Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 61.367536] sshd (233) used greatest stack depth: 24192 bytes left Warning: Permanently added '[localhost]:35930' (ECDSA) to the list of known hosts. 2024/10/31 21:40:26 fuzzer started 2024/10/31 21:40:27 dialing manager at localhost:45639 [ 65.165720] cgroup: Unknown subsys name 'net' [ 65.324455] cgroup: Unknown subsys name 'cpuset' [ 65.381473] cgroup: Unknown subsys name 'rlimit' 2024/10/31 21:40:44 syscalls: 210 2024/10/31 21:40:44 code coverage: enabled 2024/10/31 21:40:44 comparison tracing: enabled 2024/10/31 21:40:44 extra coverage: enabled 2024/10/31 21:40:44 setuid sandbox: enabled 2024/10/31 21:40:44 namespace sandbox: enabled 2024/10/31 21:40:44 Android sandbox: enabled 2024/10/31 21:40:44 fault injection: enabled 2024/10/31 21:40:44 leak checking: enabled 2024/10/31 21:40:44 net packet injection: enabled 2024/10/31 21:40:44 net device setup: enabled 2024/10/31 21:40:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/31 21:40:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/31 21:40:44 USB emulation: enabled 2024/10/31 21:40:44 hci packet injection: enabled 2024/10/31 21:40:44 wifi device emulation: enabled 2024/10/31 21:40:44 802.15.4 emulation: enabled 2024/10/31 21:40:44 fetching corpus: 0, signal 0/0 (executing program) 2024/10/31 21:40:46 starting 8 fuzzer processes 21:40:46 executing program 0: mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x3ff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/193, 0xc1, 0x1, &(0x7f0000000200)=""/73, 0x49}, &(0x7f00000002c0)=0x40) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300)) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)="0c9d941c6bdff10bb38d4ac513e31c1777bb51b45f447b10b367c5f9b2e25917caf9ef065a2b5d6c374319f6a86867087f030131088b76df7f7cb6fc495ce28d4dd4bac5694f87f48bb943c9ab4c2b6fc987fa18a49c71c31e72d038cb373ca2484047b4e5b228c093dea289bb324543544b407cee69643e02ed4d5f98836c46e33087e3a637b2ef9bafa8d3130287c6185325ba79ee81479504ef100d1f299e489b71307ecd3e", 0xa7, r1}, 0x68) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x80010, r0, 0x8000000) r2 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x5, 0x37}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x55}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x5) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x88, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/97) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x40001, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000840)={0xef, 0xf, 0x7, 0x2, "8f2beca826f7b612e92042c2e77af7ab409c5d451fd4dde023af5d7670787d79"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x80, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x71f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80000}, 0x90) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="20f14edf465b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b267a061d46b"}]}, 0x50}}, 0x10) epoll_create(0x3720) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x94, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4040}]}]}, 0x94}}, 0x2000c000) 21:40:46 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1a}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2641, 0xb}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x49}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) r1 = syz_open_dev$vcsu(&(0x7f0000000240), 0x7df3, 0x10001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x28}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x75}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair(0x1e, 0x3, 0xfbd, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x4000c0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xa9, 0x52}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x804) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4d}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x84eb233678939409}, 0x4800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40480d1}, 0x54006) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4c, 0x1c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xd0, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x344}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x3f13322e19373e25) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, r8, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 21:40:46 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ee7181aef588538e642f58318f2f89dabb6492b7122bb71cc2944aa1b9da5351f2475537f536c0900c881fccf53c8a6b33c479dc3c975625b0b4acd9d7b82215", 0x12}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={0x0, 0xf9, 0x82}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'sha512-avx\x00'}}, &(0x7f00000001c0)="a2ccce01cee1f0f0e7874620d2ac594b0809bf87cc82fd5a7cf33638e5044e22fc5d3acb4d1bcc1656463dee1465ecfad25ee4637e718c30bdc9512407a3ed5470c54dda88cedbd6f4e75fe0a83bbb77069485ab1a9b328d95c2c194f122d7e4e5fa525bda66d8b1f13f36d5a4a44b0af7bce5bd0610a42add3e7384f4f5c863c653ab003313e3583518cb62412df34055238add5fd5d91c1be8766d8f47b2e7f431e0e7dd49cbfa77fa749de543d5887ce06f4a8648814ffd736723e94c6ca7a0c69a0c5a553b5dc145475c4d90b5ae9cb71d2a85049a8bda9b85a64615d64b864d080e6ea7ad567127f5fb53f5f7bfd6e32832c1fced74f5", &(0x7f00000002c0)=""/130) keyctl$describe(0x6, r0, &(0x7f0000000380)=""/221, 0xdd) r1 = request_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x00', r0) r2 = request_key(&(0x7f0000000540)='.dead\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)=' hash=', r0) keyctl$negate(0xd, r1, 0xfff, r2) keyctl$search(0xa, r2, &(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x3}, r2) r3 = gettid() sched_setaffinity(r3, 0x8, &(0x7f0000000680)=0x6) keyctl$unlink(0x9, r2, r0) keyctl$describe(0x6, r0, &(0x7f00000006c0)=""/28, 0x1c) keyctl$negate(0xd, r0, 0x2, r1) keyctl$negate(0xd, 0x0, 0x5, r0) r4 = gettid() sched_setaffinity(r4, 0x8, &(0x7f0000000700)=0x40) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc2}, &(0x7f0000000880)={0x0, "4968b8aa0ee58e40542995651fe99c6c9558343c1ab0156e2d8b9256e2ac62c72f2e3bc6a7ad0079754bae4865d727494f7bd82415d01247998b17cfd3a11309", 0x22}, 0x48, r1) r6 = request_key(&(0x7f0000000740)='logon\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='*/^{\'l.)