Warning: Permanently added '[localhost]:34074' (ECDSA) to the list of known hosts. 2025/06/12 10:22:27 fuzzer started 2025/06/12 10:22:28 dialing manager at localhost:45945 syzkaller login: [ 104.218929] cgroup: Unknown subsys name 'net' [ 104.358878] cgroup: Unknown subsys name 'cpuset' [ 104.396436] cgroup: Unknown subsys name 'rlimit' 2025/06/12 10:22:50 syscalls: 2214 2025/06/12 10:22:50 code coverage: enabled 2025/06/12 10:22:50 comparison tracing: enabled 2025/06/12 10:22:50 extra coverage: enabled 2025/06/12 10:22:50 setuid sandbox: enabled 2025/06/12 10:22:50 namespace sandbox: enabled 2025/06/12 10:22:50 Android sandbox: enabled 2025/06/12 10:22:50 fault injection: enabled 2025/06/12 10:22:50 leak checking: enabled 2025/06/12 10:22:50 net packet injection: enabled 2025/06/12 10:22:50 net device setup: enabled 2025/06/12 10:22:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/12 10:22:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/12 10:22:50 USB emulation: enabled 2025/06/12 10:22:50 hci packet injection: enabled 2025/06/12 10:22:50 wifi device emulation: enabled 2025/06/12 10:22:50 802.15.4 emulation: enabled 2025/06/12 10:22:50 fetching corpus: 0, signal 0/0 (executing program) 2025/06/12 10:22:52 starting 8 fuzzer processes 10:22:52 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)=0x1) r2 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000080)={0xfff, 0x6, 0x7f9, 0x3f, 0x1, 0x1}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000100)="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") ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000200)={{0x0, 0x7fffffff}, {0xb30, 0x7}, 0x8}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000300)={0x0, @aes128, 0x0, @desc4}) shutdown(r1, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000340)={0xf, 0x1f, 0x2, 0x739a}, 0xf) r6 = open_tree(r2, &(0x7f0000000380)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000003c0)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000440)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000480)={0x3f, 0x4, 0x7, 0x1, 0x3, 0x7, 0x102}, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r7, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x1d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r8, 0x4c05, &(0x7f0000000640)) 10:22:52 executing program 1: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xcc, 0x0, 0x400, 0x3, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc08d4}, 0x80d1) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x23c, 0x0, 0x9, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9236}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90bc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd0d1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4040}, 0x8801) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800), 0x101d00, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x32e7ec45c39d094, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc1}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x28000008}, 0x8000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000011}, 0x20044815) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xbc, r3, 0xe9217760952e32c6, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ad1867396c6d627ef48db9d9fde5918f0a87c92aa561d9f3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98844be8426f9407ce506b4013cc156f17a41f74ffc55a11"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bf70b63b9249b45d1bc839b9b5547a242c139ca69328f500"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40001}, 0x20048011) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x80, r3, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="d18bbfba29fa"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c2fbec33d6fd"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3712feafb68f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0xc811}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044810) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x90) 10:22:53 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x28000084) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000100)={0x0, 0x7, 0x0, [0x1000, 0xa5, 0x40, 0x100000001, 0x1], [0x74eb9965, 0x7f, 0x4, 0x3, 0x7f, 0x700000000000, 0x717, 0x3, 0x6820, 0x5, 0x8001, 0x5, 0x3ff, 0x7, 0x0, 0x6, 0xffffffffffffff7f, 0xffff, 0x5, 0xb, 0x1, 0x4, 0x1000, 0x6, 0x6c8, 0x3ff, 0x4, 0x669, 0x6, 0x1, 0xfffffffffffff800, 0x2, 0x8, 0x3, 0x494, 0x9, 0xfff, 0x725a, 0xfff, 0xdbe, 0x7, 0x2, 0x68ceb343, 0x8, 0x0, 0x4, 0xfffffffffffffeff, 0x9, 0x2, 0x101, 0x0, 0x800, 0x0, 0x100, 0x7fffffff, 0x199, 0x8, 0x10000, 0xffff, 0x4, 0x0, 0x915, 0x0, 0x10000, 0xffffffffb5d2dae9, 0x3ff, 0x200, 0x2, 0x9, 0xfffffffffffff000, 0x7fff, 0x595, 0x8, 0x101, 0x7, 0x7, 0x9, 0x7, 0x9, 0xfffffffffffffffb, 0x1, 0x7, 0x100000001, 0x0, 0x780, 0xb5, 0xfffffffffffffffa, 0x200, 0x3c0, 0x2, 0x0, 0x1000, 0x8, 0x1ff, 0x2, 0x6, 0x3, 0x1, 0x1, 0x81, 0x9, 0x3, 0x6, 0x3ff, 0x84, 0x80000001, 0x0, 0x1618c6c3, 0x9, 0x5, 0x9, 0x2, 0x7fffffff, 0x2, 0xffff, 0x8956, 0xcf, 0x18, 0x6, 0x1000, 