Warning: Permanently added '[localhost]:9974' (ECDSA) to the list of known hosts. 2025/06/21 07:44:50 fuzzer started 2025/06/21 07:44:51 dialing manager at localhost:33119 syzkaller login: [ 93.694531] cgroup: Unknown subsys name 'net' [ 93.819894] cgroup: Unknown subsys name 'cpuset' [ 93.857362] cgroup: Unknown subsys name 'rlimit' 2025/06/21 07:45:07 syscalls: 2214 2025/06/21 07:45:07 code coverage: enabled 2025/06/21 07:45:07 comparison tracing: enabled 2025/06/21 07:45:07 extra coverage: enabled 2025/06/21 07:45:07 setuid sandbox: enabled 2025/06/21 07:45:07 namespace sandbox: enabled 2025/06/21 07:45:07 Android sandbox: enabled 2025/06/21 07:45:07 fault injection: enabled 2025/06/21 07:45:07 leak checking: enabled 2025/06/21 07:45:07 net packet injection: enabled 2025/06/21 07:45:07 net device setup: enabled 2025/06/21 07:45:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 07:45:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 07:45:07 USB emulation: enabled 2025/06/21 07:45:07 hci packet injection: enabled 2025/06/21 07:45:07 wifi device emulation: enabled 2025/06/21 07:45:07 802.15.4 emulation: enabled 2025/06/21 07:45:07 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 07:45:08 starting 8 fuzzer processes 07:45:08 executing program 1: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}}, 0x7d30dc46e3d835c2) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x4008055) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x16d876db}]}, 0x4c}}, 0x4004881) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x100, 0x70bd2d, 0x8, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x72}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3298c281}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) process_mrelease(0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x1168}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x48}, 0x1, 0x0, 0x0, 0x280000c5}, 0x1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2a}, @void, @val={0xc, 0x99, {0x257, 0x51}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0x48405) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000900)='hybla\x00', 0x6) ioctl$KDMKTONE(r1, 0x4b30, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000940)={{}, 'port1\x00', 0x14, 0x0, 0x4, 0x40, 0x3, 0x49, 0xfff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000a00)={0x400, 0x8, 0x3, 0x7c4, 0x8, 0x8}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40480c0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000bc0)={0x401, 0x1, 0x1, 0x10001, 0x0, 0x1}) fadvise64(r1, 0xfffffffffffffff8, 0x0, 0x1) r3 = syz_open_dev$mouse(&(0x7f0000000c00), 0x0, 0x703400) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000c40)) 07:45:08 executing program 0: fchmod(0xffffffffffffffff, 0xa1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0xb, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0xbc, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6f0e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x63}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x440}, 0x8024) r2 = pidfd_getfd(r0, r1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0xb0100, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = accept$unix(r2, 0x0, &(0x7f0000000300)) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000340)={@initdev, @private}, &(0x7f0000000380)=0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000003c0)={0x50000008}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x141200, 0x0) recvmmsg$unix(r1, &(0x7f0000009e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000005c0)=""/43, 0x2b}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f00000006c0)=""/140, 0x8c}, {&(0x7f0000000780)=""/187, 0xbb}, {&(0x7f0000000840)=""/7, 0x7}, {&(0x7f0000000880)=""/17, 0x11}, {&(0x7f00000008c0)}], 0x8, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000000a80)=""/172, 0xac}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/226, 0xe2}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/59, 0x3b}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x6, &(0x7f0000003d00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000003d80), 0x6e, &(0x7f0000005080)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/105, 0x69}, {&(0x7f0000004e80)=""/105, 0x69}, {&(0x7f0000004f00)=""/246, 0xf6}, {&(0x7f0000005000)=""/113, 0x71}], 0x5, &(0x7f0000005100)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000005200), 0x6e, &(0x7f0000006340)=[{&(0x7f0000005280)=""/127, 0x7f}, {&(0x7f0000005300)=""/49, 0x31}, {&(0x7f0000005340)=""/4096, 0x1000}], 0x3, &(0x7f0000006380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f00000064c0), 0x6e, &(0x7f00000078c0)=[{&(0x7f0000006540)=""/200, 0xc8}, {&(0x7f0000006640)=""/192, 0xc0}, {&(0x7f0000006700)=""/25, 0x19}, {&(0x7f0000006740)=""/64, 0x40}, {&(0x7f0000006780)=""/4096, 0x1000}, {&(0x7f0000007780)=""/232, 0xe8}, {&(0x7f0000007880)=""/10, 0xa}], 0x7, &(0x7f0000007940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000007a00), 0x6e, &(0x7f0000008000)=[{&(0x7f0000007a80)=""/152, 0x98}, {&(0x7f0000007b40)=""/58, 0x3a}, {&(0x7f0000007b80)=""/137, 0x89}, {&(0x7f0000007c40)=""/213, 0xd5}, {&(0x7f0000007d40)=""/252, 0xfc}, {&(0x7f0000007e40)=""/28, 0x1c}, {&(0x7f0000007e80)=""/187, 0xbb}, {&(0x7f0000007f40)=""/129, 0x81}], 0x8, &(0x7f0000008080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000080c0), 0x6e, &(0x7f0000009140)=[{&(0x7f0000008140)=""/4096, 0x1000}], 0x1, &(0x7f0000009180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f00000092c0), 0x6e, &(0x7f0000009580)=[{&(0x7f0000009340)=""/78, 