\xc8^)[#@#-\x00', r5) r7 = request_key(&(0x7f0000000900)='id_resolver\x00', &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)='^\x00', r0) r8 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$search(0xa, r7, &(0x7f00000009c0)='ceph\x00', &(0x7f0000000a00)={'syz', 0x0}, r8) 21:40:46 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f0000ffd000/0x3000)=nil, 0x4) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r1 = syz_io_uring_setup(0x55e2, &(0x7f0000000080)={0x0, 0x6891, 0x0, 0x3, 0x161}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4800) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000180)=""/112) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r1}, 0xc19) sigaltstack(&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000240)) keyctl$describe(0x6, 0x0, &(0x7f0000000280)=""/62, 0x3e) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffe000/0x1000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0x0) r3 = msgget(0x0, 0x2) msgsnd(r3, &(0x7f0000000300)={0x1, "05021759b5114c73368fa5f09a94507e9823588affabef01db70e27a9575540e0ea4e7574a5c68771d45c29a956838945b06e5cabc29147481e0164923c22de0a4f98e74630d67a3878ceadfed6a48cd4b2ec236473e505c4409bc86943642e9a01218efcc372ffb631bc4bd131956fbbc59eaa6649a58baacc0b762c83cdcbff60ce295b85df57534404ef9906782fb3befbd4ffa14e14d125dd1866dac64ad1105e72c07364e60028de80d6b5924713b9f1d17ff2bd727e88124716a795ad4355c3501c1d1b202a0165e4ca56221a6bff6b8faf7d7b91679c3ccaa6dbb4835768b18472696348ed86e036daeaf4a9211112f7842ab53ab488d0b92d5a450bc3cfe145e98ae00d6ddce4e8eac840fe878bd9e2dfcccf15ec406e28d5b0c5c36d3afc62477e201b82e0c38692e0874e9565f6f0798fa23d867712ba475ab8643c55d218f33358a3715a5fad5eb5a4a9e8fd74a241c7231d0d755fd323741735e07b94c5f14cec93cf6803eaf7c0c01788c0cfce4433793298b9017d27ed8a9393e25eb12d65c367173045a2731036c01c021b08474cae2b162b249c48d0eb0f19099c5e61ebbc05ec38ec0108082debf6f829e719d99524b6109d5fd275c3db1d854722231692fb78b0fffe7d59c152eec31172a8a23beec59895a37b03c1237961be94f55a237b0ebf8c73b1465572a2560270171140ce9b5778820cbc6ca04d36f2846fd94cfce789ccb24484f679752de4f9e6813cef815d093383a77357704c4ab249c24e4e0070558735d346d2631747054e4c05e938fe083dbf3ddc9681c304682d529b255f76b239c74f1b7741bf71152c4f537e6cf021aa257e0ff4fa1a630ff3669e568607d4598c688c00c8260444b0b03d0a4add8fad325d01a101c74644640acaeb06f4e2bac3ab66c053f23efa73cebd1b8528a4d7eea5fe411fb4e951491db6e693e4d92362fd6dbfc2053d00d246e17056780145446c36b7ed287716aa8cc95b66726c7e8167e58f90bc3fbd6bd8924db774372c724b15b0b3bcec7d0888098f32da782ea9e32374e26546ae46436ef4a0dbd7e34e8781269300c8c2f37c0750f769e85f47af03706a3f1872871d4bbb8509c0e369da3239cf387df106f1a166f0f731c399b5c1ef56ebdbea2fb563a5da3d4b0c62fa669e4b149bc97ea194e3702924e328b3e6fda7a4ba9892d29d4fbe202fdf841c5adf4732f56a901c4cc14b41d90c62766c9780c40d32ccc28c8aa6e420aa1a423be94bc4884bc2d0cbcffb1e54129dc9aba706f8b7cfd41648416229bf2a057c1fa316361b223dcc723e65d4d5f39d834fe73e84573b287c3ac46bf3b7fca78a334e3b56cb2e4dceeab0e85a5309160473bf88bce6cb5a23cf621477ef845c0c0b7961ef6d5d233f4fb97dfd26ba3cb90b31b2cec533b9b6a32fba6766c10f94f24c8e8ec3a89a02594b3d9cecdffb7c63881ebce7e29c88a0bd7194b9bac50b7a20f5a1513b892a08c47c75084e3d2b2d210cd0bb26a332e066ff86aaacc75ae93b511580d1444330626556a10c42b86d08f44d94b2eabf70203ae8bb31af85642424aa391a61efdf84c98ae264648a85c00d3c2cdbebdd0bde1e44856cb3e5ddece3cb8646f50b008d0afc7b668d51249f0092c9d697c8ca04bdf34c13506a503d6a1b60e5127f3b97b81453767920f36152874b4771914adf2e877efb719d883a0191945a91c6d2b0cc304d3465238afb743f9b8bee8ac9358e6807955617b58576def15ac6151ed666f722b32fc2dc5f7ba0e9d12bd04ac4d222d505603afa2ae6ac200e41709d4704938ac9be6d54b441bb8f95ff8b82afc33ee2214c223450b095d3927f55e4072fde134b22ba8b0add256ecd142b67b048b3918a8942dbd0dde95db3aeacc2133167a5449ffadfcb9097c3d714a347d14e3d49ff83d3ef0009cd00882ee210778a1347f2e0a2f5ce634d1cb037bdab549e9a6e4c4e96c445088b3d23cd8d33fcc540182f2275c524d8bfa5b60c58b0eaba4608ee50e3ff7fb3ac5c48782cac4a3de2e664c7376807d214b403b7bfbef9c7e7f3e792c4004a9447f1db53ce5296210793e171ee35090e0ed4512d1e4179a4fcea5786911cd6bffc8b6e6cba5ab443d28a955ef1becc7e3e9ed5611e6680f01621382f4f75f29586d317ad9e0eb0a9b8266298a02228bf4de7587a7c34f93abc803253f1ab801b1ce9dd54da3c6afa2647f835cfe1bd0d97513dc63ec7f88f0f527f572e23fcfa4a82920c63e4e5bd6f7dde3394749eaf931d176a51cc7c8aa838b4e982376e4a64305dd97dfe756e2b1d456bf76bfdbcf1afad10df9f820c43de0d0e5ad3fb7fb478a5ea308227d996e8ab776bb7c125b3a1d056bdf423736ffcef8a0ba1263a6980ea093cbb16316b425b96cdece3bd485f46f7f84ce732e92485ea3b6b9ca20b3f25e397348874ba5c586218840d76b123ddb85fac70eaa67447c74fcb18c48455c96c3dab4c76105367b8ab301d6989c3132726bf18b78fe5eb0fbf3f28d7ef13b144acb62ea5539c9a5922a0c889d0ce54a8f87d3d3818a397f010ea23ca43a8791f4d3d012987e0f555deed1fcfb6a8d8682e0fcad2f1bb9e0feb45588bfee22752e5052eefa1b28232338d9f9dd41bae625728c7088274de193dcf6b4adfa16e87f798c1000561e7123e468929c9fa3fd95c1dc1b4404c697790481c9380942f02f4e6bf501f9ef0b78965a110de819cd141f0cadb6b2161fe534c95ba8377507d