Warning: Permanently added '[localhost]:6203' (ECDSA) to the list of known hosts. 2025/11/14 10:14:59 fuzzer started 2025/11/14 10:15:00 dialing manager at localhost:37161 syzkaller login: [ 50.380225] cgroup: Unknown subsys name 'net' [ 50.441645] cgroup: Unknown subsys name 'cpuset' [ 50.453194] cgroup: Unknown subsys name 'rlimit' 2025/11/14 10:15:09 syscalls: 2214 2025/11/14 10:15:09 code coverage: enabled 2025/11/14 10:15:09 comparison tracing: enabled 2025/11/14 10:15:09 extra coverage: enabled 2025/11/14 10:15:09 setuid sandbox: enabled 2025/11/14 10:15:09 namespace sandbox: enabled 2025/11/14 10:15:09 Android sandbox: enabled 2025/11/14 10:15:09 fault injection: enabled 2025/11/14 10:15:09 leak checking: enabled 2025/11/14 10:15:09 net packet injection: enabled 2025/11/14 10:15:09 net device setup: enabled 2025/11/14 10:15:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/14 10:15:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/14 10:15:09 USB emulation: enabled 2025/11/14 10:15:09 hci packet injection: enabled 2025/11/14 10:15:09 wifi device emulation: enabled 2025/11/14 10:15:09 802.15.4 emulation: enabled 2025/11/14 10:15:10 fetching corpus: 50, signal 29281/31053 (executing program) 2025/11/14 10:15:10 fetching corpus: 100, signal 37755/41179 (executing program) 2025/11/14 10:15:10 fetching corpus: 150, signal 43194/48148 (executing program) 2025/11/14 10:15:10 fetching corpus: 200, signal 51270/57595 (executing program) 2025/11/14 10:15:10 fetching corpus: 250, signal 57085/64717 (executing program) 2025/11/14 10:15:10 fetching corpus: 300, signal 60587/69571 (executing program) 2025/11/14 10:15:10 fetching corpus: 350, signal 65445/75676 (executing program) 2025/11/14 10:15:10 fetching corpus: 400, signal 68777/80238 (executing program) 2025/11/14 10:15:10 fetching corpus: 450, signal 73329/85910 (executing program) 2025/11/14 10:15:10 fetching corpus: 500, signal 76800/90461 (executing program) 2025/11/14 10:15:10 fetching corpus: 550, signal 78494/93387 (executing program) 2025/11/14 10:15:10 fetching corpus: 600, signal 82924/98669 (executing program) 2025/11/14 10:15:11 fetching corpus: 650, signal 84799/101685 (executing program) 2025/11/14 10:15:11 fetching corpus: 700, signal 87630/105478 (executing program) 2025/11/14 10:15:11 fetching corpus: 750, signal 89281/108163 (executing program) 2025/11/14 10:15:12 fetching corpus: 800, signal 91249/111157 (executing program) 2025/11/14 10:15:12 fetching corpus: 850, signal 92780/113719 (executing program) 2025/11/14 10:15:12 fetching corpus: 900, signal 95760/117491 (executing program) 2025/11/14 10:15:12 fetching corpus: 950, signal 97477/120154 (executing program) 2025/11/14 10:15:12 fetching corpus: 1000, signal 99699/123208 (executing program) 2025/11/14 10:15:12 fetching corpus: 1050, signal 103001/127118 (executing program) 2025/11/14 10:15:12 fetching corpus: 1100, signal 105071/129987 (executing program) 2025/11/14 10:15:12 fetching corpus: 1150, signal 106587/132334 (executing program) 2025/11/14 10:15:12 fetching corpus: 1200, signal 108814/135252 (executing program) 2025/11/14 10:15:12 fetching corpus: 1250, signal 110251/137502 (executing program) 2025/11/14 10:15:12 fetching corpus: 1300, signal 113043/140791 (executing program) 2025/11/14 10:15:13 fetching corpus: 1350, signal 115133/143504 (executing program) 2025/11/14 10:15:13 fetching corpus: 1400, signal 116777/145812 (executing program) 2025/11/14 10:15:13 fetching corpus: 1450, signal 118131/147850 (executing program) 2025/11/14 10:15:13 fetching corpus: 1500, signal 120192/150427 (executing program) 2025/11/14 10:15:13 fetching corpus: 1550, signal 121849/152632 (executing program) 2025/11/14 10:15:13 fetching corpus: 1600, signal 123161/154582 (executing program) 2025/11/14 10:15:13 fetching corpus: 1650, signal 123970/156163 (executing program) 2025/11/14 10:15:13 fetching corpus: 1700, signal 125365/158140 (executing program) 2025/11/14 10:15:13 fetching corpus: 1750, signal 128050/161021 (executing program) 2025/11/14 10:15:13 fetching corpus: 1800, signal 129167/162748 (executing program) 2025/11/14 10:15:14 fetching corpus: 1850, signal 129795/164088 (executing program) 2025/11/14 10:15:14 fetching corpus: 1900, signal 130846/165680 (executing program) 2025/11/14 10:15:14 fetching corpus: 1950, signal 131799/167229 (executing program) 2025/11/14 10:15:14 fetching corpus: 2000, signal 133322/169194 (executing program) 2025/11/14 10:15:14 fetching corpus: 2050, signal 134156/170633 (executing program) 2025/11/14 10:15:14 fetching corpus: 2100, signal 135570/172465 (executing program) 2025/11/14 10:15:14 fetching corpus: 2150, signal 136611/174061 (executing program) 2025/11/14 10:15:14 fetching corpus: 2200, signal 137337/175415 (executing program) 2025/11/14 10:15:14 fetching corpus: 2250, signal 138930/177311 (executing program) 2025/11/14 10:15:15 fetching corpus: 2300, signal 139674/178617 (executing program) 2025/11/14 10:15:15 fetching corpus: 2350, signal 140654/180054 (executing program) 2025/11/14 10:15:15 fetching corpus: 2400, signal 141718/181545 (executing program) 2025/11/14 10:15:15 fetching corpus: 2450, signal 142657/182928 (executing program) 2025/11/14 10:15:15 fetching corpus: 2500, signal 143806/184457 (executing program) 2025/11/14 10:15:15 fetching corpus: 2550, signal 144933/185917 (executing program) 2025/11/14 10:15:15 fetching corpus: 2600, signal 146377/187546 (executing program) 2025/11/14 10:15:15 fetching corpus: 2650, signal 146968/188693 (executing program) 2025/11/14 10:15:15 fetching corpus: 2700, signal 147609/189783 (executing program) 2025/11/14 10:15:15 fetching corpus: 2750, signal 148446/191067 (executing program) 2025/11/14 10:15:16 fetching corpus: 2800, signal 149537/192426 (executing program) 2025/11/14 10:15:16 fetching corpus: 2850, signal 150271/193555 (executing program) 2025/11/14 10:15:16 fetching corpus: 2900, signal 151114/194731 (executing program) 2025/11/14 10:15:16 fetching corpus: 2950, signal 152016/195955 (executing program) 2025/11/14 10:15:16 fetching corpus: 3000, signal 152946/197165 (executing program) 2025/11/14 10:15:16 fetching corpus: 3050, signal 153402/198160 (executing program) 2025/11/14 10:15:16 fetching corpus: 3100, signal 153911/199180 (executing program) 2025/11/14 10:15:16 fetching corpus: 3150, signal 155369/200634 (executing program) 2025/11/14 10:15:16 fetching corpus: 3200, signal 156275/201748 (executing program) 2025/11/14 10:15:16 fetching corpus: 3250, signal 156826/202742 (executing program) 2025/11/14 10:15:16 fetching corpus: 3300, signal 157417/203724 (executing program) 2025/11/14 10:15:17 fetching corpus: 3350, signal 158548/204904 (executing program) 2025/11/14 10:15:17 fetching corpus: 3400, signal 159257/205928 (executing program) 2025/11/14 10:15:17 fetching corpus: 3450, signal 159948/206901 (executing program) 2025/11/14 10:15:17 fetching corpus: 3500, signal 160618/207885 (executing program) 2025/11/14 10:15:17 fetching corpus: 3550, signal 161158/208815 (executing program) 2025/11/14 10:15:17 fetching corpus: 3600, signal 162119/209834 (executing program) 2025/11/14 10:15:17 fetching corpus: 3650, signal 162779/210705 (executing program) 2025/11/14 10:15:17 fetching corpus: 