ac440e2da36ab8e90a03a0d2c4", 0xec}, {&(0x7f0000000600)="bc3c76331e7438d0c22ae0d050b406cd9bfe3b7ecbc640d6a1e13aaa49d632a0d315719d642a542bb167882036550b32a8236c30c6ff0e2d3ce35ca964d931617ae242eda2f7797078d46193f501801e4c9daa81097235073b8509215d35e5fa71e4246d83c6fa1fa05d4a4e4ae010252ea0a125de50a85e2247f8b0edbad63b7c0888318b65", 0x86}], 0x4, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r6, 0xffffffffffffffff, r2, r7, r8]}}], 0x48, 0x10}, 0x801) r9 = perf_event_open$cgroup(&(0x7f00000008c0)={0x2, 0x80, 0x6, 0x1, 0x5c, 0x87, 0x0, 0x6, 0x58008, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000880), 0xe}, 0x100, 0x0, 0x34, 0x3, 0x6, 0x50, 0x20, 0x0, 0x4, 0x0, 0x80000000}, r8, 0xe, r4, 0x4) fsetxattr$trusted_overlay_redirect(r9, &(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x8, 0x0) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r10, 0xc0096616, &(0x7f0000000a00)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000a40)={0x6, 0xffff, 0x0, 'queue1\x00', 0xc}) ioctl$INCFS_IOC_FILL_BLOCKS(r8, 0x80106720, &(0x7f0000000f00)={0x6, &(0x7f0000000e40)=[{0x1000, 0xf7, &(0x7f0000000b00)="507561f48c5105ab2fb0919f02183eef9fbf1e73ea99831374a3e8cca0b505374b26181fb922735307c735e4be80f39f0f7b82c85cf43f4acb1a3f1f24863cdce102f9a4ac63cd719272d5700a0ceb93029635737f25054f5549375cc0ce1b85002a0ba43112f701fcf0206dd8d13293238e34ba8801fb086ab9a58fefb438eff303115ebc4defac7e52daea50020523c3417d4a5dba5d133d911031f345627095530f532f35a1b59d266d50c755da65211505ff896629ab86b81bb6a3b2c0f2a2aef29eb3d1beb8dece2e20edca9b34e655e5c97768ddb78d596a82a2c8c3fcb4f94f7f0e743a650f081df1f7a199dff8cb6e1c8e7274", 0x1, 0x1}, {0x1, 0xa2, &(0x7f0000000c00)="56c66226245969138e92df07e4578b1693b7bb1d2fe0a4227d01037e3989e504452b25a3f9a83267e4635a9d5959c896d7901f6e2230c54b477ccfd1d7ea7a91e96d46937504c338b244bb0f942b09fa482fb85264c880590a86d325d870d44ba1f74a6813b1e6ef900f12b92b2dcc16a8ca29666d0938828169cf8dbcd62cbc458d06cd76f3ee3775279f475b4ff475fcf1dff8a82e76400b410a5276fad23ef565", 0x1}, {0x7b, 0x54, &(0x7f0000000cc0)="a485df1f49b863039670b9fe024771854a41af73c4563333a55c261db78c244d98fc4197c0c460deb822cded2f54db0db303c083ae4b1478c88b640f48647dede75741f1a2f78711659aca4395631871fd5eff1a"}, {0x6, 0x2c, &(0x7f0000000d40)="f9a9fbceae2be8a877d5085d8a0260ba6051654ff4dd5cc02194004e7c9dac81ca121156af1ee6060aeb48ed", 0x1}, {0x4, 0x4a, &(0x7f0000000d80)="e9bca191b6c4d73003ba1d03207d0ea578df4af167e0be49a945f298c309575e159b3234b466ec27db352ad8e44f3f69af915f4b2c8a2c2190e4515619ca6c0711a845ec9b792b14562a", 0x0, 0x1}, {0x0, 0xd, &(0x7f0000000e00)="d73fc6f620d78e4baf9eed7689"}]}) [ 130.225380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.234499] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.237403] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.245550] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.252098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.310993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.316068] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.322138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.338808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.341134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.343986] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.345414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.347484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.349103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.351425] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.362495] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.364309] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.371339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.373350] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.375840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.381845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.382197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.393999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.407025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.417718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.435842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.440350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.446552] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.461024] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.471838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.496471] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.501853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.507029] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.515448] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.516971] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.534088] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.534248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.546331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.551259] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.556050] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.303371] Bluetooth: hci0: command tx timeout [ 132.495838] Bluetooth: hci4: command tx timeout [ 132.496533] Bluetooth: hci2: command tx timeout [ 132.497280] Bluetooth: hci1: command tx timeout [ 132.558727] Bluetooth: hci5: command tx timeout [ 132.559298] Bluetooth: hci3: command tx timeout [ 132.622799] Bluetooth: hci6: command tx timeout [ 132.623367] Bluetooth: hci7: command tx timeout [ 134.350671] Bluetooth: hci0: command tx timeout [ 134.542629] Bluetooth: hci2: command tx timeout [ 134.543082] Bluetooth: hci4: command tx timeout [ 134.543515] Bluetooth: hci1: command tx timeout [ 134.605922] Bluetooth: hci3: command tx timeout [ 134.606369] Bluetooth: hci5: command tx timeout [ 134.669686] Bluetooth: hci6: command tx timeout [ 134.670133] Bluetooth: hci7: command tx timeout [ 136.398884] Bluetooth: hci0: command tx timeout [ 136.590686] Bluetooth: hci1: command tx timeout [ 136.591162] Bluetooth: hci4: command tx