0x4e}, {&(0x7f00000093c0)=""/230, 0xe6}, {&(0x7f00000094c0)=""/133, 0x85}], 0x3, &(0x7f00000095c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000009640), 0x6e, &(0x7f0000009740)=[{&(0x7f00000096c0)=""/127, 0x7f}], 0x1, &(0x7f0000009780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f00000098c0)=@abs, 0x6e, &(0x7f0000009dc0)=[{&(0x7f0000009940)=""/244, 0xf4}, {&(0x7f0000009a40)=""/217, 0xd9}, {&(0x7f0000009b40)=""/118, 0x76}, {&(0x7f0000009bc0)=""/106, 0x6a}, {&(0x7f0000009c40)=""/172, 0xac}, {&(0x7f0000009d00)=""/107, 0x6b}, {&(0x7f0000009d80)=""/52, 0x34}], 0x7}}], 0xa, 0x10000, &(0x7f000000a0c0)={0x0, 0x989680}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x2004010, &(0x7f000000a100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@debug={'debug', 0x3d, 0x401}}, {@noextend}, {@access_uid={'access', 0x3d, r7}}, {@version_L}, {@cache_fscache}, {@posixacl}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x33, 0x62, 0x34, 0x30, 0x37, 0x39, 0x37], 0x2d, [0x34, 0x34, 0x6c81d2dbf02692c8, 0x31], 0x2d, [0x66, 0x56, 0x34, 0x66], 0x2d, [0x33, 0x34, 0x34, 0x39], 0x2d, [0x33, 0x32, 0x33, 0x33, 0x30, 0x30, 0x39, 0x32]}}}, {@obj_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) fgetxattr(r6, &(0x7f000000a200)=@known='system.sockprotoname\x00', &(0x7f000000a240)=""/4096, 0x1000) 07:45:08 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x34}}, 0x20008845) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x54000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000200)={0x5, "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"}) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='cpu.stat\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x3) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x8}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8881) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000050) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000840)=@add_del={0x2, &(0x7f0000000800)='batadv0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0xfff}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045}, 0x4011) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/class/spi_host', 0x101000, 0x12) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000a00)) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000a40)={0x7fffffff, 0x7, 0x0, 0x7}) set_thread_area(&(0x7f0000000a80)={0xfffffffb, 0x20001000, 0xecd7d80047977a4b, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa3029000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcad}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) 07:45:08 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xcdf8}}, './file0\x00'}) r2 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x20, 0x2, 0x81, 0x0, 0x6, 0x80000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x3100, 0x0, 0x7, 0x5, 0x400, 0xfffffffd, 0x1, 0x0, 0x46800000, 0x0, 0x7}, 0x0, 0x7, r1, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) fstatfs(r0, &(0x7f0000000140)=""/129) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1e4, r3, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7f}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xff}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_KEYS={0x180, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a8973517df"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6b8420c08676738c49e1e8842d"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ca596d38505f591f88fdb63b9c"}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "6b059130f7"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "22b9e0365ab6fdfe42713302e5"}, @NL80211_KEY_SEQ={0x7, 0x4, "d82aaa"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x8, 0x4, "11ce3982"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "cdb4bf8d3e"}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x3, 0x7, 0x0, {0xffffffffffffff01, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x0, 0x3}, 0x400, 0x800, 0x7}}, @NL80211_ATTR_SSID={0xa, 0x34, @random="fca33bfceeae"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) statx(r4, &(0x7f0000000540)='./file0\x00', 0x1000, 0x1, &(0x7f0000000580)) recvmsg$unix(r4, &(0x7f0000001cc0)={&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/82, 0x52}, {&(0x7f0000001780)}, {&(0x7f00000017c0)=""/24, 0x18}, {&(0x7f0000001800)=""/141, 0x8d}, {&(0x7f00000018c0)=""/204, 0xcc}, {&(0x7f00000019c0)=""/69, 0x45}, {&(0x7f0000001a40)=""/11, 0xb}, {&(0x7f0000001a80)=""/230, 0xe6}], 0x9, &(0x7f0000001c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x42) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000001d00)) syz_open_dev$ttys(0xc, 0x2, 0x1) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x4c, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000001ec0)='./file0\x00', 0x100) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000001f40)={0x1, 0x2a, 0x3b0}) r10 = openat2(r6, &(0x7f0000001f80)='\x00', &(0x7f0000001fc0)={0x1, 0x8, 0x12}, 0x18) ioctl$BLKRESETZONE(r10, 0x40101283, &(0x7f0000002000)={0x7, 0x7}) [ 111.134079] audit: type=1400 audit(1750491908.708:7): avc: denied { execmem } for pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:45:08 executing program 4: sendto(0xffffffffffffffff, &(0x7f0000000000)="d7b4e3189717b8aefc77bdc10e38f902b5a43f13ea0c31d258cd84c11d260dcb6a0e6e7c3e9ec8e99d9eb7884deb5c55c559200e7432c451bd57635981d8430aa1c0343cc3a82e77d23f2fc2db3ae1e02eedfbe802c2ba4dabb13520795bc17045aedc4098ef96c98aee73645ef2694b79cf107cd472ba4253bbaff234308140462912e5ff4d3b95", 