Warning: Permanently added '[localhost]:8796' (ECDSA) to the list of known hosts. 2025/06/21 07:45:59 fuzzer started 2025/06/21 07:45:59 dialing manager at localhost:33119 syzkaller login: [ 84.331804] cgroup: Unknown subsys name 'net' [ 84.450360] cgroup: Unknown subsys name 'cpuset' [ 84.516517] cgroup: Unknown subsys name 'rlimit' 2025/06/21 07:46:12 syscalls: 2214 2025/06/21 07:46:12 code coverage: enabled 2025/06/21 07:46:12 comparison tracing: enabled 2025/06/21 07:46:12 extra coverage: enabled 2025/06/21 07:46:12 setuid sandbox: enabled 2025/06/21 07:46:12 namespace sandbox: enabled 2025/06/21 07:46:12 Android sandbox: enabled 2025/06/21 07:46:12 fault injection: enabled 2025/06/21 07:46:12 leak checking: enabled 2025/06/21 07:46:12 net packet injection: enabled 2025/06/21 07:46:12 net device setup: enabled 2025/06/21 07:46:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 07:46:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 07:46:12 USB emulation: enabled 2025/06/21 07:46:12 hci packet injection: enabled 2025/06/21 07:46:12 wifi device emulation: enabled 2025/06/21 07:46:12 802.15.4 emulation: enabled 2025/06/21 07:46:12 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 07:46:15 starting 8 fuzzer processes 07:46:15 executing program 0: fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0xc, "b5702185de09"}, 0x8, 0x1) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e21, 0x7, @remote, 0x80}, 0xd5, [0x1, 0x40, 0x3, 0x7ff, 0x1, 0x3, 0xc70, 0x8]}, 0x5c) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000100)) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/234, 0xea}, {&(0x7f0000000300)=""/179, 0xb3}], 0x3, &(0x7f0000000400)=""/158, 0x9e}, 0x20) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000500)=0xffffffffffffff7d) fsetxattr(r0, &(0x7f0000000540)=@known='trusted.overlay.upper\x00', &(0x7f0000000580)='\x00', 0x1, 0x0) sendto(r0, &(0x7f00000005c0)="c6cc0d08cfc4de7e66aea12a3be81fa43452b2", 0x13, 0x4, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x2, 0x4, {0xa, 0x4e22, 0x7e, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}}}, 0x80) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000680)={0x0, 0x6, 0x8}) poll(&(0x7f00000006c0)=[{r0, 0x1280}], 0x1, 0x7fff) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000700)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000740)={0x4, 0x41e, 0xffffffff, {0x2f, 0x1}, 0xd21, 0x8}) chroot(&(0x7f00000007c0)='./file0\x00') r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800), 0x20600, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x118, 0x27, 0x10, 0x70bd2a, 0x25dfdbfd, {0x1f}, [@generic="52ce0143691ccacce783b1f7f3cb8bc01aa2593004b58aed099e5d4ca33414375847", @nested={0xdd, 0x71, 0x0, 0x1, [@generic="a9dea9bfcf210851525a56ca89172760e2e8d8ffd0f706b7e84c8983b8fa862e194128604bc4ced0c8ee", @generic="a08d8b3f35e72d2c596f38a641a0f30d6729540a0c3b98c08e1ae034aa5b910fdc886cf673d7cef010805c4cd521e6f369063f0f58c1700fbb51a5ddcf2472fb5d688ded2bbeb1fb93e4ed26122c2f38681c9b75af9b0c1495cec061c1b17ad8ef15c5032afc8eb51aa418dec05c70724fb5c9f953e53b18c9f94bdc33f8dabe83c710e5390227172d107e42bff1dc7c40e475afeb890085f90836a055065a2a91af30d8919b95", @typed={0x8, 0x58, 0x0, 0x0, @u32=0x7}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x4800) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000a40)) r2 = dup2(0xffffffffffffffff, r1) connect$bt_l2cap(r2, &(0x7f0000000bc0)={0x1f, 0x1ff, @any, 0x9}, 0xe) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd4, 0x13, 0x400, 0x70bd2b, 0x25dfdbfd, {0x5, 0x20, 0x5, 0x6, {0x4e21, 0x4e20, [0x3, 0x7, 0x10001, 0xffff9e77], [0xffffff3c, 0x101, 0x8, 0xf66], 0x0, [0x7, 0x401]}, 0x1, 0x692}, [@INET_DIAG_REQ_BYTECODE={0x86, 0x1, "e023a1aed44d9bbdd67897a229dc089de2d165f17b6317aac748876f169662747420a43013ba3dc78e7ebb085aa8cff15a355974af3d6f6245bd1b9708fc299e67489f5d22e0364a7dbf0eca52965c2946c80ead3f5b361f74a4d872beba03f7ddd9c48e5928d04696cd02ad2bf93a87f0c1a75ff6b553479a0700473cecfb05fa19"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x90}, 0x4008000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000dc0)={0x0, {}, 0x0, {}, 0x6, 0x3, 0x1b, 0x5, "0e695bc87759db65d2ec323d993efcd34f29022c2cf93190369b050c71eca3ded501d2af926a076853ff64810fcaf46bbd875b48037f863f87a3c3ce674e5843", "637123413cd4860170d24748f8266466c361dbd89b82d0f8781daa9c7fc663bd", [0x6, 0x4]}) 07:46:15 executing program 1: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x5, 0x7fffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) poll(&(0x7f0000000140)=[{r1, 0x4}, {r0, 0x216}, {r0, 0x40}, {r0, 0x82}, {r0, 0x520}, {r2, 0x2000}, {r3}, {r4, 0x20}, {r5, 0x8000}], 0x9, 0x800) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f00000001c0)=0x80000001, 0x4) write$P9_RMKNOD(r3, &(0x7f0000000200)={0x14, 0x13, 0x2, {0x80, 0x2, 0x5}}, 0x14) recvmsg$unix(r3, &(0x7f0000000380)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/60, 0x3c}], 0x1, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x120) r6 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x63, 0x20000) utimensat(r6, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100) recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{&(0x7f0000000480)=@tipc=@name, 0x80, &(0x7f0000001800)=[{&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/79, 0x4f}, {&(0x7f0000001600)=""/245, 0xf5}, {&(0x7f0000001700)=""/146, 0x92}, {&(0x7f00000017c0)=""/2, 0x2}], 0x6, &(0x7f0000001880)=""/56, 0x38}, 0x400}, {{&(0x7f00000018c0)=@phonet, 0x80, &(0x7f0000001980)=[{&(0x7f0000001940)=""/9, 0x9}], 0x1, &(0x7f00000019c0)=""/195, 0xc3}}, {{&(0x7f0000001ac0)=@hci, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b40)=""/231, 0xe7}, {&(0x7f0000001c40)=""/243, 0xf3}], 0x2, &(0x7f0000001d80)=""/94, 0x5e}, 0x40}, {{&(0x7f0000001e00)=@qipcrtr, 0x80, &(0x7f0000003e80)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x2, &(0x7f0000003ec0)=""/220, 0xdc}, 0x9}, {{&(0x7f0000003fc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000004040)=""/173, 0xad}, {&(0x7f0000004100)=""/238, 0xee}, {&(0x7f0000004200)=""/16, 0x10}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/12, 0xc}, {&(0x7f0000005280)=""/82, 0x52}], 0x6, &(0x7f0000005380)=""/100, 0x64}}, {{&(0x7f0000005400)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000005740)=[{&(0x7f0000005480)=""/172, 0xac}, {&(0x7f0000005540)=""/243, 0xf3}, {&(0x7f0000005640)=""/6, 0x6}, {&(0x7f0000005680)=""/143, 0x8f}], 0x4}, 0x150}, {{&(0x7f0000005780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000006a40)=[{&(0x7f0000005800)=""/211, 0xd3}, {&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000006900)=""/219, 0xdb}, {&(0x7f0000006a00)}], 0x4, &(0x7f0000006a80)=""/229, 0xe5}, 0xa200}, {{&(0x7f0000006b80)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000006c00)=""/97, 0x61}, {&(0x7f0000006c80)=""/14, 0xe}, {&(0x7f0000006cc0)=""/120, 0x78}], 0x3, &(0x7f0000006d80)=""/4096, 