3700, signal 163456/211619 (executing program) 2025/11/14 10:15:17 fetching corpus: 3750, signal 164130/212533 (executing program) 2025/11/14 10:15:18 fetching corpus: 3800, signal 164715/213433 (executing program) 2025/11/14 10:15:18 fetching corpus: 3850, signal 165145/214231 (executing program) 2025/11/14 10:15:18 fetching corpus: 3900, signal 165837/215103 (executing program) 2025/11/14 10:15:18 fetching corpus: 3950, signal 166374/215889 (executing program) 2025/11/14 10:15:18 fetching corpus: 4000, signal 166824/216679 (executing program) 2025/11/14 10:15:18 fetching corpus: 4050, signal 167429/217507 (executing program) 2025/11/14 10:15:18 fetching corpus: 4100, signal 167979/218274 (executing program) 2025/11/14 10:15:18 fetching corpus: 4150, signal 168357/219030 (executing program) 2025/11/14 10:15:18 fetching corpus: 4200, signal 169277/219914 (executing program) 2025/11/14 10:15:18 fetching corpus: 4250, signal 169815/220685 (executing program) 2025/11/14 10:15:19 fetching corpus: 4300, signal 170513/221464 (executing program) 2025/11/14 10:15:19 fetching corpus: 4350, signal 171177/222247 (executing program) 2025/11/14 10:15:19 fetching corpus: 4400, signal 171615/222932 (executing program) 2025/11/14 10:15:19 fetching corpus: 4450, signal 172277/223682 (executing program) 2025/11/14 10:15:19 fetching corpus: 4500, signal 173008/224447 (executing program) 2025/11/14 10:15:19 fetching corpus: 4550, signal 173535/225155 (executing program) 2025/11/14 10:15:19 fetching corpus: 4600, signal 173873/225790 (executing program) 2025/11/14 10:15:19 fetching corpus: 4650, signal 174220/226456 (executing program) 2025/11/14 10:15:19 fetching corpus: 4700, signal 174654/227132 (executing program) 2025/11/14 10:15:19 fetching corpus: 4750, signal 175206/227788 (executing program) 2025/11/14 10:15:20 fetching corpus: 4800, signal 175620/228428 (executing program) 2025/11/14 10:15:20 fetching corpus: 4850, signal 175983/229018 (executing program) 2025/11/14 10:15:20 fetching corpus: 4900, signal 176748/229755 (executing program) 2025/11/14 10:15:20 fetching corpus: 4950, signal 177230/230393 (executing program) 2025/11/14 10:15:20 fetching corpus: 5000, signal 177726/231049 (executing program) 2025/11/14 10:15:20 fetching corpus: 5050, signal 178119/231654 (executing program) 2025/11/14 10:15:20 fetching corpus: 5100, signal 178486/232216 (executing program) 2025/11/14 10:15:20 fetching corpus: 5150, signal 179029/232793 (executing program) 2025/11/14 10:15:21 fetching corpus: 5200, signal 179499/233372 (executing program) 2025/11/14 10:15:21 fetching corpus: 5250, signal 179951/233925 (executing program) 2025/11/14 10:15:21 fetching corpus: 5300, signal 180337/234475 (executing program) 2025/11/14 10:15:21 fetching corpus: 5350, signal 180731/235027 (executing program) 2025/11/14 10:15:21 fetching corpus: 5400, signal 181152/235577 (executing program) 2025/11/14 10:15:21 fetching corpus: 5450, signal 181563/236116 (executing program) 2025/11/14 10:15:21 fetching corpus: 5500, signal 182058/236686 (executing program) 2025/11/14 10:15:21 fetching corpus: 5550, signal 182452/237170 (executing program) 2025/11/14 10:15:21 fetching corpus: 5600, signal 182793/237686 (executing program) 2025/11/14 10:15:21 fetching corpus: 5650, signal 183204/238209 (executing program) 2025/11/14 10:15:22 fetching corpus: 5700, signal 183616/238722 (executing program) 2025/11/14 10:15:22 fetching corpus: 5750, signal 184004/239216 (executing program) 2025/11/14 10:15:22 fetching corpus: 5800, signal 184457/239706 (executing program) 2025/11/14 10:15:22 fetching corpus: 5850, signal 184736/240174 (executing program) 2025/11/14 10:15:22 fetching corpus: 5900, signal 185154/240665 (executing program) 2025/11/14 10:15:22 fetching corpus: 5950, signal 185463/241106 (executing program) 2025/11/14 10:15:22 fetching corpus: 6000, signal 185930/241552 (executing program) 2025/11/14 10:15:22 fetching corpus: 6050, signal 186325/241977 (executing program) 2025/11/14 10:15:22 fetching corpus: 6100, signal 186724/241977 (executing program) 2025/11/14 10:15:22 fetching corpus: 6150, signal 187092/241977 (executing program) 2025/11/14 10:15:22 fetching corpus: 6200, signal 187441/241977 (executing program) 2025/11/14 10:15:23 fetching corpus: 6250, signal 187786/241977 (executing program) 2025/11/14 10:15:23 fetching corpus: 6300, signal 188206/241977 (executing program) 2025/11/14 10:15:23 fetching corpus: 6350, signal 188632/241977 (executing program) 2025/11/14 10:15:23 fetching corpus: 6400, signal 189076/241977 (executing program) 2025/11/14 10:15:23 fetching corpus: 6450, signal 189400/241977 (executing program) 2025/11/14 10:15:23 fetching corpus: 6500, signal 189842/241977 (executing program) 2025/11/14 10:15:23 fetching corpus: 6550, signal 190287/241977 (executing program) 2025/11/14 10:15:23 fetching corpus: 6600, signal 190596/241977 (executing program) 2025/11/14 10:15:23 fetching corpus: 6650, signal 191053/241977 (executing program) 2025/11/14 10:15:23 fetching corpus: 6700, signal 191435/241977 (executing program) 2025/11/14 10:15:24 fetching corpus: 6750, signal 191680/241977 (executing program) 2025/11/14 10:15:24 fetching corpus: 6800, signal 192020/241977 (executing program) 2025/11/14 10:15:24 fetching corpus: 6850, signal 192434/241977 (executing program) 2025/11/14 10:15:24 fetching corpus: 6900, signal 192817/241984 (executing program) 2025/11/14 10:15:24 fetching corpus: 6950, signal 193094/241984 (executing program) 2025/11/14 10:15:24 fetching corpus: 7000, signal 193568/241984 (executing program) 2025/11/14 10:15:24 fetching corpus: 7050, signal 194055/241984 (executing program) 2025/11/14 10:15:24 fetching corpus: 7100, signal 194417/241984 (executing program) 2025/11/14 10:15:24 fetching corpus: 7150, signal 194742/241984 (executing program) 2025/11/14 10:15:24 fetching corpus: 7200, signal 194991/241985 (executing program) 2025/11/14 10:15:24 fetching corpus: 7250, signal 195246/241985 (executing program) 2025/11/14 10:15:25 fetching corpus: 7300, signal 195586/241985 (executing program) 2025/11/14 10:15:25 fetching corpus: 7350, signal 195889/241985 (executing program) 2025/11/14 10:15:25 fetching corpus: 7400, signal 196219/241985 (executing program) 2025/11/14 10:15:25 fetching corpus: 7450, signal 196515/241985 (executing program) 2025/11/14 10:15:25 fetching corpus: 7500, signal 196890/242006 (executing program) 2025/11/14 10:15:25 fetching corpus: 7550, signal 197209/242006 (executing program) 2025/11/14 10:15:25 fetching corpus: 7600, signal 197516/242006 (executing program) 2025/11/14 10:15:25 fetching corpus: 7650, signal 197953/242006 (executing program) 2025/11/14 10:15:25 fetching corpus: 7700, signal 198246/242006 (executing program) 2025/11/14 10:15:25 fetching corpus: 7750, signal 198674/242006 (executing program) 2025/11/14 10:15:25 fetching corpus: 7800, signal 198882/242006 (executing program) 2025/11/14 10:15:25 fetching corpus: 7850, signal 199124/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 7900, signal 199528/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 7950, signal 199824/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 8000, signal 200297/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 8050, signal 200609/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 8100, signal 200932/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 8150, signal 201259/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 8200, signal 201553/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 8250, signal 201797/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 8300, signal 202255/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 8350, signal 202987/242006 (executing program) 2025/11/14 10:15:26 fetching corpus: 8400, signal 203422/242006 (executing program) 2025/11/14 10:15:27 fetching corpus: 8450, signal 203731/242006 (executing program) 2025/11/14 10:15:27 fetching corpus: 8500, signal 204426/242006 (executing program) 2025/11/14 10:15:27 fetching corpus: 8550, signal 204772/242006 (executing program) 2025/11/14 10:15:27 fetching corpus: 8600, signal 205124/242006 (executing program) 2025/11/14 10:15:27 fetching corpus: 8650, signal 205422/242006 (executing program) 2025/11/14 10:15:27 fetching corpus: 8700, signal 205700/242007 (executing program) 2025/11/14 10:15:27 fetching corpus: 8750, signal 206040/242007 (executing program) 2025/11/14 10:15:27 fetching corpus: 8800, signal 206336/242007 (executing program) 2025/11/14 10:15:27 fetching corpus: 8850, signal 206685/242007 (executing program) 2025/11/14 10:15:28 fetching corpus: 8900, signal 206983/242007 (executing program) 2025/11/14 10:15:28 fetching corpus: 8950, signal 207219/242007 (executing program) 2025/11/14 10:15:28 fetching corpus: 9000, signal 207439/242007 (executing program) 2025/11/14 10:15:28 fetching corpus: 9050, signal 207766/242007 (executing program) 2025/11/14 10:15:28 fetching corpus: 9100, signal 208078/242007 (executing program) 2025/11/14 10:15:28 fetching corpus: 9150, signal 208392/242007 (executing program) 2025/11/14 10:15:28 fetching corpus: 9200, signal 208648/242007 (executing program) 2025/11/14 10:15:28 fetching corpus: 9250, signal 208973/242007 (executing program) 2025/11/14 10:15:28 fetching corpus: 9300, signal 209221/242007 (executing program) 2025/11/14 10:15:28 fetching corpus: 9350, signal 209452/242007 (executing program) 2025/11/14 10:15:29 fetching corpus: 9400, signal 209662/242007 (executing program) 2025/11/14 10:15:29 fetching corpus: 9450, signal 209884/242007 (executing program) 2025/11/14 10:15:29 fetching corpus: 9500, signal 210109/242007 (executing program) 2025/11/14 10:15:29 fetching corpus: 9550, signal 210336/242007 (executing program) 2025/11/14 10:15:29 fetching corpus: 9600, signal 210648/242007 (executing program) 2025/11/14 10:15:29 fetching corpus: 9650, signal 210895/242007 (executing program) 2025/11/14 10:15:29 fetching corpus: 9700, signal 211080/242007 (executing program) 2025/11/14 10:15:29 fetching corpus: 9750, signal 211366/242007 (executing program) 2025/11/14 10:15:29 fetching corpus: 9800, signal 211782/242007 (executing program) 2025/11/14 10:15:29 fetching corpus: 9850, signal 212086/242009 (executing program) 2025/11/14 10:15:30 fetching corpus: 9900, signal 212278/242009 (executing program) 2025/11/14 10:15:30 fetching corpus: 9950, signal 212569/242009 (executing program) 2025/11/14 10:15:30 fetching corpus: 10000, signal 212780/242009 (executing program) 2025/11/14 10:15:30 fetching corpus: 10050, signal 213114/242009 (executing program) 2025/11/14 10:15:30 fetching corpus: 10100, signal 213369/242009 (executing program) 2025/11/14 10:15:30 fetching corpus: 10150, signal 213633/242009 (executing program) 2025/11/14 10:15:30 fetching corpus: 10200, signal 213860/242009 (executing program) 2025/11/14 10:15:30 fetching corpus: 10250, signal 214096/242009 (executing program) 2025/11/14 10:15:30 fetching corpus: 10300, signal 214267/242009 (executing program) 2025/11/14 10:15:30 fetching corpus: 10350, signal 214571/242009 (executing program) 2025/11/14 10:15:31 fetching corpus: 10400, signal 214781/242009 (executing program) 2025/11/14 10:15:31 fetching corpus: 10450, signal 215146/242009 (executing program) 2025/11/14 10:15:31 fetching corpus: 10500, signal 215447/242009 (executing program) 2025/11/14 10:15:31 fetching corpus: 10550, signal 215681/242009 (executing program) 2025/11/14 10:15:31 fetching corpus: 10600, signal 215946/242011 (executing program) 2025/11/14 10:15:31 fetching corpus: 10650, signal 216199/242011 (executing program) 2025/11/14 10:15:31 fetching corpus: 10700, signal 216409/242011 (executing program) 2025/11/14 10:15:31 fetching corpus: 10750, signal 217104/242011 (executing program) 2025/11/14 10:15:31 fetching corpus: 10800, signal 217361/242011 (executing program) 2025/11/14 10:15:31 fetching corpus: 10850, signal 217674/242011 (executing program) 2025/11/14 10:15:32 fetching corpus: 10900, signal 217891/242011 (executing program) 2025/11/14 10:15:32 fetching corpus: 10950, signal 218081/242011 (executing program) 2025/11/14 10:15:32 fetching corpus: 11000, signal 218346/242011 (executing program) 2025/11/14 10:15:32 fetching corpus: 11050, signal 218587/242012 (executing program) 2025/11/14 10:15:32 fetching corpus: 11100, signal 218791/242012 (executing program) 2025/11/14 10:15:32 fetching corpus: 11150, signal 219012/242012 (executing program) 2025/11/14 10:15:32 fetching corpus: 11200, signal 219293/242012 (executing program) 2025/11/14 10:15:32 fetching corpus: 11250, signal 219505/242012 (executing program) 2025/11/14 10:15:32 fetching corpus: 11300, signal 219801/242012 (executing program) 2025/11/14 10:15:32 fetching corpus: 11350, signal 220122/242012 (executing program) 2025/11/14 10:15:33 fetching corpus: 11400, signal 220440/242023 (executing program) 2025/11/14 10:15:33 fetching corpus: 11450, signal 220721/242023 (executing program) 2025/11/14 10:15:33 fetching corpus: 11500, signal 220926/242023 (executing program) 2025/11/14 10:15:33 fetching corpus: 11550, signal 221289/242025 (executing program) 2025/11/14 10:15:33 fetching corpus: 11600, signal 221488/242025 (executing program) 2025/11/14 10:15:33 fetching corpus: 11650, signal 221761/242025 (executing program) 2025/11/14 10:15:33 fetching corpus: 11700, signal 222031/242025 (executing program) 2025/11/14 10:15:33 fetching corpus: 11750, signal 222190/242025 (executing program) 2025/11/14 10:15:33 fetching corpus: 11800, signal 222448/242025 (executing program) 2025/11/14 10:15:33 fetching corpus: 11850, signal 222632/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 11900, signal 222901/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 11950, signal 223364/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 12000, signal 223805/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 12050, signal 224033/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 12100, signal 224236/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 12150, signal 224419/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 12200, signal 224638/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 12250, signal 224871/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 12300, signal 225076/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 12350, signal 225262/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 12400, signal 225436/242025 (executing program) 2025/11/14 10:15:34 fetching corpus: 