0x4]}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000540)={{r0}, {@val={r1}, @actul_num={@void, 0x200, 0x50}}}) r2 = syz_mount_image$nfs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x3, 0x4, &(0x7f0000000940)=[{&(0x7f0000000600)="2fdc3585d545f72d9d6d6f8964f5bde64ec12fb9e900b4a48f462a0ef77a2d39682aac161072658ce88804d397eb61916471c508f242b6a484dc3ed4a4d6505dd744ca9b677171fe56bb3243d58ca0c634c2ee0e325e0e56d9d98a43707b00be26d05413ff1bd3580853aa43d4fb0cffda9f8d4b26dc8b907627fefc782c952529c4f8c3139816106f8fc358f294ddd509d5f67bae", 0x95, 0x49}, {&(0x7f00000006c0)="08bec4d8a194760036d31b3703f9c3c510bed7779fa3894fb4c29e94235f28c3c1f81f9dfc7211c2b4484a403bc1b5a323da363dfc6e22ad6ad54f233a0614feb9aafe64fc95e47f8c12aa3d1ad47d0c182c3e4e68b636db0b5b3a7c57cfb5379aedd381399e22f92617e991f28c90762a74aac821068f4f86fa7fdd6424663c4b544add86335332956998eb4679787407dcfc3a3dcc769b21a83897eb359eda615517c18cd3e16bdd4a0d7767c573ce81c566a9e84fed66e93170a11daca0b1dc9c5f05b7762e294e9ec8bd36830674ac357341", 0xd4, 0x80}, {&(0x7f00000007c0)="d807559445963bc5f42844af6a850cc7ba9e77e6405422ccd122b4841a819b4d38c1364547cfe3b0620d01e52d9485423a04e3468238aee27b85212a69eb7f6a0ab856470ddf3a0d09fb16588bb00120948bda471eb919399a32c28f4a5883077a114b390a8f84d22a5d45a9117ff063d8ffaaf3fe6c01230fe768531fd38817d4b2ee1a2120a4c8bd4110c5b29873e8f96f700401845bbb640a178def48d904e7aefcaa9d9f23de59eeb9a6b4013ef110edec317ac4a00fe7edb49c229c47f996600d2c", 0xc4, 0x10000000000}, {&(0x7f00000008c0)="51b66b8026ab94cc91314270bf597cdd277b017863e064b0a19c2fbe95e493869ee02b81a25e972a5d8fbea076e3cedde5f3cc2efd33ae14601f5736a3d1298dab7eb35b", 0x44, 0x6de}], 0x1000, &(0x7f00000009c0)={[{'#&.[/'}, {'{-.%$#$#-+,&}$'}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@uid_gt={'uid>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', 0xee01}}, {@fowner_lt={'fowner<', 0xee01}}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '#(!&.)'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x90850, r2, 0x8f183000) r3 = syz_mount_image$msdos(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x20, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000b40)="0107588ff5d83b44050fa7972fdec036f4677ac64660b71b76a3793a6a55f89f8640b0d910c0a98621b8c098684dcbd0656ae670656f1a0891ee8e550e78c3a2be0d1bde1263030591beedb2e107e4c312d30b4c67c92b6c44a20410aa4f9eebced2c479622596b3523524beffba423024231329f5abae89543b11b43b676e6eaa9b2cc4237cf3607fd4a1fd5c7fc13321", 0x91, 0x100}], 0xc0, &(0x7f0000000c40)={[{@dots}], [{@fowner_gt={'fowner>', 0xee00}}, {@obj_role={'obj_role', 0x3d, 'fowner'}}, {@smackfsdef={'smackfsdef', 0x3d, ')(]'}}, {@hash}, {@audit}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@dont_hash}]}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x4c000) ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f0000000e00)="627184a9a2") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r5 = syz_io_uring_complete(0x0) r6 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000e40)=[r3, r5, r6, 0xffffffffffffffff], 0x4) r7 = syz_open_dev$vcsn(&(0x7f0000000e80), 0x7, 0x10280) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x67}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24090}, 0x20004000) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000fc0)={r2, 0x3f, 0x7, 0xa4}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040), r5) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 10:22:53 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) wait4(r0, &(0x7f0000000400), 0x80000000, &(0x7f0000000440)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1) write$nbd(r1, &(0x7f0000000540)={0x67446698, 0x1, 0x1, 0x2, 0x1, "4a666f8576bf3dd29a15c32a1e6a2ea71087c1f283f4b82299031d9cbbe62c8f14583296d5ac8c54c528ccb1a81cb09a23273924efbd9ea9f19d"}, 0x4a) r2 = syz_io_uring_complete(0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f5, 0x400, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x88, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x6b, 0x2a, [@random_vendor={0xdd, 0x62, "ab76e87c8bc4797b0d589bcfecf720e7c7702800e924b031aaa3d769a2e3cc3d52ba32122c113927a6e23a4fa75ef675350d5d4b7b3554ba69087aeebdf4c46d038e1f0694d34902918363938d92069666de9fb2226ab8d521966863a5efdab3aa97"}, @erp={0x2a, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x18) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x89}, 0x200500d0) ioctl$CDROMSUBCHNL(r2, 0x530b, &(0x7f0000000b00)={0x2, 0x5, 0x7, 0x9, 0x5, 0x38, @lba=0x7fff, @lba=0xfffffffb}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2, {0x957}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000b80)=r9, 0x1) lsetxattr(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)=@random={'trusted.', 'wpan0\x00'}, &(0x7f0000000c40)=']&\x00', 0x3, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8021}, 0x488d0) 10:22:53 executing program 4: ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000000)) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0xfffffffc, 0x1, 0x80}) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000200)={0x24, @none={0x0, 0xffff}}, 0x14) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x7f]}, 