18c1359b28b48cda59c741bdfe40a59d411e09538b6ad62f85cdf6b0cdd08e29086fc70a7aec0538eff9ced9bebb76e39eebc322e3069aef366d9c88a3e4e16aec5c71c0f2c596cd9c64a3d86a3a52222d1865827efea45ba82ae3b9c5c24b4fd370fcfb9de4bd1267b7014d8be2db6103967e06993b2f6e596d35107bbc22130b8e9e44cbfa15762529f8329e94d59750c6d1fe03ef678662a5ad1c5b150582b2e2539d6d971a9fcea7c3972ad45335b966054510d9e1c1a826132670fbc94c7107c27f2ee51d7e3b667eb922281bdacce0c38d9037b5e8bdce51a613a75f1a05c717e7fc487229595d55b3e4be5a5dcaed65ceb28ee61eeb765ffba3608df0b627ae2a4949550672f1ec38c79ae1a249955bddc3ddae1f11c801a5fe4c2a239bb68c2470c0c6cd9b738ae8506ae15dc88a6c1ad887ea500cdb69835264a5b765b6b55a0b9e7df6a6f783403a744b9f5f1fcfd1bdd24fa27eb2af1d6954339eed4359c0d4ca9562489bd82c190cca438cbaa3d62013dee87df4590c7cb1d662958c1b2862e1ad37f256e3f634496481cf7c6944c913c165414dee7c8868010342ad4ce2517b9812b6801f36ef6e3c3c41cb99d3834896d9cee77fa2badc18ffebe80b58d1bb23046270aff3f4c5a4b1b9be3feb22b6d53e685f20b261ab376907de1a4b6e859d94c5dd9e184eec0f8d29d09a19a39a486d7ea1e954a61c013f62f9dd077144c119ac8b14340741d2d5297d3020af175292c5de3ccbda2622e94b0aa5514fbaefdc659ae1dba02e2576415d6adc60da386715b8070b7c8f7dd63477ea8ba9c93f73c5adec4804ef35e7a82082207b7d8cc1333ca206c79af1646094aaf8964abca969c0709d5e0ee184bce696e52baafa1b303f4ca60c9725d2a353c51ec2255cbee24cde17c7f395655e58aefe3efdd0d3958eef87eb25b450ee313d5c1a6fd16dc9e51658b6ea9a2e2ba82fbbe0f5c7303d9a49d4f93abe1fad3ec737c8405b0e80d0250b95963d1c8669ee949401198c71a7811ba026e8a03057f30bd5483d0a585081cf473742983fe9dc2e2ad61c004a72e9e92d447eb26f7d7df7a0be2a170532490428f951ca95683eede16306793fbfb1953fd08e53ecfbec5f15bc958df934976ee3f600ffda0e8835990593adaac740f5730f383b4d59356714e30381c46b6bfbc9d6ed38c39a46ad0a8fe82afa15998fb892efec1f565adb69d073ffb32f6579a1a94d4af9bc627ed64459ce616b666ee978328d3b390b17a5f278959ebb27ad00ede4ee6d1f6e9d96bc85598a5bc0207c6daafb1c13b2ba9cace487db28df2a0c26c51360ae12fb3e6a02502068f27facfa8977718569048676680fcc15c652d1c37e3ada4114e75ba738d8f2e9dca1cd7bf8c2a89192418631490bd355adc56514b8b82ca99cbc1fa6ad7e4836dd1a37583a85357ccc2d99c2f8d28069a9d9576980b08df940f1303787f8fe84e4f3d031e93da2a0c11099147778e9efb3a66ad49248022ce71f15eafb0ded29e6f90a2b5f18dde459f6cb36aa698b38df8fe1828c520bd762d8f16d407233adb00207db064032a0a1c7e1dba984b61e59a0d19b6819694f86f9e2cc7339ddffeb4fafd4828855af1da239c610cf695347168d1efe73daa6157be1ee699e4da5c6a42c8ec42966479b0856d6204b077693c51fa255531bae443e28297e27b47d3f96b4fd9b25a81ba6b935eb036c109106507e8e7f366e086a94af8091a84f18bbc2e9f796119e9f6fe70ca8561b15d0f1a49552d1572b579fc14f5714de9ac2ed88eb196596e96a05a72bf10467635e8f93f4c186662d6538ad236103367cca3ea30405792dff453119419b4618c923808a8a0d5e7fa791355511b290e9207afb63cd5384d2900528cc5752f5435e6ee93e204cb39ef2aa0284dcd736e4dc7521fcd45034fbcf79df13972b7455b48ca1e90b5995abb8619e832ae844e94467a389816fef550555ae9cb6884a6c7e655edf35a0c46c86ede4b6a7dd73cb86aa58ca25c54a3bcd100d2a6ef5702df9a991807b09b797b3acf4a5984f011a50a1065c57ff9e64a96679ae1e9c19315729f6e13ff24884e20a9a8cfd9fb974d786ffffc8b10bba7f791010971816205366b5ccb0cee5f320fd2d069381f1e076d5f16e12404dfd7aee023c7e23dee00769ece9bfa02cd644fc5534112e4134d065ce2c8e7e48f7eb9669bf239b70cf5c331d10667240437f143c8cb07a6448f2a5d55df682dff71149e2cb965ace744ece405078860bb17c3cc14862f4c13d8a3b7910966ac1e90bcec79c47d5b9b75e864e89565510c2f5107b0f5b2f2472da9970721af497484c797237a792613ec8f81e1e6e13a7f171ec64c487a1862796655e68fa94c99240e0d4afed5236ff04563a3a4cb21746133ff90e87bf77b3cbb9bb996b7159ea386564d67141c3b728ba51d7e7c008f7b430605c7a81d5f731426996b5c27a9e340fbcc4431e5f12d81e9d7d0ec724e66084f5020ef0b653c61a0ad24b84e84c4abc0583ecb3dcf9570aab01106793699bbf1c2a55ec5b936d46f091e74ad5c4e1eba59b2f148a51c5d6b64cbb0db4b700562b094fc533bfe80805f7080c93dee2defb492506958a19f45a7aa0d7e9fb4eb10b2212ab3959372c572b79ee1ce51b71e3ed49775c249c19cf7dd21cc0ff4e347bfb0d4b0c26818d29428edf8300182629bc9a9137fda66b240a8f79744ed981ce83ea387b81b9c46beb61f2f637f69aa8bc177cf4e4967f938ea5ae23cc4c5365b1872437136426530e9a71ade6bfe243802a0c052c307d92c6f3012d025bc6f88fcec63b182edc43d347d7151e4d62dd16e4b4fe546c8011af377a2f017c18c66491b6d9d5cd20d8c34248f2f1f66daf64077f2ea00d67aa85ec031cabf94f61add2edce2d9a6d66f300aedc4cd0156d3ac67f2db2cd542830942fdfc7df7c68932ad89951d8b5d68efdc6b824202066c22155f597269dd4c6c5fe0fb4dc1fe58edb16f70c600b526"}, 0x1008, 0x800) r4 = syz_io_uring_setup(0x1779, &(0x7f0000001340)={0x0, 0xdf11, 0x0, 0x1, 0x2f3, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000013c0), &(0x7f0000001400)) syz_io_uring_setup(0x3da9, &(0x7f0000001440)={0x0, 0x42d4, 0x2, 0x1, 0x23a, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000014c0), &(0x7f0000001500)) r5 = gettid() migrate_pages(r5, 0x4, &(0x7f0000001540)=0x400, &(0x7f0000001580)=0x10000) 21:40:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x28}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xaf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x148, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ffc000}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5b95}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x18}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x840) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x860000}, 0xc, &(0x7f0000000400)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r3 = syz_open_dev$vcsu(&(0x7f0000000480), 0x8000, 0x410200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000680)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5d}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x42}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6f}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000841) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x44202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x20, 0x45}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40), 0x204401, 0x0) r10 = syz_open_dev$vcsu(&(0x7f0000000b40), 0x6, 0x101000) getpeername(r9, &(0x7f0000000c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c80)=0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x44884) [ 83.064136] audit: type=1400 audit(1730410846.106:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:40:46 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = io_uring_setup(0x66f5, &(0x7f0000000000)={0x0, 0x986d, 0x1, 0x0, 0x13a}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x3c}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4a}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb7}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000007, 0x50, r0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x20, 0x3, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c980}, 0x20000000) r4 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x80000000, 0x80) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x130, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x56e}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x4, 0x9, 0x23, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8000, 0x6, 0x2000}}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xfc1e5158e0531421}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_O_TEI={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x804) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000900)={0x4, [0x3, 0xc9ec], 0x9}, 0x10) r8 = syz_open_dev$vcsu(&(0x7f0000000940), 0x7fffffff, 0x8000) getpeername(r8, &(0x7f0000000980)=@tipc=@name, &(0x7f0000000a00)=0x80) 21:40:46 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) sched_setparam(0xffffffffffffffff, &(0x7f00000000c0)=0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)=""/18) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000180)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = gettid() setpgid(r0, 0xffffffffffffffff) ptrace$poke(0x5, r0, &(0x7f00000001c0), 0x100000000) msgget$private(0x0, 0x113) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000240)=0x200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x500, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8100400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x44081) socketpair(0x2b, 0x0, 0x5, &(0x7f0000000400)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb6, 0x39}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c054}, 0x4000801) 21:40:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9a4}, @broadcast, @device_a, @random="ce6f4df1890a", {0x2, 0x4}}, @ver_80211n={0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x1}}, 0x9, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7f, 0x1a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r1, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffff4d, 0x6a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x64}, 0x1, 0x0, 0x0, 0x894}, 0xc80) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x101100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x84088408}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xae}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x620402, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x20}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c842}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r4) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r7, 0x402, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x14}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x804) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r4) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x60, r8, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2c}}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x48000) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x49}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000}, 0x40045) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001040), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xc0, r9, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa97}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x9}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0x8005) [ 84.398056] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.402268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.404132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.408631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.418206] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.419802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.462349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.463722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.464986] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.474125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.477191] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.478347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.522574] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.531240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.536651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.541358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.543819] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.549278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.659851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.668522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.669860