12450, signal 225611/242025 (executing program) 2025/11/14 10:15:35 fetching corpus: 12500, signal 225878/242025 (executing program) 2025/11/14 10:15:35 fetching corpus: 12550, signal 226060/242025 (executing program) 2025/11/14 10:15:35 fetching corpus: 12600, signal 226250/242025 (executing program) 2025/11/14 10:15:35 fetching corpus: 12650, signal 226482/242025 (executing program) 2025/11/14 10:15:35 fetching corpus: 12700, signal 226642/242025 (executing program) 2025/11/14 10:15:35 fetching corpus: 12750, signal 226821/242025 (executing program) 2025/11/14 10:15:35 fetching corpus: 12800, signal 227053/242025 (executing program) 2025/11/14 10:15:35 fetching corpus: 12850, signal 227313/242025 (executing program) 2025/11/14 10:15:35 fetching corpus: 12900, signal 227473/242025 (executing program) 2025/11/14 10:15:35 fetching corpus: 12950, signal 227689/242025 (executing program) 2025/11/14 10:15:36 fetching corpus: 13000, signal 227921/242025 (executing program) 2025/11/14 10:15:36 fetching corpus: 13050, signal 228183/242025 (executing program) 2025/11/14 10:15:36 fetching corpus: 13100, signal 228463/242025 (executing program) 2025/11/14 10:15:36 fetching corpus: 13150, signal 228635/242025 (executing program) 2025/11/14 10:15:36 fetching corpus: 13200, signal 228875/242026 (executing program) 2025/11/14 10:15:36 fetching corpus: 13250, signal 229027/242026 (executing program) 2025/11/14 10:15:36 fetching corpus: 13300, signal 229173/242026 (executing program) 2025/11/14 10:15:36 fetching corpus: 13350, signal 229315/242026 (executing program) 2025/11/14 10:15:36 fetching corpus: 13400, signal 229465/242026 (executing program) 2025/11/14 10:15:36 fetching corpus: 13450, signal 229642/242026 (executing program) 2025/11/14 10:15:36 fetching corpus: 13500, signal 229790/242026 (executing program) 2025/11/14 10:15:36 fetching corpus: 13550, signal 230068/242026 (executing program) 2025/11/14 10:15:37 fetching corpus: 13600, signal 230219/242026 (executing program) 2025/11/14 10:15:37 fetching corpus: 13650, signal 230414/242026 (executing program) 2025/11/14 10:15:37 fetching corpus: 13700, signal 230693/242026 (executing program) 2025/11/14 10:15:37 fetching corpus: 13750, signal 230856/242026 (executing program) 2025/11/14 10:15:37 fetching corpus: 13800, signal 231082/242026 (executing program) 2025/11/14 10:15:37 fetching corpus: 13850, signal 231293/242026 (executing program) 2025/11/14 10:15:37 fetching corpus: 13900, signal 231439/242026 (executing program) 2025/11/14 10:15:37 fetching corpus: 13950, signal 231734/242026 (executing program) 2025/11/14 10:15:37 fetching corpus: 14000, signal 231917/242026 (executing program) 2025/11/14 10:15:38 fetching corpus: 14050, signal 232080/242026 (executing program) 2025/11/14 10:15:38 fetching corpus: 14100, signal 232236/242026 (executing program) 2025/11/14 10:15:38 fetching corpus: 14150, signal 232400/242026 (executing program) 2025/11/14 10:15:38 fetching corpus: 14200, signal 232567/242026 (executing program) 2025/11/14 10:15:38 fetching corpus: 14250, signal 232790/242026 (executing program) 2025/11/14 10:15:38 fetching corpus: 14300, signal 232942/242026 (executing program) 2025/11/14 10:15:38 fetching corpus: 14350, signal 233106/242033 (executing program) 2025/11/14 10:15:38 fetching corpus: 14400, signal 233292/242033 (executing program) 2025/11/14 10:15:38 fetching corpus: 14450, signal 233485/242033 (executing program) 2025/11/14 10:15:38 fetching corpus: 14500, signal 233709/242033 (executing program) 2025/11/14 10:15:39 fetching corpus: 14550, signal 233890/242033 (executing program) 2025/11/14 10:15:39 fetching corpus: 14600, signal 234687/242033 (executing program) 2025/11/14 10:15:39 fetching corpus: 14650, signal 234872/242033 (executing program) 2025/11/14 10:15:39 fetching corpus: 14700, signal 235039/242043 (executing program) 2025/11/14 10:15:39 fetching corpus: 14750, signal 235194/242043 (executing program) 2025/11/14 10:15:39 fetching corpus: 14800, signal 235362/242043 (executing program) 2025/11/14 10:15:39 fetching corpus: 14809, signal 235408/242043 (executing program) 2025/11/14 10:15:39 fetching corpus: 14809, signal 235408/242043 (executing program) 2025/11/14 10:15:41 starting 8 fuzzer processes 10:15:41 executing program 0: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlock(&(0x7f0000ff8000/0x8000)=nil, 0x8000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/188) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000003, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x10) mbind(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000000c0)=0x51, 0x101, 0x1) syz_io_uring_setup(0x272b, &(0x7f0000000100)={0x0, 0xd7fe, 0x2, 0x1, 0x20d}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000) madvise(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0xd) shmat(0x0, &(0x7f0000ff7000/0x1000)=nil, 0x2000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000ff4000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200), 0x6, 0x0) mremap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:15:41 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) fcntl$getflags(r0, 0xb) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040)={0x5, 0x9, 0x5, 0x7, 0x3}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x1000000, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x100, 0x400}, 0x7e54317e) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x810, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000004, 0x11, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x204}, 0x1, {0x0, r5}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x7ff, 0x1}}, './file0\x00'}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000340)) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f0000000380)={0x1, 0x200, 0xffff, 0x10001, 0x0, 0xd17}) syz_io_uring_setup(0x593f, &(0x7f00000003c0)={0x0, 0x437d, 0x10, 0x0, 0x39f, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) syz_io_uring_setup(0x463a, &(0x7f00000004c0)={0x0, 0xd469, 0x4, 0x1, 0xff, 0x0, r6}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_io_uring_submit(r7, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7ff) 10:15:41 executing program 7: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3c}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4844}, 0x4080) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x88100) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff390c, 0x44}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x48010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x186}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x401c0}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5b}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb8}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1000, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1, 0x9]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x59}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x801) r3 = openat2(r2, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x220000, 0x42}, 