0x8, 0x80000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000280)={'veth0_to_team\x00', @local}) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x301000, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000340)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000000380)="103d5856d37a5a7448807519b1c5783e2c9628a8a8d2c9822fd4491b193bdab06faf938e5b0d455aff185ccb60175394bf1bdfbb14d725d5419a317f9e04e16cea1338cd1ebf98d69133b0ea012f2551545abc8bd4c5ec1e84d8f285fb5ada46b7eb4ecc8315ae8d2590cdfc800b6ff00c0b8648067657dd62ffe0d57294dc743ca13bbd1658666fd40a7bfbb01d7e25018130e0ac646133f298711996d104efd7f6c2efedfd39e6a59a0660876102bef30bbd8b5b799c5a49ac3c37065609402d6e02b9eed14f7c3825ad9a00345b51b28bcd84f9fb86d781d631bed39ce506b1d65fadc78395ad616d53f4fe1b9709334705", 0xf3, 0x20, 0x0, 0xab2d2ac986a19f5e, r2}, &(0x7f00000004c0)) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000500)={0x3}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000009c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000a00)={"79753ef5e960f56ecb463691c1a594f5", 0x0, r4, {0x2df, 0x5}, {0x2, 0x8}, 0x9, [0xfffffffffffffffb, 0xff, 0x100000000, 0xffffffff, 0x6, 0x9, 0x93a6, 0xfffffffffffff965, 0xfff, 0x1000, 0x3ff, 0x6, 0x62, 0x0, 0x6, 0x6]}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x62573349}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x815}, 0x4040) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40040) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x78, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x990}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8) [ 128.560276] audit: type=1400 audit(1749723773.055:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:22:53 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c044004}, 0x8011) r1 = memfd_secret(0x80000) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x24044085) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xac, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x2}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000085) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x383, 0x67}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "40e6644cdfcdad33359834de02933317"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x634}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "2820af5653f3fa4637f8acab892d063c"}]}, 0x60}, 0x1, 0x0, 0x0, 0x24005}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000000) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000008c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000900)={0x20000000}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x8001) r6 = socket$inet6(0xa, 0x80000, 0x1) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x8, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb8, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "1de41f8a92cba364b22d31d5726726b9"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2d508da50722d7fdc91b85f978dff94d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7fa96e9f97dcb07985da02ffca9c1a0c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "9f0091354231cd32611c10d6a10036ec"}, @NL80211_ATTR_PMK={0x14, 0xfe, "07754bfbdcd0570e668f9d0660fea376"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d5b22d39c7fae5413e091518a7336aaf"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "90819351229558ec4ddaef8d1830e563"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 10:22:53 executing program 6: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x2, 0x3f, 0x0, 0x7, 0xa, "6ba8e1fcbb9eb4bb"}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/7, 0x7, 0x5, 0x6}) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000000c0)) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)={0x0, 0x36, 0xda65}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_usb_connect$cdc_ecm(0x6, 0x5c, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x6, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0xf7, 0x3, 0x2, 0x6, 0x0, 0x40, {{0x8, 0x24, 0x6, 0x0, 0x0, "ca9849"}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x400, 0x6, 0xe0}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x40, 0x5, 0xff, 0x5, 0xff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6, 0x6}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x9d, 0x81, 0x0, 0x20, 0x7}, 0x1d, &(0x7f0000000240)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0x6, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7, 0xb4, 0x8, 0x7}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44c}}, {0x97, &(0x7f00000002c0)=@string={0x97, 0x3, "dc84ebf8d89f1bf4dc0b19337c6ef4fcd80b5d8809278b5d68e0c223935f0092732602a79db344c67907acb86df8aa3751c18808ba983288f2bf5fc0332de04360095deebd44d1ee3a8eb05a71471fd409c86bb1b53a1b801188999fdaa6a4f1226993da80db51fe6e0dab068c7672ad08894a16617203df8d0b621e016c60692eed8e020dedf3c036e7980df364c7146f60a13ca1"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x86de3de12c6175a3}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x20, 0xe, 0x6, {0x6, 0x30, "dd9d3644"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000600)={0x20, 