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.671171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.679171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.688035] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.690090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.702807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.703641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.709196] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.727214] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.736299] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.738256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.739041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.740169] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.743681] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.744560] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.745686] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.746557] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.747888] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.749100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.749856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.757136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.759655] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.791368] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.798358] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.806039] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.811652] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.823639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.825617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.489820] Bluetooth: hci0: command tx timeout [ 86.552980] Bluetooth: hci1: command tx timeout [ 86.615445] Bluetooth: hci2: command tx timeout [ 86.808199] Bluetooth: hci4: command tx timeout [ 86.809071] Bluetooth: hci5: command tx timeout [ 86.872049] Bluetooth: hci6: command tx timeout [ 86.872652] Bluetooth: hci7: command tx timeout [ 86.873270] Bluetooth: hci3: command tx timeout [ 88.535039] Bluetooth: hci0: command tx timeout [ 88.598963] Bluetooth: hci1: command tx timeout [ 88.663007] Bluetooth: hci2: command tx timeout [ 88.855974] Bluetooth: hci4: command tx timeout [ 88.856455] Bluetooth: hci5: command tx timeout [ 88.920975] Bluetooth: hci3: command tx timeout [ 88.921540] Bluetooth: hci6: command tx timeout [ 88.926961] Bluetooth: hci7: command tx timeout [ 90.584061] Bluetooth: hci0: command tx timeout [ 90.648003] Bluetooth: hci1: command tx timeout [ 90.711981] Bluetooth: hci2: command tx timeout [ 90.903110] Bluetooth: hci5: command tx timeout [ 90.904181] Bluetooth: hci4: command tx timeout [ 90.967951] Bluetooth: hci6: command tx timeout [ 90.968131] Bluetooth: hci7: command tx timeout [ 90.968410] Bluetooth: hci3: command tx timeout [ 92.632069] Bluetooth: hci0: command tx timeout [ 92.696012] Bluetooth: hci1: command tx timeout [ 92.759051] Bluetooth: hci2: command tx timeout [ 92.952008] Bluetooth: hci4: command tx timeout [ 92.952041] Bluetooth: hci5: command tx timeout [ 93.015314] Bluetooth: hci3: command tx timeout [ 93.015355] Bluetooth: hci7: command tx timeout [ 93.016155] Bluetooth: hci6: command tx timeout [ 147.040957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.042443] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.044595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.047420] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.049345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.051240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.177992] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.179544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.182572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.184433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.185558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.187756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.190460] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.199588] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.201883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.202985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.211150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.218523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.238793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.242992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.245055] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.246766] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.249429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.250428] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.255100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.256528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.292193] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.299850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.301617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.308124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.315005] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.315844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.321867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.325155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.326656] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.329158] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.329565] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.341015] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.343773] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.345001] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.346162] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.354710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.392592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.394789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.404439] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.405546] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.410698] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.411981] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.079241] Bluetooth: hci0: command tx timeout [ 149.271017] Bluetooth: hci2: command tx timeout [ 149.335821] Bluetooth: hci1: command tx timeout [ 149.335861] Bluetooth: hci3: command tx timeout [ 149.400118] Bluetooth: hci7: command tx timeout [ 149.464000] Bluetooth: hci4: command tx timeout [ 149.464022] Bluetooth: hci6: command tx timeout [ 149.527099] Bluetooth: hci5: command tx timeout [ 151.127316] Bluetooth: hci0: command tx timeout [ 151.320078] Bluetooth: hci2: command tx timeout [ 151.382973] Bluetooth: hci1: command tx timeout [ 151.383042] Bluetooth: hci3: command tx timeout [ 151.448962] Bluetooth: hci7: command tx timeout [ 151.511072] Bluetooth: hci6: command tx timeout [ 151.511178] Bluetooth: hci4: command tx timeout [ 151.574963] Bluetooth: hci5: command tx timeout [ 153.175091] Bluetooth: hci0: command tx timeout [ 153.366991] Bluetooth: hci2: command tx timeout [ 153.431014] Bluetooth: hci3: command tx timeout [ 153.431049] Bluetooth: hci1: command tx timeout [ 153.494957] Bluetooth: hci7: command tx timeout [ 153.559103] Bluetooth: hci4: command tx timeout [ 153.560121] Bluetooth: hci6: command tx timeout [ 153.623015] Bluetooth: hci5: command tx timeout [ 155.222982] Bluetooth: hci0: command tx timeout [ 155.415990] Bluetooth: hci2: command tx timeout [ 155.478990] Bluetooth: hci3: command tx timeout [ 155.480035] Bluetooth: hci1: command tx timeout [ 155.542991] Bluetooth: hci7: command tx timeout [ 155.607081] Bluetooth: hci6: command tx timeout [ 155.607552] Bluetooth: hci4: command tx timeout [ 155.672430] Bluetooth: hci5: command tx timeout [ 209.315668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.318503] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.322489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.326638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.329989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.333740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.392557] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.396169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.407105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.412613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.415473] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.418322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.518493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.521238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.524390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.528062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.531117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.533390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.604228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.615353] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.628979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.638275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.656212] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.664147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.718262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.722549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.726134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.731639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.737802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.747119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.766216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.789032] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.796534] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.815274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.826843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.842432] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.049704] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.058154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.068463] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.109727] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.139544] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.147311] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.242631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.251250] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.255063] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.323234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.349135] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.359378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.416065] Bluetooth: hci0: command tx timeout [ 211.479983] Bluetooth: hci1: command tx timeout [ 211.608169] Bluetooth: hci2: command tx timeout [ 211.799956] Bluetooth: hci4: command tx timeout [ 211.800675] Bluetooth: hci3: command tx timeout [ 212.119012] Bluetooth: hci5: command tx timeout [ 212.439077] Bluetooth: hci7: command tx timeout [ 212.503973] Bluetooth: hci6: command tx timeout [ 213.462968] Bluetooth: hci0: command tx timeout [ 213.526980] Bluetooth: hci1: command tx timeout [ 213.656052] Bluetooth: hci2: command tx timeout [ 213.847179] Bluetooth: hci3: command tx timeout [ 213.848606] Bluetooth: hci4: command tx timeout [ 214.168943] Bluetooth: hci5: command tx timeout [ 214.486970] Bluetooth: hci7: command tx timeout [ 214.551114] Bluetooth: hci6: command tx timeout [ 215.510976] Bluetooth: hci0: command tx timeout [ 215.575221] Bluetooth: hci1: command tx timeout [ 215.703021] Bluetooth: hci2: command tx timeout [ 215.894994] Bluetooth: hci4: command tx timeout [ 215.895481] Bluetooth: hci3: command tx timeout [ 216.214955] Bluetooth: hci5: command tx timeout [ 216.535921] Bluetooth: hci7: command tx timeout [ 216.599019] Bluetooth: hci6: command tx timeout [ 217.559041] Bluetooth: hci0: command tx timeout [ 217.623162] Bluetooth: hci1: command tx timeout [ 217.751044] Bluetooth: hci2: command tx timeout [ 217.942994] Bluetooth: hci4: command tx timeout [ 217.943474] Bluetooth: hci3: command tx timeout [ 218.264034] Bluetooth: hci5: command tx timeout [ 218.583947] Bluetooth: hci7: command tx timeout [ 218.647936] Bluetooth: hci6: command tx timeout [ 271.661551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.668684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.670149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.673902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.678165] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.680526] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.721081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.727140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.731018] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.744080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.756072] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.758087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.842152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.846259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.849218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.855157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.857705] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.863334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.903706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.906239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.907141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.909102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.909981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.913118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.915897] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.917547] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.918686] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.920175] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.921177] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.922581] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.979399] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.995011] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.006983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.010962] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.012079] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.014683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.016388] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.024420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.025734] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.040070] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.042017] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.043500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.047081] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.049131] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.049476] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.054217] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.056697] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 272.057126] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.750985] Bluetooth: hci0: command tx timeout [ 273.814955] Bluetooth: hci1: command tx timeout [ 273.944821] Bluetooth: hci2: command tx timeout [ 274.006968] Bluetooth: hci3: command tx timeout [ 274.007903] Bluetooth: hci4: command tx timeout [ 274.071164] Bluetooth: hci5: command tx timeout [ 274.135975] Bluetooth: hci7: command tx timeout [ 274.136675] Bluetooth: hci6: command tx timeout [ 275.798993] Bluetooth: hci0: command tx timeout [ 275.863145] Bluetooth: hci1: command tx timeout [ 275.991910] Bluetooth: hci2: command tx timeout [ 276.054930] Bluetooth: hci4: command tx timeout [ 276.055429] Bluetooth: hci3: command tx timeout [ 276.120028] Bluetooth: hci5: command tx timeout [ 276.183158] Bluetooth: hci6: command tx timeout [ 276.183644] Bluetooth: hci7: command tx timeout [ 277.847979] Bluetooth: hci0: command tx timeout [ 277.912013] Bluetooth: hci1: command tx timeout [ 278.041034] Bluetooth: hci2: command tx timeout [ 278.103172] Bluetooth: hci4: command tx timeout [ 278.104551] Bluetooth: hci3: command tx timeout [ 278.169924] Bluetooth: hci5: command tx timeout [ 278.231122] Bluetooth: hci7: command tx timeout [ 278.232894] Bluetooth: hci6: command tx timeout [ 279.896909] Bluetooth: hci0: command tx timeout [ 279.959183] Bluetooth: hci1: command tx timeout [ 280.087916] Bluetooth: hci2: command tx timeout [ 280.151026] Bluetooth: hci4: command tx timeout [ 280.151070] Bluetooth: hci3: command tx timeout [ 280.215092] Bluetooth: hci5: command tx timeout [ 280.278948] Bluetooth: hci7: command tx timeout [ 