0x88, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x318, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "d2146aeea87964de78d2f69aa7810edaba78d05201819a56f2a1303076206a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "62286cfdc112147756addcbe28f6bb44b8d7277b0855c789287fb87c14d6"}}, @TIPC_NLA_NODE_ID={0x7d, 0x3, "1709648368888a982e630a0826d3fd0a5780b58d39e738ff2242638d1724de2aca69fa16840d8307dcaebf3d279cac1d8d8f5297ecd501cac41246190fe58e37623ca213ed601ba31b7ca6d0abddc9b16ae33b898450b46bdd255fb5c10a76746a091438cef7f30fbb3322fa8ef08737cb4d405a68e336778c"}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @local, 0xffff}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x58f, @local, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x92, 0x3, "4b3f52d0e30daea8d2d75fae9bf97c6046a1718856f56010c791f1789c963a62802037ae0155e764b01291c038eee71549347f0df714ef4c11c69b876af10144a5b966426e9eb277a8434761d7bd3eae585be1e6d3b50e8b0e82771faca58c48350403b0e1b9268cbee89b7033fb2bf04de9e57c74d2c8a3aed807e26d344f275b60f3ffbb6a331c7fec6920d11b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000540)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x2400c810) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000006c0)=0x3) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r1, 0x200, 0x70bd25, 0x7, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x47}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x11) chroot(&(0x7f0000000840)='./file0\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x8c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0x1, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x140, r3, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x13, 0xa8, @random="7f53ebd18432f87f8d69dbe6a048c8"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x95, 0xa8, @random="a6de97b1dba4c05abe1bfedd6d5f643ab65ed6cafffacbaaf3f33eb4e19e1d19781eb70e02ebc652997f08b3ba4ea22c73f4a08cbb7947fccb2d1d63d93f5daf7143da4e54bcd0f87801487944a90d5583f094de452b1209d31c7563bf5dc5d6633c97e3e224f7731ef19553d2ae198206737ef3d2ce3f8e8a3e4b63ebfb257b86feb3b92ce74a1015f60b4086ad625686"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x140}, 0x1, 0x0, 0x0, 0x40090}, 0x24000006) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000d80), &(0x7f0000000dc0), 0x2, 0x1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/bus/mdio_bus', 0x100, 0xcc) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x810) r6 = socket$netlink(0x10, 0x3, 0x5) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xffff}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x10000000}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfd}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xffffffff}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x4}, @NL80211_TXQ_ATTR_TXOP={0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x2}]}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xca}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xff}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x81}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xf}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 07:45:08 executing program 5: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80800) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x2, 0xa0, "560cbfe6898643120623a726a69272b4fd987c7017b4db808011f5babf0b4fa203325a9e9be74e7ebf712f213d7da7b18092d52c34a968809c770a8647f441285460bc828f116dd35e6893a6fe84ef45f4155c11467266e94257289bf3d3fbf0e787371a2428db01b6b964244a5aebaa656e43d9cc904e688d7365519ee7ef719ab863b83785d1bc68710c4b44a4990c91fbbda6943069ad2715a0f4ca2ed878"}) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000100)) fremovexattr(r0, &(0x7f0000000140)=@random={'system.', '\x00'}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000180)=0x4) ioctl(r1, 0x9, &(0x7f00000001c0)="96327319aadf1b9b7ff4b113f5ef6ae1f46ca5bbb793499a1ed3ac34f09f61915961cc8307882fc654250d880176212d752b6671abb7cd22d902fa4f49cc68e6") ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000200)={0x0, 0x40, 0x6}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchownat(r0, &(0x7f0000000240)='./file0\x00', r2, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000440)={0x6, 0x3}) r3 = openat$cgroup(r0, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f00000004c0)) getsockname(r1, &(0x7f0000000500)=@un=@abs, &(0x7f0000000580)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x36}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_HE_OBSS_PD={0x2c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xc}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) sendmsg(r1, &(0x7f0000001000)={&(0x7f0000000780)=@llc={0x1a, 0x200, 0xfc, 0x4, 0xff, 0x8}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000800)="41e7d8caee39814782d2b9e1f65dc4a61ab70bea5f4e100a9ce1f7f82a18e1277b19072da3916d3ef2d06c12ab2ee7ca047179bdd60de667d07d8eb180666d03c8838248db5a4f616ebe7aef7b949693cab59d54715b07a7e75ef7114ce467a125fb98dca22221e2fde5d2e21d607ef3dc881323e961561aff934f292042bd9c9f54b22e7af46c039268210b103f386d8cf86f593cb463b180be3339f4a4081e5f030e1b190c274031ef51e805b7cc3441fc84f79d22187c262987b47160dde855506dc651b1c5d6a379653e2ce3179447b1ef855e922b2a049ef9bcecf5d2af41fd9dc48c58294430b08bd454340ccf928670b8f8150229", 0xf8}, {&(0x7f0000000900)="231dc0e722f10ecd15fc2b930d0ff21a4485bdb6bb", 0x15}, {&(0x7f0000000940)="68c86d4de953366ae905f2bca5f7dfe68b16037ba27ee3dadf8c4b307a68b8c2d301580421f6741132132777179af5b4896e34bd82b63ecae3981035488f4ecd23bd91e16375bb846e06fa99adaaeae613edb90b1c961d24bb4f03fd844671660ac8ed8a4800103b6032a7f685e97c7e03a4f5b7d056950fee7ff6c780673c619a31923fbf3412d130cf1ecfb9ca4936574839bda6", 