0xc, 0xa, "3ff065b9f3fdc1e8493c"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000680)={0x0, 0x8, 0x1}}) fcntl$addseals(r0, 0x409, 0xa) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x3f9, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd8, 0xa, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc9e6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, '%\\\\+#$\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xa0}, 0x8015) r3 = open_tree(r1, &(0x7f00000009c0)='./file0\x00', 0x80000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x7, 0x1, 0x31d7069371fdd7db, 0x0, 0x0, {0x5, 0x0, 0x9}, [""]}, 0x14}}, 0x4000000) pipe(&(0x7f0000000b00)={0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000b40)={0x0, 0x8}) r5 = msgget$private(0x0, 0x340) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000001b40)=""/198) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x54, r6, 0xa04, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c015}, 0x4008042) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40082}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x35}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) 10:22:53 executing program 7: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001500), 0x10000, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001580), 0x40) io_submit(0x0, 0x4, &(0x7f0000001700)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000001140)="8e94dedb69e51cd48d1a2d710b216ade2b1f0d3226775068a9772773c40562b81b580b898dbdbffb0d7442bf1f7ace69bbc7b62ec331ff6ee225e075941dbf60d1773e8637ec4f10a9b17e7c18b871e5c1e109b496", 0x55, 0x4, 0x0, 0x2}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffffffffffff, &(0x7f0000001200)="ca1fc0533850e3bd215c710420ac8ed89e66163d9da9ce58ed8d6ef6777de47fa7640b2eacb4440b3df35fd63ce0926848027fef3dd376c437bcc69ba84c1811e53da08a472954a61590820ad72a6cbaeac406d63c80848aba22e650b8642e5ed0487b431b6e71cb8bee3f518b4ad3d46d5def73a06bd1dccdc7d48ca796122ce8c7", 0x82, 0x7f, 0x0, 0x2}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000001300)="e46897d8d6eeb6c9f597b9c6a313c7692888b2a68e469f0e43115721136910f3cb9913b778538715558cec7d34f5ef6291e67292ce014b3e133aa6642509565396cc33480c55f1c792ccc0069a8a731ce854c2f9d8d02251f0d3b0a57576d4fc1cba33f195d6a9e4b57e1c7ddcfcc752c802a645ede333e3471c58f3e15ff75c2bd1da93ffd1118dce02cef467f5b7edd31f9d429f2203b0dd697529d3afccff5e8a44967a5d4aa4e48299d08928030de33917be1d752c88456880bed4af85", 0xbf, 0x9, 0x0, 0x1, r0}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x3, 0x6, r1, &(0x7f00000015c0)="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", 0xfa, 0x9, 0x0, 0x1}]) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000001740)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000017c0)={0x7, 0x0, 0x9}) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008851}, 0x4000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001940)='/sys/module/snd_pcm', 0x100, 0x60) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0x88, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4c0dd4cbb31306bf951dae994a"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "3eb21fbea29ed20ea56fe66513"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "de64dfcfe4"}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) r4 = shmget(0x2, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b00)={0x0, 0x0}, &(0x7f0000001b40)=0xc) lstat(&(0x7f0000001b80)='.\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r3, &(0x7f0000002000)={&(0x7f0000001c40), 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)=""/199, 0xc7}, {&(0x7f0000001dc0)=""/250, 0xfa}], 0x2, &(0x7f0000001f00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x40000061) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002040)=0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000002080)={{0x0, 0xffffffffffffffff, 0xee01, r5, r6, 0x0, 0x7ff}, 0xfff, 0x7, 0x0, 0x2, r8, r10, 0x74}) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000002140), r9) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x44, r11, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x44}}, 0x20000080) open(&(0x7f0000002280)='./file0\x00', 0x2041, 0x6) [ 130.010292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.015427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.023333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.030818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.034051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.045887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.051304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.053233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.055839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.058464] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.062580] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.064164] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.067686] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.069928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.070405] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.075022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.083498] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.086970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.092442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.101853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.134714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.154535] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.161589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.163397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.173824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.180342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.180583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.184692] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.187391] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.191562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.196441] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.196551] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.201339] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.206556] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.213605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.217440] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.222703] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.239439] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.263381] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.266600] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 132.127477] Bluetooth: hci2: command tx timeout [ 132.129299] Bluetooth: hci0: command tx timeout [ 132.188231] Bluetooth: hci3: command tx timeout [ 132.188966] Bluetooth: hci1: command tx timeout [ 132.252198] Bluetooth: hci4: command tx timeout [ 132.316926] Bluetooth: hci7: command tx timeout [ 132.318775] Bluetooth: hci5: command tx timeout [ 132.318919] Bluetooth: hci6: command tx timeout [ 134.173255] Bluetooth: hci2: command tx timeout [ 134.173378] Bluetooth: hci0: command tx timeout [ 134.236323] Bluetooth: hci3: command tx timeout [ 134.236640] Bluetooth: hci1: command tx timeout [ 134.301134] Bluetooth: hci4: command tx timeout [ 134.364262] Bluetooth: hci7: command tx timeout [ 134.364742] Bluetooth: hci5: command tx timeout [ 134.365384] Bluetooth: hci6: command tx timeout [ 136.220904] Bluetooth: hci0: command tx timeout [ 136.221722] Bluetooth: hci2: command tx timeout [ 136.284645] Bluetooth: hci3: command tx timeout [ 136.285568] Bluetooth: hci1: command tx timeout [ 136.350336] Bluetooth: hci4: command tx timeout [ 136.413378] Bluetooth: hci6: command tx timeout [ 136.413914] Bluetooth: hci5: command tx timeout [ 136.415360] Bluetooth: hci7: command tx timeout [ 138.268511] Bluetooth: hci0: command tx timeout [ 138.269058] Bluetooth: hci2: command tx timeout [ 138.332225] Bluetooth: hci3: command tx timeout [ 138.333687] Bluetooth: hci1: command tx timeout [ 138.397351] Bluetooth: hci4: command tx timeout [ 138.460268] Bluetooth: hci7: command tx timeout [ 138.460841] Bluetooth: hci5: command tx timeout [ 138.461428] Bluetooth: hci6: command tx timeout [ 193.069007] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.070914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.072769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.077623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.078963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.081987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.088453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.090287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.105163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.110447] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.138512] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.139662] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.143920] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.145317] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.154473] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.155731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.169406] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.172224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.175605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.179786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.182687] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.186820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.189391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.190336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.220275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.249558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.263029] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.266527] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.276634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.289911] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.297926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.300676] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.326382] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.333715] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.367438] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.521944] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.533350] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.550284] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.615750] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.634951] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.164244] Bluetooth: hci0: command tx timeout [ 195.164534] Bluetooth: hci1: command tx timeout [ 195.292264] Bluetooth: hci3: command tx timeout [ 195.292366] Bluetooth: hci4: command tx timeout [ 195.293004] Bluetooth: hci2: command tx timeout [ 195.421151] Bluetooth: hci5: command tx timeout [ 195.485192] Bluetooth: hci7: command tx timeout [ 195.740198] Bluetooth: hci6: command tx timeout [ 197.212227] Bluetooth: hci1: command tx timeout [ 197.213292] Bluetooth: hci0: command tx timeout [ 197.340214] Bluetooth: hci2: command tx timeout [ 197.342367] Bluetooth: hci4: command tx timeout [ 197.342857] Bluetooth: hci3: command tx timeout [ 197.468376] Bluetooth: hci5: command tx timeout [ 197.532159] Bluetooth: hci7: command tx timeout [ 197.788290] Bluetooth: hci6: command tx timeout [ 199.260871] Bluetooth: hci0: command tx timeout [ 199.261439] Bluetooth: hci1: command tx timeout [ 199.389573] Bluetooth: hci4: command tx timeout [ 199.390060] Bluetooth: hci3: command tx timeout [ 199.391025] Bluetooth: hci2: command tx timeout [ 199.516392] Bluetooth: hci5: command tx timeout [ 199.580236] Bluetooth: hci7: command tx timeout [ 199.838396] Bluetooth: hci6: command tx timeout [ 201.308605] Bluetooth: hci0: command tx timeout [ 201.310183] Bluetooth: hci1: command tx timeout [ 201.436259] Bluetooth: hci4: command tx timeout [ 201.436808] Bluetooth: hci3: command tx timeout [ 201.437732] Bluetooth: hci2: command tx timeout [ 201.565209] Bluetooth: hci5: command tx timeout [ 201.629123] Bluetooth: hci7: command tx timeout [ 201.884289] Bluetooth: hci6: command tx timeout [ 255.602538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.607462] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.611448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.617381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.621035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.915949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.923527] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.925684] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.934515] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.937056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.946548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.951909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.960665] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.979005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.989569] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.053895] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.062642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.109422] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.110593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.113411] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.122820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.128357] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.129199] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.133501] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.137503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.141065] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.142770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.149735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.152498] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.152748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.160378] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.170573] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.175656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.183678] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.188289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.215401] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.235986] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.283293] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.308610] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.318210] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.692446] Bluetooth: hci0: command tx timeout [ 258.013277] Bluetooth: hci1: command tx timeout [ 258.077406] Bluetooth: hci2: command tx timeout [ 258.268679] Bluetooth: hci4: command tx timeout [ 258.268751] Bluetooth: hci6: command tx timeout [ 258.270159] Bluetooth: hci5: command tx timeout [ 258.270376] Bluetooth: hci3: command tx timeout [ 258.396189] Bluetooth: hci7: command tx timeout [ 259.743131] Bluetooth: hci0: command tx timeout [ 260.060460] Bluetooth: hci1: command tx timeout [ 260.124407] Bluetooth: hci2: command tx timeout [ 