0x18) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x2c8, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff4f3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "6dbca12b0190102f7d7200a5f2c2ad47ea647c3ec0d3f3de3c933240063dd658b9ed8a4a08997982e0f3c3b0b0e10d45ace979803ade226683f62c16538ffbac41ea8c7e37005281"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf1700000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5c, 0x3, "bbfd407a578f0c6ed6c7de60ec624bdb2751e3b1b8a44efc5c20b8a8e10190bb0e2121780b4addb590d02a6bdbd0fd4d3c6ea86eeb5e82edeb03cc77d1c6923c7527aca96b184cc13d34268c616357b57289ac3d57bcbe07"}, @TIPC_NLA_NODE_ID={0x25, 0x3, "6ab4af83b4141a75f83869f83c07963f9456979de4b94a7ba89aad00f3e4829c85"}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "26dbd300cdeb060d81fc628c9585dd17bd791ded89778af6d6aae83a718c26ea8bd31d9ecdcdebe3342d1fe552d96f96b8a1eab055ac2941fcce6a1b3a98551463826119eb10da706dbf096c93b80c98d053133d09c3380ffbc359548be1768f8120d449212dd5b104b42227cdaefc3aeae836460e6c07bd84d57eec6d171d20cd75e4fb18916637f82d632fc82aa330903ac0c79a03c93fa6607d215e216a32f7b87867bfb65aa031d2ea00588b417d8f012ff577ebc216810e8fe77740d16de0a57fd1fc2b668c487c0d92a7ff15b675fd7985c7a4117160c7142ee0e30f06be6e42a06094c7c3f67f05f18ba9650926daff"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68b}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4054}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000e40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x17c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2800}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xce}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3bb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x73d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000040) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000e80)={0x0, 0x4, {0x6, @struct={0xffff686d, 0x7}, 0x0, 0x9bb1, 0xffffffffffffffff, 0x200, 0x2fe92b5, 0x0, 0x4, @usage=0x2, 0x9, 0x8, [0x3, 0x1, 0x9, 0x100000000, 0x2, 0x7]}, {0x56, @usage, 0x0, 0x1f, 0x9, 0x3e, 0x9, 0x8, 0x22, @usage=0x7, 0x8a1, 0x9, [0x8562, 0x80000000, 0x9, 0x72, 0x7, 0x1]}, {0x1814, @usage=0xffff, 0x0, 0xffffffffffffff7f, 0x8, 0x5, 0x1, 0x100000000, 0xa7cebf38c2e1c4bd, @usage=0x10001, 0x85ffffa, 0x81, [0x0, 0x0, 0x7f, 0x4, 0x100000000, 0x8b]}, {0x8, 0x1bfa, 0x3a9}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001280)={r7, "5fd8a7bcc5aaba9abfa9ede63869f317"}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000022c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) 10:15:41 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x16, 0x1f, &(0x7f0000000040)="0a3ea3b86fd4075d8a03bfdac84447581c5503cc87de334cb7ebdc07d87d4d"}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x8) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000001c0)={0x1, 0x8001, 0xad, &(0x7f0000000100)=""/173}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/9) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000002c0)) close_range(r0, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000340)={0x1, 0xfffffffffffffffc}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000380)={r3}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000003c0)={{r2}, "ca3f0695cbf7da1c2cb0d834233ec8ee9dfc150682ffed845d549da3de856a13aadde460f80ceb69655a8c423934fdaff6b6574384a4b71330edeabf2f80acc5d3f47d2bc13f9f89da27ad5f8fe0b142331a4d6fce05e1b2181c3fbe9a906a6c4e1167a416a9e66d367bc04ecfd5b939a2039256582f3eae2723badb0410fb35b07cfde9725b46a19200822ebf5f111ad7a79adf88e9c074ce2a1fd906f83ae34b663e1b089a3301f0890c47e7c5ba42b95074df2450f9c838d42103badbbc15af967c68ffdb5bafc23a6e3a4aa05201486951b72afdeec25dc4fe7f251be8af4a72daf12493734c9e6fe9528d62f52298f57f00ed9596a4d13e3bb3e6c19de3982aa9d4f4fdaf67d59f8f38f5cb40c5c78d029e9886cf3b9c7e2ecfa82e97a68a2c5c4022ba47b8e3d16d9ebedcd91dd7d85900e48dc3507fcdfd5588fd846ac194b29c00adce447686881c580870d398fcb8a3108db70db55d88901a12f759e9a4f5d3d8e2fde5f27270e3c2980257006ade0d05e25f807345d61d3c64218d07ca2c043297322850469696f5a8d3c2f0da9b07281613b576995d0c317e3ada5f1fffb7358cb648530276d6c4e3ff126099f4329e012fbc7d0b4bedc13a2c81c53855dc695e5de478ffcbe12ccfe9193489a94f13df627156196ab5bdf33305d996ab8418c0c5a2b3f272f3ff34b0e050f1bda96c6769215f776dd4eb79a4ff10e3a3c2219f8c1a708cd319b83198f3179e0e66d9fe5816b12eb6eba6b54c2128f56ffedab8653db6365d8f19a1e09c6619f5177bbc312708bb1194cb1d79356bc2b698e6bc7d6648541cefef5c09299343a92d7828e96d3cf1fc3a74477c3b129e92839aeaa9e3be8d91accfe3019556feab78d3c6675a3a8f154e682cabad35e4cad71af14bc4da00880f52391418445f0eb0a9eaab63153a06c517a16ea7b66d065c47c79feedc24f9edede3c06df4ac8ecebc163fcf6492c011672f4f4e24c73d0adb846f65373e591bc37b73ce85588fad0ca80c850832dad0f22704999532731caa5981f471d9472915cf0e0aac7476346ed83594cdd3cc79eb3917fb468e0dc544a06959aa6cbf559aa5bc5d4f84c2c7131a68c4ef91908df57447478993060d4135ae1a502069018cf9b6948b79ac99fbc87bc201b4b582aa02502b0e410a19abee08d097f20e9ff7c140112beac2a32e7c614fa4830702b08d3fa2533c179d2b288fbe0ccb29f206b50c44c9143d2a0a6a264661ec5d3adb67898cc1b23ecd331a7e4a2ca72ed42b424a83858ee4ae64dd41ca91d855100cd7a4d5adf6fb0e5d772e21e99e575fce887407a46e1116eafed5544c65b51300e53ca911e97f67b1b9fc3141d47683a969874fb803d543ec3a04e2ab0d5b957fe5097b99b15cc1453ed05dcb9ec9cf79c6e9f574313a9b32be0ff88ecfe679a84fa96d29ac2babc12420899643a9905cea4c77953ac0abc7735de664f65a8090c6278196a5612c2570ffe1c3ba73bc5cde8d7bd133e21aeca4a70534bad527f4bffe902b37fdc45ac16b2eb574a7b5b65ae2a11ccbea77811410684804c6f9189bc050f5ceade343bb96d1dc789dc0344880564062a3f19c833e41ecc3b7d0a853d73439381317e36fa7dc7cbe7b77dbbb03efa5b6c9b989644286063e3cfaf1a477b6453b27ca6be2448a1faec7446c160037185624743746e56b12e6d9cca64bc387a636f2ab0194e193e2de1184f6017a92a8bd62522d191336c15723deb05416bd3482daef3438ffdee2331daece94fd4ddba76206acf0a2e698d264e171e76da0637a8e8163d1acec1c88bdd35c69bd9d19b87ae7c200f3851c565411c0ab38713ed2459c2f36d99425be111dfb0494add925526ed432f508149e8b65e4617823ae444f8d746e9918de7be4eaf603c9aa04a16b6b9d9055380181ed93eecd56292f29912e18eb6ebbd5075a609fd4f810d5b796c0feab8085626d0692357c900aea476fe4274a9d8f6156c543c95fe862aee6d10fdf5e32a991324126792ce61130afd075a89135d97914dd33bb31b6a3a108df5647cc32e90e27b177d2abb9547430f44f9dc705f2373cd8e081b38f8c9ce361fd1627da437f3f18ecec7f8d3c45e68a956cac643fdef02b4f21fad79c4c19313fcd760391b738442a85736aab44d6b6bf7eda128b85ef313369e6ee120e7491787f3826f851d19bbdb89912cf8799202ba1bf32355a92dafe7b48fbf174141531d6331885a281539102047f2d5e36e698aca58fc1a7de6d042bce56ed55e8e0814b836628e7c4f58c3a9f70f3562f4d2c90be19eb7cab12497d3b45eb64f0d558a275d1d3b12f88ea26c7568eb537e4bb31fe8d4440d52a6271c3f8613dcc625c89ce50d14a377db902c7ef1399abab2cd04a8de71d39e7f7805cce03dd1b27528ab9fa7ede3f0df6cf7c82ab724feb2311dd9d0f61abe7e6c05202fab6172290d2dc09f1b5ee0d813358e8c9c5affa446cbd045601fbb6f4a8ef6f33f30fa013faaf336a7d1aea1df498b11dd873e49c221200223f7e7db04086aa8301684bed06634625715ebbd87e2d6d95490120920c61cb08d7635692bf332cba8ceaec4e44b5f5f48c7d718a5292052f734f034a69d612fbb8bf2f222500525bd5c13c93884e8c28940cbfdfec996eb967e36a4353f86f82b0a49752f5f83d8aabd117102d83433542d1bdd2f5b6ac84bea98c048f7c09f691c34c83eebb742fb408a5b9ed2706a1e2cb3b0ec3e9e6a6a68c5ad6ca22e62e4d2e2273bccc72f3b5051748bc25838f690bccd6c5d785fd2d6f4a403df874cf86389fadcbc88c5863080feacf9263007c673e1c62515ded4126fc49db706b6b487a31d6e01cba96b097bedaa39f66958842212f218e019fe2c38449a53088ac7e5b4ea54eaa3c5225b7ca2b6954fb0f49f1f64f5cfadb1fb3f5b7e9b50b557d614a3f3d8b0eba0a78aafe36bae6a44a47ef4f42114d6f71a1167f58faa8f5d3e4b7cd92852a2e5148a58ed1c06d67c933fce9b59590ab96318b81ba6e9ada1118c63f29c5dbac7d2df95ce97b7af1c0544c6250ec08c7c524cbfdb9cf5fb89dc71ccf381bf1a82198d3db6338a701ab78e4544e886ee9d3669ba0525f7de8ad7f50cf67dc19d63c8f860ea55a314acef343bb5d132dbfc8220331a707d511ff3a7b554a110ac3e9ee02c8ecb50fcb25fe0e22c6742156418f47c341e85cd6a3d6a6caafdf5ab29abaa48285172b41b5a2c534349ecf2f54415bc38e25308784cf703aa28bef92dfbb0a160e02a0ae66eb8c511e21d156aea111dadc0907645cbb30d7b7a25ff49137d5868ac5befd0b6b6ecb739573d77fb973ef6bf3bf3da646fee4f73181806280422a79082e1373eeced4c12b364706c52c42b1e3c18fa648b1ad2a3c4013acfe7d78871eb4bf4b70d49ebd573370f57e4d8c694a4682c823aade228319c354af1019426ec554451b38a721ca20201b709b1d45394ba3ba6ba7067a4edac9be94a32e28a1eba67db93f2fbb004bd33e1ff9c9619dc9b4fb738b95b15551b86b9a3a135e2b4a0b53d0f84e4b01be8e81937a075769bf065de84b911081e8510b493400b168effeb86f11b58e98c6005927147a4da8fe5a8fe4c439f10010c2e55959a47fb4a8bff08f9b46ff7911edbf4e054a5307766f349e8b3a1ce6ae29bab6b1fcaa6e6c08e0c4f94d3908ff4c35b7331f62fa302945859d45ab8f500a8717784d920a5a55c6e9672e058633216326058bcfa990da91ce3d74236b67896dbe9058ab05ded0d9973e000a241760c6a2b6662d9373312195b0112acc113de8a07d83464fef91cab873edf06ff38b656a2e6914eb639838fce8cb2d4bf97269c1ff6ddeb2a015d7b7545d9c0af970fb49155e9cc37bfdbe43f969f597adc800377ce345dc8e8a0847d5db81ba1c16dc3697f3e3bee4e8d2709f30693ca9df26556ede40ff6a6b7e413d991a7e6abbb7a6e9865f2f519d7e083e7992a86f0290df36b9d47ef3cc4dd2a0214c1ec0d9e5e88b01ab55c6a8fa6be5e5570a3dfbdbc216f2ff63d39c6e42c151ae3e3df0b8017af3e5064410de878ea82c94bb9906da3ab9368d3ce6cb0bbad1e37bbfa44be3da0773c392de24362309b9f51812dc6e3c138e7057f7c61e205b96f4c2162b7f996c61b36a3b8b0a6ff5a26918a9979c29402bec907e9c8f6123a69ea391f75b90e877058d95d7c89c6b1f71f0550ba795a87142fed78707d1aaf66493ff379603b0509f42475d88657f99dd1ea66f78c29c7c5083c66e92e1b7c02807a2474dc3e52e8c5e56aeb325f75f9a7e71c6ec50d961a81329040b17c1fb8a5cc450c273b4178ba225d62648b8e8f44828505bd412274bd5ce56bd38fa7add7bad2289a997579e32ee3fd86751779dd62b731ffcea2cf6601978f2ba30e61699bf8e56c96d5bbf6a3085b9d4d1d3978f483aec022b5bd405fd7ff03c1d41f39514c11a54876235e7cbca9044abd2f43da4fea5885abb1b83826dc07c2383cbe2d760e2b8901a05df8c9552583c41451d7cccdc7b43dbcebb4aff8457a8fea1b64e60cabb8b3a5c15d6043ad50db2f7a82ba86fa923f3d15a537e3ff7a2f15292537c11336551011d90a5c47cf5165eed01bdc7eeafb62f701bdf9c896fa3b13de54925dff030ef81a45c1ea30b83d166f043c4d10a351d1d290e21a115675225e3dcf45565c5c5404b26edd7440df4fcc6854f2f5166b8a07add2b83e5c3e265437265b970d5a249941250272d9227a67be59e6cee73e5283b3515b3e90c94b4b3620b12dfa810df338a1823246c8ff5c014fd35096dc62ae872c353ee503d5347ee2373625bad718305be6acec5b0f525f3f7d429055501349e6ab290ca92cd238d89a633af82c37eee53a5d42ec1c6be9977d4b8f4eda14ecf56a4077a7f35d67e46cf604a20de9ad28e2d843db93bbc289a84f2187642e0e1be0bb988719cf30f82761ce685af7f89a248b09709646fc2b825c2d5a9f8e4afc52013ead874188056345062206afb254e922bd8bc5ad48172650bdcc16e1e34be414aa926625d4bd3ad4910c2b3f5f2ab8cc08757a7318b719dc7a7c39cc853f897cda8a1f4345d890080f0a900fe0342aa1dc2e189d4bc340235c15869b726f307e75699c9eec9a9849b7ad23cd6ee5a0d12848a057a9fb2e47487bc3ae33fa1da1eaec954468287b24d950fec000fba7b3be39866a3a2c2369aae317cc8413eb9e4ac405e18ae9c8f2bc83843410c05bc292ea1be41428973d32a109b3c70a8838ceac780551463e530785e1e2707a328779e0ac76fc281722b344f1d5e8b0eab6e77d2cdfdd77d22e72700420d71256adeadc5169a9997dd32386a081d3f06c6cc7c79e1c5517a4940c7b4368e3607026258075541f5fb990f1e1e6b6a807cf790cd8f0bba9f3dfda067f197725809cbf44251520accf5f7a01a6b163135e94d7e121aab2443bfd6eec9c454428dcfedad2b96a2b1fb4c38b6af60c4df9a8cb14eceffc6d2f99c24322542fdc6d5caff8ab9bc890db29bb4b9b898fb4bf890707564a96de16ff517aa39c80760d116e6e713aa90da95b2d81905358ac92c92a03e1e48dcd8085b330c3df7c58e18686b4b0b53bc44b71b8b0311f0737857c0efc8bde254204c55681ce30944255594cdf01ce0879553496d52f7a24790ea5a9279b5f151b59336e4cdd9a6d2231cf5dd701e6df7c1f4aca7283c2935e07823b634707be9a3243fca8db4fbe8f670e5daf48d42377b3d26333d2e680305e5"}) pidfd_getfd(r2, r0, 0x0) ftruncate(r1, 0xeab8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001400)={{0x1, 0x1, 0x18, r4, {0x8000}}, './file0\x00'}) 10:15:41 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000580)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x800}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000080)={0x488, 0x37, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@generic="874c22f44cda6d7e10fee4c8057bba760776a351dbdd669defa642f673f29dabd5cfe16fd4fb29292aeb50a781fd507bec783150e54cf5d063914493d1e0f1e6437d4d83d3b200835f", @nested={0x31c, 0x4f, 0x0, 0x1, [@generic="f731657b6fd39c1f568a0257a7e573bf75050c1f9bd14070c2dedf2ae7d77fe0e3074b362b09890abdf7a322d6c6bfe5759b5f67bab8af5e", @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="164665c28d23548ece7b9bfcb01e2d500902c6e0e30a0daa55102828e08be88314cf58d4fdc2d694784b98e142648db8e76762fe42bbfbac5aa6040e2a2f6e9cc4ca8ccc06696891430cba7dad0e9bd22fa45bbcd097383fa59e84e1260f7ef899b47a25da430d22856027afb7a5818eaa93b5f6d0850c5b70ff820580948ce7f10a44fdb975023e556ae8897816df1265a0c4c708600e7794afb98248fd7c6a4422d7b6b0c37ac160f84cf8c5a1316d37af5dc4f2abf8f351fe4c217d965e7a4a57fffffdc04885c59025d2b7b4672cf78a14057229c47a67ac6ce5430137375f21429fa26e09811b40787eae94cab57e", @generic="3497a9f237a6c48ed3458710dfa36870cb175ff1c9e7d374b320802f7748322d85ca0bcd8c529d7a6505ee8df055169c7a6032c8345b8819ab211c90315cc00a74c0e8732e98616bf38fe206a6c7bacd1ef486aa534fa23537ad4cd25604391b7160be76e95106f2ea7a8b6032e6d7fa887a901ef4f047e22a0eaa76da630e699c4fefdd02d85c8f15b1c88c34d22ea756513061e0242a7d617e19b7d68de3f98b2e507ef869f3eb229904db0277ba", @generic="32abebf9ae94a92cd856c3a4971c4f0c73788884b8edd4c0eab9ba5aa4a99e5f2a09f136c6529c380c66f1eea8dadd645e382c078799c4545f3dfbd8fae9019c53ee65b753eee3937d24af907227eb", @generic="1360d4495f9f7b0d33cc21de61341b088ad0a37c2c2010a4b84ddb5fa23192cfc4660629ffb6772815eb08a73392e9a69ecdc35f58452fd6656f35f9a3c6965ed1be6646104e43f356f04235a5d328a22bddf7851b25a7a16d3cb41596d602ce2f7449cceba89e6318bbc7c63f", @typed={0x8, 0x4f, 0x0, 0x0, @pid}, @generic="e62f1d19276e1292bf4532370c2b72e468299ab99ef4a36ab0f397d0706351fd8b07e53254", @generic="dd82625ae963f4c0938bb3e7a0fabe6c33805d348ab8ed8fd8496f", @typed={0x33, 0x7a, 0x0, 0x0, @binary="f9d8b0347092564e944d7050742faabb9a08733b47e6291ffd7135ec6150e0a3b4a21591ffafa467c5ddc0a002490f"}]}, @generic="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", @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@local}]}, 0x488}], 0x1, 0x0, 0x0, 0x8800}, 0x20008000) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000600)={0x4}) ioctl$CDROMRESET(r1, 0x5312) ioctl$FIONCLEX(r0, 0x5450) ioctl$CDROMREADALL(r1, 0x5318, &(0x7f0000000640)) r2 = openat$cgroup_ro(r0, &(0x7f00000010c0)='io.stat\x00', 0x0, 0x0) ioctl$CDROMRESET(r2, 0x5312) openat$null(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000001140)={0xfffeffff, 0x2}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000001180)={0x9, 0x1}) openat$cdrom(0xffffffffffffff9c, &(0x7f00000011c0), 0x880, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000001340)={'ip6gre0\x00', &(0x7f00000012c0)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x2, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x80, 0x20, 0x9f88, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000001400)={'syztnl1\x00', &(0x7f0000001380)={'syztnl0\x00', r3, 