Warning: Permanently added '[localhost]:55483' (ECDSA) to the list of known hosts. 2025/06/08 17:45:10 fuzzer started 2025/06/08 17:45:10 dialing manager at localhost:40003 syzkaller login: [ 85.851973] cgroup: Unknown subsys name 'net' [ 85.984489] cgroup: Unknown subsys name 'cpuset' [ 86.025118] cgroup: Unknown subsys name 'rlimit' 2025/06/08 17:45:25 syscalls: 2214 2025/06/08 17:45:25 code coverage: enabled 2025/06/08 17:45:25 comparison tracing: enabled 2025/06/08 17:45:25 extra coverage: enabled 2025/06/08 17:45:25 setuid sandbox: enabled 2025/06/08 17:45:25 namespace sandbox: enabled 2025/06/08 17:45:25 Android sandbox: enabled 2025/06/08 17:45:25 fault injection: enabled 2025/06/08 17:45:25 leak checking: enabled 2025/06/08 17:45:25 net packet injection: enabled 2025/06/08 17:45:25 net device setup: enabled 2025/06/08 17:45:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 17:45:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 17:45:25 USB emulation: enabled 2025/06/08 17:45:25 hci packet injection: enabled 2025/06/08 17:45:25 wifi device emulation: enabled 2025/06/08 17:45:25 802.15.4 emulation: enabled 2025/06/08 17:45:25 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 17:45:26 starting 8 fuzzer processes 17:45:26 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x34, &(0x7f0000000000)={0x1f, 0x7, 0x6c}) prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ff, 0x3298, &(0x7f0000000080)=0x1) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x94}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2000000}, 0x40004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x80d4) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x424, 0x3f4, 0x4, 0x70bd29, 0x25dfdbfd, {0x3, 0x1, 0x38, [0x7, 0x3, 0x7, 0x2, 0x3ff, 0x2, 0x7, 0x8, 0x7fffffff, 0x4ab73b38, 0x1, 0x6f8, 0x66ae, 0x5, 0x0, 0x7e000, 0xffffff6a, 0x5, 0x40, 0x3, 0x1, 0x40, 0x0, 0xffffffff, 0x7fff, 0x5, 0xffffffff, 0x6, 0x2, 0x8, 0xf84a, 0x7d0, 0x617, 0xbc, 0x100, 0x61, 0x6cb2, 0x993, 0x5, 0x0, 0x9, 0x5, 0x400, 0xea, 0xbd, 0x9, 0x7f, 0x1, 0x5b, 0x7fff, 0x9, 0x0, 0x81, 0x2, 0x7f, 0x4, 0x1, 0xff, 0xfff, 0x0, 0x6, 0x401, 0x3ff, 0x9], [0x9, 0x1, 0x200, 0x200000, 0x7, 0x80000001, 0x1, 0x16e1, 0x10000, 0x1ff, 0x4, 0x40, 0x8, 0x1000, 0x1000, 0xb6, 0x2, 0x8001, 0x924d, 0x40, 0x0, 0x2, 0xff, 0x8, 0x9, 0x10001, 0xac, 0x0, 0x2, 0x800, 0x3, 0x3ff, 0x7, 0x24ab, 0x5, 0x2, 0x90, 0x8001, 0x7f, 0x7, 0x3, 0x1, 0x828, 0x20, 0x10001, 0x8000, 0xd5e7, 0x0, 0x0, 0xff, 0x6, 0x0, 0x6, 0x0, 0x5, 0x6, 0x196ec34b, 0x5, 0x4, 0xffffffe1, 0x9, 0x6, 0x4, 0x80000000], [0x4, 0x8, 0x800, 0xff, 0xffff, 0x8000, 0x9, 0x81, 0x9, 0xffff7fff, 0x8, 0x5, 0x8, 0x6, 0x9, 0x1, 0x0, 0x3f, 0xb4, 0x2, 0x7, 0x8, 0x1, 0x0, 0x1, 0x48b8, 0x2, 0xffffffff, 0xfffffffc, 0x2, 0x5, 0x2, 0x5, 0xeb, 0x800, 0x3, 0x2c3b, 0x1, 0x7, 0x81, 0x200, 0x8001, 0x0, 0x51, 0xba, 0x5, 0xa0000, 0x9, 0x81, 0x3, 0x5, 0xfb2, 0x20, 0x5, 0x97, 0x6, 0x1, 0x0, 0x4, 0x2, 0x6, 0x4, 0x115], [0x5, 0x1, 0x8, 0x5, 0xe38a, 0x6, 0x10000, 0x3f, 0x5, 0x4, 0x101, 0x81, 0x4, 0x0, 0x7, 0x1f, 0x8000, 0x1f, 0x13, 0xffffffff, 0x2, 0x9, 0x9, 0x5, 0x20, 0x400, 0x5, 0xfffffff8, 0x7ff, 0x1, 0xffff, 0x0, 0x6, 0x7fffffff, 0x904, 0x2, 0xe0, 0x4, 0x20, 0x4, 0xa0, 0x9, 0x5, 0x0, 0x7, 0x7fffffff, 0x1, 0x40, 0x4, 0x8000, 0x800, 0x8, 0x7f, 0x80, 0x80000000, 0x1000, 0x55, 0xb6, 0x1, 0x1f, 0x8000, 0x1, 0x5, 0x4], 0x4, ['sip\x00']}, ["", "", "", ""]}, 0x424}}, 0x80) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000880)={0x193, 0xa, 0x0, [{0x7f, 0x101, 0x28, 0x8, 0x7, 0x9, 0x50}, {0x9f, 0x0, 0xffffffffffff7fff, 0x5, 0xfb, 0x5, 0x4}, {0x3f, 0x8, 0x8, 0x7, 0x1, 0x9, 0x3}, {0x3f, 0x8, 0x3, 0x3, 0x1, 0xa8}, {0x3f, 0xfffffffffffffff7, 0x80000000, 0x0, 0xc6, 0x40, 0x6}, {0xfffffffffffffff8, 0x80, 0x4, 0x0, 0x2, 0x4}, {0x11, 0x4, 0xd5, 0x4, 0x70, 0x49}, {0x80, 0x8, 0x8, 0x7, 0x4, 0x89, 0x80}, {0x4, 0x800, 0x5, 0x9, 0x0, 0x7, 0x81}, {0x7fffffff, 0x3, 0x3f, 0x4, 0x6, 0x8, 0xe8}]}) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b80)={0x360, 0x15, 0x400, 0x70bd27, 0x25dfdbff, {0x2a, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "29647da65a028102876aeafaa8c32954331c913cf769333688f44ec3648f8ab18334a5bf34a2c0d35d02954edfeb586c443c0bfaa705279559be602406833f667d83ce2ff5ed1763621f3e7df8ef6c5a9bfd5df42c160e2de85dcb4319f2e60a7ae000150c3e6ea6ff5a084318d3a5479860595ce389eb67c337434a48111523d8273a07f72bb534aa3a52299ad5ea47cd74cf250d6b7309d7b10c2048fba3fc1e9aa161b1ca2a62e2f637d8"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "7fa33018729cddcc214768ce9a78737ef840b41a1041db448dae3c5b85afd12544da011f9373edb1f0835fafd059a9e0da7425fc290c1f020c3218c960ab9ffa3fa155573934d8d01c1cf774a69dfff78570d2a404ffaa1d3b34a21b9c1ac23696eaa81a6561f1440283a2dfe3843b0204b116156a5c6449685cb0e2ead55b27ce1da71e44046c0691d3f7499190e93f3bebde4cdc3d3e89fa4c2573e2ffa2acb553ddde0be1f4b64f574e6f7dfea5da1f645c10d8ff5f2b7f7b96bf"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "c80d662e894d4a4fc4f406c23213d2761e40799c3a7b781c96e4d17bb335c0efde29fc281d5ec938f8a4a2349a8a4dc56a7a952d2db02bf6674d12bd20926ad734e00e99b800c989e03a539fe8404c47d767f8e5ac007d33dc91ca41643fb78207ca32de80e11658d1b45b683ad00c9437630a584decc8675b705c2813c9268000dc838543b7039ed971bc4c75c1a1f8a161fcf3f8b9a082a385963a2d104e4a56a5b575e0f08a6b801efba7ec9b9d92b9cc49d00df4fd4448283c59e7cc1efad60ae92e902875358fa412cd82b1e5bc461d39699f43"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "7e455c88dc75a1cc43d1fb4614bd1f0b6420520f565ee0934cdeb1f81a78c3b11a361717cd904761f3aeeee40b2170cb5333"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "301f9b2a3a1d614aff3e0d7a7c46d6d25b9aa07e9fd54a4fff8164b6dcf68c5f485bdbc12764ff3e32f77f7adb79a77d8bf8f345e84d578c9e20a87715a2870ef3c043e15c8682ebff419c30d0c3cebb1cf04bc644f1b4a2699f47aeaebdfedd18d30bb12dbbfc28dc09f51a00aa6de10a5a0d1062fe6d7ac3b52bd84b2a3e667c7b8f1612ca8ef708f564d11013fedac0190008503efe0ab82651026466e790ba6d9fc6c605cecccd31759eb24d3f3782fe775df31981e63ac14044f6ff1709319d5a8d"}]}, 