0x95}, {&(0x7f0000000a00)="668ea0da99d546398c804476c378f53a063208f4f3", 0x15}, {&(0x7f0000000a40)="19caaf997c04fb24bbe90c89106d0da0fbc0a98c60d5d587ab274fa3a71d6d11c5135cef708e052ae2375e612047fe043cec03b10ac673483568bb05c6396e7861b31ca8e1ab7381db1e6c4c33e65ea9fa4b938387b4a70d44ee3906ad66256bc7e70ce277ae7030747e143172afe398e806338f306b0e4ffda222220278ce3fc6897e72", 0x84}, {&(0x7f0000000b00)="c2e1467c3133adbb84dd88912d2583bee39c0a3b0977306818bc5d3fd963352f9d7bcbcaa0b465b6d54661fec3a7fd8d154fd3312b799d4e9e099c352c7d196d23e68f1a71fbf6633954118a5c884de5468f54ecf99004ea853df581f4ae7daf024cc466b1996f689ea8b34fe1a4050624614bf54100946e23dbafa12674a84ad75867b1fbd17b", 0x87}, {&(0x7f0000000bc0)="7a20ca980f532545fea7a828641f3b1bef2cac1ec9f6e098eb60bd2fa08cc74e7a760e702fc13f1e86407dc02456191e481444e2f9185c4ded35ef47c2be651683cb98ce0a3227f23bfb54a1835324faab1169260119e6392806cd4e5e56aac9591337e715a82c1d6a51c4736f4c", 0x6e}, {&(0x7f0000000c40)="3078c0e1f7e3a331aef2b489e98638dc8ca823fc2daae0a12d9f22417ad181091b9f3c189d03685ac0f6c5cec5d0e12aaa292c99a018a36e877098934b41eb4a", 0x40}], 0x8, &(0x7f0000000d00)=[{0x70, 0x116, 0x5, "21a061a15622f12a9f370e06320bf0abeca888ce0d12c718c8de9f8a3589ded10e43ced6e46969021d09465e145b83567b8b61be6c77c12ac27365487a8871fb79ebc839ea2684e4ab0aff5e36e54efaccd26332f1202d1e42a43bc5281065c6"}, {0xc0, 0x29, 0x3, "b6ba1a8779d7e40f87371c1d824528cdbe61d953075de29a63bfd7bcd7341e8e55e228a55246d730c51d479cca2fee11ffc50bc2af234fe5a338713efc88c50d89ccadebbb701cbe264983c5ec3f8a647ccb710b7274899427f23a3e33292c4b5f37742c22024b3954846d53967d09c94cee608681ea751c148ca353e326e2f2a1606e5dea398cb8ee0c21d79cca1497b7a0fa1f7c2b34481fd90d0c50dad50ec4bd0624627027ab1ed4866fa9b40ce5"}, {0xc8, 0x113, 0x2, "f490d1abb5d31aa80165f1f78e6b82a83a1a98067de8d3e7127911589cdd8924656904d77996a590c118d610041621f5b60493a8ca3b2471592d48884edd5dbfbb3f0674ad969135552cfbeb04afeea1dd698f34e6ec17675389f0177f975f69dc2223a7a774c3ff626ec12b39913c8a348007af8c864051b4a46d81b551518fb656f0f074ecb9a8ee70e2ea3e3e1250573b35dd20b06d46fc4e7782be963434b9b2872c5d11a4f98c95618b93d2a86cd434578f771a"}, {0x100, 0x10a, 0x0, "537886be7045c5a190e4daa6e5202e7db3a46dca5f0af86faeccb39502e6cb25f3377fc9e77ee87b13696c235075789799ee03337e07bcb772900ee8a90337c7f7829d5494ae1353627b5a98f5918fd9f20c2ed5130f94116dcf2bc2d9b816abd4d4bbb0aaec70437fa6c55344e7ba2a67f1417179149a5124f378f7b066b77717a82f33dfd942567c49d83430d7ac6ad28257cf534d21c7bf34fe0a2ed386d30a466cad3d2d4a2bc3d7e06ca3e055cbe09e4ce51b0cbd3d87d3693b1601cb26b0b864b2b98ce47636029e3953188342b0e4753294b0b2e1b853379c57ec6dfe3089d65c8ed76a87ce76255c"}], 0x2f8}, 0x90) 07:45:08 executing program 6: ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'bridge_slave_0\x00'}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/8250_pericom', 0x0, 0x1) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x1, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48800}, 0x2) syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="d879bd6da6a9b6e8efbba3af9d1db036e0cbd3116f3b74d925180a3acbd64759feab960b73bebbeffdeb52ec465daeaf42acdf3d89e2a57573768144481676b8ed70edbe63a2a7d9224a7c99e2c38f134189d415fd041e6279e6e74f6990e9070ec296da9dd933bd6507dffeae7686c89c67b9729f5916ae4530cc6311ebd7e5f517fe34655850dfce34731a30ddf8a828385deb91f06030182250daba0bd9d1482a9a0e4eff54ee754af2b3", 0xac, 0x8}], 0x8d54a8, &(0x7f0000000300)={[{'.\\)-!'}, {'+@,@'}, {')'}, {'/+&'}, {'bridge_slave_0\x00'}], [{@smackfsdef={'smackfsdef', 0x3d, 'bridge_slave_0\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) r1 = dup3(r0, r0, 0x80000) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000380)={0xfff, 0x100400, 0x600, 0x8, 0x72edb91, 0x6}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x181150, r0, 0x918b0000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x2}}, './file0\x00'}) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000400)) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000440)="dada2eb9a55251a7198191b79b510017b401f3322b6563df7e0c51da4dcbf2af4149abb6ca92cc72a0d3e4f4a8702abe2ceb59bffda0d93f32901285a14c2f0f3e7ea9e633cee2cc") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xef0e68e9d7aca0eb, 0x10, r0, 0x59395000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000004c0)={0x5a, 0x0, '\x00', [@ra, @pad1]}, 0x10) r4 = openat$cgroup_subtree(r3, &(0x7f0000000500), 0x2, 0x0) write$binfmt_elf32(r4, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x20, 0x5, 0x6, 0x6, 0x2, 0x6, 0x80, 0x2a3, 0x38, 0x345, 0x7ff, 0xfff, 0x20, 0x1, 0xfff9, 0x383f, 0x1}, [{0x6474e551, 0x1ff, 0x1, 0x3, 0x7, 0x8, 0xc45, 0xc7}], "b91a4dc2d62c54d7ee1cb88ebb5055c57cfb779eebba9001bc0fb5c905033d133b7159b94b7a693609e6136f3c3126894f1814c00c82169512e070bd32053290115f46f9bb7c0d07e7a6e1441f5fd22c026dd2c4a477bb8e363299021b3875faaa970ee9630f80827346f6c38bf3faa64f00c95d3f00ac4c8a7e31bfa95bf39ae985b2ab73ecd7ab96b474500a275fd2a836bbf8934fe51b12bc58a6a416fbd0344a547e365110beeafc61fb73d78ad94a0a03e400bac7046bd52e96f68a349561dac9e19ba0d768", ['\x00', '\x00', '\x00']}, 0x420) write$9p(r0, &(0x7f0000000980)="bf080b4dd80c5b811af6805061209176d9c8e60fdc58b34111253111ac618cd076e842c5760144c8409f31c6054a1dd9e9e0f8343e628ebd22b7eb429cb58ec18545b68596", 0x45) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x1f) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x30}}, 0x850) 07:45:08 executing program 7: r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0x1, &(0x7f0000000000)={0x2, 0x2}, 0x0) rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x3b, &(0x7f0000000040)={0x15, 