0x2f, 0x2, 0x0, 0x7f, 0x40, @dev={0xfe, 0x80, '\x00', 0x19}, @mcast1, 0x729, 0x8, 0x8, 0x6}}) r4 = dup3(0xffffffffffffffff, r1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001440)={0x0, @dev, @local}, &(0x7f0000001480)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001540)={'syztnl2\x00', &(0x7f00000014c0)={'sit0\x00', r5, 0x0, 0x20, 0xff, 0x4, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x7, 0x700, 0x4, 0x8}}) r6 = syz_open_dev$loop(&(0x7f0000001580), 0x6, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x5) [ 91.167416] audit: type=1400 audit(1763115341.106:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:15:41 executing program 4: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x2, 0x0, &(0x7f0000000080)={[0xffff]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x5, 0x5, 0xff, 0x2}, {0xfffd, 0xf7, 0xff, 0x40}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x40000000}) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)=""/132, 0x84}], 0x3, &(0x7f0000000440)=""/50, 0x32}, 0x80000000}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/121, 0x79}], 0x2, &(0x7f0000000640)=""/221, 0xdd}, 0xca7c}], 0x2, 0x2020, &(0x7f00000007c0)={0x77359400}) bind$packet(r1, &(0x7f0000000800)={0x11, 0xf6, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) r2 = pidfd_getfd(r0, r1, 0x0) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f0000000840)=[{}, {}], 0x2, &(0x7f00000008c0)={r3, r4+10000000}, &(0x7f0000000900), 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/locks\x00', 0x0, 0x0) ppoll(&(0x7f00000009c0)=[{r5, 0x1042}, {r0, 0x8}, {r0, 0x20}, {r6, 0x4000}], 0x4, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000a40)={[0x5]}, 0x8) r7 = openat$incfs(r0, &(0x7f0000000a80)='.log\x00', 0x200, 0xa0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000ac0)={0x10}) r8 = syz_open_dev$evdev(&(0x7f0000000b00), 0x401, 0x20002) fcntl$setlease(r8, 0x400, 0x2) epoll_pwait(r2, &(0x7f0000000b40)=[{}, {}], 0x2, 0x3, &(0x7f0000000b80)={[0x3f]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r8, {0xd59}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f0000000c00)={0x2}) 10:15:41 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x10, 0x8, 0x70bd25, 0x25dfdbfb, {0x5}, [@generic="b74fc43f6ed4a0ce24eb0dc102c24f1f18d75f98792060da2cd3ae8ebdc142f0c18fd6db457b1008ac739e609c0953085256a4e0c0367d8bd6559e8ea9d66515cd828976f72c98d5fde95ec29188eaa644e879703c4ecaaa7cc3344d7268440c90f73c45caea8e5e740c4c7bb4217e610349f8d289390b4ff07a922dcb97b4b6fc67120fc5ddbb6a24a5c727000db54575e122adfce37eaa32147a9b636e2b43b4992781"]}, 0xb8}, 0x1, 0x0, 0x0, 0x81}, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x400]}, 0x8, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x20000800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r0, r2, &(0x7f0000000300)=0x5d, 0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000340)) sendfile(r2, r0, &(0x7f0000000380)=0x8, 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc805}, 0x84) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0xceb, 0x729}}, './file0\x00'}) ioctl$FICLONE(r3, 0x40049409, r2) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/46, &(0x7f0000000580)=0x2e) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x200, 0x1ff, 0x0, 0xfffffeff, 0x7fff}) r4 = dup(r2) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000600)={'mangle\x00', 0x0, [0x1ff, 0x9, 0xef2, 0x1, 0x400]}, &(0x7f0000000680)=0x54) ppoll(&(0x7f00000006c0)=[{r0, 0x202}, {0xffffffffffffffff, 0x8010}], 0x2, &(0x7f0000000700), &(0x7f0000000740)={[0x3ff]}, 0x8) r5 = accept(r3, &(0x7f0000000780)=@rc={0x1f, @fixed}, &(0x7f0000000800)=0x80) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000840)) fsetxattr$security_selinux(r3, &(0x7f0000000880), &(0x7f00000008c0)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x1) 10:15:41 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x480000) r4 = dup3(r2, r3, 0x0) sendfile(r4, r2, &(0x7f0000000100)=0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000240)={0x14, 0x81, &(0x7f0000000180)="187cf9cc92b2b2ff7474bcbcf6773713c3cdd8c8b3984616196312e5a05424b1f9cff8ec4516a98bf40a949375f4141fa9f94af257d4570b05cb496b261ee8c6be39368980ee9b731e634cb58851cc16daee3b2cefdfcae3f73b6c424ae242e1a9a92947b2bec96298225b017a1ac0b1fe21c1d9ce6855fc6ae3887490053a815b"}) fcntl$getownex(r1, 0x10, &(0x7f0000000280)) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000300)) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r6, 0xf505, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000340)={0x45, 0x4, 0x7, 0x15b, "50d90671289b0b642ed6b7785d22b3b6c6642abf36234f94965b24316d174380"}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0xd540b6f1bdab8c91, 0x0, 0x0, 0x2, 0x29, @dev={0xfe, 0x80, '\x00', 0x16}, @mcast1, 0x7800, 0x20, 0x8001, 0x101}}) socketpair(0xf, 0xa, 0x4, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4000040) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fsetxattr$security_capability(r8, &(0x7f0000000580), &(0x7f00000005c0)=@v3={0x3000000, [{0x4, 0x1}, {0x1, 0x2}], 0xee01}, 0x18, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, r6, {0xfffffffc}}, './file0\x00'}) [ 92.282207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.283223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.284179] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.286830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.288146] ================================================================== [ 92.288719] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 92.289259] Read of size 2 at addr ffff88801d3bf538 by task kworker/u11:2/293 [ 92.289823] [ 92.289966] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:2 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 92.289982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 92.289990] Workqueue: hci0 hci_cmd_work [ 92.290006] Call Trace: [ 92.290011] [ 92.290015] dump_stack_lvl+0xca/0x120 [ 92.290032] print_report+0xcb/0x610 [ 92.290049] ? __virt_addr_valid+0x100/0x5d0 [ 92.290064] ? hci_cmd_work+0x66d/0x6d0 [ 92.290078] ? hci_cmd_work+0x66d/0x6d0 [ 92.290092] kasan_report+0xca/0x100 [ 92.290106] ? hci_cmd_work+0x66d/0x6d0 [ 92.290122] hci_cmd_work+0x66d/0x6d0 [ 92.290137] process_one_work+0x8e1/0x19c0 [ 92.290158] ? __pfx_process_one_work+0x10/0x10 [ 92.290174] ? move_linked_works+0x172/0x270 [ 92.290187] ? assign_work+0x196/0x240 [ 92.290203] worker_thread+0x67e/0xe90 [ 92.290219] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 92.290234] ? __pfx_worker_thread+0x10/0x10 [ 92.290250] kthread+0x3c8/0x740 [ 92.290266] ? __pfx_kthread+0x10/0x10 [ 92.290279] ? ret_from_fork+0x79/0x7a0 [ 92.290292] ? lock_release+0xc8/0x290 [ 92.290310] ? __pfx_kthread+0x10/0x10 [ 92.290325] ret_from_fork+0x67a/0x7a0 [ 92.290336] ? __pfx_ret_from_fork+0x10/0x10 [ 92.290348] ? __switch_to+0x759/0x1060 [ 92.290364] ? __pfx_kthread+0x10/0x10 [ 92.290379] ret_from_fork_asm+0x1a/0x30 [ 92.290399] [ 92.290402] [ 92.306130] Allocated by task 290: [ 92.306416] kasan_save_stack+0x24/0x50 [ 92.306734] kasan_save_track+0x14/0x30 [ 92.307047] __kasan_slab_alloc+0x59/0x70 [ 92.307372] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 92.307799] __alloc_skb+0x2ab/0x370 [ 