0x360}, 0x1, 0x0, 0x0, 0x40000}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xcb4, 0x31}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xf2}, @NL80211_ATTR_VENDOR_DATA={0x9c, 0xc5, "b22a30a463a418525cdc8bb47807a90b738a04306de5f8f3f771857cd1115b3e1008d56249b4fed2b8bb714a600837950de1aa166d68d82a8e25d7abe61c3ce20b0356d0f096b32ace609495d89a913550745e75bc8e0d2e8c5fb959c3f76645047050666a7638553c3b3809f9aada3e4ddc991a80634970a859cd97456872d1c5707b226e089ddac5ad02bca58d234a65d3cd504295af61"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7ff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8001}, 0x48001) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x17c, 0x1, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CT={0x4c, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x9, 0x2, 0x8, 0x3, 0x8, 0x4]}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x4454}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xffff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x9a8}]}, @NFQA_EXP={0xe4, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast2}}}]}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xfffffffa}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000001400)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, @l2tp={0x2, 0x0, @remote}, @tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}, 0x4}}, 0x101, 0x0, 0x0, 0x0, 0x20, &(0x7f00000013c0)='wg1\x00', 0x5, 0x10001, 0x7}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) recvmsg(r3, &(0x7f0000001940)={&(0x7f0000001500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001580)=""/250, 0xfa}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/127, 0x7f}], 0x3, &(0x7f0000001840)=""/205, 0xcd}, 0xc1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x40, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4) 17:45:26 executing program 1: ioctl(0xffffffffffffffff, 0x1b, &(0x7f0000000000)="116ea67bcdc1caf4ac1b449b1f450102d59b20f889e1aa73a4cfedd67a352a8898dc1b31c3593d6a862479f6102975bb80a6c03b8843d63e64f5086c9a3f1f44cfb62cf10e0ea8c4736d2983dd7f98d6cfc9ed59419a8e856f57b29668a08744583da9a8eba5417123d1bd063c3e06bb4a26e97ade05dad6beb0f36effe029a21695f7a253352176b346c7056e910e8ff61c9055c04e0e8e340cd6ae7b2ccfe4d58298a0a265c9a95a45ea0766e471f8026ac11c8fa84f5fae2db6ac6373c4dbc18b1fad89de687430f4282ba17ff1c491e2cd2a0d1858d5313b475f1d") ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000100)={0x0, 0x200}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000001100)={0x2, [0x0, 0x0]}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001140)=0x5, 0x4) r0 = signalfd(0xffffffffffffffff, &(0x7f0000001180)={[0x8]}, 0x8) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000011c0)) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000001200)) r2 = getpid() clone3(&(0x7f00000014c0)={0x0, &(0x7f0000001240)=0xffffffffffffffff, &(0x7f0000001280), &(0x7f00000012c0), {0x1a}, &(0x7f0000001300)=""/236, 0xec, &(0x7f0000001400)=""/117, &(0x7f0000001480)=[r2], 0x1, {r0}}, 0x58) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) fdatasync(r3) r4 = signalfd(r3, &(0x7f0000001540), 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001580)={'wg2\x00'}) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f00000015c0)={'netpci0\x00', @ifru_flags}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001600)={0x0, 0x0}) sched_getscheduler(r5) fcntl$setstatus(r4, 0x4, 0x42000) readv(r0, &(0x7f0000001780)=[{&(0x7f0000001680)=""/240, 0xf0}], 0x1) 17:45:26 executing program 2: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f0000000040)=0x28) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x174, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xe}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x31}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x448025ecda31f7ed}}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x98, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}, @CTA_ID={0x8}, @CTA_MARK_MASK={0x8}, @CTA_LABELS_MASK={0x10, 0x17, [0x1, 0x91, 0x4]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xedc}]}, 0x174}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80044200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1200000}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x430}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}]}]}, 0x98}}, 0x800) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x3, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xd2a}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x101}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x1) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{0xf, 0x2, 0xfd, 0xfffff001}]}, 0x10) r2 = accept4(r0, &(0x7f0000000780)=@phonet, &(0x7f0000000800)=0x80, 0x800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000840)=0x1, 0x4) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000880)={0x7, 0x8000}) fcntl$dupfd(r2, 0x605, r0) ioctl$CDROMRESUME(0xffffffffffffffff, 0x5302) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000008c0)={{0x0, 0x6, 0x33, 0x4, 0x5, 0x65e, 0x9, 0x2, 0x81, 0xaa21, 0x23b, 0x4, 0x4, 0x8, 0x7}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fcntl$getownex(r1, 0x10, &(0x7f0000000a40)={0x0, 0x0}) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000a80)={{0x1, r4, 0xee00, 0x0, 0xffffffffffffffff, 0x44, 0x554}, 0x3b, 0x20, 0x480000, 0x5, 0x0, r5}) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000b00)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000b40)=""/171) 17:45:26 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7ff, 