Warning: Permanently added '[localhost]:18535' (ECDSA) to the list of known hosts. 2024/11/08 20:57:02 fuzzer started 2024/11/08 20:57:03 dialing manager at localhost:46317 syzkaller login: [ 69.816466] cgroup: Unknown subsys name 'net' [ 69.900743] cgroup: Unknown subsys name 'cpuset' [ 69.914349] cgroup: Unknown subsys name 'rlimit' 2024/11/08 20:57:20 syscalls: 205 2024/11/08 20:57:20 code coverage: enabled 2024/11/08 20:57:20 comparison tracing: enabled 2024/11/08 20:57:20 extra coverage: enabled 2024/11/08 20:57:20 setuid sandbox: enabled 2024/11/08 20:57:20 namespace sandbox: enabled 2024/11/08 20:57:20 Android sandbox: enabled 2024/11/08 20:57:20 fault injection: enabled 2024/11/08 20:57:20 leak checking: enabled 2024/11/08 20:57:20 net packet injection: enabled 2024/11/08 20:57:20 net device setup: enabled 2024/11/08 20:57:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/08 20:57:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/08 20:57:20 USB emulation: enabled 2024/11/08 20:57:20 hci packet injection: enabled 2024/11/08 20:57:20 wifi device emulation: enabled 2024/11/08 20:57:20 802.15.4 emulation: enabled 2024/11/08 20:57:20 fetching corpus: 0, signal 0/0 (executing program) 2024/11/08 20:57:21 starting 8 fuzzer processes 20:57:21 executing program 0: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xf569763528a44d77) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xb}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0xc}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x80}}, 0x40000) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x8000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x18000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x4001) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810) r5 = socket$netlink(0x10, 0x3, 0x7) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa690}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48831}, 0x20008000) write$bt_hci(0xffffffffffffffff, &(0x7f00000008c0)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0xff01, 0x1ff, 0x1ff, 0xb03e, 0xff, 0x7c1}}}, 0x12) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={<r6=>0x0, @multicast1, @remote}, &(0x7f00000009c0)=0xc) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x93d74437909b3a0d}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xc4161453feb5371}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) 20:57:21 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', <r0=>0x0}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r2=>0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xf29}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x47085973b9bb2c13}, 0x40800) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4e}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x20004040) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x5ce3, 0x9, 0xc6c, 0xaa58}, 0x10) r4 = memfd_secret(0x0) recvmsg(r4, &(0x7f0000000540)={&(0x7f00000003c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/161, 0xa1}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x6dfb078688b9c102}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x44080) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xd046102}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_VLANID={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f00000007c0)=0x74, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r5=>0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x48022}, 0x20044000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x14}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x205}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x20048010) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000c80)=0x2, 0x4) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000cc0)=""/168) syz_open_pts(r4, 0x202000) 20:57:21 executing program 2: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'team_slave_1\x00', @ifru_flags}}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x1) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x2, 0x1f, 0xfffffffd, 0x3]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040050}, 0x20000000) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/133, 0x85}, {&(0x7f0000000580)=""/111, 0x6f}], 0x2, &(0x7f0000000640)=""/174, 0xae}, 0x110) r1 = memfd_secret(0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, r0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) r2 = memfd_secret(0x0) recvmmsg(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/180, 0xb4}, {&(0x7f0000000dc0)=""/64, 0x40}, {&(0x7f0000000e00)=""/108, 0x6c}, {&(0x7f0000000e80)=""/98, 0x62}], 0x4, &(0x7f0000000f40)=""/101, 0x65}, 0x2}], 0x1, 0x23, &(0x7f0000001000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001140)={0x1c, 0x0, &(0x7f0000001040)=[@clear_death, @dead_binder_done], 0xaa, 