92.308101] hci_cmd_sync_alloc+0x34/0x300 [ 92.308439] __hci_cmd_sync_sk+0xf7/0x5c0 [ 92.308769] hci_read_local_name_sync+0x2c/0x170 [ 92.309145] hci_dev_open_sync+0x1874/0x1f60 [ 92.309491] hci_power_on+0xdb/0x5d0 [ 92.309791] process_one_work+0x8e1/0x19c0 [ 92.310125] worker_thread+0x67e/0xe90 [ 92.310434] kthread+0x3c8/0x740 [ 92.310706] ret_from_fork+0x67a/0x7a0 [ 92.311017] ret_from_fork_asm+0x1a/0x30 [ 92.311339] [ 92.311481] Freed by task 291: [ 92.311733] kasan_save_stack+0x24/0x50 [ 92.312053] kasan_save_track+0x14/0x30 [ 92.312364] kasan_save_free_info+0x3a/0x60 [ 92.312707] __kasan_slab_free+0x43/0x70 [ 92.313026] kmem_cache_free+0x26f/0x500 [ 92.313350] kfree_skbmem+0x18a/0x1f0 [ 92.313652] sk_skb_reason_drop+0x10e/0x1b0 [ 92.313991] vhci_read+0x3d5/0x5d0 [ 92.314280] vfs_read+0x1eb/0xc70 [ 92.314559] ksys_read+0x121/0x240 [ 92.314840] do_syscall_64+0xbf/0x430 [ 92.315146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.315555] [ 92.315690] The buggy address belongs to the object at ffff88801d3bf500 [ 92.315690] which belongs to the cache skbuff_head_cache of size 232 [ 92.316674] The buggy address is located 56 bytes inside of [ 92.316674] freed 232-byte region [ffff88801d3bf500, ffff88801d3bf5e8) [ 92.317600] [ 92.317735] The buggy address belongs to the physical page: [ 92.318167] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d3bf [ 92.318780] memcg:ffff88800d4cbb81 [ 92.319055] flags: 0x100000000000000(node=0|zone=1) [ 92.319452] page_type: f5(slab) [ 92.319716] raw: 0100000000000000 ffff8880096c78c0 ffffea000074ddc0 0000000000000006 [ 92.320316] raw: 0000000000000000 00000000800c000c 00000000f5000000 ffff88800d4cbb81 [ 92.320911] page dumped because: kasan: bad access detected [ 92.321343] [ 92.321478] Memory state around the buggy address: [ 92.321855] ffff88801d3bf400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.322421] ffff88801d3bf480: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 92.322981] >ffff88801d3bf500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.323544] ^ [ 92.323942] ffff88801d3bf580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 92.324502] ffff88801d3bf600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 92.325058] ================================================================== [ 92.325663] Disabling lock debugging due to kernel taint [ 92.328902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.347175] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.349685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.350520] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.353458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.354425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.397255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.398087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.399634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.401113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.402959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.405199] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.406386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.409325] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.409969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.413906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.414486] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.415635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.416928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.418857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.421896] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.429065] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.436182] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.436822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.441027] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.441595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.442141] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.443134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.444472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.447539] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.450835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.454519] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.455451] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.459182] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.460824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.491514] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.377365] Bluetooth: hci1: command tx timeout [ 94.377810] Bluetooth: hci0: command tx timeout [ 94.441369] Bluetooth: hci3: command tx timeout [ 94.505412] Bluetooth: hci2: command tx timeout [ 94.505832] Bluetooth: hci4: command tx timeout [ 94.506201] Bluetooth: hci6: command tx timeout [ 94.507302] Bluetooth: hci5: command tx timeout [ 94.570844] Bluetooth: hci7: command tx timeout [ 96.425380] Bluetooth: hci0: command tx timeout [ 96.425818] Bluetooth: hci1: command tx timeout [ 96.489318] Bluetooth: hci3: command tx timeout [ 96.553348] Bluetooth: hci6: command tx timeout [ 96.553751] Bluetooth: hci5: command tx timeout [ 96.554135] Bluetooth: hci4: command tx timeout [ 96.554154] Bluetooth: hci2: command tx timeout [ 96.617330] Bluetooth: hci7: command tx timeout [ 98.473386] Bluetooth: hci0: command tx timeout [ 98.473406] Bluetooth: hci1: command tx timeout [ 98.538565] Bluetooth: hci3: command tx timeout [ 98.601415] Bluetooth: hci2: command tx timeout [ 98.604465] Bluetooth: hci6: command tx timeout [ 98.604491] Bluetooth: hci5: command tx timeout [ 98.604529] Bluetooth: hci4: command tx timeout [ 98.666066] Bluetooth: hci7: command tx timeout [ 100.521613] Bluetooth: hci0: command tx timeout [ 100.522362] Bluetooth: hci1: command tx timeout [ 100.585328] Bluetooth: hci3: command tx timeout [ 100.649499] Bluetooth: hci4: command tx timeout [ 100.649906] Bluetooth: hci5: command tx timeout [ 100.650862] Bluetooth: hci6: command tx timeout [ 100.651239] Bluetooth: hci2: command tx timeout [ 100.714378] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:15:42 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800de40000 RCX=ffff8880158078e4 RDX=0000000000000000 RSI=ffffffff81000130 RDI=ffff88800de403fc RBP=ffff8880158079e8 RSP=ffff888015807908 R8 =0000000000000001 R9 =ffff8880158079d0 R10=000000000003ca6e R11=00000000000c7bf2 R12=0000000000000000 R13=ffff8880158079d8 R14=ffff88800de40000 R15=ffff888015807990 RIP=ffffffff815be50a RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0eb450b8c0 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005614356e5b88 CR3=000000000f72e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffffffffff000000 XMM02=00000000000000310000000000306963 XMM03=7269762f736563697665642f7379732f XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff8880161b7618 R8 =0000000000000000 R9 =ffffed10013e1046 R10=0000000000000030 R11=725f746e69727020 R12=0000000000000030 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005614356e80d8 CR3=000000001a7a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f5fdf8217c000007f5fdf8217c8 XMM02=00007f5fdf8217e000007f5fdf8217c0 XMM03=00007f5fdf8217c800007f5fdf8217c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000