[ 84.971750] audit: type=1400 audit(1749611811.598:6): avc: denied { checkpoint_restore } for pid=217 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:60029' (ECDSA) to the list of known hosts. 2025/06/11 03:16:59 fuzzer started 2025/06/11 03:17:00 dialing manager at localhost:37235 syzkaller login: [ 93.622319] cgroup: Unknown subsys name 'net' [ 93.750736] cgroup: Unknown subsys name 'cpuset' [ 93.801553] cgroup: Unknown subsys name 'rlimit' 2025/06/11 03:17:16 syscalls: 2214 2025/06/11 03:17:16 code coverage: enabled 2025/06/11 03:17:16 comparison tracing: enabled 2025/06/11 03:17:16 extra coverage: enabled 2025/06/11 03:17:16 setuid sandbox: enabled 2025/06/11 03:17:16 namespace sandbox: enabled 2025/06/11 03:17:16 Android sandbox: enabled 2025/06/11 03:17:16 fault injection: enabled 2025/06/11 03:17:16 leak checking: enabled 2025/06/11 03:17:16 net packet injection: enabled 2025/06/11 03:17:16 net device setup: enabled 2025/06/11 03:17:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/11 03:17:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/11 03:17:16 USB emulation: enabled 2025/06/11 03:17:16 hci packet injection: enabled 2025/06/11 03:17:16 wifi device emulation: enabled 2025/06/11 03:17:16 802.15.4 emulation: enabled 2025/06/11 03:17:16 fetching corpus: 0, signal 0/0 (executing program) 2025/06/11 03:17:17 starting 8 fuzzer processes 03:17:17 executing program 0: ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3f) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x3) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_ACTIVATE(r1, 0x5606, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40c0) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000740)={0x3, 0x1, 0xc, 0x16, 0x4d, &(0x7f0000000340)}) fsetxattr$security_selinux(r0, &(0x7f0000000780), &(0x7f00000007c0)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x1) r5 = pidfd_getfd(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8820000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffcc3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xee1e}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040840}, 0x8) sendmsg(r2, &(0x7f00000011c0)={&(0x7f0000000980)=@generic={0x3, "87516c54eb312c3499744fb26edbd1a011f214610c814d29147d110e585b22a0227fc422727d4f875456d2858c575e97c26ea1422eac83ec0fb3539250330c87f24784dfaae9669134153b8b2d7f23d574b70d317634bc52f2844456c6d0a03aa543d315588fae26d3aa85225a0749d0e065da894d4cce8d359da26118e5"}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a00)="e468c102103c47b65ae4364ea288e1f3440887dd77da420bb7904a34f8fb3c805139f4d03034c7dce5c613f166d25d521186730b576803dbd593bf0223f4baac36bdffafd421f025", 0x48}, {&(0x7f0000000a80)="5866c4d3cf854f3e506382cd1d6b5f6a08fa560c7ad3f2e1ea43a90602ec1d45403e30fd04e6fc5b1904c3180eb2325d0d861bfe32832b902b34aa8886e3fa40d724cb4ab416a737273d2e1465a38ac88dc19330f6bf9e1aa6730cca9a14a34ee5d2b00fd04622ab6f586ed223ad1f6a0154e73cdc432ccec34dda33a49b85a8dc51dafbaf512fc43f", 0x89}, {&(0x7f0000000b40)="d08638a41b1fac909a011f789de481416d4610d9fcf47fa2ccb833bf8a44f1d60879f867a989eae6a657f3ab673ffe8489c8d82a2cf89c1428f2ac4f472a9f31e4d9ab48e8adc42fd133827bcc8a0f9c67fa51c53d542463d1a74e3fc6ad1d70e37d48f907711c0abf342c75b61e9b02c697790c002178c8233efa72f6adddc0023b39c42eb7bc59144b16f64ccd31c68c5bfa999cc11756ec050707de3b4cd3067de40b6fb36c645f17ce52cee3f8bfca4ad00ea7dc6632a7095066bf02d529", 0xc0}, {&(0x7f0000000c00)="0aa75a4cd98bb4fe65fcb7cb5e0f0b2f4c589f29fed8afa1812db997afb1027a2da8e0818564708003a78274f75e0fd1257d55aa2fe1c575586b1e919148cf4babbf64a2464f9b825cf8d95446733f620a452d11c0f1a7826da1b1619250c5a132791e7444c53e358246de9bc45c94d157fe6bf88b28d403769776f25116dafbe5b11f4021f3d2db13e07b40dabc1259cf1e5d64d26147673ecdbf0e53f22dcaf2ff", 0xa2}, {&(0x7f0000000cc0)="792a36fd669958a3923d8592c9e8d6f6940c80fa03ecbb3d63de7d5097e54cc0ad8cfffc8332f5941ae6718866b699af9e1cd2f46d270f3d7e1da52e9197fd98a825f9d737120228b9cc91d6714110be76e58bd9aa36e6d4945e09d3329b9713686409003ae0f3fa864fb5fb716b2e1b5edaf34ec97f85e9ca6f753747afaba4d2cb918cc4d6bf999bcf47bb6cd9de856c61cc99086a9a83aa916cdeab9953ddb30c55a18d16a71874430f22d08bae575df7d3aa9927edbaeafe07efccd85d078090c228e1ad7cfba7f31387052a2e448ae7eaa5dbb5b1be717bffd2ace6a8d4ce54a3c7c471a997ed9c82d8368c1af07223971bf3d83b", 0xf7}, {&(0x7f0000000dc0)="b775eecaedffd480c005224f007b9a0306c6e77f8564b0ace9c0425870611c8ba52e1bb3ce7d4d88b7e739017045063c09aa4934f974b359db46272364da6dc52f5a362be66ae220989f7e7cc37737d0e2e383b6fbcf3ff765bf855583e6a501c698488e4cd0f2a35b41f84538ad6b0d6a0af5aa64bb5162d7ffad18a0f536c013e3b22dc5426775d0401cfb461245c40912f95e0697a9d9d270c710aac61780dab76ed93e3d9d3bb49a7c002965ce7b9f13bb11cbfae7047314a3623f2244174db77d1c64390c5c5ccf616486fcc5194a608ff5d636b72211efe2785d2dfe2221bc6886b092b50aeb912750ad10cd43a17c275615", 0xf5}], 0x6, &(0x7f0000000f40)=[{0x10, 0x105, 0x3f}, {0xd8, 0x113, 0x8000, "fffca2ff8adfa656ee62b783e251413c3680e55bc34aa3e52f309fdd1cccf6ede3a39a133ff65251ff4e5d2c53871f0221bbc98955ec478e6cbcc167fd20edc7954db79afe47b24a5e665e8cd0b6a402c2e2c51bad74f975f5cb59ddf816242a938f801f84e1dc739d5f2eb3839c8be95e02ef416b1147515f5a32a3acbadca7487a9a4cdc635f3a693e672c38c42febf29baaf7f6aebda2b00a83ca396393a8564cf87f97b52328155fd162d4bec3d74ed1af5325345ff004aef5965dc571f913bf22"}, {0x80, 0x111, 0xffff, "3b51920f3a99a90149aed6c5a212f8fc46dd8e96460c1cf481a4f3fcc1d357a23a224c167b33c996efe53a258d6e7735765c17cdea3030605f9f18b7e20209ac58b3cbd400070a70697fcf10337f894455c33bab13a04e328d8b0ae6519b8e48f5c08f8a43e80d4bf518c4c0"}, {0x20, 0x104, 0x1000, "dea95f95fd785f16a43d8318a49ad2c8"}, {0xe0, 0x113, 0x8, "a9614a805d21e3363723c93e15a2c959af434e9cd269945ad7619ff889d89593a736e8b51e6b2398867d967d1a800b017ea581b6bf84f7d9e7bb2aa36f9411ce7651a5c635a62262365f06b0de6459409eda454f8a587f6a0da50a0f40cc2de2437c140e779737f0b2c7968c938684ddc6ede8ee9f39e43fc72095f99315754e4af015d24282d3b975e76f682978d7fd4c67d484aa58a81c20f42626a2d2414ddd5ee1761acd0a04899c64afb28f832dd93432233c8cbd2f017d3ddfc822f7b842c0ab36bf2d825862"}], 0x268}, 0x40) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000001200)={0x0, 0x80, 0x0, 0x10000, 0x6}) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000001240)={0x0, 0x1ff, 0xdf6c, 0x8000, 0x7, 0x40}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001280)) vmsplice(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000001480)="57f39491fe1ac0ab9beebc13581dd409f8e8c1bd5f262cfef6df99c028a69b292a2fd184e82555c8f69123557351683bceff7712ca4b4ddaa322a6f45959287e0810f842e7c48fe533dd3d4020d3fbd1cf23f5cbff8aa8d26d08ed83c9e4ea7a2113fd308416d60bd2b8f920f92a21aba243", 0x72}, {&(0x7f0000001500)="f6373b38e37ee8cc8e4b047489c77d5a543808db581e045a655dc389f4a872ce799bd7fd111b742eeb03a3f3368864196863713832298c883b2fa0d682b201604bae645ca82680aabd5820d5e175e08badf4aaa887e43a8422f59f6b2ad7c2a673c8b1ce5bf926b1cedd2ac314", 0x6d}], 0x2, 0x1) 03:17:18 executing program 2: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) write$nbd(0xffffffffffffffff, &(0x7f0000000140)={0x67446698, 0x1, 0x2, 0x2, 0x4, "de3a17ed8d4a8e9541e43ce07edfe8f87e32c329cff5766fb7ad9fdde0861b1aeec2f631eb4304d75f0310eaf8f5a437c607e7d6cbf1c935c83fc738dae4ffbc0769002392fe2cc27202e884997d26640e6afd10ac7fa364ebb98650a900021f888b2b"}, 0x73) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4044) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40000) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000440)=0x1c) r2 = syz_mount_image$tmpfs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x40, 0x5, &(0x7f0000000880)=[{&(0x7f0000000500)="44d7adfe12c12dfecd82fccd92f7089a560d53f84be8a0f25878f695a859211ad751f0ae9cb05b9c09b88ad4b1ff4a662ac996568f9fca0deaedd0dd3052adeb825c7f4ec6d74f76715ba18a7bed709f4352d406333e8046819f3b5103161c7d64e73ee3aba1d43558f0babd04b5173bcf0b4c6c47dd23b200eb408c074d19e73064602d57968a0a921110f0e2bea0e5ee65e559ce8ff812ba04c64d4eb9d08800bf4df0a96ea080d580e4210c732cbff0a235057db3", 0xb6, 0x9}, {&(0x7f00000005c0)="555a4c4ece5e6ae0559123a1639ddd1be4dc12ee6687f9cbdcd6a5b1f29f33359ea31621b596", 0x26, 0xc4c1}, {&(0x7f0000000600)="5ee1696ec2a524b2eed7993c7ef8f3cd9c9a95ad8c5d946d31acc3bc8dcee15613518869e9feb68932ec31099f3f158d2b6dfc0e767ae844181d67c893fa200543a223ebeeb32cdd01ab006c96c4ec9e8d95f5bf0b7a926f1daaf5e36b02a05a21a261f2142ceea3b8d5918b4a6480acd8b3a31bb2d7171d3675eab8654238d9e20e4699b07daae37cb93414f724bd2747166791", 0x94}, {&(0x7f00000006c0)="65f9ab8917f9988b944f19b3a7408a0db29a9b1cbb3fa054fd681569280fbe2a5c0383fb4a2a657e9c1ea57c35588d50244d3859261079db8e21ad51c32db8ab3efc54a5653b6e617b5573d9615665e031fc1629d8bf1e4b1f5f1e1157c1622e84a217998d60eb775c63de7a32cdbcb6076cc6ad774a5f1202699f03fe3e3754c8616163e1c326d97aa20d96827730dbd8fee371cfcbbbd7fa22cc079b6357b67c16b6e2ba31e0837901d409d1b19df94628a0664780b9a25c8423d6af577e7ff29b36c7a162bca19ec27bee9bf107c9fcb572de94106679", 0xd8, 0x7}, {&(0x7f00000007c0)="588d59dd5b89462ec0f713fdbfb70f8feee14e0d9b59f3b96037484d2e06808572bfe9a923088e72e0fde70ded1ed9608ea8422afe36027cf50ae315f1021eb1e6af3d15898c5b83f328049b54e96f905d65ad079a18c78e4dbc7fca47516bb07e0be152ed7161df8528fa698a75752ea3eccb03a2be4c6cd2c1a9ac0a636ce976f121dfd5", 0x85, 0x80000000}], 0x2000402, &(0x7f0000000900)={[{@mode={'mode', 0x3d, 0x6}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x2c, 0x6d, 0x37, 0x25]}}, {@huge_advise}, {@huge_always}], [{@permit_directio}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'NLBL_MGMT\x00'}}, {@pcr={'pcr', 0x3d, 0x34}}, {@smackfsdef={'smackfsdef', 0x3d, 'NLBL_MGMT\x00'}}]}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000a00)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1ffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20004941) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x503, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) lsetxattr$trusted_overlay_nlink(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), &(0x7f0000000cc0)={'U+', 0x8}, 0x16, 0x2) r3 = dup(r2) getpeername(0xffffffffffffffff, &(0x7f0000000d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000dc0)=0x80) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48040}, 0x8000) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000f40)={r3, 0xffffffffffffffff, 0x8}) [ 111.427538] audit: type=1400 audit(1749611838.057:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:17:18 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)={0x4, 0x3}) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000140)={0x1, 0x8, "7546fa88eab6f8ae"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0\x00'}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240)=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x2db3, 0x100000, 0x7]}, &(0x7f0000000340)=0x44) r2 = signalfd4(r1, &(0x7f0000000380)={[0x3d19]}, 0x8, 0x800) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000540)={r3, r4/1000+10000}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r5, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xf08, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44082}, 0x40005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000700)=0x6, 0x4) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000740)={0x5a68, 0x4, 0x80000001, 0xffffffff}) r6 = memfd_secret(0x80000) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000780), 0x4) 03:17:18 executing program 4: chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x456200, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x811, 0x0) pkey_alloc(0x0, 0x1) ioctl$RTC_UIE_ON(r0, 0x7003) migrate_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=0x400, &(0x7f0000000140)=0x5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f00000001c0)=0x1) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x3) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000280)={0x0, 0x3, 0x8}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000680)={0x7fff, 0x20, 0x0, 0x7ff, 0x40, 0x3, 0x80000000}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x12000, 0x0) r4 = fcntl$getown(r2, 0x9) fcntl$setownex(r3, 0xf, &(0x7f0000000700)={0x0, r4}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = syz_open_dev$vcsa(&(0x7f0000000780), 0x101, 0x200002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f00000007c0)) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x60}}}}, [@NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x7ff8}, @device_a, @broadcast, @compressed={{0x0, 0x0, 0x1, 0x0, 0x8}, {0xc}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88fb}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x600}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20040850) 03:17:18 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, 0x2f, 0x3, 0x7}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6a}, @void, @val={0xc, 0x99, {0x0, 0x33}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xaa0004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x45ac, 0x2}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x1, 0x0, 0x7ff, 0x8, 0x6, 0x5, 0x1}, 0x1c) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xec1}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x20048801) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)={0x2c, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x800}, @hao={0xc9, 0x10, @loopback}, @pad1, @jumbo={0xc2, 0x4, 0xffffff0e}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x2}]}, 0x40) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1ac, r3, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x190, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xcd}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x138, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xda}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x26}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r4, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x57}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r5 = syz_open_dev$vcsn(&(0x7f0000000940), 0x5, 0x301140) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b40), 0x200c02, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)={0x17c, 0x37, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x2c, 0x3c, 0x0, 0x1, [@generic="3e355f405d10d018876e853eac09470d2bcbc29e91d7c29789227d204a4d827a016c29249af327df"]}, @nested={0x13f, 0x95, 0x0, 0x1, [@generic="55f65080c5039bf98a29b61c0087258cd3d0c5c8f837010673ca", @typed={0x8, 0x32, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x82, 0x0, 0x0, @u32=0x3}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0xbd}, @generic="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", @generic, @typed={0x6, 0x40, 0x0, 0x0, @str='+\x00'}]}]}, 0x17c}, {&(0x7f0000000b00)={0x10, 0x3b, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, {&(0x7f0000000b80)={0x18, 0x38, 0x100, 0x70bd27, 0x25dfdbfc, "", [@generic, @typed={0x8, 0x52, 0x0, 0x0, @fd=r6}]}, 0x18}], 0x3, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [r0, r7, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x8011}, 0x4081) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "3811fc0f79ea7e1a275efd"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24002850}, 0x1000) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x105}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x1) 03:17:18 executing program 6: ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000000)={{0x3, 0x100, 0x4, 0x7, 0xb3c}, 0x298, [0x7fff, 0x10001, 0xfffffff8, 0x0, 0x3, 0x6, 0x5, 0x0, 0x8, 0x3, 0x10001, 0x81, 0x9, 0x3ff, 0x0, 0xfffffffb, 0x9, 0x400, 0x5, 0xc0b, 0x3, 0x7, 0x1ff, 0x1, 0x5, 0x8, 0x40, 0x100000, 0x4, 0x4, 0xfff, 0xfff, 0x34d, 0x2, 0xfffffffd, 0x4, 0x0, 0x80000000, 0x1edd, 0xfffffffd, 0x7, 0x8, 0x2, 0x8, 0x800, 0x7e894958, 0x4, 0xfffff000, 0xff, 0x3, 0x9, 0x9, 0x2, 0x80000000, 0x4, 0x8, 0x3, 0x1, 0x8, 0x4, 0x0, 0x400, 0x7, 0x2, 0x7, 0x8, 0x3ac3, 0x3, 0xffffffe0, 0x1ff, 0xa96, 0x3, 0xfffffff8, 0x1f, 0x483, 0x0, 0x5, 0x2, 0x1, 0x9, 0x0, 0x7f, 0x1f, 0x9, 0x7, 0x1, 0x5, 0x80000001, 0x3ff800, 0x0, 0x0, 0x1f, 0xa94, 0x5, 0x81, 0x1ff, 0x9, 0x40, 0x7, 0x7, 0xff, 0xff, 0x4, 0x94, 0x7f, 0x5c1, 0xfffffff7, 0x2eef9cef, 0xf5, 0xffffff80, 0x6, 0x80000001, 0xf, 0x9, 0xf23, 0xe15e, 0x2, 0xfffffff9, 0x5, 0xa2f, 0x3, 0x5, 0x2, 0x78, 0x2, 0x7c, 0x3, 0x7fff, 0x1879, 0x7fffffff, 0x1, 0x5, 0x9, 0x2, 0x7, 0x4, 0x3f, 0x98d, 0x401, 0x1, 0xfaea, 0x1, 0x3, 0x8, 0x0, 0x4, 0x0, 0x2, 0x1, 0x7, 0x7ff, 0x1, 0x4, 0x2, 0x514e, 0xffffa5bd, 0xf5, 0x80000000, 0x30da8e1f, 0x5a3e, 0x8, 0x40, 0x5, 0x5, 0x4, 0x9, 0x4, 0x0, 0x5, 0x81, 0x7, 0xffffffff, 0x101, 0x8, 0x2, 0x7, 0x0, 0x0, 0x7, 0x1, 0x6c, 0x4, 0x8, 0xc4b4, 0x4, 0x100, 0x1, 0x58, 0x5, 0x0, 0x23f8000, 0xeda, 0x8000, 0x0, 0x40000000, 0x9, 0x7, 0x800, 0x3, 0x2d9, 0x80000001, 0x9, 0xff, 0x1, 0x5, 0x2, 0x100, 0x2, 0x2, 0x8, 0x3, 0xceaf, 0x3, 0x3, 0x6, 0x9, 0x0, 0x1, 0x5, 0xfff, 0x8, 0x2, 0xff, 0x0, 0x80000001, 0x45b6, 0x1, 0x988, 0x40, 0x71a4, 0xfffffff8, 0xfff, 0x9, 0x80000001, 0x1, 0x1, 0x20, 0x401, 0xfefb, 0x8, 0x9, 0x0, 0xffffffc0, 0x8, 0x1f, 0x5, 0x40, 0x2, 0xb68, 0x240, 0x6faf3acf, 0x4, 0x2, 0x1, 0x0, 0xe813, 0xdb8f, 0x10a5, 0x100, 0x3f, 0x4, 0x7, 0x7, 0x80000001, 0xffffffff, 0xfffff890, 0xffffffff, 0x2, 0x6, 0x8000, 0x9, 0x12408810, 0x0, 0x6, 0x7f, 0x3, 0x9e, 0xfffffff9, 0xfffffff7, 0x6, 0x9, 0x1, 0xfa46523, 0x7fffffff, 0x5, 0x5, 0xffffffff, 0xf9, 0x6, 0x1ff, 0x8, 0x2, 0xfff, 0x7, 0x100, 0x9, 0xff, 0x8, 0x40, 0xa478, 0x6, 0x3, 0x3, 0x0, 0x4bc, 0x3, 0x7ff, 0x6, 0x8001, 0xb5b0, 0x4, 0x101, 0x3, 0x8, 0xcd, 0x2, 0x3, 0x1, 0xffff, 0x3, 0xa339, 0x4, 0x8, 0xfffffff9, 0xb592, 0x2, 0x1f, 0xfffffff9, 0x800, 0x6, 0xd4d9, 0x0, 0x4, 0x5, 0xb9, 0x0, 0x2, 0x1, 0x80, 0x2, 0x80000000, 0x32, 0x9, 0x1, 0x5, 0xfc0, 0xffff, 0x80000001, 0x2, 0x1, 0x8000, 0xfffffffa, 0x10001, 0x0, 0x6, 0x9, 0x4, 0x5, 0x6, 0x7fff, 0x200, 0x9, 0x80, 0x6, 0x4, 0x1, 0x1, 0x2, 0x4, 0x401, 0x1, 0xe0a5, 0x9a, 0xbd6e, 0x7, 0x2, 0xff, 0x5, 0x68d, 0x10001, 0x9, 0x6, 0xd7, 0x0, 0x6, 0x9, 0x3, 0x80000001, 0x1, 0x9, 0xff, 0x5, 0x0, 0x9, 0xb363, 0x3f, 0x3, 0x7, 0x9, 0x9, 0x8, 0xdc, 0x10000, 0x1, 0x2, 0xfffffff9, 0x9, 0x8, 0x6, 0x8, 0x3, 0x864, 0x4, 0x4, 0x6, 0xffffff6d, 0x543e, 0x0, 0x5, 0xffff0001, 0x1, 0x3, 0x5, 0xbc7, 0x401, 0xffffffff, 0x4, 0xba1, 0x0, 0x1, 0x10000, 0x0, 0xe5, 0x200, 0x3, 0x1, 0x96, 0x0, 0xc3b, 0xffffffe1, 0x6, 0x5, 0x1, 0x3f, 0x2, 0x2, 0x2, 0x4, 0x7, 0x6113, 0x4, 0x5, 0xff, 0x1, 0x5, 0x3000000, 0x437a, 0x20, 0x80000001, 0x4, 0x0, 0x900, 0x5, 0xfffffffb, 0x6, 0xffff, 0x4, 0x6, 0x1ff, 0x0, 0xffffffff, 0x9, 0xf6, 0x401, 0x0, 0x3, 0x45, 0xe7, 0x0, 0x3, 0x1, 0x1, 0x0, 0x3c000000, 0x3, 0x7fffffff, 0x4, 0xba, 0x200, 0x0, 0x3, 0x6, 0x5, 0x3, 0x80000000, 0x1, 0x400, 0x401, 0x10b29247, 0xfffffff2, 0xb0f5, 0x40, 0xc9f, 0x3, 0xa946, 0x1f, 0x5aa, 0x81, 0x3, 0x7, 0x7, 0x7fffffff, 0x9, 0x3f, 0x100, 0x7, 0x200, 0xfff, 0x5d, 0x3, 0x40, 0x0, 0x100, 0x2401, 0x1, 0x1, 0x7fff, 0x7, 0x3, 0x9, 0x2, 0x8, 0x9, 0x1000, 0x100, 0x2, 0x10001, 0x7, 0x1000, 0x80000000, 0x7f, 0xcbe, 0x3743, 0xeada, 0x7, 0xfff, 0x0, 0x5, 0x81, 0x4, 0x56600000, 0x8, 0x6, 0x0, 0x5, 0x3f, 0x2, 0x8, 0x8284, 0x6, 0x8, 0x3f, 0x8001, 0x10001, 0xffffffe1, 0x9b9, 0xc94d, 0xffffffe0, 0x8, 0x7f, 0x100, 0x7fffffff, 0x45, 0xa84, 0x7, 0x2, 0x40, 0x3, 0x10000, 0x3, 0xb2, 0x111, 0xd7b4, 0x10000, 0x0, 0x6, 0x3f, 0x0, 0x6, 0x8b7a, 0x0, 0xff, 0x8001, 0x2, 0x1, 0xffffffff, 0x4, 0xffffffe0, 0x8, 0x4, 0x400, 0xfe, 0x1ff, 0x0, 0x6, 0x552a, 0x8001, 0x8, 0x6, 0xffffffff, 0xffff, 0x3, 0x2, 0x4, 0x5, 0xfffffff9, 0xfffff801, 0x8, 0xff, 0x8, 0x7, 0x6, 0x1000, 0x7, 0x6, 0x8, 0x8, 0x80000000, 0x118, 0x8000, 0x7fff, 0x9, 0x80000000, 0xfffffffa, 0x8, 0x7ff, 0xbf67, 0xfffffffc, 0x100, 0x7, 0x7, 0x101, 0x8, 0xff, 0x216, 0xffffa411, 0x9, 0x7fff, 0x2, 0x157, 0x9, 0x101, 0x4, 0x4, 0x3, 0x400, 0x800, 0x1, 0x5, 0x4, 0x2, 0x9, 0x6, 0x7ff, 0x2, 0x9, 0x0, 0x1ff, 0xc290, 0x2, 0xfffffffc, 0x2, 0x5, 0x5, 0x4, 0x7, 0x0, 0x4, 0xb273, 0x8002, 0x154, 0x7ff, 0x10001, 0x64, 0x8, 0x9, 0xf5b, 0x8, 0xfa, 0x40, 0x3, 0x8, 0x8001, 0x1, 0x7f, 0x0, 0x92a20000, 0x2, 0x5, 0x83, 0x7f, 0x8001, 0x401, 0x401, 0x5, 0x80000001, 0x6, 0x9, 0x4, 0x1, 0x2, 0x2, 0x5, 0xf3f, 0x20, 0x8, 0x1000, 0x4, 0x6, 0x7, 0x9, 0x4, 0x401, 0x1, 0x80000001, 0x0, 0x0, 0xff, 0xea7, 0x0, 0x1ff, 0xc7, 0x8, 0x1df8, 0xdd, 0x10001, 0x7, 0x5, 0x3, 0x3ff, 0x2, 0x9, 0x10001, 0xa975, 0xfffffffc, 0x80000000, 0x259, 0x8001, 0x4, 0x80, 0x8, 0x0, 0x9, 0x3ff, 0x8, 0x2, 0x4, 0xffffffa2, 0x8, 0x8001, 0x5, 0x10000, 0x9, 0x8, 0x43, 0x9, 0xffff, 0xff, 0x8001, 0xe20b, 0x0, 0x6, 0x7, 0x84b, 0x8001, 0x101, 0xff, 0x6, 0x4, 0x0, 0x4, 0xfffffff8, 0x8, 0x20, 0x0, 0xf8d4, 0x31c9, 0x3, 0x8001, 0x80000000, 0x1, 0x180, 0xe993, 0x7, 0x7, 0x5, 0x0, 0x0, 0x1, 0x24000, 0xfffffffe, 0x5201069b, 0x3fe7, 0x8, 0x8, 0x8, 0xfffffff8, 0x200, 0xa0f, 0x9, 0x9, 0x1b, 0x7fffffff, 0x748c, 0x0, 0x80000000, 0x3, 0x1, 0x0, 0xcb, 0x750, 0x8000, 0x55, 0x400000, 0x0, 0x43, 0x7, 0x1, 0xa, 0x1d, 0x9, 0x9, 0x7f, 0x5, 0x7, 0xeb1, 0x5, 0x401, 0x5, 0x8001, 0x3ff, 0x5, 0x1, 0x5, 0x80000000, 0x1f, 0x58, 0x5, 0x2, 0x7, 0x200, 0x20, 0x0, 0x1f, 0x64, 0x2, 0x1, 0x4, 0x5, 0x9, 0x2, 0x3ff, 0x8001, 0x6, 0x401, 0x8, 0xffffff81, 0x5, 0x10001, 0x40, 0xc2, 0x8, 0x9, 0x4, 0x10001, 0x7ff, 0x5, 0x0, 0x7fff, 0xff8, 0x2, 0xcae, 0x0, 0x40, 0x2aa, 0x800000, 0x30ac, 0xffffffff, 0xfffffffd, 0x9, 0x6, 0x8, 0x2, 0xfffffffa, 0x4, 0x2, 0x7ff, 0x4, 0x400, 0x80, 0x9, 0x7f, 0x9, 0x8, 0x4, 0xffffffff, 0x400, 0x9, 0x8f, 0x8, 0x9, 0xffffff81, 0x7, 0x10000, 0x6ee, 0x5, 0x5, 0x0, 0x0, 0x1, 0x943, 0x58fa0c37, 0x2, 0x2, 0xffff7fff, 0x2, 0x0, 0x0, 0x5, 0x1f, 0x2, 0x7, 0x54e2, 0x4, 0x2, 0x6, 0x3, 0x6, 0x400, 0xa7bf, 0x2, 0x3f, 0xcc, 0xb224127b, 0x6a, 0x7fffffff, 0x3ff, 0x5, 0x8000, 0x1, 0xfffffffb, 0x3, 0xb32, 0xed, 0x17, 0x10000, 0x7, 0x7, 0x80000001, 0x2, 0x1, 0x3f, 0xfffffffc, 0xfff, 0x1, 0x2, 0x401, 0x9, 0x6, 0xff, 0x80, 0x1, 0x5, 0x8, 0x10001, 0x7, 0xa00, 0x3f, 0x3, 0xffffff2a, 0xfffffff7, 0xfffffffb, 0x7, 0x0, 0x7fff, 0x8, 0x1, 0x4, 0x1, 0x20, 0x95f, 0x400, 0x59, 0x9, 0x9, 0x5, 0x7, 0x8335, 0xffe, 0x4, 0x1, 0x7f, 0x3, 0x380000, 0x6, 0x1dcf, 0x7, 0x2, 0x7, 0x5, 0x503b, 0x3, 0x864f, 0x1, 0x1f, 0x3, 0x45e, 0x4eb8, 0x7, 0xffffffff, 0x7, 0x5, 0x2, 0x7]}) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001040), 0x2, 0x0) io_cancel(0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x3, 0x101, r0, &(0x7f0000001080)="ee40585d029588fea6ffccb5964c956746256b250869c3ddae6818fd92546c2d7975fa6896d8da884adeb25d41a9d5238ec498d7ed8a1a0fc585a638717d13f0dbe5571f69adbcdfd39d8fa56f086a74c42cde662c6a79e9efc744308cedf8eefc7deae33f6cf12ee3", 0x69, 0x324951d4, 0x0, 0x1}, &(0x7f0000001140)) mount$9p_tcp(&(0x7f0000001180), &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), 0x2000, &(0x7f0000001240)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@access_any}, {@msize}, {@msize={'msize', 0x3d, 0x1000}}]}}) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000012c0), &(0x7f0000001300)={0x0, 0xfb, 0xe3, 0x1, 0x5, "edf18df5881b2de12b2b86984ef47372", "0dfe329215cd87eb66041afc343b291e15ce61ce4ea612fe1cc687fcae3fe011b81d899901605d9c597ce1c40a85fd0fcd034a1adce67106e456835ea1c56092caf1a48646566a543040bb8a9314cedea30f6d1bbbd8798c9af99e8558f75a67e9e1136c0cffc26889dde9b38e0d3c004fc79d38b919124cbeb77fb21a023a2fc7c391c96eff479350e1b1eef9698d1879697b85a5f3d99fc12c48d799f8ea6ff87ed86f8b9ef2caa6124837be5b7f1fe9090631bdf367c1244ffdedf596a1229d6e5a575d478102fa2230622cb6"}, 0xe3, 0x1) link(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='./file0\x00') unlink(&(0x7f0000001480)='./file0\x00') utime(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x9, 0x6}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xd0, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_NAT_DST={0xbc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x20000000) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000001800), &(0x7f0000001840)=0x4) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000001880)={0x6, 0xfffffffffffffff7, 0x2, 0x4, 0x1, [0x3f, 0x6, 0x3ff, 0x1]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r3 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x7, &(0x7f0000001940)=""/32, &(0x7f0000001980)=0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x58, 0x4, 0x8, 0x600, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x58}, 0x1, 0x0, 0x0, 0xc885}, 0x40) 03:17:18 executing program 7: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x1, 0x7e) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x9) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x40, {0x0, 0x2, 0x800, 0x8, 0xfffffffffffffffa}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x8, 0x40, 0x4, 0x3, {{0x24, 0x4, 0x3, 0x9, 0x90, 0x67, 0x0, 0x1f, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x37}, {[@generic={0x88, 0x12, "e40b2db6cd3d1a3b66da7d440baa4df4"}, @ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x7, 0xd0, [@private=0xa010102]}, @timestamp_prespec={0x44, 0x54, 0x80, 0x3, 0x8, [{@loopback, 0x35f}, {@broadcast, 0xfffffffb}, {@loopback, 0x10000}, {@private=0xa010102, 0x6}, {@remote, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0x7}, {@remote, 0x101}, {@local, 0x7fffffff}, {@empty, 0xefd}]}, @ssrr={0x89, 0x7, 0x44, [@local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0x1, 0x4, 0x18, @private1, @rand_addr=' \x01\x00', 0x8, 0x8000, 0x40000000, 0x9}}) r3 = accept4$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000004200)={'syztnl0\x00', &(0x7f0000004180)={'syztnl0\x00', 0x0, 0x4, 0x20, 0x98, 0x9, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x0, 0xfffffffb}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004240)={0x0, @remote, @dev}, &(0x7f0000004280)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000042c0)={'veth0_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000004300)={'wg2\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000004380)={0x0, @can={0x1d, 0x0}, @vsock={0x28, 0x0, 0x0, @my=0x0}, @phonet={0x23, 0x1f, 0x5, 0xfa}, 0x3ff, 0x0, 0x0, 0x0, 0x3, &(0x7f0000004340)='batadv0\x00', 0x6, 0x9, 0x3}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000004640)={'gre0\x00', &(0x7f00000045c0)={'syztnl1\x00', 0x0, 0x80, 0x0, 0x5, 0x0, {{0xc, 0x4, 0x2, 0x7, 0x30, 0x64, 0x0, 0x81, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2, {[@ssrr={0x89, 0x1b, 0x8c, [@rand_addr=0x64010100, @multicast1, @rand_addr=0x64010102, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000004ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004680)={0x3e0, 0x0, 0x200, 0x6, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x59b6}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6da}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x49cf}}}]}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000004b00)) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x18, 0x3f9, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4010) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000004e00)={'ip6tnl0\x00', &(0x7f0000004d80)={'ip6gre0\x00', r5, 0x4, 0x71, 0x55, 0x7, 0x18, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x80, 0x700, 0x9, 0x10a}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000005100)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000050c0)={&(0x7f0000004f80)={0x10c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x10c}}, 0x8050) 03:17:18 executing program 1: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfff, 0x8, 0x81}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x8f, 0x1, 0x2, "77f9be78c78696ec929316e445eecc94", "a02b294239ea4f755614d2e7c95b73e144437d5176d9b7679da43ddd1fc67655159ab789142164c5b2fd891f9810794f23d529b084048ad0848ea57f4cf7aac7f9ad40a999191c6aa434146768b4a1bba9db07f67bbb604412d4a09a036dfc06ab11eaa215f69f2ea9b6b5b8f649efa0bc81e7d97c55496f554b"}, 0x8f, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/4096) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000001200)) getsockname$inet6(r0, &(0x7f0000001240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001280)=0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'syztnl2\x00', 0x0, 0x4, 0xfa, 0x2, 0xfffff250, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7800, 0x7, 0x25e0}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001380)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, r1}) open_by_handle_at(r0, &(0x7f00000013c0)=@reiserfs_6={0x18, 0x6, {0x4, 0x6, 0x4, 0x1000, 0x0, 0x800}}, 0x62000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001400), 0x290080, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000001440)=0x8, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001540)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/28, 0x1c, 0x1, &(0x7f00000014c0)=""/105, 0x69}, &(0x7f0000001580)=0x40) r3 = memfd_secret(0x0) sendto(r3, &(0x7f00000015c0)="da0139c13630e46fdb540ae70a324dec143f83fb2b999a46fa042c02ad0246e0c48c323acfd84c04b654afa6682ed70f1ed2cb9a5d3ef2f05600908becb5f11778c98d9c53391e4346fe065b64794ec889feeb59c691f5d432f61f33d114855544accc5224a56664c50d80a7bb2766842f312ada9fa5f5da59b8af92d848d9fbfde55d5db85454ef1cc6350dbef4140b7e2fc6a827", 0x95, 0x20000800, &(0x7f0000001680)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80) write(r0, &(0x7f0000001700)="8343f74d5d3b55466fb16c6754597b3f4cd39dda5b37aa214529f45367834b7c1c2efab34b0714aa181e6fb90e8c7cbad1692438e38afa1f88aba756dbf1f308ca58a2e965b140ad3a45c7f6c67064c0e31a8f4f01f9c1d57603c8efbc4c429fdefe144fabe53169a59e93466e51daf281854a32abc04928022b5e864b6b9510c1", 0x81) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20044}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x23}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x15}, 0x4000008) r4 = openat(r2, &(0x7f00000018c0)='./file0\x00', 0x10000, 0x42) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000073400)={0xfff, [], 0x50, "9215bacc5d09ce"}) [ 113.067147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.070390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.072258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.077212] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.082251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.153297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.159969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.162750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.168914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.175081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.261783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.278257] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.286086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.296467] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.308253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.347349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.356446] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.358806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.395409] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.401331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.428968] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.440288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.442036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.447446] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.451170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.454091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.459738] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.479026] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.489089] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.529011] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.530856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.536078] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.537906] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.543260] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.544948] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.550088] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.551815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.571998] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.574135] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.582192] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.160748] Bluetooth: hci0: command tx timeout [ 115.227808] Bluetooth: hci1: command tx timeout [ 115.415076] Bluetooth: hci2: command tx timeout [ 115.542801] Bluetooth: hci3: command tx timeout [ 115.543519] Bluetooth: hci4: command tx timeout [ 115.606663] Bluetooth: hci5: command tx timeout [ 115.700686] Bluetooth: hci7: command tx timeout [ 115.701284] Bluetooth: hci6: command tx timeout [ 117.206848] Bluetooth: hci0: command tx timeout [ 117.270669] Bluetooth: hci1: command tx timeout [ 117.462693] Bluetooth: hci2: command tx timeout [ 117.590838] Bluetooth: hci4: command tx timeout [ 117.591296] Bluetooth: hci3: command tx timeout [ 117.654711] Bluetooth: hci5: command tx timeout [ 117.719067] Bluetooth: hci6: command tx timeout [ 117.719529] Bluetooth: hci7: command tx timeout [ 119.256108] Bluetooth: hci0: command tx timeout [ 119.318832] Bluetooth: hci1: command tx timeout [ 119.510673] Bluetooth: hci2: command tx timeout [ 119.638988] Bluetooth: hci3: command tx timeout [ 119.639456] Bluetooth: hci4: command tx timeout [ 119.702675] Bluetooth: hci5: command tx timeout [ 119.766668] Bluetooth: hci7: command tx timeout [ 119.767118] Bluetooth: hci6: command tx timeout [ 121.302800] Bluetooth: hci0: command tx timeout [ 121.368616] Bluetooth: hci1: command tx timeout [ 121.558662] Bluetooth: hci2: command tx timeout [ 121.686839] Bluetooth: hci4: command tx timeout [ 121.687324] Bluetooth: hci3: command tx timeout [ 121.750991] Bluetooth: hci5: command tx timeout [ 121.815242] Bluetooth: hci7: command tx timeout [ 121.815829] Bluetooth: hci6: command tx timeout [ 173.096971] syz-executor.4 (288) used greatest stack depth: 25072 bytes left [ 173.528939] syz-executor.1 (290) used greatest stack depth: 24640 bytes left [ 175.652137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.658744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.662108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.669069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.673903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.938231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.942223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.943835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.948818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.951137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.052506] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.056234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.060142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.070087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.073862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.075727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.088057] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.094018] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.094139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.095705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.101014] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.124883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.137517] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.137538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.148250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.187086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.199064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.204230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.206242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.210941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.213080] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.215536] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.217420] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.229461] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.231700] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.251846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.274004] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.289863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.382057] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.407668] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.751647] Bluetooth: hci0: command tx timeout [ 178.006691] Bluetooth: hci1: command tx timeout [ 178.134683] Bluetooth: hci2: command tx timeout [ 178.198747] Bluetooth: hci3: command tx timeout [ 178.262732] Bluetooth: hci5: command tx timeout [ 178.263018] Bluetooth: hci4: command tx timeout [ 178.326835] Bluetooth: hci7: command tx timeout [ 178.454926] Bluetooth: hci6: command tx timeout [ 179.799139] Bluetooth: hci0: command tx timeout [ 180.055031] Bluetooth: hci1: command tx timeout [ 180.184149] Bluetooth: hci2: command tx timeout [ 180.246706] Bluetooth: hci3: command tx timeout [ 180.310826] Bluetooth: hci5: command tx timeout [ 180.310857] Bluetooth: hci4: command tx timeout [ 180.374791] Bluetooth: hci7: command tx timeout [ 180.503122] Bluetooth: hci6: command tx timeout [ 181.846995] Bluetooth: hci0: command tx timeout [ 182.105603] Bluetooth: hci1: command tx timeout [ 182.231818] Bluetooth: hci2: command tx timeout [ 182.295833] Bluetooth: hci3: command tx timeout [ 182.358663] Bluetooth: hci5: command tx timeout [ 182.359648] Bluetooth: hci4: command tx timeout [ 182.424645] Bluetooth: hci7: command tx timeout [ 182.550760] Bluetooth: hci6: command tx timeout [ 183.894936] Bluetooth: hci0: command tx timeout [ 184.152405] Bluetooth: hci1: command tx timeout [ 184.278670] Bluetooth: hci2: command tx timeout [ 184.342752] Bluetooth: hci3: command tx timeout [ 184.407763] Bluetooth: hci4: command tx timeout [ 184.407797] Bluetooth: hci5: command tx timeout [ 184.470649] Bluetooth: hci7: command tx timeout [ 184.598809] Bluetooth: hci6: command tx timeout [ 