260.316215] Bluetooth: hci5: command tx timeout [ 260.316720] Bluetooth: hci4: command tx timeout [ 260.318350] Bluetooth: hci6: command tx timeout [ 260.318406] Bluetooth: hci3: command tx timeout [ 260.444950] Bluetooth: hci7: command tx timeout [ 261.790211] Bluetooth: hci0: command tx timeout [ 262.108467] Bluetooth: hci1: command tx timeout [ 262.172515] Bluetooth: hci2: command tx timeout [ 262.366159] Bluetooth: hci3: command tx timeout [ 262.366282] Bluetooth: hci4: command tx timeout [ 262.366711] Bluetooth: hci6: command tx timeout [ 262.367256] Bluetooth: hci5: command tx timeout [ 262.492695] Bluetooth: hci7: command tx timeout [ 263.836418] Bluetooth: hci0: command tx timeout [ 264.158496] Bluetooth: hci1: command tx timeout [ 264.220371] Bluetooth: hci2: command tx timeout [ 264.412224] Bluetooth: hci5: command tx timeout [ 264.412799] Bluetooth: hci6: command tx timeout [ 264.412844] Bluetooth: hci4: command tx timeout [ 264.413344] Bluetooth: hci3: command tx timeout [ 264.541383] Bluetooth: hci7: command tx timeout [ 316.155896] syz-executor.5 (4633) used greatest stack depth: 24912 bytes left [ 318.269308] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.278707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.281597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.294148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.296324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.406406] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.437456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.471633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.475420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.486047] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.488934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.500507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.502530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.510007] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.518592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.546578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.561912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.565792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.575590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.579235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.662598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.663837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.690691] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.691941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.695131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.696872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.703040] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.705608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.706994] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.710431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.732833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.739948] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.741686] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.745072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.747488] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.770616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.773899] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.776051] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.781531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.784445] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 320.348529] Bluetooth: hci0: command tx timeout [ 320.540287] Bluetooth: hci1: command tx timeout [ 320.540503] Bluetooth: hci2: command tx timeout [ 320.669623] Bluetooth: hci3: command tx timeout [ 320.733330] Bluetooth: hci5: command tx timeout [ 320.796611] Bluetooth: hci6: command tx timeout [ 320.861047] Bluetooth: hci4: command tx timeout [ 320.861132] Bluetooth: hci7: command tx timeout [ 322.396178] Bluetooth: hci0: command tx timeout [ 322.588300] Bluetooth: hci1: command tx timeout [ 322.590176] Bluetooth: hci2: command tx timeout [ 322.718141] Bluetooth: hci3: command tx timeout [ 322.780466] Bluetooth: hci5: command tx timeout [ 322.845193] Bluetooth: hci6: command tx timeout [ 322.908561] Bluetooth: hci4: command tx timeout [ 322.909915] Bluetooth: hci7: command tx timeout [ 324.444188] Bluetooth: hci0: command tx timeout [ 324.636433] Bluetooth: hci1: command tx timeout [ 324.636895] Bluetooth: hci2: command tx timeout [ 324.765288] Bluetooth: hci3: command tx timeout [ 324.829172] Bluetooth: hci5: command tx timeout [ 324.894135] Bluetooth: hci6: command tx timeout [ 324.956186] Bluetooth: hci7: command tx timeout [ 324.958148] Bluetooth: hci4: command tx timeout [ 326.493351] Bluetooth: hci0: command tx timeout [ 326.684437] Bluetooth: hci1: command tx timeout [ 326.684726] Bluetooth: hci2: command tx timeout [ 326.812201] Bluetooth: hci3: command tx timeout [ 326.876251] Bluetooth: hci5: command tx timeout [ 326.941417] Bluetooth: hci6: command tx timeout [ 327.006150] Bluetooth: hci7: command tx timeout [ 327.006188] Bluetooth: hci4: command tx timeout [ 381.057910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.065694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.077946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.100275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.116756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.291758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.295578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.297762] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.303758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.306904] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.369696] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.385496] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.388711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.394355] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.397809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.492502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.504222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.525344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.556422] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.564935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.573629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.581345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.583498] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.588234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.592573] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.631860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.651858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.681000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.704111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.708424] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.713541] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.716604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.717700] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.720916] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.725506] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.740760] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.788228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.813596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.817248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.842480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.196203] Bluetooth: hci0: command tx timeout [ 383.389193] Bluetooth: hci1: command tx timeout [ 383.452259] Bluetooth: hci2: command tx timeout [ 383.648226] Bluetooth: hci3: command tx timeout [ 383.648721] Bluetooth: hci5: command tx timeout [ 383.901239] Bluetooth: hci4: command tx timeout [ 383.901282] Bluetooth: hci7: command tx timeout [ 383.973041] Bluetooth: hci6: command tx timeout [ 385.244209] Bluetooth: hci0: command tx timeout [ 385.436433] Bluetooth: hci1: command tx timeout [ 385.501444] Bluetooth: hci2: command tx timeout [ 385.692347] Bluetooth: hci5: command tx timeout [ 385.692563] Bluetooth: hci3: command tx timeout [ 385.948185] Bluetooth: hci7: command tx timeout [ 385.950830] Bluetooth: hci4: command tx timeout [ 386.013338] Bluetooth: hci6: command tx timeout [ 387.292406] Bluetooth: hci0: command tx timeout [ 387.485526] Bluetooth: hci1: command tx timeout [ 387.549112] Bluetooth: hci2: command tx timeout [ 387.740181] Bluetooth: hci3: command tx timeout [ 387.740248] Bluetooth: hci5: command tx timeout [ 387.997186] Bluetooth: hci4: command tx timeout [ 387.997431] Bluetooth: hci7: command tx timeout [ 388.061180] Bluetooth: hci6: command tx timeout [ 389.341302] Bluetooth: hci0: command tx timeout [ 389.532206] Bluetooth: hci1: command tx timeout [ 389.596172] Bluetooth: hci2: command tx timeout [ 389.788326] Bluetooth: hci5: command tx timeout [ 389.789413] Bluetooth: hci3: command tx timeout [ 390.044378] Bluetooth: hci4: command tx timeout [ 390.045558] Bluetooth: hci7: command tx timeout [ 390.108194] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 10:27:57 Registers: info registers vcpu 0 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff812bf67e RDX=ffff8880158e1b80 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88806ce36f18 RSP=ffff88806ce08cf8 R8 =0000000000000001 R9 =ffffed100d9c119d R10=0000000000000000 R11=0000000000000001 R12=00000064bf707693 R13=ffff8880158e25d8 R14=0000000000000000 R15=ffff8880158e26a0 RIP=ffffffff84b46be0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa445610540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa445a3bec3 CR3=000000002739f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=c99e9fa1b50eea00 RBX=0000000000000000 RCX=b30f96e79d24f230 RDX=0000000019d6cd52 RSI=000000002e6343c6 RDI=00000000c2958701 RBP=ffffffff85c1cbc0 RSP=ffff88803958f290 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff8151af60 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5424775000 CR3=000000002fe18000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000