0x9, 0x3}) waitid(0x0, r0, &(0x7f00000000c0), 0xc0000000, &(0x7f0000000140)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x1000, 0x40, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x100, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000780)={{0x1, r1, r2, r3, r4, 0x1}, 0x0, 0x0, 0xa1, 0x400000000000, 0x0, 0x0, 0x9e, 0xad, 0x84e3, 0x7, r0, 0xffffffffffffffff}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000800)={[0x7]}, 0x8, 0x800) r6 = syz_open_dev$mouse(&(0x7f0000000840), 0xffff, 0xa00) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, &(0x7f0000000880)={0x1, 0x5}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000008c0)) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f0000000900)) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000000940)) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000980)={0x80, 0x9, 0xd2}) syz_open_dev$hidraw(&(0x7f00000009c0), 0x6, 0x10000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a00), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x6, 0x9, 0x41, @remote, @dev={0xfe, 0x80, '\x00', 0x12}, 0x20, 0x1, 0x4, 0x80000001}}) [ 112.555180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.559485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.563919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.570108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.573977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.629488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.636010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.638361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.649046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.654164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.681270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.691102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.694636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.738488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.745329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.749612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.763178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.767673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.771150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.772556] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.775479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.782221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.784333] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.787291] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.793681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.799337] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.800992] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.804916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.822339] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.824988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.830988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.837810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.840657] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 112.862009] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.864947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.870540] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.874250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.891171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.893321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.924996] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.640351] Bluetooth: hci0: command tx timeout [ 114.767547] Bluetooth: hci1: command tx timeout [ 114.831656] Bluetooth: hci2: command tx timeout [ 114.895492] Bluetooth: hci3: command tx timeout [ 114.959561] Bluetooth: hci4: command tx timeout [ 114.959642] Bluetooth: hci7: command tx timeout [ 114.960349] Bluetooth: hci6: command tx timeout [ 115.024063] Bluetooth: hci5: command tx timeout [ 116.687499] Bluetooth: hci0: command tx timeout [ 116.815889] Bluetooth: hci1: command tx timeout [ 116.879654] Bluetooth: hci2: command tx timeout [ 116.944496] Bluetooth: hci3: command tx timeout [ 117.007580] Bluetooth: hci4: command tx timeout [ 117.008061] Bluetooth: hci7: command tx timeout [ 117.008656] Bluetooth: hci6: command tx timeout [ 117.071775] Bluetooth: hci5: command tx timeout [ 118.735487] Bluetooth: hci0: command tx timeout [ 118.863636] Bluetooth: hci1: command tx timeout [ 118.927650] Bluetooth: hci2: command tx timeout [ 118.991674] Bluetooth: hci3: command tx timeout [ 119.056009] Bluetooth: hci6: command tx timeout [ 119.056502] Bluetooth: hci7: command tx timeout [ 119.056912] Bluetooth: hci4: command tx timeout [ 119.120481] Bluetooth: hci5: command tx timeout [ 120.783783] Bluetooth: hci0: command tx timeout [ 120.911712] Bluetooth: hci1: command tx timeout [ 120.975676] Bluetooth: hci2: command tx timeout [ 121.039555] Bluetooth: hci3: command tx timeout [ 121.103729] Bluetooth: hci4: command tx timeout [ 121.104205] Bluetooth: hci7: command tx timeout [ 121.105236] Bluetooth: hci6: command tx timeout [ 121.167892] Bluetooth: hci5: command tx timeout [ 