0x0, &(0x7f0000001080)="eac7bee225d0b9f9cb43de6d403160087da4fabe0bed419d6f497ff22a13438596e0e42a99106eddbe989a9eec6be82ecdb3a2363d42682b9dcff6396cabfba59b7adbd22c7c28e421935c059a605291e68190dce45079556aab498c84ae0b384993f7da9faf513135b89faaba6a93f0e3c3b04c1447cf7eea3e9e480cf2c6268f877aa8c7c2b97a405bc7234bd6de692f4ee458e9bd169bb6f0d50fd768d7ff997fc26b54c4d8c4005a"}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, r3, 0xa, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000a4}, 0x4000004) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, 0x0, 0xb04e2ed2f5ca5e41, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x404c851) connect(r2, &(0x7f00000013c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0xfffffff8, 0x2}, 0x80) r5 = memfd_secret(0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket(0x2681d79286dd8088, 0x5, 0x8) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001900)={0x110, 0x0, &(0x7f00000016c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001440)={@fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x10a, 0x3}}, &(0x7f00000014c0)={0x0, 0x18, 0x30}}}, @acquire, @free_buffer, @decrefs={0x40046307, 0x2}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fda={0x66646185, 0x2, 0x1, 0xc}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x7, 0x0, 0xc}}, &(0x7f0000001580)={0x0, 0x20, 0x38}}, 0x1000}, @free_buffer, @dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001600)={@fda={0x66646185, 0x9, 0x1, 0x2e}, @ptr={0x70742a85, 0x0, &(0x7f00000015c0)=""/15, 0xf, 0x2, 0x27}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000001680)={0x0, 0x20, 0x48}}}], 0xdb, 0x0, &(0x7f0000001800)="762126e63dd7ce5bd2ea7fac98cd39dd80641d091b17c93487628319535166d3e6049a0f8cc49f0aa20bf8142950512a5770830d27eb4035738e2b1fae496035cc37baad6f47f26db43067c61dcd847afe5e33a8ba3fcc86c1068cabcaffa2f1d67e5d108e89dc2a9e4635abe84ee63da878590ca95485fcce0f421b15889b3da17e4f621f5496058e28206dfab9355ec8ab3f571866c4369e3d87d32d3424c0f30401e5289676ffe31771dc8a062b3147098c39df48fe6cfa3769007920ee3ce8a84babb6844616b1a597c36cf7fd07ab41e59226ade13a0ce104"}) 20:57:21 executing program 3: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x505b}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8005}, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x604100, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x10001) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000001c0)=[0x8, 0x5]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x3}, @register_looper], 0x48, 0x0, &(0x7f0000000240)="516f00173d37052434a322ddb7f2d91e15acf90de99f6ea07edc57962f5769642d453ed67d0847e617afdae62c976ba7bd0977702b2f6a245afe14d794e184b17a3310d91ac2651e"}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = socket(0x2, 0x4, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb12}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x3c}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x12}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4c}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8882}, 0x6000) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) semop(0xffffffffffffffff, &(0x7f0000000480)=[{0x3, 0x3, 0x1000}], 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000500)=""/5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x10, 0x0, &(0x7f0000000540)=[@request_death={0x400c630e, 0x1}], 0xe7, 0x0, &(0x7f0000000580)="d078f8b423c5e144dc8a874573ad1aed341795713d83d3bb832a04a02cc7e2d521424728bd6a1fb69180f9867299b518b3f1cc5e2dbe5e97b10a3d9a0d004ef5bb94630263d12fcec7ce96b038ed134909f90ad5478e73b299c96ae60a1fc67f11bde66350ffd6d5eb27f9bbb36af3b25987fc99a5e8bf3190c588b289494e8b6eb42cdb087235f79ac265541fcdffad8a5812b76cd99118dced87b145455373c3076c4356d7a027e8c8833e42a21fa26ee8e31977d9c58d331318dec4e2a8720eac01095a6f2c96c3b96410d1df8b7a39a30d2c9757e587864b83621934bcc9f2c52c782d129a"}) ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f00000006c0)="ff804efa4b337ec464a71d27bfaa20fd50b51a05e3727373984aac098e3e88466215b9d89ded247047ab222b2651cf7ac2c31ff31a5c3a508b647d918ee5b35d7bf93731e9cc7f") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x50eae22b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000800}, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000900)={0x4, 0x3d, &(0x7f00000008c0)="0f0cbca73031a4a9dd9711d6e96d66d659dcf7f4b69fba1f34694541a2c7952bbe6b5e212e60d45de9b66ee483d75808b9697735d3129963c611c4cac6"}) syz_open_dev$evdev(&(0x7f0000000940), 0x20, 0x20c40) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000980), 0xb03, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, 0x0, 0x9fd0bc07e903a672, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1a}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4004081) 20:57:21 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x2, 0xffff, 0x40, 0x5}, 0x10) r1 = accept(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x48000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r5 = memfd_secret(0x80000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r5) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000580), 0x80001, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44041}, 0x4040004) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000800)={'wg2\x00'}) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000840), 0x400, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r5) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r8, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x445) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x60000011) [ 87.976453] audit: type=1400 audit(1731099441.855:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:57:21 executing program 6: semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000000)=""/220) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000100)=""/244) r0 = semget(0x1, 0x2, 0x41) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000200)=""/41) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000240)=""/81) semctl$IPC_RMID(r0, 0x0, 0x0) semget$private(0x0, 0x3, 0x802) r1 = semget$private(0x0, 0x0, 0x200) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f00000002c0)=""/33) semop(r1, &(0x7f0000000300)=[{0x7, 0x1}, {0x7, 0x3322, 0x1000}, {0x0, 0x5, 0x800}, {0x4, 0x4, 0x1000}], 0x4) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x1, 0x0, 0x102) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000019c0)={0x158, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x7, 0x2, 0xe}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/71, 0x47, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f0000000480)={0x0, 0x20, 0x48}}, 0x440}, @increfs_done={0x40106308, 0x2}, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/85, 0x55, 0x2, 0x3a}, @flat=@handle={0x73682a85, 0x10a, 0x3}}, &(0x7f00000005c0)={0x0, 0x18, 0x40}}, 0x400}, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@fd, @flat=@weak_handle={0x77682a85, 0x0, 0x2}, @fd}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000780)={@fd, @fda={0x66646185, 0x3, 0x1, 0x17}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/150, 0x96, 0x2, 0x21}}, &(0x7f0000000800)={0x0, 0x18, 0x38}}}], 0x1000, 0x0, &(0x7f00000009c0)="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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001a00)) r5 = semget$private(0x0, 0x0, 0x828) semctl$GETZCNT(r5, 0x0, 0xf, &(0x7f0000001a40)=""/19) semop(0xffffffffffffffff, &(0x7f0000001a80)=[{0x4, 0x401}, {0x2, 0x9c5, 0x800}, {0x4, 0x9, 0x800}, {0x0, 0x1000}, {0x3, 0x9, 0x1000}, {0x1, 0x200, 0x2800}, {0x1, 0x0, 0x1000}, {0x4, 0x33da, 0x800}, {0x1, 0x0, 0x800}], 0x9) 20:57:21 executing program 5: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xd5a0, 0x1917237c]) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/179) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0xfc, 0x20, 0x1, 0x2, @local, @remote, 0x8000, 0x1, 0x5, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800004, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}, {@msize={'msize', 0x3d, 0x64c}}, {@version_L}, {@uname={'uname', 0x3d, 'ip6tnl0\x00'}}, {@cache_fscache}, {@version_9p2000}, {@uname={'uname', 0x3d, 'syztnl2\x00'}}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}], [{@smackfsroot={'smackfsroot', 0x3d, 'ip6tnl0\x00'}}, {@smackfsdef}, {@dont_measure}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '+#.'}}, {@obj_type={'obj_type', 0x3d, 'ip6tnl0\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/hpet\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, ']'}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/hpet\x00'}}]}}) r3 = accept(r1, &(0x7f00000004c0)=@nl=@unspec, &(0x7f0000000540)=0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x90) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000780)) pipe2(&(0x7f0000000800)={<r5=>0xffffffffffffffff}, 0x0) socketpair(0x11, 0x80000, 0x80000000, &(0x7f0000002dc0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) pipe2(&(0x7f0000002e00)={<r7=>0xffffffffffffffff}, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002e40)={<r8=>0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000002f40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x70, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000000}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000841) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002f80), 0x440200, 0x0) openat$cgroup_type(r9, &(0x7f0000002fc0), 0x2, 0x0) 20:57:21 executing program 7: semctl$IPC_INFO(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=""/20) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000040)=""/2) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$GETPID(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)=""/112) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000100)=""/77) r0 = semget$private(0x0, 0x1, 0x1) semop(r0, &(0x7f0000000180)=[{0x0, 0x8, 0x1000}, {0x1, 0x1, 0x1400}, {0x3, 0x4}, {0x4}, {0x2, 0x2}, {0x0, 0x2, 0x1000}, {0x0, 0x5, 0x1000}], 0x7) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x3, 0x589) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f00000001c0)=""/100) r2 = semget$private(0x0, 0x1, 0x401) semctl$GETNCNT(r2, 0x2, 0xe, &(0x7f0000000240)=""/4096) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001240)={0x0, <r3=>0x0}, &(0x7f0000001280)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000012c0)={{0x0, 0x0, 0xee00, r3, 0xffffffffffffffff, 0x14, 0x2}, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x6}) r4 = semget(0x0, 0x2, 0x0) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000001340)=""/5) pipe2(&(0x7f0000001380)={<r5=>0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000001440)=@buf={0x55, &(0x7f00000013c0)="4630b7ebb584b2a1a26273ab91727e5273adaa9a57b5f9b46cb548ebd87521f90bcc30b28c152d0a8b09844ad49989951924032b9c822398fc1d3944ec60a4a02ed17f0b6237e541006c24c7cbb4ec32b20e5d1fbf"}) r6 = semget(0x0, 0x4, 0x0) semctl$GETVAL(r6, 0x2, 0xc, &(0x7f0000001480)=""/221) [ 89.340972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.342441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.349450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.354549] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.359344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.362846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.363680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.364566] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.368010] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.368886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.369600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.375648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.385287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.398116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.399903] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.400956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.405593] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.406843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.412970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.415209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.416628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.418568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.420248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.421496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.424344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.425559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.429026] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.430163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.448799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.450022] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.453933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.455438] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.457093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.463953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.467995] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.469523] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.477323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.481953] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.483389] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.485223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.489205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.500418] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.513987] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.515690] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.516791] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.521396] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.539997] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.541500] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.435132] Bluetooth: hci2: command tx timeout [ 91.435191] Bluetooth: hci1: command tx timeout [ 91.499212] Bluetooth: hci4: command tx timeout [ 91.499250] Bluetooth: hci3: command tx timeout [ 91.499851] Bluetooth: hci0: command tx timeout [ 91.500014] Bluetooth: hci5: command tx timeout [ 91.627011] Bluetooth: hci6: command tx timeout [ 91.627150] Bluetooth: hci7: command tx timeout [ 93.483856] Bluetooth: hci2: command tx timeout [ 93.484343] Bluetooth: hci1: command tx timeout [ 93.546985] Bluetooth: hci3: command tx timeout [ 93.547474] Bluetooth: hci0: command tx timeout [ 93.547666] Bluetooth: hci5: command tx timeout [ 93.548366] Bluetooth: hci4: command tx timeout [ 93.674820] Bluetooth: hci7: command tx timeout [ 93.675941] Bluetooth: hci6: command tx timeout [ 95.530833] