Warning: Permanently added '[localhost]:37678' (ECDSA) to the list of known hosts. 2025/11/17 02:15:29 fuzzer started 2025/11/17 02:15:29 dialing manager at localhost:37161 syzkaller login: [ 52.891937] cgroup: Unknown subsys name 'net' [ 52.938429] cgroup: Unknown subsys name 'cpuset' [ 52.950593] cgroup: Unknown subsys name 'rlimit' 2025/11/17 02:15:40 syscalls: 212 2025/11/17 02:15:40 code coverage: enabled 2025/11/17 02:15:40 comparison tracing: enabled 2025/11/17 02:15:40 extra coverage: enabled 2025/11/17 02:15:40 setuid sandbox: enabled 2025/11/17 02:15:40 namespace sandbox: enabled 2025/11/17 02:15:40 Android sandbox: enabled 2025/11/17 02:15:40 fault injection: enabled 2025/11/17 02:15:40 leak checking: enabled 2025/11/17 02:15:40 net packet injection: enabled 2025/11/17 02:15:40 net device setup: enabled 2025/11/17 02:15:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/17 02:15:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/17 02:15:40 USB emulation: enabled 2025/11/17 02:15:40 hci packet injection: enabled 2025/11/17 02:15:40 wifi device emulation: enabled 2025/11/17 02:15:40 802.15.4 emulation: enabled 2025/11/17 02:15:40 fetching corpus: 0, signal 0/0 (executing program) 2025/11/17 02:15:41 starting 8 fuzzer processes 02:15:41 executing program 0: r0 = syz_io_uring_setup(0xdb2, &(0x7f0000000000)={0x0, 0x8a47, 0x4, 0x3, 0x2e7}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_io_uring_setup(0x3cb1, &(0x7f0000000100)={0x0, 0x3fa4, 0x10, 0x1, 0xfb, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) r6 = syz_open_dev$vcsn(&(0x7f0000001200), 0x10000, 0x206840) socketpair(0x2, 0x1209b66c6c3b4b1a, 0x80, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r2, &(0x7f00000012c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x4ec, &(0x7f0000001280)=[r6, r7, r3, r3], 0x4, 0x0, 0x1}, 0x8) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000001300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000001340)=r6, 0x1) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x40) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x2010, r6, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000001480)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd, 0x5, 0x0, 0x80000000}, 0x50) r10 = socket$packet(0x11, 0x7f9a881480f54264, 0x300) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f00000014c0)=0x8, 0x4) sendmsg$inet(r10, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001500)="c38cca0fbce71f9c989e1e0af5b844fc98e8f045b7aa6d2956f181d8e1fcd4a86f935617275ebab2f768b6b0ebad5e1bf1569aed5844e48221be90a29dcd059033d6ded170bd7ff18cc38b5062c309dbd5b661ad6265ee4148", 0x59}, {&(0x7f0000001580)="e3c1c08e2e234a5c3a00cd6c68e0f43f2daa8686ffd68773838813f6ee8a90a19e17682672e6e46dc1af0555127005490fda7c187de5b30440df964541d3b09eb2adacb48f0c7f246be6a19be8c3bd4857feb9464694d29eada00afd612ec37dd3d13775463ac268acb725b52748fa7964ca8221ce333701b5f03445483454152e4f1fe56ccbdd19031e5000ecaca0da49a55383604276994189dba1a7", 0x9d}, {&(0x7f0000001640)="eaf96c6f692fb97c3b66ec6e135832792fccef2adf38b5932cba71a825a3ecbdd9d9f795c9115bc08459c0d2969e2b514f28f25c75e481bb3eaec034c231ba3f853f7f35ede77adcf963e677a9a337696eb8f075b3995f4c67a3535b917bd2026fa67fde48828df233bcaef99ea1e908d1f0a528dd5f7e4ac92e9b83df41ea299953", 0x82}], 0x3}, 0x4004801) ioctl$sock_SIOCADDDLCI(r8, 0x8980, &(0x7f0000001780)={'vlan0\x00', 0x1}) keyctl$link(0x8, 0x0, 0xfffffffffffffffa) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f00000017c0), 0x4) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001c40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001840)={0x3b8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffb8d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa05}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd9d6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x70}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffc1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7cfa65d2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x78}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x82}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x72622531}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30b}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x97, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1000, @local, 0x6}}}}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x83d8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcf9e792}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf4d6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_io_uring_submit(r1, r5, &(0x7f0000001c80)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index=0x3, 0x9, 0x0, 0x0, 0x2, 0x1}, 0x2) socketpair(0x2b, 0x8, 0x80000001, &(0x7f0000001cc0)) 02:15:41 executing program 1: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0xc, 0xe9, {0xe9, 0x11, "3f10742a34234a2c468f41096fd604980e4cded1686206e30f1cda4b975f8a8f75c82c08b4befcb47f57389c9e8ab41bf6220dd94875863360eeac7a794863798aadddd1bde49d8424cc14032e30586f1cb22391eef880b05f06633ea1ad411cf93a659ce7bec66bcb3443e83b7e8f1e9c9bd06ba766329240defe1f56ed5f44467db40a542e8219d60147528153a886edd073a8c12cec5a758502a8fd25b7e2b30e9720c85fe7758d42c224a435b0a16cd3b2742810c565eef10d6439cf539bda743af503d1b30399944f5d5381b0f8eed7e284ee9a6f8f17aa362989088484e746c816e8155e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x20, 0x6, 0xda, "91bf616c0b9974587801814c576f5f72d3eeb0c4434512a95011b088a2d5c4f0b5f26c9478e8498e0c9707d9bee9d0e75faef9832ec0039d832f3e4ca26e5c289d35791d375220c743419589778a7063146527de2ddd64142b8225874199d3463bbe535380bebba4e2a1d3901fa04e983b697507c4e888b720df1f988e16ec3a21ea7ee349bdc8b277b2e512677e9b11106dba83b9ffa3067d0610d308d5b98b91ebca5984c6dad9d84106ed59ab496f5f300152fc5e6c4d22b0c1a1d5dd735ef803f44d1295c25923aef200fc0064c3c60a97d4a6baf5151111"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7a}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}}) r0 = syz_open_dev$sg(&(0x7f0000000340), 0xffff, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000380)) r1 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x8, 0x8102) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000600)={0x53, 0xfffffffffffffffd, 0xf2, 0x6, @buffer={0x0, 0x1a, &(0x7f0000000400)=""/26}, &(0x7f0000000440)="2e969e48e916e20cad4d0f7c2e8e8c2356163f2b21009556b85ca65cacb987b8a8756a16e77d5ae3e0e3db980454b6955f1a0808c708b623c202c136fb6ccef6906804e394892e92a87ab0206ef109b19e1e7892e20f80e741af54e7c497caab36d56ad51ce65b526692a8071f40c7109843cda82f3479eb69f790bdb0d9929e29150f966e88f40a31475db911ea9a41ef108f07b63aff198e3eaafb0772c5322563ce2890fad141e9424a8ed067a8caf5584b76d3c611e275555860749052fe44e11d9049e29e7a29d3eabc5684c46a0003f6b63ae5539a0db239c2818e36c64220be85d778e527c4d9a8f3471b2c92d931", &(0x7f0000000540)=""/95, 0xffffffc0, 0x1, 0xffffffffffffffff, &(0x7f00000005c0)}) r2 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8000, 0x8e001) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) sendto(r2, &(0x7f00000006c0)="4c4edab10734738a630cc05c84e9fdfd7dcbde183b29af546e0a3fd8686097a2a752e5ad031780fcf75620bf67e0aff3a1283cad9e94fc1c20918fa4dc75bf22fb869448a56e8f7ed257841fce5d7c6890552a2cd7ac05d87d595f83d5aa651754f03ef220f9aed73812f3ace61da34717e659ac48f4ce54b10d6c79b938afdc047576cc8fe9852860362e1be4e90e3ba15723bb77bc2fc144689ff3239b0256f214a633764ace540f9ff5ec2ec9376dd01a9ad208d5b6d9a4f3acdff29d70064a585435d5ccccf3dec9339e498b6abc45ef2bf9ea5ac4845a6a97b3eb4c", 0xde, 0x44880, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @remote}, 0x3, 0x4, 0x2, 0x2}}, 0x80) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000840)) r3 = syz_open_dev$vcsn(&(0x7f0000000880), 0x1, 0x202) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000008c0)) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x51) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000a00)={0x3, 'lo\x00', {0xc00}, 0xffff}) r5 = clone3(&(0x7f0000001c40)={0x0, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0), {0x10}, &(0x7f0000000b00)=""/235, 0xeb, &(0x7f0000000c00)=""/4096, &(0x7f0000001c00)=[0xffffffffffffffff], 0x1, {r3}}, 0x58) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000001cc0)=r5) r6 = syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f0000001d00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xd7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0xba, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x20, 0x2, 0x2, 0x6, 0x0, 0xf7, {{0x6, 0x24, 0x6, 0x0, 0x0, "d9"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x96, 0x2, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7f}, @dmm={0x7, 0x24, 0x14, 0x67b, 0x20}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x7, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x49, 0x4}}}}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001d80)={0xa, 0x6, 0x201, 0x16, 0x40, 0x2, 0xff, 0x1}, 0x5, &(0x7f0000001dc0)={0x5, 0xf, 0x5}, 0x4, [{0x7, &(0x7f0000001e00)=@string={0x7, 0x3, "d9f2969743"}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000020c0)={0x14, &(0x7f0000001f80)={0x0, 0x21, 0xdd, {0xdd, 0x2a, "8a001bf1674b5128e20562527f89e979d2529db644355ed60368d84476b9a7941d2a3d1aae62646f5bf330eb1899cc33e59873483ebc1911f19821a5958acf20917a4cd2f5a182f56b1ee3a0817296d9f7e356a83fb470b762a20bc11660541d69950baa134a6c3a913945e74f8dabdf91f0c575ce5bc0102662a84179c9531a12ba7869d9ce6142c710dbb068d84a10ed26c5ebf31b72d9c6f9471eb12bc8c6e8764a117d5972321c77d3fa9174f6c995f621ca598a4623c13862b0a61833b0289aa7719a0a041c578c3d008c7e8ac1d80ace8c215fa37e902c76"}}, &(0x7f0000002080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000021c0)={0x1c, &(0x7f0000002100)={0x0, 0x1e, 0x5, "b9ed1107cc"}, &(0x7f0000002140)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002180)={0x0, 0x8, 0x1, 0x3}}) 02:15:41 executing program 7: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000080)) r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x208000) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000240)={'binder0\x00'}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000380)={'wg2\x00', 0x7}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r2) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)={0x444, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0xd0, 0x3, "1b8a90c49dd9f40febb55abd344318939a80aa576cfe0bb51ef9d0db5531d5eeec907c86a165e566db6ce5db5bc6cfdb6ca4c4a8ab86eb72f8313b8c3e1912b64a1646ae8fcd9a629f9f3c1c866d11c62bd9adcd3655a25e96268845ce0d5a19b74feaf1c9be7a8b8b31491499f6f4f91819c8dbdf9ce27a124add6ffb549dc0bb25302b96408cfb4e58383e4ffcf76e2b30fa4b46b7681975997c97382cf72eb339cd905df0ee2d96c647e76464bce7d84041a7ffaf51fcd38466f7cc2dd711c3e46a562085ecd2af90d9b5"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "9fc09a46c034450456fdcb1cc43bc576cdd3c9f4fdcb"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07cc6844d2215890e0801417e92735021da037e4e833d6694b70906a3f2fa46dd37041"}}]}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @local, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbf7b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x58b}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb91}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x186, @rand_addr=' \x01\x00', 0x11aa}}}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3645eaa00d1079b55817a27589b39b2e90626f06df738c662679271812"}}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "e4224463208de295368dd11fc2950ba2f7acca2ecd42c2f908ce867e1a2a87"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x7, 0x3, "dc6b5a"}]}]}, 0x444}, 0x1, 0x0, 0x0, 0x4008050}, 0x8880) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00'}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000009c0)=0x854, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom(r4, &(0x7f0000000a00)=""/4096, 0x1000, 0x10101, &(0x7f0000001a00)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001a80)) r5 = accept4(r1, &(0x7f0000001ac0)=@can, &(0x7f0000001b40)=0x80, 0xc0000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r5) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x68, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xffffffff}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ipvlan0\x00'}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x5}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfc}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfffffffc}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x800) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x18}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c1}, 0x40) 02:15:41 executing program 2: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r0 = socket$inet(0x2, 0x2, 0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x8, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4) r1 = socket(0x29, 0x80d, 0x5) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x5, 0x6, 0xa03, 0x0, 0x0, {0xb}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048000}, 0x24000091) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x4, 0x7, 0x0, 0x80, 0x0, 0x1}, 0xc13a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000340)={0x0, 'gre0\x00', {0x2}, 0xff00}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = accept4(r3, 0x0, &(0x7f0000000380), 0x0) r5 = accept(r4, &(0x7f00000027c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000002840)=0x80) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000028c0)={'bridge0\x00', &(0x7f0000002880)=@ethtool_wolinfo={0x6, 0x0, 0x5, "6e758e870565"}}) r6 = socket(0x1e, 0x5, 0xd2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000002900)='wlan0\x00', 0x10) r7 = syz_open_dev$mouse(&(0x7f0000002940), 0xfffffffffffffffe, 0x8042) ioctl$sock_netdev_private(r7, 0x1f, &(0x7f0000002980)="98085d06c6609bfc14af888379358636e2734441dc59dbb34b889d52a7b1f6c3e47453510e0a3a4adeb0622a104c9fd51359e3") recvmsg(r4, &(0x7f0000002dc0)={&(0x7f00000029c0)=@generic, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002a40)=""/197, 0xc5}, {&(0x7f0000002b40)=""/62, 0x3e}, {&(0x7f0000002b80)=""/184, 0xb8}, {&(0x7f0000002c40)=""/136, 0x88}], 0x4, &(0x7f0000002d40)=""/94, 0x5e}, 0x10062) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004100)={'vxcan1\x00'}) 02:15:41 executing program 3: ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'gretap0\x00', {}, 0x3}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'veth1_to_batadv\x00', {'geneve1\x00'}, 0x4}) listen(0xffffffffffffffff, 0xfff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syz_tun\x00', {0x1}, 0x3}) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0xffff, 0x163000) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000100)) r1 = accept4(r0, &(0x7f0000000140)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0x80, 0xc0800) recvfrom(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x62, &(0x7f0000001200)=@l2tp6={0xa, 0x0, 0xf0ce, @private2, 0x7, 0x1}, 0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000001280)) sendmsg$inet(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="599af2bb0ff96c26ce7d8f570f0792be6cbd4e1f833b034f2c5b7b9e249d8ff2cbf1", 0x22}, {&(0x7f0000001300)="a807889663c729dad447d78d620ba4c41c8bf42cd8d840a1b330fba3d52f90096e28c4aec1df12cacdaa027f57f379d0ec486be4fc3f8c13cd366d73a676ca088533c0acf9b43b4fefaaf8ea7f722b49c81f5545e328494d14", 0x59}], 0x2}, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000001400)={0x6, 'team_slave_0\x00', {0x7}, 0xbde}) sendmsg$NFT_BATCH(r0, &(0x7f0000001580)={&(0x7f0000001440), 0xc, &(0x7f0000001540)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x24, 0x18, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xf4}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) socketpair(0xa, 0x0, 0x1, &(0x7f00000015c0)={0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000001600), &(0x7f0000001640)=0x8) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000001680), &(0x7f00000016c0)=0x8) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000001700)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000001740)=0x2c) syz_open_dev$sg(&(0x7f0000001780), 0x3f, 0x81) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000017c0)={'bridge0\x00', {0x2, 0x0, @initdev}}) socket$packet(0x11, 0x2, 0x300) 02:15:42 executing program 4: sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x8800) r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000180)=0x80, 0x80800) sendmmsg(r0, &(0x7f0000001640)=[{{&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000240)="d1d2abdd715f0728643b828ec1d17b1f79ebf4d2ddb8b4c275f0eca31de395ba6927c2c39f5d5ddb3aff3de9be2caa577a47282eb495fe7fada91ad6703cb30a0ce7d4f89d2f9922c37aa62cf3ff1bc9c9e2a6bd3992d86a25fa1f1b11e43fe712d8be327eb87b8d55c6069a4e6e936f996bbb686a3f1e54db913c319f278cb5aceba58253ad91b557b8695c49b0a1d5cc413a8da2503ad56d1d7786e293e8c6af5beca0e1a29430f4094ca54cf81e4d07a52523a804d9efb83e6175b47ab18cbdcd348316b9c09c02eddef2614bf0fce4298b7bfe26ef103c5110ef77190ae05efcd698a04ec3dfd6407dfe4371809283224ce85e81a9a8ae0dcb0314eba132b642206efd88dca3b13c50cf8c3712dc19475fe478a0d12460b3fbffefbe88010ea40537c84bd513359982e8986ad6cf5c7d96bc7d1cf64ea1a4e57937fdb133f8f1f2ccdd2e99d9d0ab261690c37db9b4c79009bebe35e3804a6ce4f9384f206b407340f0c63b6fb56e6469fc858f4d1d7150d21335240ac29958cdd2493351e3b0a9cbc502ea9d670d2ba99b59a058c8440345d4c0c889b62bc6a3ec553a47373f183631fbd735d5aedc2c4a8a4eead8b6b84fa0c70ffc179dd01675425b543a67c0dc08f02b93cbd0d2e46691cb534f245f47d36b5e7315573a685467fec3893d80604e009350635aeb5bdd1a8f7ea9c42cc0b2907d30b37f071e716d50afe09c5a35aa8e255cfbc2df3bb8ef95ba883aaedbf86efc9386ac9ba2b019c2b94f1ef782af05abee934bacd68d0c91cbc461d9d5435396f1ce629eca9e5c8c001e4a384e233a2760c353d784da54dfa170477fbc72da181ae48c618117e4f44f8c5fa50168c5e6991f03d92eb57557c80b5f1250f8a489b160a111814d9240f974e034f02f70115e0a008216f97ca1ae980bde5d60c481984781e39ce64e64ac409c3ca0756de28b035c57baa2081f0429ddfd51c80a65fc2ff5c9ed11897161c396e937071c5565c31e381e8408b1f4c0f5cf2b1b264407240701710bf346783ff4a7b3f46521b52c7eb38418f63ccb04c3cb22b189d5006edbe1ceefc6e13fd995650e6247c171390025541690bb575505bf0239837ede9a5c3893b5697b5387bcbec594b90bff81649ffdeda116a6e2db99f6a89e16e840a33a24f098ecefc89bf97a2407326d324b61e13c1eef0f226b3397cfcce3d66d8e57eb6f7c8696e390b67c454e7dca56355cedb829c00e96eb431da13ae9464d1a02c8ec3e76666d1197db9bcdb8be4ae28aaaec23619c760a9db10c26bfb202f07ab913abb0999f8bd7bb8cfa9d51436d98736064081874d0a6fb5eab5063d6704051f2f2288a449d1eed18047a1b6b935ec573a0d78fd31469fd6d2b2618fe1beb0a67b85a94a569c1952d06c4ac144fb09ccbac4b0fbc423a7b73bcefd7e1f321a0d9533d740b1cfafd1d89beabae4a072c583eb0b9f692e506d67244d80f09169b9772e4f6be16e2c7f2651649ae6c419e2580bdca77e7049130f32d2056bbcdf464ec649fe4633ce8f63bef79422cff173e7f1696b4f55bac0aa137e6ed3a6ad34f8ccecfab7ca0de26f429df984dc90fda05360ed0926cafeb41e10376f2d70c077ae3102c8e6ef3234d297d92faf190d47d093bc747e7da2e32bf8621e9ad280778237fe7ae59c0ec33868206d974550df34d21e11e484996a41482dea5eeb05754b394781ad10fc145456f66af9ff6c649ba34ea57ee1692a1b6dabc7d15ac58b39a4c6f0704986e7f8a31188132e5870966f3a083c62259ae9f0c2ef7ec96eb2f598babf9e3b0e85548f23439adc4a8f8576752086ec2088386eda0773818b6ca9f744fdfcaed222bd707f647279ba44867a4ec8e41feee376c3b50afdd4d916cf8fdbe1f9af8f752a9599f093fe5eba0b76962b085ee71cc3c5d5424faeedd1fbef02c1a04bef3cb1370e7128e80630be323d56b7ed961a4d2c33cd0e07e795558becb8e570169f640636815efc5ad1d21c6ebc684179239356a20cc1ee228c16dd2d7c1c10ce1619ff2d282cbe947f78846ea1a46288dd009f4105dc5e4d1938931b1979b8d98136e6bb73a92a6d918624980bc387349ab8c928a69778b353db0284581338ae44a6001bd462801cfb95010570cb911bf2d328d21933a469037a2057f773f531cf700e379c76b4cfaf347ce5c51f4425c39b91e63758a9fb7d0839c0570f686c7829ef181ff3dabb98d597288b8dd38194943d623e1528f54fedd0c0dad236e05b3e4808b014ca8fadd7bb53ff99a0db5e6298b4dc1a919392914c2855cada3773078eba85c50532c8ed8b4821120da3038a42379feae25f34802a239b733713e78ee81307e6f06fe3720d0a5cf2088f49617961e360a53b212bc052928af7b5381b278961fe45c613f5722c8326ecbae18488d2c3c551b7515c734c28af86c1db6afa241d96d9fe908a25ac31e4786ce7a17e55d8f469921bc288fd7efaf5bc073281e8c7cf94c093e78786f2d5c61bca4d181eb6a6f2f79f33937bfb0cda64445af386796e84839de588423c7c1d5f73179de886877c3a1ae88c0e82d61b587a1a920ce026b51e972046df4f38688287d5c5b6e97ab965f53d9c97a8d514bb7a37b5c5755c7d998baf17e8fd4d07d1ca4bf1278779837d8536927ae23a98363fdd95dc4fa865211909167cbf41fb526fe1e1963e075061dcc0228944dfe4305083f9a6aa199526e5aecee307ab622a8abb43e300ecb0172f734dfef40c718da9ef0b7a05e1bf5f46a7b1fb6ae1621488fdf079c910ec17c202f833dccf16297c1892fa0babdb92759399c9f41645a11f07aec722158e7f542c66de91a1fb07d0fdd80fa4c55f4b7428314565c064194f5dd48ebaa5e220d77114f3930393ec35c96a304b653b6260139245205d95b764e39c0962c7abadcc30f0a1cbf545ae9669c31181a0f51db03f7097c20a1aa6114333489458ea08f9a9a4aee277d6bd3887e19a296987b4fb06430d6349f1178e9309cf0929b58113bc071f5cf27ec741d8739dae3c3932b2022c579a36505bd1c1c3cd24f9a3d22952d96d7c27be638c5ef9f19a08b2e93773f8be17285178c49df627cbc30ee504c67fa9c54e9bbd58d2c3f407cb6c5deeeac74d88a4d7dfe03293d784a77551e092d007c64518e51c07a8763ece53a5055d5b2955da6229a3ce5022d4edfb00129fb7354d3b3a3d3ff71aa6ae228561e16136b3d0aa2144695a6fcb604a007067348ac3d05d759c2476d7468cf07c062649ad982a7fce8560be9c2df5ad2c8ccee35fcae4a71f61226f07b9904cc64c27e1ed228634523d4004bfac05fb4300d0493cff82c7b611e8933c0b0839298df07120a784a893a0fa40a698411c6126f89e723e1a4dae45628229733d9dbd53669c0e338b7a41f1eeefb0fa251a66441b3e00af3da59eda7663dea3f3ea184af2702218a5e4aa36494215e36c437eb826d41b91933bd3cbb07a636b84496c8a842caf6cf6cd1065f959fa4b6d9b38f1947165b97820db17ad760ee38fe9c89e6af70f8f59b19788c6fd9dd67d8f30307537e6aff94a1ac2adad74fa3c7a04e0bee182cee0af55c4e873ea2b835e39a4e52f503ac05227cb2374c465ad2fa95718193fe5b53261fe9a14e0905779084e091e8d7a5730a94aae03b897d9d13f922068ad53e13a582e68d12639df1ebc1a688ec08ec4713c333b181464716546c739019e92bfe6d1057fbd21e6b0fa69f0ff1574b3bb2884c97a5470e20d7c8ed14a9ad3a28baff513290e8b9c3ad93b7984574dca38d118d86ba1f142ab1a2826839bc5d2b9485ba02db9bc630cedf301e4a72f04808c91e2ce2aec3f4cf40869be69e17eeb8443526eba497c9539ca70468b3c0c5f6594623e7cf7a887a6ddfaf3b0c90fffc88cbce9614333dd33bbe1e134548bb7082513e7c0ff27ef307877a46df60dc84ac2df60a3c540cd4b5f19a72e8b480d7c6cbe97ac67e1e6ffbc189fbc6ce8dfa82217fdc75c490d127189e9f820f62ade277e06429b2f6ebb2e0d9b6437e354c96a4d08fe368d85d4e14231d79dfa8f1b6798258377c46c54809d8baf42a128e5b5a58d9ad384be81d5ae0bb3d56ee03583057c46f3bed73cf0804aacadaf3389adf5880682768f3a094db4aa55b859ab01278230c82bd8f115636b7179c3fe8b0e68ed1b5e074dfe1b086fc08b489a6f6a343359b4c4ac266bf383154ea3bd242d8c3364c32d4bbe1af0f83097fbbc89c9b5e4883d770a429d211c44cec776a1677341ff671cb2fdfae928f46006a58ea2f310b805471de58ebe62034d0a60514e6e65fda45b7b5df89f5bb00f89399c167359d41f598a29d5e336469b72152dd2560891f7d58d2fe15099f565e509babfdf9e0caaec32c5b0dc70f9778ab7c256ee7ba41908beaeeb93458204312d6f8c17ea8de862f78ab59023b4a67ea9d4d0400c0faf0b2295f975ccdbda02f350b0e92a51f080a457d8fdc73ba98aa152241d2a6ce75b27ef7b09aed81704dfecc44bf930ae6c47bedc29a661fe36f2a1d979f8b87a974a951b8df23bf03e453ace3970f18fcf6c84b5441a0e534b3f7b64d9f1553075bf16176b08f7d909cc31ed97e0a446d099ca8f659bdbd323aba1acf2c47024785045cc11785a1ef7989f79c32543421226eb147e84fec7194f013ec0acdd2b022500f773658117dd86f2441c99423cf15f83c7a7093d2eeb1d8cfe753da340a49344aa1c7e7242fae7a98010c2f03a7f7c5b1ae51162f555bd8667a930e140781feeb79210d5752e92dce64ebf6adc0849371680013b8fdc7be04eecbbbfceb5ae56945ccebf0cb3eb068367ec73f1960aeebe892239b4b9ab2578bea076ab0da325d1b2e5e831c458c8d03a5fc58c560645fd166de6bb7bce4a29dd3a2fbe243129010e01345c8d525a39ff0d707cd6ebdb32972d34dd19240ae05bd454863e414232b107ef6d4370b280e120e51417a2bfa66207b6971c837a3775ae732ad60aa318340fe1942cceacc92f338c9bfd7965a92792f22e0d82a6f866ee735a801031e3843f10376188a945721a5191d73890f47a88a424d4f1b48e77715c6f88af7a84cfd79138eb74e742e30d7b2a4af72075c6613d39c99c5f2cd2003a0ced7d674443d98169aae45079885146385e6daead19a56ddfd58fd14b4c4c53c6576631d6624000b4c9788263a8c0cb0948ef8439da935a3111d1cd5c9bf9d4497ec5fc3f488e882ece746af506bb4b52ddc3540252ac6d72e996bfb74bde78ce4af4e1e932987217e8db4a52145b2292b5aee6c934c2a7b2f662229a45feac7baf6ce540ff730747d079d4e40aadc4e52a961a4ff9fca17a0e95a4cfbb4e08403bf72db9453a2ebb76f957b630a65cdf7294d6ccce960e2886dea826c1d7ae13e68294f39b638320634850e079686e42c714d5860d82925b76dcfd8336d75ad740ed5ffc0d7251bdf106ef5c7f2bc83d09532ed0109bbac4d49d11ea075321e37a90b341ee207034d25916225225425c33c891e5c932a09aa8ac132126558c585d6f5512029abd3b66d7d3edd49e794515db3dd8dfaf7efbd2467707914c016fac9d8990a84cd65528cb61de2f8c2453b5c9e0d150ab73eddc44ec0435e7fbb372bc7af61338219c05c68cfe66a6aa8117721b71ea6e285e83c91a370dd419d8410c434387f3cf5badfce58a86b9e042868e1b7e733937c0f2f5e283847148c2885077dd35e22e75c2d765df2f70da6e5681e434272bf59a79b12324f050647100ab95e4de02f28b7", 0x1000}], 0x1, &(0x7f0000001280)=[{0x20, 0x108, 0x69, "c546e28acb4cdeeac940"}, {0x58, 0xff, 0x10000, "beb727a0083b203b4097e316b4e64fae2569e37ac6b62e0022fd7938156411d83ff2f6ce039ead4d04e8dc779518d00d57fd26c65bc2624d97a022351e1854b87f75"}], 0x78}}, {{&(0x7f0000001300)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x2}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001380)="0c9995a050c765c66cd035ff1e5869ff187f843de699911c12d1e24bad2051ed23cce64657c205a211169949b7107f72bd701d94aca7cf1f749588dc1eb22e1c7162cb2f7d8dd62c7c5461dd6e224e13d6b5981846af35f0872cd63fd0b57f6455deae94ecfd42695ec52ca89a355080c729ea1bd983f1563486b26dca933de75c413378012f32a2ff764daa775b5e8fd9d7b5e95d0ae03f1e502b4af382811163952335a89a", 0xa6}, {&(0x7f0000001440)="e5941733f670e6b70f9092cbc6c1769a7b9d8fc326f806789217f0b47b1c9331e793a08ee2ab6b63ba81", 0x2a}, {&(0x7f0000001480)="7e5b1f1e3d54e5800b1c61869cae57f1836f731fbc9a8b734e0ef20d5186ca65f4840e0fa6141fc64c0992c67d577377e0745136070997b35ace782a390bd36fff0ed1a0ee170722a58f917aa4a6920b5ccea6302e7576b7cbdcaf55de4c9e1d47dc986236c3f58bc6edf0fc4e667c41f82dd2522282d40e6f5383e2dce0f093889f05165fe6abd475dbcaf39791da8beb928e9541e1f70e9343b216210d14a8346e310d265f2ab3f5ade89710558581956977eca45850507c", 0xb9}], 0x3, &(0x7f0000001580)=[{0x48, 0x0, 0x3, "afcce66d153e5e3280208861334921d6375fdd6f91b0708ccd6a4a35c3b69aa8b8f33a1a539d5d1501879f71ac2995debe0f4f"}, {0x60, 0x116, 0xff, "8f3473cfb79a587ced2dc4a8d4097a7772e04a58ef4652ffec51e98d41bac404ec889b6a89d010a3d0f89344818d948d492fe255b6a962be78162b7cdc5a5b3b0764072c952c92e4dd3c114a"}], 0xa8}}], 0x2, 0x4000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000016c0)={'hsr0\x00', {0x2, 0x0, @loopback}}) r2 = accept(r1, &(0x7f0000001700)=@sco={0x1f, @none}, &(0x7f0000001780)=0x80) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000017c0)={'veth1_to_hsr\x00', 0x3}) r3 = syz_io_uring_setup(0x58d5, &(0x7f0000001800)={0x0, 0x8890, 0x1, 0x0, 0x77}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001880)=0x0, &(0x7f00000018c0)) socketpair(0x3, 0x805, 0x2, &(0x7f0000001900)={0xffffffffffffffff}) syz_io_uring_submit(r4, 0x0, &(0x7f0000003100)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000030c0)={&(0x7f0000001940)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000019c0)="8f1f20b9678c9e217bc75053298a9b1bc74830db0b91c7e0b0474b89a38c042ad44b23e34c299f8b9d9a39accf2e46743031d68bcf881428cba3bdd4ccd901a9e72222f984bed4e5aa9904bb91da6f871f3462c35a06f827102ad9f2084dbd22f4d569cba7986f8b42cea8f3e9d700904d665fc8cbc82184ec4fc432bd270c60a3c158a1a381ffa643e6031fef5b25cc0e4c4e73fcc098646669ea7da87cf8415e20ac26b957d0b1783adcc5ddea282da62624569ca6642b945e511da0e5a56507fff5c489873a4e2f91e656a6cd25ab0cefe6fb9617f6e3a8bb8e4c68379716b06c6ca8fdf582", 0xe7}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="b0109c9a61c815b10678c2ff535731eb3e9eac920cc248a586580c97e2e99967a4f5900fa39dc3", 0x27}], 0x3, &(0x7f0000002b40)=[{0xb0, 0x101, 0x8, "20ca91279c9ab4df3402f7d2576ec1ef84640dc756e9d790811b59ebcdf062e8dd38ace4476339221739af0ea332ffd50c6d6c038a0a684a057170710f529174bfe9c11abb7e5ea6b07fbeea103cca39d8b50811b6bbf48425c16606a9adc60b0c27528f49ba35004139e95abae74e171e295006727c92d4d93aeda0e9c820fee0dce9039d4fb5f13f3a754f34b2466a73e7697f970861d27e37"}, {0x48, 0x10, 0xffff7fff, "b45ce3bc36043995f6b37d2f13c7d232f332dc0601d2e4de995ddf3b829c0c2b42998e027105048246782e61973a2a662a3327"}, {0xe8, 0x110, 0x0, "3e96a970beb7110923de0e18c9a0fa842d06700469680bfa8f95fafaaff9635e766bc1e43f02895a5f9c21d4312c0a5054d1466a5fc9987b444f194f5f0621a29b083bfffc8f3b3465b087a97bbf98f12aef4ac74711ea632c5adebf6dd07600a9e785ff642b979b161699cd13740837bed7d82f7039841de9e36f5f5c298797f3d0d09748b22599cb5500580d3a1cde5edb33f054312bb67e84681e984cedac95d132ba137a5a996f36e7f17c7c9b599f39a3339ec9ef3b739a44daeaac091a417a923dedcbdbd58e42facbe21ca6a1a940cffd7d3718"}, {0xa8, 0x0, 0x1, "e483cc72f341a0ed404763c39de421e49430252f810049934f7226e818dbd92057fc8a623d6d9851ec324ae043f9c6463c62f87993080167e4900bded5b97710d8be2ce1a2164a032dfe36bbd30e32776ed15a49658f67b299f6fafdeaeae233821354259e9c4b073727d75bdb97058d7aae32ea2499633330c57554256c6c81e3209d9cc7362530e259c67ba851956c11b4891b"}, {0xf0, 0x113, 0x5, "dacbf20f4f58f4885c07747fd2c0a80c4170ebd016e8094657555899a0626ec511c52646a9e0a460c6407d47f34451e0b2076b0a3c81b279fe8b9763a90f9df98e32564d245f649aa5729c027fa76b2c7af5c44f41bbcc264785c324a561241ce88f23337e190aea1d20e1e223966a2c12cfe499740bad6990d59f87b1d6ab0764b8ecf602a4666c077090ee69854a6ca56570bf1217927fac6c1bf2e49714f856aa027367310f89bc7f96f858de10c8ec5317d99010c03b732a3fb09b43e716a7c079e0d65ecbab08951431312463141d0ae6e81130eca2e10d"}, {0x28, 0x119, 0x5, "58a3a9dbab6c570fd38d1dc566f0afe991"}, {0xc8, 0x0, 0x7a, "f4e37c766e5b898091e2a27ed9cc2be42b1fc356b9b7bd21d84cc499211fae2de30bf30c16e498818bbb08204add2d5d03ef16917027b64a296cd825b3b22256b3b1528f3be6dd1099a1aefd77221101c6f12e2654d09e1fc25c7f72df0394b311e99520d9047e4ce1511825fe6f5e39c7eefe676e6e3b15d49f654a412eb619bf64b5cc2f1f27c32a45d66ea35327a2bd58269a3642305c43e42a334470f676bfa7eb524f045d5a82fa5dedb07a319ef8534243"}, {0x100, 0x110, 0x0, "415dd0d6e44c84526129b472a274382808fa3cf19f0f585f153f58073b1949003c357506714b4f9e85f3ce3fa42e1bfc76b7f63fc48bebacaa428ffd62eda84795d63eafdbcb34b850336f1ef63327cf5c1823c63dc5dbfdc23c1988dd9f68c3af5e673f73e8f45503c55800231f74b9243ca8923dde30b047ccb250305d46b649ae41238db258a74ce62d823253ce04478e68673a6e17321d6016f6a749fb51fcddf3d540861bdd2ca694422e401aeb44059fe2007d291f5cd4a47af27a93c38124600e97de0bce347c931b93a99c22e1be85c9a1377fa81db35a8defe50b9ce25af90b7c86fed1e8a3f846"}], 0x568}, 0x0, 0x4040010}, 0x8) r6 = syz_io_uring_setup(0x5ee5, &(0x7f0000003140)={0x0, 0xba7d, 0x1, 0x2, 0x39b, 0x0, r3}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000031c0), &(0x7f0000003200)) r7 = eventfd2(0x8000, 0x40800) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000003240)=r7, 0x1) r8 = socket$inet(0x2, 0x2, 0x7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000003280)={0x0, 'macsec0\x00', {0x2}, 0x401}) sched_setparam(0xffffffffffffffff, &(0x7f00000032c0)=0x100) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000003300)={'veth0_to_hsr\x00', 0x1}) r9 = socket$inet(0x2, 0x4, 0x7) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000003340)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x4}}, @llc={0x1a, 0x301, 0x9, 0x7, 0x40, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x2}) io_uring_setup(0x108, &(0x7f00000033c0)={0x0, 0x1e05, 0x0, 0x0, 0x33}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000003440)={0xad, 0x7fff, 0x400, "d5b674b34b74fcad0ca4e118e7ce260ef02d3fcf04bfd365c53eed99e0ec1494f2612337b40e3113f5fba7c65e5f8c65030240b257bfb69ba0425a8a0550c3d4f423469e6840cb44d68c324febb286afcd0510e35be939f6e9e708bb588b9dd8fdc4da88dc02afaab8a68ddecc382159de44c6849d67709f2050419e560515774f098305c1ba4d711ec7a98e5339bf0ae1f2a16f62a8a129f7ae52a845e01bbe0f4ba34de1fbaa47700e3bbdd0"}) 02:15:42 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000040)={0x400, 0x20, 0x9, 0x20, 0x3}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f00000000c0)=0x6, 0x4) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000180)) r2 = accept4(0xffffffffffffffff, &(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000001740)=0x80, 0x80800) sendmsg$NFT_BATCH(r2, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0xfffa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000018c0)) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000001900)) recvfrom(r1, &(0x7f0000001940)=""/76, 0x4c, 0x40002043, &(0x7f00000019c0)=@phonet={0x23, 0x0, 0x3d, 0x5}, 0x80) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000001a40)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000001a80)=0x8) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x48, 0x5, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x44000) r4 = syz_open_dev$sg(&(0x7f0000001c00), 0x5, 0x5a1c41) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000001c40)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000001c80), &(0x7f0000001d80)='./file0\x00', 0x100, 0x2000, 0x1}, 0xcb) [ 64.406146] audit: type=1400 audit(1763345742.124:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:15:42 executing program 6: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) getsockname(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000005c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00'}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000640)={'syzkaller0\x00', {0x2, 0x0, @multicast1}}) socket(0x28, 0x801, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000680), 0xff, 0x200081) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_STATX={0x15, 0x5, 0x0, r1, &(0x7f00000006c0), &(0x7f00000007c0)='./file0\x00', 0xef7, 0x800, 0x1}, 0x101) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000840)=""/233, 0xe9, 0x40000321, &(0x7f0000000940)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a00)={'gre0\x00', &(0x7f00000009c0)=@ethtool_ringparam={0x11, 0x227c0000, 0x659, 0x80, 0x2, 0x81, 0x2, 0xc924, 0x4e}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000d80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x2ac, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x90000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x4a}, 0xfffffb87}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @remote, 0xd4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @private0, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a85fa51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf710}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9861}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044001) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000f, 0x4000010, r1, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000dc0)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e00)={'hsr0\x00'}) recvmmsg(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000e40)=@phonet, 0x80, &(0x7f0000002140)=[{&(0x7f0000000ec0)=""/143, 0x8f}, {&(0x7f0000000f80)=""/20, 0x14}, {&(0x7f0000000fc0)=""/174, 0xae}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/136, 0x88}], 0x5, &(0x7f00000021c0)=""/116, 0x74}, 0x1f}, {{&(0x7f0000002240)=@nfc, 0x80, &(0x7f0000002400)=[{&(0x7f00000022c0)=""/205, 0xcd}, {&(0x7f00000023c0)=""/27, 0x1b}], 0x2, &(0x7f0000002440)=""/105, 0x69}, 0xd06}, {{&(0x7f00000024c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002540)=""/105, 0x69}, {&(0x7f00000025c0)=""/195, 0xc3}, {&(0x7f00000026c0)=""/19, 0x13}, {&(0x7f0000002700)=""/220, 0xdc}, {&(0x7f0000002800)=""/179, 0xb3}, {&(0x7f00000028c0)=""/77, 0x4d}, {&(0x7f0000002940)=""/185, 0xb9}, {&(0x7f0000002a00)=""/111, 0x6f}, {&(0x7f0000002a80)=""/85, 0x55}], 0x9, &(0x7f0000002bc0)=""/107, 0x6b}, 0xd4}, {{&(0x7f0000002c40)=@ax25={{}, [@rose, @netrom, @bcast, @netrom, @rose, @netrom, @null, @netrom]}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002cc0)=""/100, 0x64}, {&(0x7f0000002d40)=""/122, 0x7a}, {&(0x7f0000002dc0)=""/94, 0x5e}], 0x3}}, {{&(0x7f0000002e80)=@l2, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002f00)=""/156, 0x9c}], 0x1, &(0x7f0000003000)=""/246, 0xf6}, 0x5}, {{&(0x7f0000003100)=@nfc_llcp, 0x80, &(0x7f0000003480)=[{&(0x7f0000003180)=""/213, 0xd5}, {&(0x7f0000003280)=""/76, 0x4c}, {&(0x7f0000003300)=""/143, 0x8f}, {&(0x7f00000033c0)=""/178, 0xb2}], 0x4, &(0x7f00000034c0)=""/117, 0x75}, 0x6}, {{&(0x7f0000003540)=@qipcrtr, 0x80, &(0x7f0000003680)=[{&(0x7f00000035c0)=""/155, 0x9b}], 0x1, &(0x7f00000036c0)=""/4096, 0x1000}, 0x81}, {{&(0x7f00000046c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004740)}, {&(0x7f0000004780)=""/177, 0xb1}, {&(0x7f0000004840)=""/95, 0x5f}, {&(0x7f00000048c0)=""/114, 0x72}, {&(0x7f0000004940)=""/98, 0x62}, {&(0x7f00000049c0)=""/206, 0xce}, {&(0x7f0000004ac0)=""/102, 0x66}], 0x7, &(0x7f0000004bc0)=""/196, 0xc4}, 0xffff9369}], 0x8, 0x40000000, &(0x7f0000004ec0)={0x0, 0x989680}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000004f40)={'macsec0\x00', &(0x7f0000004f00)=@ethtool_modinfo={0x42, 0x7, 0x20}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000004f80)) r5 = socket$packet(0x11, 0x3, 0x300) recvmsg(r5, &(0x7f000000b440)={0x0, 0x0, &(0x7f000000b3c0)=[{&(0x7f000000b200)=""/53, 0x35}, {&(0x7f000000b240)=""/215, 0xd7}, {&(0x7f000000b340)=""/61, 0x3d}, {&(0x7f000000b380)=""/25, 0x19}], 0x4, &(0x7f000000b400)=""/57, 0x39}, 0x40) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f000000b480)={'batadv0\x00', {0x2, 0x0, @loopback}}) [ 65.648915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.651131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.653333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.654712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.659545] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.660952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.665983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.668788] ================================================================== [ 65.670140] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 65.671380] Read of size 2 at addr ffff888013e38178 by task kworker/u11:4/295 [ 65.678576] [ 65.678895] CPU: 1 UID: 0 PID: 295 Comm: kworker/u11:4 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 65.678939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 65.678962] Workqueue: hci1 hci_cmd_work [ 65.679002] Call Trace: [ 65.679012] [ 65.679022] dump_stack_lvl+0xca/0x120 [ 65.679055] print_report+0xcb/0x610 [ 65.679087] ? __virt_addr_valid+0x100/0x5d0 [ 65.679116] ? hci_cmd_work+0x66d/0x6d0 [ 65.679147] ? hci_cmd_work+0x66d/0x6d0 [ 65.679179] kasan_report+0xca/0x100 [ 65.679210] ? hci_cmd_work+0x66d/0x6d0 [ 65.679245] hci_cmd_work+0x66d/0x6d0 [ 65.679299] process_one_work+0x8e1/0x19c0 [ 65.679341] ? __pfx_process_one_work+0x10/0x10 [ 65.679377] ? move_linked_works+0x172/0x270 [ 65.679405] ? assign_work+0x196/0x240 [ 65.679439] worker_thread+0x67e/0xe90 [ 65.679474] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 65.679505] ? __pfx_worker_thread+0x10/0x10 [ 65.679541] kthread+0x3c8/0x740 [ 65.679573] ? __pfx_kthread+0x10/0x10 [ 65.679603] ? ret_from_fork+0x79/0x7a0 [ 65.679628] ? lock_release+0xc8/0x290 [ 65.679666] ? __pfx_kthread+0x10/0x10 [ 65.679698] ret_from_fork+0x67a/0x7a0 [ 65.679722] ? __pfx_ret_from_fork+0x10/0x10 [ 65.679749] ? __switch_to+0x759/0x1060 [ 65.679782] ? __pfx_kthread+0x10/0x10 [ 65.679815] ret_from_fork_asm+0x1a/0x30 [ 65.679855] [ 65.679863] [ 65.702699] Allocated by task 291: [ 65.703352] kasan_save_stack+0x24/0x50 [ 65.704091] kasan_save_track+0x14/0x30 [ 65.704799] __kasan_slab_alloc+0x59/0x70 [ 65.705551] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 65.706515] __alloc_skb+0x2ab/0x370 [ 65.707208] hci_cmd_sync_alloc+0x34/0x300 [ 65.708003] __hci_cmd_sync_sk+0xf7/0x5c0 [ 65.708728] hci_read_dev_class_sync+0x2c/0x170 [ 65.709657] hci_dev_open_sync+0x1874/0x1f60 [ 65.710631] hci_power_on+0xdb/0x5d0 [ 65.711494] process_one_work+0x8e1/0x19c0 [ 65.712437] worker_thread+0x67e/0xe90 [ 65.713294] kthread+0x3c8/0x740 [ 65.713922] ret_from_fork+0x67a/0x7a0 [ 65.714613] ret_from_fork_asm+0x1a/0x30 [ 65.715349] [ 65.715654] Freed by task 294: [ 65.716231] kasan_save_stack+0x24/0x50 [ 65.716937] kasan_save_track+0x14/0x30 [ 65.717662] kasan_save_free_info+0x3a/0x60 [ 65.718448] __kasan_slab_free+0x43/0x70 [ 65.719184] kmem_cache_free+0x26f/0x500 [ 65.719933] kfree_skbmem+0x18a/0x1f0 [ 65.720509] sk_skb_reason_drop+0x10e/0x1b0 [ 65.721150] vhci_read+0x3d5/0x5d0 [ 65.721689] vfs_read+0x1eb/0xc70 [ 65.722209] ksys_read+0x121/0x240 [ 65.722734] do_syscall_64+0xbf/0x430 [ 65.723335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.724113] [ 65.724368] The buggy address belongs to the object at ffff888013e38140 [ 65.724368] which belongs to the cache skbuff_head_cache of size 232 [ 65.726215] The buggy address is located 56 bytes inside of [ 65.726215] freed 232-byte region [ffff888013e38140, ffff888013e38228) [ 65.727947] [ 65.728206] The buggy address belongs to the physical page: [ 65.729020] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13e38 [ 65.730148] flags: 