0x52}}}}, [@NL80211_ATTR_TESTDATA={0xbb, 0x45, "ca3ea47fa300ddb59459d92d84a78ec645cefeed5a7f109eca425d1a581528fadc89f259111a89829c5639772f088db96d6e60e5083cd2988873eac481796578c80357fa30ed587faf43324cf5f9c710dadfe4d6f0964cb4d1351fb21343495b7da5327e5fa2e8045ce63944a0cb9e225e1d48d529b0f59ed76b4b5968517e9d7f5ba349abaab53838d41e5a12208c45f07263f1b9d2ff565fbe053fb563012df202ff62f405cd5c8896876144c353e29682d18d5343ca"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8081}, 0x44000) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0xf800000000000000, 0x200000) ioctl$CDROMPLAYTRKIND(r2, 0x5304, &(0x7f0000000280)={0xc, 0x9, 0x0, 0x8}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x3d6}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x1c}}, 0x890) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008090}, 0x804) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x10}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xea}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008050}, 0x90) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x200088d0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000007c0)=0xffffffffffff8001) r7 = accept4$unix(r2, 0x0, &(0x7f0000000800), 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000840)) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}]}, 0x38}}, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8020) [ 101.808148] audit: type=1400 audit(1749404726.827:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:45:26 executing program 4: r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="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", 0xfa, 0x8}, {&(0x7f0000000180)="63814711f9e31c6ec108fbef10b4a8b5e3b4d2f338473861b62b11c2e0a6ea5526c0f08a144d5375a6ed3bbef2f3fc6ffd807629058e62619d072a375f0d8bd7e8e9dbb35d4aee9fecd2fad20306632256c7f4a16a059cf1dc00ded91d1c41b91962097ef3f8318da1d5bb1534d9fd9a60e869984855aafc05dee71810f0c48f675ed94b4ed752b2bc3a834d594d8b95a21f819c121d51210b181196d27c75529dbae751", 0xa4, 0x6}, {&(0x7f0000000240)="5d8c95e4cb458411d7289c83bc9b08b25e7a5fe202f86b394af0347ee4664b7cf204fbadc885336ce724bfc16ed7c1dcb410e743ad", 0x35, 0xffffffff}, {&(0x7f0000000280)="05d52b8136749719b264bc37292ce3265c614c2263278d238ef7d3f7243503", 0x1f, 0xffff}], 0x0, &(0x7f0000000340)={[{'!-%]{-'}, {}, {'@-//:(,!*-![&@'}, {'-('}, {'-'}, {'\xf2'}, {'\\@'}], [{@subj_role={'subj_role', 0x3d, ':[^-/'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, ']-['}}, {@obj_role}, {@dont_measure}, {@hash}]}) r1 = syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0xe55a, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000440)="910a0b028264e6fd07aeeffa376e01c7d399d61c34a6fe5d025974192315950d2dd4f9927a62e5b33589c6c72baf3a4c1f364a9771c2df5d7adc379d9c18a7895e78065b73fb24cb5ca2f976a6e0b44c8a89a6a133da8155e15e8b96ba0a557bfab867a728717963b4e688ae074e621e0fda714d54604a4eed01c5fbf9564f93a3122ba0f54ca6477d6d3cfb98925e8f7b0478922b2f9187f22cfe127718af5b07", 0xa1, 0x6}, {&(0x7f0000000500)="c23522a21b59edeabed9d4f27e30a24d4321b38e52fd5a03472ab58e2d5c7bc4e7ae6d2f5e36c1cc3ff0cc23267bb38439cd8bb7244f3d9ce63a51a1d402595185cfa7d088de45e13069a1005389f4fc11e5cbcb72b50688da6faf14b6e82c4dcbee66552984a18c9ac397acd83d7a1ad604494fe2a007491d7d95dbfa1bbe0e4dc6e8dc77fc61e4e58087b5ccfdb03e01c11e68e7ad4b4c69705756b08259b1d9f02fd5", 0xa4, 0xd5}], 0x1000, &(0x7f0000000600)={[{@shortname_win95}, {@nonumtail}, {@shortname_win95}, {@fat=@usefree}, {@rodir}, {@uni_xlate}, {@utf8}, {@uni_xlate}], [{@appraise}, {@subj_user={'subj_user', 0x3d, '#-'}}, {@pcr={'pcr', 0x3d, 0x1}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) openat2(r1, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x101000, 0x20, 0x1}, 0x18) mount$9p_tcp(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x1000010, &(0x7f0000000800)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@msize={'msize', 0x3d, 0xffffffff}}, {@version_9p2000}, {@fscache}], [{@subj_user={'subj_user', 0x3d, 'nfs4\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000880)) r2 = syz_open_dev$vcsn(&(0x7f00000008c0), 0xfffffffffffffff7, 0x191202) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x8, 0x3) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000980), 0x200000, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000009c0)={0x0, 0x1800, 0x0, [0x2bcf, 0x0, 0xee1, 0x6fb9, 0x64], [0x63, 0x7, 0x3, 0x2, 0xa879, 0xcd20, 0x1f, 0xffff, 0x9, 0xb417, 0x3, 0x29d, 0x10000, 0x100, 0xb60c, 0x1, 0x4, 0x4, 0x80000000, 0x7da, 0x9, 0x3, 0x8001, 0x7fff, 0x7, 0x8, 0xb482, 0x0, 0x8, 0x1ff, 0x1, 0x4, 0x6, 0xfffffffffffffff8, 0x1, 0x9, 0x7d, 0x6, 0x2, 0x13d400000000000, 0x98c, 0xfffffffffffeffff, 0x0, 0x10000, 0xff, 0x6, 0x6, 0x101, 0x0, 0x200, 0x9, 0x3f, 0x0, 0x6, 0x8, 0x5, 0x77f, 0x1bb, 0x1, 0xffff, 0x3, 0x3, 0x3, 0x1, 0x7, 0x8, 0x10001, 0x2, 0x6, 0x20, 0x0, 0xeb7, 0x5, 0x4, 0x3f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x401, 0x6, 0x6, 0x6, 0x100000001, 0xfff, 0x6, 0x8, 0xfffffffffffffdf1, 0x3, 0x0, 0x6, 0x1f, 0x0, 0x1, 0xfffffffffffffffc, 0x4, 0x4, 0x2, 0x401, 0x1, 0x39, 0x7ff, 0x9, 0xffff, 0x400, 0x100000000, 0x7, 0x3bc, 0x4, 0x8330, 0x9, 0x9, 0x0, 0x40, 0x5, 0x533e390e, 0x7, 0x101, 0x59, 0x100000001]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000e00)={0x5, 0x2, {0x6, @struct={0x75c3, 0x9}, 0x0, 0x24a0, 0x20, 0x2, 0x5e, 0x96b, 0x32, @struct={0x200, 0x7}, 0x6e8, 0x2, [0x4, 0x1, 0x0, 0x1, 0x1, 0xff]}, {0x1, @usage=0x1, 0x0, 0x5, 0xffff, 0x80000001, 0x6, 0xacc3, 0x0, @usage=0xef, 0x78, 0x8, [0x8, 0x4, 0x0, 0x29, 0xf7d, 0x80000001]}, {0x5, @struct={0x80000001, 0x80000000}, r4, 0x7fff, 0x31f, 0x0, 0xfffffffffffffff9, 0x1f, 0x2, @struct={0x5, 0x2}, 0xfffffffa, 0xba, [0x6, 0x5, 0x4, 0x0, 0x2, 0x20002000]}, {0xe7c, 0x6a2, 0x1}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001200)={r4, 0x9, 0x100}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001600)={r5, 0x8, 0xaa}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000001a00)={0x11, 0x0, {0xffff, @usage=0x1, r6, 0x10001, 0x9, 0x6, 0x7, 0xb3, 0x40, @usage=0x6, 0x4, 0x1d, [0xff, 0x4b, 0xec07, 0x20, 0x715, 0x8]}, {0x8, @struct, r8, 0x3, 0x6, 0x5, 0x3, 0x0, 0x400, @usage=0x6, 0x0, 0x2, [0x9f93, 0xbb7f, 0x9, 0x200, 0xfd7]}, {0x2, @usage=0x8, r9, 0xb405, 0x0, 0xfffffffffffffff9, 0xfffffffeffffffff, 0x4, 0x1, @struct={0x2, 0xd30a}, 0x33b, 0x0, [0x9, 0x8, 0x1, 0x4, 0xfffffffffffffff7, 0xfffffffffffffffc]}, {0x2, 0x1, 0x74}}) r10 = socket$inet_udp(0x2, 0x2, 0x0) readahead(r10, 0x81, 0xfffffffffffff4a1) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000002200)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000021c0)={&(0x7f0000001e80)={0x30c, 0x0, 0x2, 0x70bd28, 0x9, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfffffff8, 0x25}}}}, [@NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1bd81bd13283ae561038bb3429890e6245326d11659aa49b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dd6e150d6f924790"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9ec73bcc558cab66"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7ae31ed87e6ba06649c81c523cd2dce9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d36a63f164d2880a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="617d3992dfcc6185c0c077dccac054e19ce7565cf1e25df5aee4cf39437f1d96"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x401}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="46306dcde0627b518a26bd443d31cd97480b1e58b45417b5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd5b006f5b18d0f6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3fbff6ced0a1664"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "578da11d126186cd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f34257d999d65c82"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1b604b5c0f44319fee9e22df4813bdaf"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="452249e6cf776af70bdd12e3b66c7ac2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aa57be42fd6d565421ed19aa78145a49"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7e3ac8f07fe13f29b4fe52caf9135b84a4bd9653f46a3db9"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bff1ca35e3b887c61c5d73860e6da9dd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "74e7d6ba1b4fe516"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1f47409da13dd9092051c5157bc178c1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "562d94efd7b1d41a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2abefd5064c9ab3970b2bfd04599097a44759516bafa13ac"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e9b705c281caea317be24d2c27f34dfb"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x89}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="738f07ac3557c58648a58e8e6b75880618bee8c3c9e7e2f0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e82031cb025e2081"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5e4622f22ef6385d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="465a341865c847b1be76468f19fa5dde"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9d31b7887a7df944735801f18b825c1f378a5b1ed111b0b9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "86654ff3c177f8fa"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2820ede8d173992b763f625eeb0b18a9836d3e1be6f7b2f6"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c7ac3d3b6dd29446421216f54c33574da8882e6eadb0e575"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8c61fd2910ff59c7bba734c3b2915f0a79fe08b3a14add15"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "90d42a18ccea0013"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffeff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x50}, 0x8008000) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000002240)={0x0, 0x0, 0x5, 0x0, '\x00', [{0xfff, 0x6, 0x9, 0x5, 0x4, 0x1000}, {0x81, 0x8, 0x1, 0x8, 0x10000, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x34, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4854) 17:45:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8001001}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000280)=0x91d7) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000002c0)={0x0, 0x3, 0x1ff, 0x1}) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000006c0)) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000740)={'\x00', 0x2, 0x1, 0x20}) r3 = dup(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r4, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000900)={0x0, 0x0, {0x9, 0xb, 0x6, 0x1a, 0x5, 0x2, 0x5, 0x9e, 0xffffffffffffffff}}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x18, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) statx(r2, &(0x7f0000000a80)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r3, &(0x7f0000000a40), &(0x7f0000000bc0)=@v3={0x3000000, [{0x9, 0x6}, {0x8000, 0x40}], r5}, 0x18, 0x0) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001680)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000001a80)={{r6}, {@val={r7}, @actul_num={@val=0x2b, 0x0, 0x74}}}) 17:45:26 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x86}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x50) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40480c2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40802}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x104, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x104}}, 0x4064000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x4, 0x6, 0xf03, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8111240}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) pipe2(&(0x7f0000000a00)={0xffffffffffffffff}, 0x84000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, r8, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x33}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) pipe2(&(0x7f0000000c00)={0xffffffffffffffff}, 0x800) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x3d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8fe13c3e68293f187587dc8cda"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "c48b617c35"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 17:45:26 executing program 7: ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f0000000000)=""/230, 0xe6, 0x5e47, 0x80000001}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x214200, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000180)={0x5, 0x100, 0x7}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000001c0)=0x8000) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x62d8, 0x4000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000300)=0x80000000) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x2) getpeername(r0, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000440)=0x80) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000480)={0x3, 0x19, "38f9af93c5c4545c4870e92742e8985c939522fae13b37b20c"}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f00000004c0)) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000500)) r4 = dup3(r1, r3, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000850) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r4) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000680)) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x8e640, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r4) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044) [ 103.268002] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.272045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.277434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.280350] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.283138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.292035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.301358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.305991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.310316] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.318821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.344910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.348497] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.350448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.366498] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.382602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.390360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.409008] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.412986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.419282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.428970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.457969] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.465984] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 103.484126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 103.486057] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.490298] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 103.492170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.494139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 103.497515] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 103.498357] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 103.501683] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.501703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 103.507706] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.508794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 103.511494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 103.511654] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 103.520431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 103.521603] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 103.524615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 103.529278] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 103.535645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 105.398453] Bluetooth: hci0: command tx timeout [ 105.398498] Bluetooth: hci1: command tx timeout [ 105.525992] Bluetooth: hci2: command tx timeout [ 105.527059] Bluetooth: hci3: command tx timeout [ 105.591807] Bluetooth: hci4: command tx timeout [ 105.592028] Bluetooth: hci7: command tx timeout [ 105.592621] Bluetooth: hci5: command tx timeout [ 105.654870] Bluetooth: hci6: command tx timeout [ 107.446217] Bluetooth: hci1: command tx timeout [ 107.446710] Bluetooth: hci0: command tx timeout [ 107.573858] Bluetooth: hci3: command tx timeout [ 107.574357] Bluetooth: hci2: command tx timeout [ 107.638222] Bluetooth: hci5: command tx timeout [ 107.638701] Bluetooth: hci7: command tx timeout [ 107.639931] Bluetooth: hci4: command tx timeout [ 107.702027] Bluetooth: hci6: command tx timeout [ 109.494836] Bluetooth: hci1: command tx timeout [ 109.495345] Bluetooth: hci0: command tx timeout [ 109.623040] Bluetooth: hci3: command tx timeout [ 109.623554] Bluetooth: hci2: command tx timeout [ 109.685929] Bluetooth: hci7: command tx timeout [ 109.686434] Bluetooth: hci5: command tx timeout [ 109.687438] Bluetooth: hci4: command tx timeout [ 109.749884] Bluetooth: hci6: command tx timeout [ 111.541826] Bluetooth: hci0: command tx timeout [ 111.541863] Bluetooth: hci1: command tx timeout [ 111.669856] Bluetooth: hci2: command tx timeout [ 111.670349] Bluetooth: hci3: command tx timeout [ 111.735189] Bluetooth: hci4: command tx timeout [ 111.735213] Bluetooth: hci5: command