0x1000}, 0x4}], 0x8, 0x42, &(0x7f0000007f80)) getsockopt$inet_tcp_buf(r7, 0x6, 0x1c, &(0x7f0000007fc0)=""/4096, &(0x7f0000008fc0)=0x1000) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000009000)='syzkaller0\x00') r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009040)='/sys/module/usbcore', 0x10000, 0x10d) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000009080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8936, &(0x7f0000009100)={'\x00', @ifru_flags}) 07:46:15 executing program 2: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x8, 0x6, 0x406, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c440}, 0x8040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) r1 = signalfd(r0, &(0x7f0000000140)={[0x7fff]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000180)={{0xff, 0x68}, {0x3f, 0x80}, 0x10001, 0x0, 0xff}) sendmsg$IPSET_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0xa, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048040}, 0x1) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x13}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x101, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7a0}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xbe1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000000}, 0x2000c015) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000005c0)={0x35, 0x23, 0x15, 0x1e, 0x0, 0x7, 0x1, 0x63, 0xffffffffffffffff}) r5 = pkey_alloc(0x0, 0x2) pkey_free(r5) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, r2, 0xb76a000) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000600)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000640)=0x7) r6 = syz_open_dev$vcsa(&(0x7f0000000680), 0x9, 0x1) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c4, r7, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x88}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8a9}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1ff}, {0x8, 0x15, 0x81}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40040010}, 0x20044000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x100}, {0xc, 0x90, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008d4}, 0x20000010) 07:46:15 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0x21b1, 0x1, 0x5, 0x877, 0x1, 0x7], 0x2, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) fadvise64(r1, 0xffffffffffffffff, 0x10000, 0x4) r2 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x4, 0x92000) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000200)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x2}, @sack_perm, @mss={0x2, 0x8}, @window={0x3, 0x872, 0x3}, @timestamp, @timestamp, @window={0x3, 0x70, 0xadc2}], 0x7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/dev\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0x3f, 0x8, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x2, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0x1d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x29, 0x4, 0x6, 0x9, 0x8, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x40, 0x0, 0x3f}}) memfd_create(&(0x7f0000000440)='gretap0\x00', 0x6) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4f9cc45c0b36"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="78611a8c97e6"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2cec16d7d991"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x8804}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x8001) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r6) r7 = dup2(r2, r3) ioctl$CDROM_GET_CAPABILITY(r7, 0x5331) r8 = openat$cgroup_subtree(r4, &(0x7f0000000780), 0x2, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000007c0)={0x838d, 0x8, 0x1, 0x0, 0x0, [{{r2}, 0x7fff}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000800)={0x101, 0x1, {0x3, 0x2, 0x1, 0x2, 0xabf}, 0x5}) [ 99.791243] audit: type=1400 audit(1750491975.400:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:46:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x124, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xd}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x38}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001940), 0x501000, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001e00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001dc0)={&(0x7f00000019c0)={0x3e0, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb638}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2f}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2057}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x154, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4308}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x663e47fc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5879}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x710}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5ee}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x994f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x20}, 0x800) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000001fc0)=[{0x81, 0x5, 0x7, 0x9, @tick=0x3, {0x81}, {0x1, 0x80}, @ext={0x37, &(0x7f0000001f80)="9fbb85555b8b166c29204ccb4883b073a106553cd108d9454e9acd0809dab2603355a23c05d1be38f207c4b32eff18f790efb7502ed467"}}, {0x9, 0x44, 0x3, 0x9, @tick=0x8, {0x4, 0x40}, {0x37}, @queue={0x3f, {0x7fffffff, 0x2}}}, {0x40, 0x81, 0x5, 0x11, @time={0x80000000, 0x5}, {0x20, 0x80}, {0x28, 0x4}, @time=@tick=0x3}], 0x54) r2 = syz_open_dev$vcsn(&(0x7f0000002040), 0x2, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r1) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), r2) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000022c0)={&(0x7f00000021c0), 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x20, r4, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdf4f, 0x36}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7d}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x3c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0x7, 0x1, '\'%\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x7, 0x1, ')&\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008840}, 0x8020) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000002500)) syz_genetlink_get_family_id$tipc(&(0x7f0000002600), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000002640)={{0x1, 0x1, 0x18, r2, {0xff}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000026c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000040) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x68, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004000) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000002940)='veth0\x00') 07:46:15 executing program 6: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x4, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x30}}, 0x40801) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=""/72, &(0x7f00000001c0)=0x48) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000200)=0x5a, 0x2) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000240)=0xcd4b) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x250000, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000002c0)) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, @isdn={0x22, 0x5, 0x8, 0x20, 0x8}, @hci={0x1f, 0xffffffffffffffff, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x3}, 0x858, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)='ip6tnl0\x00', 0x9, 0x400, 0x1}) r1 = syz_mount_image$nfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x2, &(0x7f0000000580)=[{&(0x7f0000000440)="5d01b75652b5cdf0b3ccfe7fb69751cd6179676410971be437a7a2eefcdb87e7dab164f5cfdcbace0cf7b71c36431744c960cc9e3e7c3cee70641e592b16748b1c608a458398a1b6c954b47d8a13bf54609df77e494ba380768f46614fe6aa", 0x5f, 0x1}, {&(0x7f00000004c0)="d9812fb79a51bc298fbb0f3d3229b224508a428d366206be28f3ffb4a4442133a836e862aa10bd2d4786754f097f1ca148b2fcd17f042b95a9d65e6f51fb0e9f627372f49a73ebc984f468b4741efd2e2b9f8907f41243412712b27399e6983cd3cbabd5194dc4a25c0f94276f8e82871f296f39c462b6499a9897721939c7060863bac330a40086bd8392cbd6ddf0baa46de747e67449f05c3e5618da6841dbc94032a3296328d5a5f309d7bc43", 0xae}], 0x202000, &(0x7f00000005c0)={[{'/dev/zero\x00'}, {'{$*^-{'}, {'vxcan1\x00'}, {'nat\x00'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '**&'}}, {@fowner_gt}, {@smackfsdef={'smackfsdef', 0x3d, 'ip6tnl0\x00'}}, {@measure}, {@dont_appraise}, {@smackfsroot={'smackfsroot', 0x3d, 'ip6tnl0\x00'}}, {@obj_type}, {@appraise_type}, {@measure}]}) getsockopt(0xffffffffffffffff, 0x75, 0xe8b, &(0x7f0000000680)=""/4096, &(0x7f0000001680)=0x1000) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x84) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), r2) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = accept$inet(r3, &(0x7f0000001840)={0x2, 0x0, @broadcast}, &(0x7f0000001880)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000018c0)={'vcan0\x00'}) vmsplice(r3, &(0x7f00000019c0)=[{&(0x7f0000001900)="d5dc780278d7fdfed9edda05d421e44ff227c4ced68ee43bdc3d91c3e6cadc2b4f0e5b2817b39d06e3588824f605a924de05dc618c99cc400fe4d19ae4e21ae66da3c039072d8397e5f9d3a29e6277fc8ae2275c29eef24587564fcfec0be5dab5fec7ca78998077a001c7fe30adfa532c748e53024c9878da2201b40d9361a95da0b413e071187ae53d55733fbd1f46e061ec91226b90c1923709e8", 0x9c}], 0x1, 0xc) syz_mount_image$nfs4(&(0x7f0000001a00), &(0x7f0000001a40)='./file0\x00', 0x400, 0x4, &(0x7f0000001c00)=[{&(0x7f0000001a80)="73e66de5638365b6c1a8497cf6ab351a6324d36a1a0a937dfe5e89d007510d050a691aa4dd6a6f3330a3d817f8204ae10c", 0x31, 0x7}, {&(0x7f0000001ac0)="0b4e00376e9046a6da5802eaaa53faaccfecb74d90614ee659d7ca175cd97f641e5dfba172b29b60b52287729d473a1e17f83027899abf883c63fa1456b1", 0x3e, 0x7}, {&(0x7f0000001b00)="5e991250d4b4c77b0ee01166bacf1d", 0xf, 0xff}, {&(0x7f0000001b40)="bb9f5d9114556e38433640e158323b07052ef77caca3bb7345e79955f70330feedf0ee1311e20186cacec1a9dda439245f21226c11e69a8c639c3b3214a9e2169dad4f9ca6f41498f7a07afcb97a3e83d7376a53595234e179f60b897a49646936806ed28da9650e918c6356819138ffcd041c94c10c74c0c27b95be9cd8a0bcc75d6ec81ebe66dff3075eb08203f392e2a2a9c60f0b651968955e64e6c0f73c3fbdfd1c", 0xa4, 0x3fa6}], 0x806000, &(0x7f0000001c80)={[{'fowner>'}, {'\xac$)}'}, {'nat\x00'}, {'appraise_type=imasig'}], [{@obj_user={'obj_user', 0x3d, ':#*'}}, {@obj_user={'obj_user', 0x3d, 'fscontext'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '@]&'}}, {@appraise_type}, {@context={'context', 0x3d, 'staff_u'}}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f0000001d40)={0xa, 0x4e23, 0x1000, @local, 0xd0}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001d80)="5781c3d7e6bae9fadb183ffc6e39f9b424d0b21932019a3fcd8300284873733359a4ac1f04ae8ec530831bf25cdffb411c8e8573d05b19a1fad4c24d7bb57b23d3be7e61d849366f4e", 0x49}, {&(0x7f0000001e00)="995821ff8e092d641e7fc2e6fa20309123140fc0593b56b8bf50e6331d70bb0e7c329ed7f86dec9b06f543b0b129830ab3a12ed0a92a27966ecf129288054e3bdf38e066c6f3f37429f4e5d847a5ff97070e540c146f705558b31f5311d2b4179791f0ac0cb46a6a46a8969134", 0x6d}], 0x2, &(0x7f0000001ec0)=[@rthdr={{0x38, 0x29, 0x39, {0x21, 0x4, 0x1, 0x5, 0x0, [@local, @empty]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x3a, 0x5, '\x00', [@ra={0x5, 0x2, 0x7f}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x0, 0x14, "1ecf6988081655de77d235ab8a80e196f731b62e"}, @jumbo={0xc2, 0x4, 0x993c8af}]}}}, @hopopts_2292={{0xd0, 0x29, 0x36, {0x67, 0x16, '\x00', [@generic={0x3, 0xaf, "3849584e362186cefa7da91fdfe9baf76507a3f68a0d90a9c95249648d142f48ca183f775d70dda50b631ecff2506ff03628c10a6d147565084823603d24474f9adeebce50b30a0857a322071c8c4277bda1725d946e6b61a26683e06c0d610391cb96787269a61544791ae71b7cdc5de782a7c7b5b4a2dfd2384913f7d8dce4454671f3294a740662f4b3dc633ac1a37bce1688aa2e0c2df86fe6b17f9bd3d5fe71e3b36b65ed6e393a7933de9fc9"}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x67, 0x8, '\x00', [@ra, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x3f}, @jumbo={0xc2, 0x4, 0x547}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0x4, 0x4, 0x1, 0x40, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @mcast1]}}}], 0x210}}, {{&(0x7f0000002100)={0xa, 0x4e20, 0x81, @mcast1, 0xdca0}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000002140)="3ce69fcca2d9c71e4716104e81868c2b3cac674f72f01291ea6b7f7f43ce45fa2f4e03233ca03a9381494f02bc806ae60ca39671a60844d5b5eaf1fa1609b4721af0679706fc5e6940ffd2e824fde539022fe574eeaa68f791d90a566645168ceb1542875a496471340645d57b208e68f3c948efd30df45dd5b33c2752de", 0x7e}, {&(0x7f00000021c0)="132b8d576c8e180574d56951a0066ce2b2e9eca2b6e8526ad563d0048b314c51ab76edc3f83804c56b18bab89be03fde316f1690dbe6359f13dc890b37258c51e514d06790a9d3bc675b197d2e51cd04e2815f3b8c2fb2c0ad801777", 0x5c}, {&(0x7f0000002240)="a35225bdd850b70df910285fd49841a1e2f14a953a236ab4d396b5b4372009135bcc4c46ac052c8207870e584987be920744fcf5aa19abfdc9d197f1e578b8425a38f9fe5ade0a61f9f080885f01f417f640e9", 0x53}, {&(0x7f00000022c0)="eae9cbcba29d39dd0738e0894db65090c23c3bbd8ee88424995d3c6c3acc251b2ba734583e4a4594db8b45664db5663f19592db99b15c47abb7c953338a3c47e90b30c13f213252e2a96c097ec500c60506c1b76259abcc049c490c3970cf964cd92a9d10a4ddbba471cb05cccd1081f92", 0x71}, {&(0x7f0000002340)="7d2b85b82d101f8af489e49bd41d4a0cdd0be30310e7a1d3e44b79cb9c8ab16e2a643339445385c1ccc55003647fd12d4b0e84e31bbf063f5bb43ddb55d645e787e4b25530c2370810cebbfddd43bfedd5d0caea828d38b1dc25e469b5298448317c846cbecfd4196128d8e831a2301450d23ecfe30a8232a7ce882ecde8b0a4cea9424df38c7b1809b0d4fa04a20d37ec514c2c385d285ac642f9dd5923d31fb8f19c5d265b9b03473d6625621b8ff3f2f6d6ada2d644dc39dca5ec3972bd44a7c0d1d1c01737acb6c0a678d004c5ad39dee30975ebca99567443fe1112fd5b16af938f15363a560892585035", 0xed}, {&(0x7f0000002440)="713ca3703363b4f85a9e0858", 0xc}], 0x6, &(0x7f0000002500)=[@tclass={{0x14, 0x29, 0x43, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x401}}, @dontfrag={{0x14}}, @flowinfo={{0x14}}, @rthdr={{0x58, 0x29, 0x39, {0x3b, 0x8, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private2, @loopback]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x6c, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0xffffffff}, @ra={0x5, 0x2, 0x1}, @pad1, @enc_lim={0x4, 0x1, 0x2}]}}}], 0xe8}}], 0x2, 0x10) 07:46:15 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1000, 0x2) write$snapshot(r0, &(0x7f0000000040)="643721109977cc73528b3035f255abdf9d1d80a17498bd7c01e0536c04c07fd2772b476a10f89df29c10243a81c44d34b30b1540a3d00cd388c39fd4e4828419fde33194fe", 0x45) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000100)={{r0}, "ff0674e49458b8d4cb7f992e4a65cc950cd8419e11f4f635e0eecddd02ca275617c2266274cc6495687e8a8a88c01ea5b54cdcca7c61f37d7ccf74e04571750567d3be4b1dc8def974d3784e5efbaa9bda1cd8517adee251edab4ef2859bfdd8eb92eb7035e86054cfeba91bf3d635659c7aeaf7f7b7b1535fec09b6e961ff070a90713252becfcc5f37907517e8fae16c9a384760c841752edd1d9de20874bb42675719f1c8ff9dfe9182143d9c89ec9e1152f8c71238e3441a2f9999f0b37f585ddecf1b8c954bc3dcc5e40d3b87548b8358e0b1c1fe9be2251c3d40fd27f0f2aba4c3c34268b5c61c64736c013d09586e9ee567f355bfa5db018d07b1b3a574fe7b6161cd45b82afc8c6651992cc525b7b5d82073d485cc62fabe71750f16094506bfc8af9de72b330c8d497b360112b870a50e59ca379b9ac9698594d36127eaf0ba3a3e5a22159286f491b67092b7e9dd2aa4ae4362701660e0bb24151bede058d4a59d49b96b39c156d1940a8e1924b997a13bb0ea5df99b36852e7db8041eab4845edb1de22d0d47889bfeb6888664b60b765c783f00168f5fba33fbf619953c93b740dafa263116aab5a28e36b29edbc437bdeaa214083b0bfcb4fa36d59bf0240b6d43c12401ef4bf692ec35a01c1ffbfb2cd3d840cf232633f4820b6abf8a740083beb4c86d435a6f869b318708f399f583a5f74adbcaf3782a3e34ebca6c0f6016a2233f76632c2f9075f85121cfb02d66503352cdce0d35659ac979de2fc42316c717769721ef9f23a5c4bbd501c006c80aabab3f7ac622efdbb1b0f9ca1390c9e4857c102e5949625b133fb82e0431e0633a58bf34e98de5270992bcd71825d820fe20945ab4688b922f42e7f69c99bd329a83816c420f8eb22513f862e6405d01969e88423f7a3d43204e0e928a9396a2eae96b11ae9ffc5533b46b26929955f3c576850c6f1a53f19dc39ebcea71dc5fa5af0559605a9321476579a23a4a4cfae96cb5b7786f530ec1d5851b6b9f20934291bf60855be703854cb3314bd8f7f2d7414810a1b5e20b4baeff25970817e69c86a24b63e1ab4ac1b6f8a81019ff638f0f6c1f94cc06e41f5a1b56ed32fe4ae3d6390002376795fbc64e23788972228e0fb10e91c5baae530f07d94be40cc4e9793a6b31b20e22d07ef81135e682246c61f2663ae9f375629baf503958fcc4323594f0997473c9ab0ae5ce4ae89d7312f32f245e8c5a378274e04ede557e24f71dcc7b621559ec367faee47196682fe5db4c55f3f57fafddac2e595872e3d6cb332520ab7ca05fb1df59b2366045c80c1358b42d159917c3c187157186df8cf53b7490bea07c12dfa340e906cf0d730331c46272b0f384c392fef3b5e548e2da73101e0a503ad350bc8a196a36bd02b04fe9380c74126f89f9f2beb7985136f2edc0a7dad5a1e824e0eb82ecd7d3121cddad5d01166fe1fd5092bcefce04a177874a780c49c63dc9bb5a4f524a76cf7ef5b584f695139d3607e63a1ea55d5a734d22d7429647b61902997bd9cfa2c19d56cc94dab85d4fa9d9728216c98c796f482ce5de651838613d07aeb05ffb1003b8a8c11039ea6c1accca95fbb138c0c5d0b13c69b41713b15094b461e51c95ab9e3fac0a95cb2e981b716eeb499113db25461288e3d12150d76641fa22577952db617e6a0dd7c38f6a0d6de426d37020cb484232024c92aa80a8af4b49a7cdad898638f93a429b65b799dd72b3f1a7f694ae0671f1732898cbf5d53412f6df7152c55f9847936b116f4f14ad00e997fc2b5187d7f8d94623f51085481d8c16ad87ea2fc22ed74fabc39dc5f4c93778c122370da79447a7577702cd072cc8ee0e2d4eb2d75f5888135ec6b5de72ddb9512e663ae0ed98a8d9e9492203069824abbb6dd49d24a1936508382073f1b64f584f92307675f31f06a28182ac062d0b88db57b1b1e54937928c83e4d1aeaaeee63cc8baf877cfd63258e0432f7dd3b6d076ef530224626a22b939d0a87eba060ee5f9615e18c89bad802cb7556d6e0d75cd9b80fc7c5943ccf027af9ae6e699bef7cc0af2ddc772de6538584671a9e6634fefa6ce8c49cf079acf76f4b96eaedb6a04e84e5326890b04ac1b73eae3e77342eaa20bf1a140c4b7155e5827f9b212a67360dc38a7454a7b118574f2c8e5bb44df7ead61109d17bb0a820c279a81522218a8d03e41a6f2ecaca484f23c4aba8584a9ceab190b3a566ab8a2500f93612e4b59031232a944ad6830fc8b859e093a6662aef34d2292dca7f0ca644d9b127c6338ba4f1cc674508b24f84703c31cf59ca346d667f07f996f6150a0b79492d343640b781312f2eccbe62f587e19d49bc1cf501c14f5ee1882fee88cc84704035e21f949ea7b7cbc2513a04b30475cdb7ac429bb68627520124370e1e6cd55a2b379e614b4ca70d49ed80f8606fa5257b8ec34dd49d23fa90b24097f427fc7248c595ad5affb2fac4f316c014f1a3d1b161f8e0971be948c73875514febf0cc9557385ed22f2182af90f70af914c9d8414dd6ea40c36bf57d8f5bc5862e9a103871180ea03cb1db05a45cbb3e5480ad85b11d312d9a76e9cca2f5876aa32df689c06ab31c3b1c7302b9edb993f80f6267dd3a0a67d440883b21531e62371c95ac23e6b78497117a361f00e468aeb130cac2567818eb88a12168fee3fbfc4e5440334378e8dbf677256668e299eb5c1d1861ac364003671b9a2aa590d11cf483ac6a2acf8b4feef374a960570a1740271d7eb569aed4f83b4eca905668a8886ff0be14a2cda6f14f6b2be59aded7fa8ad64655f3f5c475704b97086aa74fd371b12b163f4b37c3b1fec3a91dd3612e6a6878e7dbd4fd2b4698ce7a026175df0368c742846a52f4ec133c8e4c312748c984a51efef20fff24fda93f667494044598f07bb3616daabe7a02f67564ed63990aa45addaa91b55ed375f0f3a62c0b21fc09974f9abe4bc0aa83e1a4c5e1d75ca0a98084c829868ec9e73b6c55b422779974a1c47ebc7cf1a193707fadbdec698d96faf7c15512c12256e17a8c7dd0d3ba57c63b93881a536b69b821a7a7a5a79edc1ef5099c805c23b08b69dbd0fd40d3a993cf60d44d3d9eaaf35eeab1b09ae9d75a5fa1b47cb8728050a431bc3e075ba823a635151901ed9d4e01929978e139252c7b21d59f87468036f01328042ec117fed72524f3412eae8c904c44998f8ea62cd78faa194be1ed4b76a244a1644d880d85838cc9ee97d3d32e06d74396afaa62f90b91a4f5104b4aacb90681730023076a4b9a1c48117da2a0d519ba7fd45b3e4f5185673b70ba99ea9c6060ac5f9f52b4dc5d8b7a51ea3605e44afebd82f4ea2e6b830712f820d43190b6ad6db3d90752b3e9ac361fc0f235811e8c64c46f5fe187e9b1fa81fc58f7ae48cd25dba5a49a34733018667f1220cf0d2b5684d889f4d60971e6f661f122c5d49d2e68098f3a3025108316116a1f62eb33651e0db3faa4a15d895ff2c8559506465cbecf8fdef6b22eb2d77365b853e2ed08c9b1213c92beb73b69eb804afde0eeb8157d9e1457184dc5edae62d0db70451d906d4d3fda8c3f8d6cd43f5eac41c846f9b875b7277d9d8df54245568de26bbfe303f1bb5a7bc717b827293bd78f473454c44c309ffce00f21f5e52983b39158ba5516fc2ec00a67e01ae849f0a88b6cabea9b8987143766fe1ad86d4ccbcbc924467a27b208a32449ccec977ac34d6784c57854815f701b4f876d0658d87f3213d2d8f961b20da9df5f2767ca856425554023c14f32a82bfc7872bce511e2d7ca35824f2be9d1038d5672b94cda2f27601b2823b221ca1c6ad705b7039c303ed7e88d5763b6b4d96b527ebfd38462ccd9bfd132b62093fe1cd07276138270d4f3b8c7503309745109b8edf23623b6a85f90edb4c4ac1122a4210d28f1a2888c943372a7b1d875707679183ea0d9b118c6233cae1428cade375f32290f5ddbb21d5318176ca335100e45e77612cbe9c66806aa27d1747cb4b40728bcd44f718159803f6e053f83279058e6f95188e2526fb82d3c20220239156dab358d89381912d7c22a34a060185349907bb1ed2f185132ccfdb37bf63bf71cfbf36ebd5afd12e7bf83e6255581669a34260dda4c80551a3c23937dfb1f2681fffc818405388093907446b76d19e696620e1d45bd41771cea5fadb76423edc35b57034b97b21c4a4a94a7b934c33d3f08956db10ae317df3a41410fedd39a5e87ffdd60e9273c39a1591b681a14fb75c720bee1a74b799852fbc46422dad01cd8bcff617a3b80e884c3be359207849643d2fc8fd1f096246ea2cdc15b8c82e1987a2ad33ecf267a1ee04f71b129d100b5c82f55ba9982ad310fca9a550d8373fe3a59ffd4b37889423ce589afe59f3552269cc20787fef8959687520571d6f228c16997a572c0bdf807c860af6f0e54cb577656cf31d2888fe9a8d12e555a989f1e5e1cad131b42ee26797a92af632158d382b5f2afc15f175e80c73577774cc3b8d99f3306d66c166be49ee5dc3a0fcbf0a50cf0b0231c1d17887d1d6c33bf03afdae80fe288f1439c6851dcaef0da5bd61b51b21c77949fccf417d4834aaa46616eece31db6f0d99cf34fb9cc32c1c5518541853e685ffaf08cc493168c6d32ad32a1b97180fce87ee59667af3143d525972f88da57a90c37e48952fdde894d466f2dcda9d8237cd259819bc7de00a06cff8c9f188ff7acd501e370cdf94376c94aa029ad5249fe65183eec5fc57165345e0fa73444653e06e8f6ac5406ad5d43c9254f9cba71a0466efcc37cebee31c89b1bb06b96fc6b0c2f923fe7ce417edab45208ed85eaa0fb8ddee13d9b410fb2ea47e31519c569c09bf62f47b68bdd2c22f4364c2f01cd1d9e04eec5cf5d451540bbf2a3bf03a8378de7d8fb49e5445979dd260388e64751b8e89571b5c43ab49c0a01601555eff7175e8cd4cbeccdca94754ec403361885f149993b1d7fd0533bba6d3837f2146d19ef6fe04e32be46d68a7a06d1f8d340a8f9dd7aadef7c4ff3f0e2308e6a5c96364ab955738d9ad9702fe1a525a23db3f0184c8f3ce71fbaf87910e4881364bee24654352566007ecde9b4db513051c83d1cf86b42c16435aaf2eba346a445c2c93b19bd7b9e2e6596d84b281dc828fd3c7afe30eb4a7f5ad29a15e5c029136e08ca88455d84695b9bd9ead7e5b5ddbb7ee1bc10e88409ae306eec8a9bb7f96a96e2eb65b0997c68b2befb5b9e5b014f494bdbcf7d08b27aef2a7b3544c597546fa475c4b8f71fafade52eb260b70a71973d56e650153dbbaf490ff88b17cfef22e63ef00a55e398d14a1d1da3037b6971aa0eeff523bf4f7f862410231a95994c26c11087e137aaf36ec043a54e5df80bffccaaef19226353c73b9d22ee0f5cbdc6651139b09e563702d36b22d207c4e712f9aa2fcf63b52a234b5839c46e31cbc59c973a82488da7db97c7d562af580d9b1387f6ebb885c053271c3b4b21dd8cd13384d9756f96d663636ca02e232a5831ea4b0051c4c6941eb2a2d129ff0d868e77dcb93891ee87a044ed093dfb6defa3926745fdf069e83bf17ace918bdf9fefaeb6535f4d544e5a1c3ed4991c12a98242b1d616cdda785af23fc0dd62ea45f59fe27cda4c7b9f3fc735a6e40c0651332061b2e9bfbaca5e51c5aeccc33a03d6252527ceeff20db73794e22b125dce0423d9321908cde0b45f36e20dc4175fa0f1c47bd350e244b6d25411f138349d3bec906dcdf77866e511"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) pwrite64(r2, &(0x7f0000001140)="cac384693fc74553371bd574653b603863e8c012c91f2374e7c497fd99f72b79e74f8f524a5f7b6401ba160ad684471414ceb9e9cfc9487d7b62b9b5328e103a5af9140f8cc9d7694ce07455c46286b994f1d7fdc4597512875ed89a2a35f576c3d7440edcf026d31eb4c4d8f389689884cc006dfbddb344d9", 0x79, 0x76f3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r4 = syz_io_uring_setup(0x310b, &(0x7f0000001200)={0x0, 0xf843, 0x1, 0x3, 0x253, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000001280), &(0x7f00000012c0)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001580)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f00000015c0)={r6}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001600)={r1, 0xe000, 0x3, 0x1}) signalfd(r7, &(0x7f0000001640)={[0xfffffffffffffc01]}, 0x8) r8 = openat$incfs(r6, &(0x7f0000001680)='.pending_reads\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0/../file0\x00'}) r9 = accept4$bt_l2cap(r6, &(0x7f0000001700)={0x1f, 0x0, @fixed}, &(0x7f0000001740)=0xe, 0x80000) fcntl$F_GET_RW_HINT(r9, 0x40b, &(0x7f0000001780)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000017c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$TUNSETVNETLE(r10, 0x400454dc, &(0x7f0000001800)=0x1) bind$unix(0xffffffffffffffff, &(0x7f0000001880)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 07:46:15 executing program 7: r0 = dup(0xffffffffffffffff) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000000)={0x2, 0x1, 0x1, 0x4, 0x9, 0xffff, 0xf25f, 0x10001, 0x6, 0x0, 0x9, 0x7, 0x1, 0x400}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x2, r0, 0x80000001, 0x80000}) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000080)={0x9, 0xfb, 0xff, 0x9}) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400d4}, 0x4080) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4801) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/kprobe', 0x200200, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x2f8, r2, 0x410, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xea, 0x5, "6ef26460bac9fd4f6e605ff6f5cfe976bda1bb9f69200e36e781d4b9ce88e95169d89fae761411fc01497b89f701338ea5408c258cec72776dfb5ade288a57c5c64be54085ecd9fae7c4d22eaf3ec7125dd2f0e587ba87ae8fe6fb9fd319938b28c4f4ce5c6f51eccf1c23ca4734d01b1ae4f6875ecb5bfe082fdbffe6a809b3c7f60530b2b57422135665708a2fbd0f25023d3c6458b27ee81196cb2703d1224007397a92648a8d1e144c71a489c662504ee08b9467f4dab277ecb67777165ab27a16f11b51df459a5f885460c16b0452529ef8eb3d893332ad1aafed8b83e88f9b46635856"}, @ETHTOOL_A_BITSET_MASK={0xe6, 0x5, "9607e1053bc6020ed8cb219e10eadf2af37f56a6238ea50f99c75476890bf5b3f498e18188d979b44cfeedc25f3232b77b972df4cafdc71e7a1dcee42d714368e09e364329a28b18e92ad1a80f3267db14a796f86cbd42606977c1339ebe563d3aad87dac3e0e3da83c16ee81490a7edc361e123cc20cb2da6f439b98ea17166d34b07c144ac662a769444c36b41cf6fb5aa1aba72fe87a10fc57d7751d62df9a4375ddd75d188fba104685e7f04b76dc453679c312ab2c650262e078137bdedbe526dc9ab9b5a7690c6ad709e27e7933a17d37cee4edacee56e4c36f9a5c5b13250"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@,-!-#\x91/%$\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x51}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x207}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x48004}, 0xc010) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000880)=0x0) ptrace$setregset(0x4205, r6, 0x201, &(0x7f0000000940)={&(0x7f00000008c0)="fc7cbf8d3baa0d4ca19edc8e273315172ac48650ebe1170a0b80d97e2c7e529d19d0e15577b3edf1c25a7e209bb93a12fcd1047bd052aad32443257df657009034cc45927781f022c63a7fb0bca426b170c79a01b7fdd5b64ea9043c16639c39f59eb9c6b1a4f0093f23", 0x6a}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$P9_RRENAMEAT(r7, &(0x7f00000009c0)={0x7, 0x4b, 0x2}, 0x7) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x51fe6c4550d39e34, &(0x7f0000000a40)={r8, r9/1000+10000}, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000a80)={{0x8, 0x1}, 0x100, './file0\x00'}) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x8, 0x2, 0x1f]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) [ 