0x100000000000000(node=0|zone=1) [ 65.730862] page_type: f5(slab) [ 65.731403] raw: 0100000000000000 ffff8880096c78c0 dead000000000122 0000000000000000 [ 65.732512] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 65.733616] page dumped because: kasan: bad access detected [ 65.734422] [ 65.734673] Memory state around the buggy address: [ 65.735423] ffff888013e38000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.736472] ffff888013e38080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 65.737515] >ffff888013e38100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 65.738561] ^ [ 65.739614] ffff888013e38180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.740669] ffff888013e38200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 65.741707] ================================================================== [ 65.742854] Disabling lock debugging due to kernel taint [ 65.743787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.745393] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.748412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.749666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.751408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.755100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.757804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.766398] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.767684] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.769288] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.770401] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.771678] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.774563] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.775816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.780675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.784346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.786918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.788318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.791980] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.794534] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.798992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.801032] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.803760] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.805143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.808343] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.813150] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.818319] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.819573] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.821043] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.824881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.830916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.837074] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.853602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.800275] Bluetooth: hci3: command tx timeout [ 67.800746] Bluetooth: hci0: command tx timeout [ 67.801126] Bluetooth: hci2: command tx timeout [ 67.865303] Bluetooth: hci5: command tx timeout [ 67.865734] Bluetooth: hci7: command tx timeout [ 67.866107] Bluetooth: hci1: command tx timeout [ 67.867059] Bluetooth: hci6: command tx timeout [ 67.928243] Bluetooth: hci4: command tx timeout [ 69.848815] Bluetooth: hci3: command tx timeout [ 69.849294] Bluetooth: hci2: command tx timeout [ 69.849688] Bluetooth: hci0: command tx timeout [ 69.912648] Bluetooth: hci1: command tx timeout [ 69.913061] Bluetooth: hci6: command tx timeout [ 69.913562] Bluetooth: hci7: command tx timeout [ 69.913951] Bluetooth: hci5: command tx timeout [ 69.976224] Bluetooth: hci4: command tx timeout [ 71.896253] Bluetooth: hci3: command tx timeout [ 71.896694] Bluetooth: hci0: command tx timeout [ 71.897086] Bluetooth: hci2: command tx timeout [ 71.962304] Bluetooth: hci6: command tx timeout [ 71.962717] Bluetooth: hci5: command tx timeout [ 71.963076] Bluetooth: hci7: command tx timeout [ 71.963468] Bluetooth: hci1: command tx timeout [ 72.024266] Bluetooth: hci4: command tx timeout [ 73.944406] Bluetooth: hci3: command tx timeout [ 73.945275] Bluetooth: hci2: command tx timeout [ 73.946035] Bluetooth: hci0: command tx timeout [ 74.008284] Bluetooth: hci6: command tx timeout [ 74.009101] Bluetooth: hci1: command tx timeout [ 74.009976] Bluetooth: hci7: command tx timeout [ 74.011934] Bluetooth: hci5: command tx timeout [ 74.072275] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 02:15:43 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88806ce38140 RCX=ffffffff815c5876 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806ce31cd0 RBP=0000000000000001 RSP=ffff8880095574e8 R8 =0000000000000000 R9 =ffffffff8664f794 R10=ffffffff8664ed57 R11=0000000000000001 R12=ffff888009548000 R13=0000000000000001 R14=ffff888009548000 R15=ffff888008c49640 RIP=ffffffff815d8e73 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1e57a1b900 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f11ddf11000 CR3=000000000f4f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f73f40d67c000007f73f40d67c8 XMM02=00007f73f40d67e000007f73f40d67c0 XMM03=00007f73f40d67c800007f73f40d67c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88801565f618 R8 =0000000000000000 R9 =ffffed10016fc046 R10=0000000000000020 R11=3331303838386652 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0f64a28134 CR3=00000000173e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2033343a35313a323020373120766f4e XMM01=5d3235393036362e35362020205b203a XMM02=20313030317830206363206465746365 XMM03=6f7465756c42205d3235393036362e35 XMM04=2032343a35313a323020373120766f4e XMM05=65636f72703d7373616c63742030733a XMM06=733a755f6d65747379733d747865746e XMM07=725f6d65747379733a755f6d65747379 XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000