tx timeout [ 111.735660] Bluetooth: hci7: command tx timeout [ 111.797828] Bluetooth: hci6: command tx timeout [ 165.521399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.524266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.533556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.542501] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.546878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.675601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.678700] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.682656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.689867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.693188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.698051] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.707096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.715945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.722085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.725380] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.729102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 165.731909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 165.735147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 165.741927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 165.746406] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.752539] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.758464] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.764237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.766912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.774288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.780598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.794930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.810218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.815671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.817989] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.821131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.862264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.874651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.878176] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.881207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.321273] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 166.344149] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 166.368300] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 166.439456] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 166.490601] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.605879] Bluetooth: hci0: command tx timeout [ 167.798455] Bluetooth: hci4: command tx timeout [ 167.926339] Bluetooth: hci6: command tx timeout [ 167.928019] Bluetooth: hci2: command tx timeout [ 167.989902] Bluetooth: hci3: command tx timeout [ 167.991151] Bluetooth: hci1: command tx timeout [ 167.992098] Bluetooth: hci5: command tx timeout [ 168.693940] Bluetooth: hci7: command tx timeout [ 169.655943] Bluetooth: hci0: command tx timeout [ 169.845901] Bluetooth: hci4: command tx timeout [ 169.974163] Bluetooth: hci6: command tx timeout [ 169.974652] Bluetooth: hci2: command tx timeout [ 170.038943] Bluetooth: hci3: command tx timeout [ 170.039383] Bluetooth: hci5: command tx timeout [ 170.039844] Bluetooth: hci1: command tx timeout [ 170.742080] Bluetooth: hci7: command tx timeout [ 171.703149] Bluetooth: hci0: command tx timeout [ 171.895654] Bluetooth: hci4: command tx timeout [ 172.023049] Bluetooth: hci6: command tx timeout [ 172.023525] Bluetooth: hci2: command tx timeout [ 172.085871] Bluetooth: hci1: command tx timeout [ 172.086327] Bluetooth: hci5: command tx timeout [ 172.086788] Bluetooth: hci3: command tx timeout [ 172.790072] Bluetooth: hci7: command tx timeout [ 173.750824] Bluetooth: hci0: command tx timeout [ 173.942815] Bluetooth: hci4: command tx timeout [ 174.072026] Bluetooth: hci2: command tx timeout [ 174.072502] Bluetooth: hci6: command tx timeout [ 174.136058] Bluetooth: hci3: command tx timeout [ 174.136501] Bluetooth: hci5: command tx timeout [ 174.137096] Bluetooth: hci1: command tx timeout [ 174.838190] Bluetooth: hci7: command tx timeout [ 227.713601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.717689] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.720462] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.729105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.732985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.849651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.857059] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.863217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.871889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.876550] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.981204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.985138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.990691] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.999487] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.006199] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.027893] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.037029] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.062062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.062503] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.089335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.096877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.097203] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.107627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.127184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.128618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.130608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.137