101.228573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.233393] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.236726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.241835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.250730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.257469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.263301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.264970] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.270060] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.273134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.304190] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.304611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.322609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.322801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.339084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.347940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.351768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.356874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.357644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.359533] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.360697] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.365565] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.365820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.369626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.372724] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.374618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.383360] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.393615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.403107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.446686] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.479238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 101.500399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 101.505001] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 101.510198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 101.512465] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 101.517214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 101.522988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 101.526868] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 101.530791] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 101.532868] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 103.361780] Bluetooth: hci0: command tx timeout [ 103.362423] Bluetooth: hci1: command tx timeout [ 103.425611] Bluetooth: hci2: command tx timeout [ 103.489077] Bluetooth: hci3: command tx timeout [ 103.489716] Bluetooth: hci5: command tx timeout [ 103.490470] Bluetooth: hci4: command tx timeout [ 103.618007] Bluetooth: hci6: command tx timeout [ 103.618118] Bluetooth: hci7: command tx timeout [ 105.410931] Bluetooth: hci1: command tx timeout [ 105.411433] Bluetooth: hci0: command tx timeout [ 105.473006] Bluetooth: hci2: command tx timeout [ 105.537035] Bluetooth: hci4: command tx timeout [ 105.537080] Bluetooth: hci3: command tx timeout [ 105.538099] Bluetooth: hci5: command tx timeout [ 105.665190] Bluetooth: hci7: command tx timeout [ 105.665206] Bluetooth: hci6: command tx timeout [ 107.457351] Bluetooth: hci0: command tx timeout [ 107.457843] Bluetooth: hci1: command tx timeout [ 107.523001] Bluetooth: hci2: command tx timeout [ 107.585061] Bluetooth: hci4: command tx timeout [ 107.585103] Bluetooth: hci5: command tx timeout [ 107.585513] Bluetooth: hci3: command tx timeout [ 107.712981] Bluetooth: hci7: command tx timeout [ 107.714950] Bluetooth: hci6: command tx timeout [ 109.507032] Bluetooth: hci1: command tx timeout [ 109.508457] Bluetooth: hci0: command tx timeout [ 109.569885] Bluetooth: hci2: command tx timeout [ 109.633405] Bluetooth: hci5: command tx timeout [ 109.634385] Bluetooth: hci4: command tx timeout [ 109.634498] Bluetooth: hci3: command tx timeout [ 109.762216] Bluetooth: hci6: command tx timeout [ 109.764071] Bluetooth: hci7: command tx timeout [ 163.740371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.743379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.747626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.759530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.764119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.877671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.884283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.886245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.896861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.902406] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.948571] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.960830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.964683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.968136] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.978486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.982371] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.987040] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.029596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.053214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.059870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.067465] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.073480] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.073707] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.076214] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 164.082113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 164.086771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 164.089390] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 164.095422] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 164.105042] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.118421] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.122731] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.123887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 164.127369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.130986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 164.132995] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.139191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 164.141221] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.148474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 164.151324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.186269] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 165.824994] Bluetooth: hci0: command tx timeout [ 166.018453] Bluetooth: hci1: command tx timeout [ 166.081011] Bluetooth: hci2: command tx timeout [ 166.209059] Bluetooth: hci3: command tx timeout [ 166.209757] Bluetooth: hci5: command tx timeout [ 166.273029] Bluetooth: hci6: command tx timeout [ 166.273564] Bluetooth: hci4: command tx timeout [ 166.274104] Bluetooth: hci7: command tx timeout [ 167.873060] Bluetooth: hci0: command tx timeout [ 168.065008] Bluetooth: hci1: command tx timeout [ 168.129302] Bluetooth: hci2: command tx timeout [ 168.258314] Bluetooth: hci3: command tx timeout [ 168.258818] Bluetooth: hci5: command tx timeout [ 168.321029] Bluetooth: hci7: command tx timeout [ 168.321515] Bluetooth: hci4: command tx timeout [ 168.322053] Bluetooth: hci6: command tx timeout [ 169.921350] Bluetooth: hci0: command tx timeout [ 170.114302] Bluetooth: hci1: command tx timeout [ 170.177131] Bluetooth: hci2: command tx timeout [ 170.305281] Bluetooth: hci5: command tx timeout [ 170.305768] Bluetooth: hci3: command tx timeout [ 170.369318] Bluetooth: hci6: command tx timeout [ 170.369795] Bluetooth: hci4: command tx timeout [ 170.371237] Bluetooth: hci7: command tx timeout [ 171.968985] Bluetooth: hci0: command tx timeout [ 172.161272] Bluetooth: hci1: command tx timeout [ 172.225110] Bluetooth: hci2: command tx timeout [ 172.354969] Bluetooth: hci3: command tx timeout [ 172.355453] Bluetooth: hci5: command tx timeout [ 172.417029] Bluetooth: hci4: command tx timeout [ 172.417506] Bluetooth: hci7: command tx timeout [ 172.418026] Bluetooth: hci6: command tx timeout [ 223.637739] syz-executor.2 (2965) used greatest stack depth: 24288 bytes left [ 225.814559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.816980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.820457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.827129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.829344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.884626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.887213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.890294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.899212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.902705] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.126739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.130172] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.135103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.147080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.148058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.169606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.174201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.180131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.180464] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.187833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.193191] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 226.195754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.195823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.200385] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 226.205428] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.208267] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 226.217417] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 226.220279] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 226.223990] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.228208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.228862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.229083] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.230344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.241581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.252093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.252869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.295393] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.301429] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.302212] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.328182] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 227.905996] Bluetooth: hci0: command tx timeout [ 227.970045] Bluetooth: hci1: command tx timeout [ 228.289017] Bluetooth: hci7: command tx timeout [ 228.353982] Bluetooth: hci2: command tx timeout [ 228.354656] Bluetooth: hci3: command tx timeout [ 228.355247] Bluetooth: hci4: command tx timeout [ 228.417064] Bluetooth: hci5: command tx timeout [ 228.417871] Bluetooth: hci6: command tx timeout [ 229.954951] Bluetooth: hci0: command tx timeout [ 230.017670] Bluetooth: hci1: command tx timeout [ 230.336989] Bluetooth: hci7: command tx timeout [ 230.401377] Bluetooth: hci4: command tx timeout [ 230.401839] Bluetooth: hci3: command tx timeout [ 230.402311] Bluetooth: hci2: command tx timeout [ 230.466495] Bluetooth: hci5: command tx timeout [ 230.467242] Bluetooth: hci6: command tx timeout [ 232.001133] Bluetooth: hci0: command tx timeout [ 232.065094] Bluetooth: hci1: command tx timeout [ 232.385179] Bluetooth: hci7: command tx timeout [ 232.450226] Bluetooth: hci3: command tx timeout [ 232.450652] Bluetooth: hci4: command tx timeout [ 232.451591] Bluetooth: hci2: command tx timeout [ 232.513383] Bluetooth: hci5: command tx timeout [ 232.513817] Bluetooth: hci6: command tx timeout [ 234.049953] Bluetooth: hci0: command tx timeout [ 234.113455] Bluetooth: hci1: command tx timeout [ 234.433440] Bluetooth: hci7: command tx timeout [ 234.498231] Bluetooth: hci2: command tx timeout [ 234.498669] Bluetooth: hci4: command tx timeout [ 234.499220] Bluetooth: hci3: command tx timeout [ 234.561333] Bluetooth: hci6: command tx timeout [ 234.562227] Bluetooth: hci5: command tx timeout [ 288.150391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.157696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.167305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.178502] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.187702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.285174] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.288542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.298865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.316527] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.321619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.325482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.327466] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.330504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.342475] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.349359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.419497] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.423553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.438200] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.451458] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.472662] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.552105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.569813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.572700] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.638759] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.648493] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.654318] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.679212] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.685770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.717087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.798769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.833679] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 288.844554] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.879253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 288.895402] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 288.926155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 289.161248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 289.192411] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 289.216347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 289.250356] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 