timeout [ 136.592175] Bluetooth: hci2: command tx timeout [ 136.653689] Bluetooth: hci5: command tx timeout [ 136.654122] Bluetooth: hci3: command tx timeout [ 136.718683] Bluetooth: hci7: command tx timeout [ 136.719110] Bluetooth: hci6: command tx timeout [ 138.447938] Bluetooth: hci0: command tx timeout [ 138.638918] Bluetooth: hci4: command tx timeout [ 138.639404] Bluetooth: hci2: command tx timeout [ 138.640679] Bluetooth: hci1: command tx timeout [ 138.702970] Bluetooth: hci5: command tx timeout [ 138.703430] Bluetooth: hci3: command tx timeout [ 138.765675] Bluetooth: hci6: command tx timeout [ 138.766125] Bluetooth: hci7: command tx timeout [ 192.608136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.611406] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.614209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.621146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.625337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.748235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.755205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.768220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.784067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.797350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.876720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.888156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.901714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.904925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.918112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.929071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.938402] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.953493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.961431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.970057] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.032034] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.043156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.056448] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.092334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.129060] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.134794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.136717] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.143402] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.146155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.155349] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.164115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.168231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.175118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.179844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.187053] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.205107] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.209963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.211392] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.219221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.226721] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.703675] Bluetooth: hci0: command tx timeout [ 194.829760] Bluetooth: hci1: command tx timeout [ 195.085821] Bluetooth: hci2: command tx timeout [ 195.086972] Bluetooth: hci3: command tx timeout [ 195.214268] Bluetooth: hci4: command tx timeout [ 195.278663] Bluetooth: hci5: command tx timeout [ 195.341746] Bluetooth: hci7: command tx timeout [ 195.342827] Bluetooth: hci6: command tx timeout [ 196.749682] Bluetooth: hci0: command tx timeout [ 196.877749] Bluetooth: hci1: command tx timeout [ 197.133697] Bluetooth: hci3: command tx timeout [ 197.134176] Bluetooth: hci2: command tx timeout [ 197.262053] Bluetooth: hci4: command tx timeout [ 197.325962] Bluetooth: hci5: command tx timeout [ 197.389806] Bluetooth: hci6: command tx timeout [ 197.390247] Bluetooth: hci7: command tx timeout [ 198.798004] Bluetooth: hci0: command tx timeout [ 198.926701] Bluetooth: hci1: command tx timeout [ 199.182649] Bluetooth: hci3: command tx timeout [ 199.183128] Bluetooth: hci2: command tx timeout [ 199.309675] Bluetooth: hci4: command tx timeout [ 199.374737] Bluetooth: hci5: command tx timeout [ 199.437999] Bluetooth: hci6: command tx timeout [ 199.438442] Bluetooth: hci7: command tx timeout [ 200.845892] Bluetooth: hci0: command tx timeout [ 200.974828] Bluetooth: hci1: command tx timeout [ 201.230051] Bluetooth: hci2: command tx timeout [ 201.230544] Bluetooth: hci3: command tx timeout [ 201.358614] Bluetooth: hci4: command tx timeout [ 201.421672] Bluetooth: hci5: command tx timeout [ 201.485714] Bluetooth: hci7: command tx timeout [ 201.486217] Bluetooth: hci6: command tx timeout [ 255.078031] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.086343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.093530] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.110059] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.118626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.277160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.280150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.284156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.292429] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.300045] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.357463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.363214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.367248] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.373205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.382177] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.396104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.405700] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.414116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.430023] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.436066] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.473122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.480876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.495163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.520204] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.527155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.594533] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.599427] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.614036] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.629307] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 