033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.156369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.172120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.178329] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.186297] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.197865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.201377] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.271437] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.281463] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.286996] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.302038] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.310042] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.337543] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.344005] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.815012] Bluetooth: hci0: command tx timeout [ 229.942074] Bluetooth: hci1: command tx timeout [ 230.071529] Bluetooth: hci2: command tx timeout [ 230.198148] Bluetooth: hci3: command tx timeout [ 230.199243] Bluetooth: hci4: command tx timeout [ 230.263008] Bluetooth: hci5: command tx timeout [ 230.389976] Bluetooth: hci6: command tx timeout [ 230.453843] Bluetooth: hci7: command tx timeout [ 231.861861] Bluetooth: hci0: command tx timeout [ 231.989818] Bluetooth: hci1: command tx timeout [ 232.118152] Bluetooth: hci2: command tx timeout [ 232.248584] Bluetooth: hci4: command tx timeout [ 232.248621] Bluetooth: hci3: command tx timeout [ 232.311008] Bluetooth: hci5: command tx timeout [ 232.438160] Bluetooth: hci6: command tx timeout [ 232.503034] Bluetooth: hci7: command tx timeout [ 233.910281] Bluetooth: hci0: command tx timeout [ 234.041774] Bluetooth: hci1: command tx timeout [ 234.165844] Bluetooth: hci2: command tx timeout [ 234.294180] Bluetooth: hci4: command tx timeout [ 234.294830] Bluetooth: hci3: command tx timeout [ 234.357818] Bluetooth: hci5: command tx timeout [ 234.485818] Bluetooth: hci6: command tx timeout [ 234.549862] Bluetooth: hci7: command tx timeout [ 235.958796] Bluetooth: hci0: command tx timeout [ 236.085975] Bluetooth: hci1: command tx timeout [ 236.214183] Bluetooth: hci2: command tx timeout [ 236.341864] Bluetooth: hci3: command tx timeout [ 236.341886] Bluetooth: hci4: command tx timeout [ 236.405866] Bluetooth: hci5: command tx timeout [ 236.533851] Bluetooth: hci6: command tx timeout [ 236.599948] Bluetooth: hci7: command tx timeout [ 290.256132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.259243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.262181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.279338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.291553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.310974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.314831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.317041] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.329303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.332672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.582095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.595789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.598002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.608706] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.609978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.618993] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.639661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.647536] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.661157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.666493] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.669192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.672526] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.685108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.706252] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.720985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.733728] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.757870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 290.766339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.768571] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 290.786430] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 290.791099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.793318] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 290.814089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.829969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.836339] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 290.841971] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 290.884989] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 290.887503] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 290.908552] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 290.917298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.342189] Bluetooth: hci0: command tx timeout [ 292.405816] Bluetooth: hci1: command tx timeout [ 292.789925] Bluetooth: hci3: command tx timeout [ 292.853829] Bluetooth: hci5: command tx timeout [ 292.854451] Bluetooth: hci2: command tx timeout [ 293.045864] Bluetooth: hci4: command tx timeout [ 293.046817] Bluetooth: hci7: command tx timeout [ 293.238133] Bluetooth: hci6: command tx timeout [ 294.390016] Bluetooth: hci0: command tx timeout [ 294.454777] Bluetooth: hci1: command tx timeout [ 294.838270] Bluetooth: hci3: command tx timeout [ 294.902845] Bluetooth: hci2: command tx timeout [ 294.903655] Bluetooth: hci5: command tx timeout [ 295.094006] Bluetooth: hci7: command tx timeout [ 295.095719] Bluetooth: hci4: command tx timeout [ 295.285877] Bluetooth: hci6: command tx timeout [ 296.440470] Bluetooth: hci0: command tx