174.943026] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.950113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.953292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.968592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.973748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.090280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.093919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.096707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.100247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.103872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.106163] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.113383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.121858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.136785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.141229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.143381] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.146344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.149700] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.157084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.158600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.159334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.162295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.188323] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.194876] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.200357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.205839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.217834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.239429] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.269777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.269894] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.281587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.284421] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.286668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.290736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.296021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.296928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.315846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.338925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.343598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.351994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.039511] Bluetooth: hci0: command tx timeout [ 177.231648] Bluetooth: hci3: command tx timeout [ 177.234513] Bluetooth: hci1: command tx timeout [ 177.295524] Bluetooth: hci2: command tx timeout [ 177.296225] Bluetooth: hci7: command tx timeout [ 177.359580] Bluetooth: hci5: command tx timeout [ 177.423546] Bluetooth: hci4: command tx timeout [ 177.423813] Bluetooth: hci6: command tx timeout [ 179.087551] Bluetooth: hci0: command tx timeout [ 179.279509] Bluetooth: hci1: command tx timeout [ 179.281431] Bluetooth: hci3: command tx timeout [ 179.343474] Bluetooth: hci2: command tx timeout [ 179.343592] Bluetooth: hci7: command tx timeout [ 179.407821] Bluetooth: hci5: command tx timeout [ 179.471711] Bluetooth: hci6: command tx timeout [ 179.471848] Bluetooth: hci4: command tx timeout [ 181.135527] Bluetooth: hci0: command tx timeout [ 181.327741] Bluetooth: hci3: command tx timeout [ 181.328205] Bluetooth: hci1: command tx timeout [ 181.391702] Bluetooth: hci7: command tx timeout [ 181.391931] Bluetooth: hci2: command tx timeout [ 181.455674] Bluetooth: hci5: command tx timeout [ 181.519657] Bluetooth: hci6: command tx timeout [ 181.522426] Bluetooth: hci4: command tx timeout [ 183.185476] Bluetooth: hci0: command tx timeout [ 183.376722] Bluetooth: hci1: command tx timeout [ 183.376746] Bluetooth: hci3: command tx timeout [ 183.439840] Bluetooth: hci7: command tx timeout [ 183.440469] Bluetooth: hci2: command tx timeout [ 183.504461] Bluetooth: hci5: command tx timeout [ 183.567695] Bluetooth: hci4: command tx timeout [ 183.567776] Bluetooth: hci6: command tx timeout [ 237.018680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.027894] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.030308] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.036966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.047103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.219484] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.229692] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.232263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.238815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.242659] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.280081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.284133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.288776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.295141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.300231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.306151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.321354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.326046] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.327902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.348681] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.356859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.358766] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.370975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.375638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.383942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.387194] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.393957] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.399006] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.402357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.414193] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.421098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.421667] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.422371] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.435081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.445170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.448836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.449592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.475725] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.480372] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.492731] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.120704] Bluetooth: hci0: command tx timeout [ 239.312648] Bluetooth: hci1: command tx timeout [ 239.375844] Bluetooth: hci2: command tx timeout [ 239.504690] Bluetooth: hci3: command tx timeout [ 239.505265] Bluetooth: hci4: command tx timeout [ 239.567480] Bluetooth: hci6: command tx timeout [ 239.631751] Bluetooth: hci7: command tx timeout [ 239.632671] Bluetooth: hci5: command tx timeout [ 241.167691] Bluetooth: hci0: command tx timeout [ 241.359535] Bluetooth: hci1: command tx timeout [ 241.423786] Bluetooth: hci2: command tx timeout [ 241.551863] Bluetooth: hci4: command tx timeout [ 241.552323] Bluetooth: hci3: command tx timeout [ 241.616582] Bluetooth: hci6: command tx timeout [ 241.680056] Bluetooth: hci7: command tx timeout [ 241.681648] Bluetooth: hci5: command tx timeout [ 243.216087] Bluetooth: hci0: command tx timeout [ 243.407537] Bluetooth: hci1: command tx timeout [ 243.471687] Bluetooth: hci2: command tx timeout [ 243.601066] Bluetooth: hci3: command tx timeout [ 243.601925] Bluetooth: hci4: command tx timeout [ 243.663961] Bluetooth: hci6: command tx timeout [ 243.727608] Bluetooth: hci7: command tx timeout [ 243.729940] Bluetooth: hci5: command tx timeout [ 245.264026] Bluetooth: hci0: command tx timeout [ 245.455781] Bluetooth: hci1: command tx timeout [ 245.520620] Bluetooth: hci2: command tx timeout [ 245.647579] Bluetooth: hci3: command tx timeout [ 245.648717] Bluetooth: hci4: command tx timeout [ 245.711785] Bluetooth: hci6: command tx timeout [ 245.776629] Bluetooth: hci5: command tx timeout [ 245.777562] Bluetooth: hci7: command tx timeout [ 299.758184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.763810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.766955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.776254] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.780725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.893041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.900942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.904948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.927907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.946602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.946649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.954491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.965844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.983760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.999014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.081213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.090057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.096905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.118030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.126950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.182280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.258157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.260778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.271928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.277364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.286807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.289617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.293916] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.298001] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.300026] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.311727] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.318108] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.341114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.342765] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.343906] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.367336] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.371317] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.377669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.416794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.522249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.840488] Bluetooth: hci0: command tx timeout [ 302.032554] Bluetooth: hci2: command tx timeout [ 302.033272] Bluetooth: hci1: command tx timeout [ 302.287791] Bluetooth: hci3: command tx timeout [ 302.415529] Bluetooth: hci4: command tx timeout [ 302.479933] Bluetooth: hci7: command tx timeout [ 302.544518] Bluetooth: hci6: command tx timeout [ 302.671495] Bluetooth: hci5: command tx timeout [ 303.888614] Bluetooth: hci0: command tx timeout [ 304.080549] Bluetooth: hci2: command tx timeout [ 304.081020] Bluetooth: hci1: command tx timeout [ 304.335504] Bluetooth: hci3: command tx timeout [ 304.463520] Bluetooth: hci4: command tx timeout [ 304.528635] Bluetooth: hci7: command tx timeout [ 304.593425] Bluetooth: hci6: command tx timeout [ 304.720620] Bluetooth: hci5: command tx timeout [ 305.936487] Bluetooth: hci0: command tx timeout [ 306.127789] Bluetooth: hci1: command tx timeout [ 306.128259] Bluetooth: hci2: command tx timeout [ 306.383729] Bluetooth: hci3: command tx timeout [ 306.512613] Bluetooth: hci4: command tx timeout [ 306.577444] Bluetooth: hci7: command tx