255.637099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.644806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.652264] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.657127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.663880] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 255.670059] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.672856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 255.708192] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.715290] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 255.743258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.745092] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.166673] Bluetooth: hci0: command tx timeout [ 257.357879] Bluetooth: hci1: command tx timeout [ 257.485709] Bluetooth: hci3: command tx timeout [ 257.549733] Bluetooth: hci2: command tx timeout [ 257.613836] Bluetooth: hci4: command tx timeout [ 257.742707] Bluetooth: hci6: command tx timeout [ 257.870692] Bluetooth: hci7: command tx timeout [ 257.934873] Bluetooth: hci5: command tx timeout [ 259.215665] Bluetooth: hci0: command tx timeout [ 259.406748] Bluetooth: hci1: command tx timeout [ 259.534692] Bluetooth: hci3: command tx timeout [ 259.598041] Bluetooth: hci2: command tx timeout [ 259.661767] Bluetooth: hci4: command tx timeout [ 259.790608] Bluetooth: hci6: command tx timeout [ 259.918689] Bluetooth: hci7: command tx timeout [ 259.983730] Bluetooth: hci5: command tx timeout [ 261.261666] Bluetooth: hci0: command tx timeout [ 261.453810] Bluetooth: hci1: command tx timeout [ 261.582660] Bluetooth: hci3: command tx timeout [ 261.645689] Bluetooth: hci2: command tx timeout [ 261.709817] Bluetooth: hci4: command tx timeout [ 261.838922] Bluetooth: hci6: command tx timeout [ 261.965877] Bluetooth: hci7: command tx timeout [ 262.030767] Bluetooth: hci5: command tx timeout [ 263.312687] Bluetooth: hci0: command tx timeout [ 263.501981] Bluetooth: hci1: command tx timeout [ 263.630673] Bluetooth: hci3: command tx timeout [ 263.694054] Bluetooth: hci2: command tx timeout [ 263.757652] Bluetooth: hci4: command tx timeout [ 263.885952] Bluetooth: hci6: command tx timeout [ 264.014618] Bluetooth: hci7: command tx timeout [ 264.078649] Bluetooth: hci5: command tx timeout [ 317.285014] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.290216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.292894] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.304868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.310343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.672325] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.675222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.679126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.691122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.698855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.786479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.790367] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.794128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.801000] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.803405] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.809346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.816020] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.819516] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.831134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.845839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.903971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.914122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.931282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.963195] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.997126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.998177] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.006080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.014019] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.015890] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.017726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.024136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.027313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.036165] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.043796] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.046754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.052245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.054645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.062843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.195218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.203208] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.373819] Bluetooth: hci0: command tx timeout [ 319.759626] Bluetooth: hci1: command tx timeout [ 319.885674] Bluetooth: hci2: command tx timeout [ 320.014108] Bluetooth: hci3: command tx timeout [ 320.205703] Bluetooth: hci5: command tx timeout [ 320.205817] Bluetooth: hci6: command tx timeout [ 320.206473] Bluetooth: hci4: command tx timeout [ 320.334952] Bluetooth: hci7: command tx timeout [ 321.422663] Bluetooth: hci0: command tx timeout [ 321.805661] Bluetooth: hci1: command tx timeout [ 321.933713] Bluetooth: hci2: command tx timeout [ 322.062852] Bluetooth: hci3: command tx timeout [ 322.253697] Bluetooth: hci4: command tx timeout [ 322.253753] Bluetooth: hci6: command tx timeout [ 322.254187] Bluetooth: hci5: command