289.254737] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.242221] Bluetooth: hci0: command tx timeout [ 290.370018] Bluetooth: hci1: command tx timeout [ 290.433383] Bluetooth: hci2: command tx timeout [ 290.562365] Bluetooth: hci3: command tx timeout [ 290.764726] Bluetooth: hci4: command tx timeout [ 291.073032] Bluetooth: hci5: command tx timeout [ 291.522193] Bluetooth: hci6: command tx timeout [ 291.523017] Bluetooth: hci7: command tx timeout [ 292.290050] Bluetooth: hci0: command tx timeout [ 292.418927] Bluetooth: hci1: command tx timeout [ 292.481169] Bluetooth: hci2: command tx timeout [ 292.609190] Bluetooth: hci3: command tx timeout [ 292.801947] Bluetooth: hci4: command tx timeout [ 293.122000] Bluetooth: hci5: command tx timeout [ 293.570161] Bluetooth: hci7: command tx timeout [ 293.570642] Bluetooth: hci6: command tx timeout [ 294.339121] Bluetooth: hci0: command tx timeout [ 294.465277] Bluetooth: hci1: command tx timeout [ 294.529949] Bluetooth: hci2: command tx timeout [ 294.658157] Bluetooth: hci3: command tx timeout [ 294.850001] Bluetooth: hci4: command tx timeout [ 295.170289] Bluetooth: hci5: command tx timeout [ 295.617986] Bluetooth: hci6: command tx timeout [ 295.618461] Bluetooth: hci7: command tx timeout [ 296.385051] Bluetooth: hci0: command tx timeout [ 296.513987] Bluetooth: hci1: command tx timeout [ 296.576988] Bluetooth: hci2: command tx timeout [ 296.706957] Bluetooth: hci3: command tx timeout [ 296.896976] Bluetooth: hci4: command tx timeout [ 297.217978] Bluetooth: hci5: command tx timeout [ 297.666077] Bluetooth: hci6: command tx timeout [ 297.666567] Bluetooth: hci7: command tx timeout [ 351.708042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.721020] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.723645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.734449] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.743488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.954464] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.957142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.959332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.964776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.967680] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.101061] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.118374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 352.122719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.124141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.144156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.147338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.174647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.177875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.199214] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.205716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 352.213555] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.228258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 352.238464] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 352.261851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 352.269594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 352.297848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 352.301719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 352.322981] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 352.352440] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 352.356963] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 352.359227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 352.370197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 352.374634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 352.390140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 352.393425] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 352.397372] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 352.441481] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.463434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 352.479507] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.487451] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 353.793005] Bluetooth: hci0: command tx timeout [ 354.050311] Bluetooth: hci1: command tx timeout [ 354.241123] Bluetooth: hci3: command tx timeout [ 354.369168] Bluetooth: hci2: command tx timeout [ 354.433075] Bluetooth: hci5: command tx timeout [ 354.497006] Bluetooth: hci4: command tx timeout [ 354.625014] Bluetooth: hci7: command tx timeout [ 354.625766] Bluetooth: hci6: command tx timeout [ 355.841145] Bluetooth: hci0: command tx timeout [ 356.097136] Bluetooth: hci1: command tx timeout [ 356.289120] Bluetooth: hci3: command tx timeout [ 356.417962] Bluetooth: hci2: command tx timeout [ 356.481039] Bluetooth: hci5: command tx timeout [ 356.547225] Bluetooth: hci4: command tx timeout [ 356.673359] Bluetooth: hci6: command tx timeout [ 356.674309] Bluetooth: hci7: command tx timeout [ 357.888991] Bluetooth: hci0: command tx timeout [ 358.145319] Bluetooth: hci1: command tx timeout [ 358.336995] Bluetooth: hci3: command tx timeout [ 358.465752] Bluetooth: hci2: command tx timeout [ 358.530823] Bluetooth: hci5: command tx timeout [ 358.592961] Bluetooth: hci4: command tx timeout [ 358.721025] Bluetooth: hci7: command tx timeout [ 358.721491] Bluetooth: hci6: command tx timeout [ 359.937131] Bluetooth: hci0: command tx timeout [ 360.195295] Bluetooth: hci1: command tx timeout [ 360.385638] Bluetooth: hci3: command tx timeout [ 360.513949] Bluetooth: hci2: command tx timeout [ 360.577438] Bluetooth: hci5: command tx timeout [ 360.641049] Bluetooth: hci4: command tx timeout [ 360.769978] Bluetooth: hci7: command tx timeout [ 360.770837] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:51:18 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800ee79b80 RCX=0000000000000100 RDX=0000000000000008 RSI=ffff88800ee7a600 RDI=ffff88800ee7a5d8 RBP=ffff88800ee7a5d8 RSP=ffff88802de3f360 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88800ee7a600 R13=286dce246ca2ea18 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81519742 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc5783f65e0 CR3=000000002bfc4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000700007fc57871da90 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000000f1 RBX=0000000000000001 RCX=1ffff1100d9e6f16 RDX=0000000000000041 RSI=ffffffff812e8ed7 RDI=0000000000000001 RBP=00000000001137fe RSP=ffff88806cf08cb8 R8 =0000000000000000 R9 =1ffff11001df4cdb R10=ffffffff86414657 R11=0000000000000001 R12=ffff88806cf36f00 R13=ffff88806cf36fc0 R14=ffff88802d4bd300 R15=ffffffff85c5bf40 RIP=ffffffff84b4ec40 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f31e87ee540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f31e89894a1 CR3=000000000d9a8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000