timeout [ 306.639465] Bluetooth: hci6: command tx timeout [ 306.768489] Bluetooth: hci5: command tx timeout [ 307.983503] Bluetooth: hci0: command tx timeout [ 308.176656] Bluetooth: hci1: command tx timeout [ 308.177113] Bluetooth: hci2: command tx timeout [ 308.432785] Bluetooth: hci3: command tx timeout [ 308.560620] Bluetooth: hci4: command tx timeout [ 308.623658] Bluetooth: hci7: command tx timeout [ 308.688471] Bluetooth: hci6: command tx timeout [ 308.816678] Bluetooth: hci5: command tx timeout [ 362.530328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.533371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.535924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.542346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.550511] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.618106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.620917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.623456] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.629031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.634190] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.796905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.809133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.821845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.841909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.852558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.017643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.020736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.023221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.031666] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.038048] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.441115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.479139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.480224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.486019] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.490671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.493076] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.499321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.506858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.514906] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.519791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.522541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.572002] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.572180] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.581286] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.587012] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.603884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.626248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.637972] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.652858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.664726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.623528] Bluetooth: hci0: command tx timeout [ 364.687495] Bluetooth: hci1: command tx timeout [ 364.943960] Bluetooth: hci2: command tx timeout [ 365.135561] Bluetooth: hci3: command tx timeout [ 365.775690] Bluetooth: hci6: command tx timeout [ 365.776956] Bluetooth: hci5: command tx timeout [ 365.841082] Bluetooth: hci7: command tx timeout [ 366.032895] Bluetooth: hci4: command tx timeout [ 366.672811] Bluetooth: hci0: command tx timeout [ 366.737447] Bluetooth: hci1: command tx timeout [ 366.992530] Bluetooth: hci2: command tx timeout [ 367.183634] Bluetooth: hci3: command tx timeout [ 367.824524] Bluetooth: hci6: command tx timeout [ 367.825007] Bluetooth: hci5: command tx timeout [ 367.890768] Bluetooth: hci7: command tx timeout [ 368.080785] Bluetooth: hci4: command tx timeout [ 368.719485] Bluetooth: hci0: command tx timeout [ 368.784631] Bluetooth: hci1: command tx timeout [ 369.039510] Bluetooth: hci2: command tx timeout [ 369.233742] Bluetooth: hci3: command tx timeout [ 369.872852] Bluetooth: hci5: command tx timeout [ 369.873703] Bluetooth: hci6: command tx timeout [ 369.936875] Bluetooth: hci7: command tx timeout [ 370.127562] Bluetooth: hci4: command tx timeout [ 370.768461] Bluetooth: hci0: command tx timeout [ 370.832720] Bluetooth: hci1: command tx timeout [ 371.088482] Bluetooth: hci2: command tx timeout [ 371.279612] Bluetooth: hci3: command tx timeout [ 371.919528] Bluetooth: hci5: command tx timeout [ 371.920042] Bluetooth: hci6: command tx timeout [ 371.983460] Bluetooth: hci7: command tx timeout [ 372.176496] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 07:50:09 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00007fa73dca087b RCX=ffffffff81209632 RDX=ffff88800ef51b80 RSI=ffffffff81209640 RDI=0000000000000007 RBP=00007fa73dca087b RSP=ffff88806ce089d0 R8 =ffffffff8678c6ea R9 =0000000000000000 R10=00007fa73dca0000 R11=0000000000000003 R12=0000000000000000 R13=0000000000000000 R14=ffff88800ef51b80 R15=ffff88800e346a80 RIP=ffffffff8142f9c7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa73db89540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563b287614c8 CR3=0000000035a53000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff81a240dd RDX=000000000000a240 RSI=000000000000a240 RDI=ffffffff86c8a3e0 RBP=ffff88806cf08ad0 RSP=ffff88806cf08a08 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=0000000000000001 R12=ffff88806cf08ad8 R13=ffff88806cf08ac0 R14=ffff88806cf08ab9 R15=ffff88806cf08a78 RIP=ffffffff81353e52 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe09871f610 CR3=00000000277ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000