timeout [ 296.502138] Bluetooth: hci1: command tx timeout [ 296.885911] Bluetooth: hci3: command tx timeout [ 296.951777] Bluetooth: hci5: command tx timeout [ 296.952230] Bluetooth: hci2: command tx timeout [ 297.143059] Bluetooth: hci4: command tx timeout [ 297.143581] Bluetooth: hci7: command tx timeout [ 297.333831] Bluetooth: hci6: command tx timeout [ 298.486126] Bluetooth: hci0: command tx timeout [ 298.552020] Bluetooth: hci1: command tx timeout [ 298.934109] Bluetooth: hci3: command tx timeout [ 298.998920] Bluetooth: hci2: command tx timeout [ 298.999355] Bluetooth: hci5: command tx timeout [ 299.191206] Bluetooth: hci4: command tx timeout [ 299.191653] Bluetooth: hci7: command tx timeout [ 299.381978] Bluetooth: hci6: command tx timeout [ 352.586687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.590370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.592842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.599633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.602900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.655308] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.659647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.662387] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.671675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.675645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.926636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.935704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.943572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.965235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.983084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.985708] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.990293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.010534] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.024217] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.032551] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.047836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.074677] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.117351] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.123302] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.131154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.138190] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.140274] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.150169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.164391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.166625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.167385] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.169555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.180400] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.184368] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 353.206465] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 353.211287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 353.258687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.291167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.350811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 353.370171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.678789] Bluetooth: hci0: command tx timeout [ 354.742232] Bluetooth: hci1: command tx timeout [ 355.061968] Bluetooth: hci2: command tx timeout [ 355.125851] Bluetooth: hci3: command tx timeout [ 355.317830] Bluetooth: hci7: command tx timeout [ 355.319010] Bluetooth: hci5: command tx timeout [ 355.446172] Bluetooth: hci4: command tx timeout [ 355.510204] Bluetooth: hci6: command tx timeout [ 356.726842] Bluetooth: hci0: command tx timeout [ 356.790065] Bluetooth: hci1: command tx timeout [ 357.110927] Bluetooth: hci2: command tx timeout [ 357.176344] Bluetooth: hci3: command tx timeout [ 357.367012] Bluetooth: hci5: command tx timeout [ 357.367064] Bluetooth: hci7: command tx timeout [ 357.494804] Bluetooth: hci4: command tx timeout [ 357.559277] Bluetooth: hci6: command tx timeout [ 358.775046] Bluetooth: hci0: command tx timeout [ 358.838904] Bluetooth: hci1: command tx timeout [ 359.158798] Bluetooth: hci2: command tx timeout [ 359.223869] Bluetooth: hci3: command tx timeout [ 359.413945] Bluetooth: hci7: command tx timeout [ 359.414036] Bluetooth: hci5: command tx timeout [ 359.541909] Bluetooth: hci4: command tx timeout [ 359.605937] Bluetooth: hci6: command tx timeout [ 360.823994] Bluetooth: hci0: command tx timeout [ 360.888036] Bluetooth: hci1: command tx timeout [ 361.205793] Bluetooth: hci2: command tx timeout [ 361.269814] Bluetooth: hci3: command tx timeout [ 361.461799] Bluetooth: hci5: command tx timeout [ 361.461835] Bluetooth: hci7: command tx timeout [ 361.591756] Bluetooth: hci4: command tx timeout [ 361.654016] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 17:50:29 Registers: info registers vcpu 0 RAX=ffff8880096025b0 RBX=ffff888009601b80 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000020 RDI=0000000000000001 RBP=ffff8880096025d8 RSP=ffff8880096176d0 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff888009602600 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8151953c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffbdc4a34a1 CR3=0000000029300000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87a5eb08 RBX=ffff8880155e0000 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff8880155e0aa8 RDI=ffff8880155e0a80 RBP=ffff8880155e0a58 RSP=ffff88806cf088d0 R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff8880155e0aa8 R13=873d0e13b074236a R14=0000000000000000 R15=0000000000000002 RIP=ffffffff8151992f RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3bd9ce78e0 CR3=000000000d457000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000