280.280108] Bluetooth: hci6: command tx timeout [ 335.251167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.252579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.253606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.257320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.275645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.302651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.303968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.305129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.305997] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.310401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.312273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.319933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.341133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.346490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.348501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.352715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.354787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.361377] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.365109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.368137] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.372147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.376762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.390962] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.394229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.526155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.528567] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.546516] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.556980] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.557957] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.562080] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.562171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.566516] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.571210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.572266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.572476] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.575211] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.580508] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.583790] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.586301] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.591096] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.593741] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.595281] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.612183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.612990] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.616148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.617001] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.648120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.684101] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.367203] Bluetooth: hci0: command tx timeout [ 337.367394] Bluetooth: hci1: command tx timeout [ 337.431919] Bluetooth: hci3: command tx timeout [ 337.432651] Bluetooth: hci2: command tx timeout [ 337.623966] Bluetooth: hci7: command tx timeout [ 337.751116] Bluetooth: hci6: command tx timeout [ 337.752069] Bluetooth: hci4: command tx timeout [ 337.752639] Bluetooth: hci5: command tx timeout [ 339.414924] Bluetooth: hci0: command tx timeout [ 339.415962] Bluetooth: hci1: command tx timeout [ 339.478947] Bluetooth: hci2: command tx timeout [ 339.479430] Bluetooth: hci3: command tx timeout [ 339.670929] Bluetooth: hci7: command tx timeout [ 339.800006] Bluetooth: hci5: command tx timeout [ 339.800532] Bluetooth: hci4: command tx timeout [ 339.801300] Bluetooth: hci6: command tx timeout [ 341.463106] Bluetooth: hci1: command tx timeout [ 341.463167] Bluetooth: hci0: command tx timeout [ 341.527104] Bluetooth: hci3: command tx timeout [ 341.527566] Bluetooth: hci2: command tx timeout [ 341.720007] Bluetooth: hci7: command tx timeout [ 341.847057] Bluetooth: hci6: command tx timeout [ 341.847224] Bluetooth: hci4: command tx timeout [ 341.847552] Bluetooth: hci5: command tx timeout [ 343.511190] Bluetooth: hci1: command tx timeout [ 343.512734] Bluetooth: hci0: command tx timeout [ 343.574926] Bluetooth: hci2: command tx timeout [ 343.576223] Bluetooth: hci3: command tx timeout [ 343.767950] Bluetooth: hci7: command tx timeout [ 343.897005] Bluetooth: hci4: command tx timeout [ 343.897574] Bluetooth: hci5: command tx timeout [ 343.898923] Bluetooth: hci6: command tx timeout [ 348.741056] hrtimer: interrupt took 3706246 ns VM DIAGNOSIS: 21:45:56 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000001 RDX=1ffff1100d9c134f RSI=ffff8880132ff7f0 RDI=ffff88806ce09ac8 RBP=0000000000000000 RSP=ffff88806ce09a08 R8 =0000000000000001 R9 =ffff88806ce09ab8 R10=000000000003c001 R11=00000000000c136a R12=ffff88806ce09ad8 R13=ffff88806ce09ac0 R14=ffff8880132ff7f0 R15=ffff88806ce09a78 RIP=ffffffff81149b44 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f72e75b0028 CR3=000000002bb0c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff813e8f70 RCX=0000000000000001 RDX=ffff888026a279c8 RSI=ffff888026a279b0 RDI=ffff88806cf09a88 RBP=ffff88806cf09b10 RSP=ffff88806cf09a78 R8 =0000000000000001 R9 =ffff88806cf09ab8 R10=000000000003c001 R11=00000000000223e3 R12=ffff88806cf09b40 R13=0000000000000000 R14=ffff888024510000 R15=ffff8880335d2400 RIP=ffffffff810d198d RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555d64254c8 CR3=0000000024196000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000