tx timeout [ 322.381901] Bluetooth: hci7: command tx timeout [ 323.470783] Bluetooth: hci0: command tx timeout [ 323.854680] Bluetooth: hci1: command tx timeout [ 323.981711] Bluetooth: hci2: command tx timeout [ 324.110329] Bluetooth: hci3: command tx timeout [ 324.302617] Bluetooth: hci6: command tx timeout [ 324.302715] Bluetooth: hci5: command tx timeout [ 324.303108] Bluetooth: hci4: command tx timeout [ 324.429723] Bluetooth: hci7: command tx timeout [ 325.517744] Bluetooth: hci0: command tx timeout [ 325.903106] Bluetooth: hci1: command tx timeout [ 326.029737] Bluetooth: hci2: command tx timeout [ 326.158213] Bluetooth: hci3: command tx timeout [ 326.349734] Bluetooth: hci4: command tx timeout [ 326.349906] Bluetooth: hci5: command tx timeout [ 326.350502] Bluetooth: hci6: command tx timeout [ 326.477714] Bluetooth: hci7: command tx timeout [ 379.871259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.874904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.879375] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.890428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.899029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.951128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.955477] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.961117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.975031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.983387] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.067928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.073069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.081550] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.089321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.097338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.254982] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.261143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.266407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.269005] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.295081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.318286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.322443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.325355] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.335542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.339138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.346195] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.350381] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.364309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.371765] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.387253] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 380.415545] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.421741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.445245] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.451224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.456084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.468103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 380.488362] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.497267] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.552212] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.556296] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.966691] Bluetooth: hci0: command tx timeout [ 382.031282] Bluetooth: hci1: command tx timeout [ 382.157678] Bluetooth: hci2: command tx timeout [ 382.477698] Bluetooth: hci4: command tx timeout [ 382.478296] Bluetooth: hci3: command tx timeout [ 382.541676] Bluetooth: hci6: command tx timeout [ 382.670706] Bluetooth: hci5: command tx timeout [ 382.733646] Bluetooth: hci7: command tx timeout [ 384.014666] Bluetooth: hci0: command tx timeout [ 384.077778] Bluetooth: hci1: command tx timeout [ 384.207610] Bluetooth: hci2: command tx timeout [ 384.526836] Bluetooth: hci4: command tx timeout [ 384.527335] Bluetooth: hci3: command tx timeout [ 384.591111] Bluetooth: hci6: command tx timeout [ 384.719872] Bluetooth: hci5: command tx timeout [ 384.782630] Bluetooth: hci7: command tx timeout [ 386.062931] Bluetooth: hci0: command tx timeout [ 386.126639] Bluetooth: hci1: command tx timeout [ 386.255641] Bluetooth: hci2: command tx timeout [ 386.574667] Bluetooth: hci3: command tx timeout [ 386.575176] Bluetooth: hci4: command tx timeout [ 386.638879] Bluetooth: hci6: command tx timeout [ 386.766811] Bluetooth: hci5: command tx timeout [ 386.831769] Bluetooth: hci7: command tx timeout [ 388.110807] Bluetooth: hci0: command tx timeout [ 388.173897] Bluetooth: hci1: command tx timeout [ 388.302852] Bluetooth: hci2: command tx timeout [ 388.622011] Bluetooth: hci4: command tx timeout [ 388.622509] Bluetooth: hci3: command tx timeout [ 388.686640] Bluetooth: hci6: command tx timeout [ 388.816658] Bluetooth: hci5: command tx timeout [ 388.878743] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:45:17 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff818c5d58 RDX=fffff940000a7d11 RSI=0000000000000008 RDI=ffffea000053e880 RBP=ffffea000053e880 RSP=ffff888034fefb58 R8 =0000000000000001 R9 =fffff940000a7d10 R10=ffffea000053e887 R11=0000000000000001 R12=0000000000000022 R13=0000000000000000 R14=ffffea000053e880 R15=ffff888034fefd88 RIP=ffffffff818c5d60 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f34af401540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005591a361c121 CR3=000000002b19d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88801681b700 RCX=ffff88806cf0897c RDX=0000000000000000 RSI=ffffffff81205856 RDI=ffff88801681bafc RBP=ffff88801681b700 RSP=ffff88806cf089a0 R8 =0000000000000001 R9 =ffff88806cf08a68 R10=000000000003b6cd R11=00000000000083e9 R12=0000000000000000 R13=ffff88806cf08a70 R14=ffff88801681b700 R15=ffff88806cf08a28 RIP=ffffffff815abe27 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd5fbf1fb8 CR3=000000001d05a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000