237.941476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.943247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.946378] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.952035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.956279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.987500] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.993772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.998063] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.009178] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.014004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.125942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.130364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.134092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.146963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.150986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.269085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.276967] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.286038] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.298463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.301995] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.386072] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.395281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.398921] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.428983] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.435736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.438411] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.467036] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.467799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.484758] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.484953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.485484] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.508824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.517458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.541204] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.562975] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.565227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.569737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.590562] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.592126] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.632870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.023887] Bluetooth: hci0: command tx timeout [ 240.086834] Bluetooth: hci1: command tx timeout [ 240.214642] Bluetooth: hci2: command tx timeout [ 240.342678] Bluetooth: hci3: command tx timeout [ 240.662831] Bluetooth: hci4: command tx timeout [ 240.727646] Bluetooth: hci7: command tx timeout [ 240.727770] Bluetooth: hci6: command tx timeout [ 240.854716] Bluetooth: hci5: command tx timeout [ 242.073631] Bluetooth: hci0: command tx timeout [ 242.135019] Bluetooth: hci1: command tx timeout [ 242.262664] Bluetooth: hci2: command tx timeout [ 242.390866] Bluetooth: hci3: command tx timeout [ 242.711947] Bluetooth: hci4: command tx timeout [ 242.774656] Bluetooth: hci6: command tx timeout [ 242.776600] Bluetooth: hci7: command tx timeout [ 242.902869] Bluetooth: hci5: command tx timeout [ 244.118818] Bluetooth: hci0: command tx timeout [ 244.183003] Bluetooth: hci1: command tx timeout [ 244.310958] Bluetooth: hci2: command tx timeout [ 244.439815] Bluetooth: hci3: command tx timeout [ 244.758843] Bluetooth: hci4: command tx timeout [ 244.824766] Bluetooth: hci7: command tx timeout [ 244.824870] Bluetooth: hci6: command tx timeout [ 244.950677] Bluetooth: hci5: command tx timeout [ 246.167607] Bluetooth: hci0: command tx timeout [ 246.230848] Bluetooth: hci1: command tx timeout [ 246.358668] Bluetooth: hci2: command tx timeout [ 246.486682] Bluetooth: hci3: command tx timeout [ 246.806840] Bluetooth: hci4: command tx timeout [ 246.871205] Bluetooth: hci7: command tx timeout [ 246.871940] Bluetooth: hci6: command tx timeout [ 246.998895] Bluetooth: hci5: command tx timeout [ 300.399223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.402363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.407531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.416273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.420411] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.471185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.477302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.482433] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.491210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.497003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.565838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.573129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.580191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.598151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.620255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.709958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.717491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.736193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.763058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.777259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.779475] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.782363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.858165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.872872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.882144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.888112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.903265] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.917428] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.929910] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.946505] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.949540] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.956041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.974258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.980317] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.982919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.985339] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.998711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.003461] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.061081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.073000] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.487690] Bluetooth: hci0: command tx timeout [ 302.550717] Bluetooth: hci1: command tx timeout [ 302.743108] Bluetooth: hci2: command tx timeout [ 302.872026] Bluetooth: hci3: command tx timeout [ 302.999751] Bluetooth: hci4: command tx timeout [ 303.062724] Bluetooth: hci5: command tx timeout [ 303.063413] Bluetooth: hci7: command tx timeout [ 303.126689] Bluetooth: hci6: command tx timeout [ 304.534684] Bluetooth: hci0: command tx timeout [ 304.598974] Bluetooth: hci1: command tx timeout [ 304.790773] Bluetooth: hci2: command tx timeout [ 304.918648] Bluetooth: hci3: command tx timeout [ 305.047598] Bluetooth: hci4: command tx timeout [ 305.110790] Bluetooth: hci7: command tx timeout [ 305.111296] Bluetooth: hci5: command tx timeout [ 305.174862] Bluetooth: hci6: command tx timeout [ 306.583646] Bluetooth: hci0: command tx timeout [ 306.646964] Bluetooth: hci1: command tx timeout [ 306.838637] Bluetooth: hci2: command tx timeout [ 306.966647] Bluetooth: hci3: command tx timeout [ 307.095174] Bluetooth: hci4: command tx timeout [ 307.160616] Bluetooth: hci7: command tx timeout [ 307.161121] Bluetooth: hci5: command tx timeout [ 307.222766] Bluetooth: hci6: command tx timeout [ 308.631491] Bluetooth: hci0: command tx timeout [ 308.694664] Bluetooth: hci1: command tx timeout [ 308.888609] Bluetooth: hci2: command tx timeout [ 309.014654] Bluetooth: hci3: command tx timeout [ 309.143522] Bluetooth: hci4: command tx timeout [ 309.207619] Bluetooth: hci7: command tx timeout [ 309.208123] Bluetooth: hci5: command tx timeout [ 309.272609] Bluetooth: hci6: command tx timeout [ 363.186408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.189523] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.196421] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.205346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.214688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.262015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.267147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.270885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.278535] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.283959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.324227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.337268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.343530] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.352087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.366870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.432849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.447323] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.461748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.469172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.473430] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.560720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.563665] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.583865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.585806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.602446] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.614724] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.625978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.631311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.632961] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.654674] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.672493] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.686734] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.688399] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.728025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.731369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.769912] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.802190] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.841935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.854414] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.865776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.270775] Bluetooth: hci0: command tx timeout [ 365.336027] Bluetooth: hci1: command tx timeout [ 365.405467] Bluetooth: hci2: command tx timeout [ 365.527007] Bluetooth: hci3: command tx timeout [ 365.782665] Bluetooth: hci6: command tx timeout [ 365.846678] Bluetooth: hci4: command tx timeout [ 365.974720] Bluetooth: hci7: command tx timeout [ 365.975463] Bluetooth: hci5: command tx timeout [ 367.319000] Bluetooth: hci0: command tx timeout [ 367.384173] Bluetooth: hci1: command tx timeout [ 367.446917] Bluetooth: hci2: command tx timeout [ 367.575251] Bluetooth: hci3: command tx timeout [ 367.831632] Bluetooth: hci6: command tx timeout [ 367.895405] Bluetooth: hci4: command tx timeout [ 368.022775] Bluetooth: hci5: command tx timeout [ 368.023668] Bluetooth: hci7: command tx timeout [ 369.367393] Bluetooth: hci0: command tx timeout [ 369.431894] Bluetooth: hci1: command tx timeout [ 369.494858] Bluetooth: hci2: command tx timeout [ 369.622683] Bluetooth: hci3: command tx timeout [ 369.878894] Bluetooth: hci6: command tx timeout [ 369.942963] Bluetooth: hci4: command tx timeout [ 370.072736] Bluetooth: hci7: command tx timeout [ 370.073222] Bluetooth: hci5: command tx timeout [ 371.414651] Bluetooth: hci0: command tx timeout [ 371.478783] Bluetooth: hci1: command tx timeout [ 371.542851] Bluetooth: hci2: command tx timeout [ 371.670663] Bluetooth: hci3: command tx timeout [ 371.927252] Bluetooth: hci6: command tx timeout [ 371.990634] Bluetooth: hci4: command tx timeout [ 372.118678] Bluetooth: hci5: command tx timeout [ 372.119119] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:22:28 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000011 RCX=ffffffff819c6401 RDX=ffff888016c0d280 RSI=00000000ff000000 RDI=0000000000000005 RBP=ffffea0001b78670 RSP=ffff88802c8f7878 R8 =0000000000000000 R9 =fffff9400036f0ce R10=0000000000000011 R11=0000000000000001 R12=0000000000000000 R13=00007f4f36777000 R14=ffff88802c8f7ce0 R15=ffff88802c8f79e0 RIP=ffffffff819c6407 RFL=00000207 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561a000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4f36ab96f4 CR3=000000000d8a7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f4f36ac847000007f4f36ac7f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000010001 RBX=0000000000000000 RCX=0000000000000002 RDX=ffff88802f03d280 RSI=ffffffff81617363 RDI=ffff88800fced418 RBP=0000000000000002 RSP=ffff88806cf08ea0 R8 =0000000000000000 R9 =fffffbfff0c83d2a R10=0000000000000004 R11=0000000000000001 R12=ffff88806cf28080 R13=ffff88800fced400 R14=0000006218086b80 R15=dffffc0000000000 RIP=ffffffff81617367 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571a000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7b00934028 CR3=0000000027338000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000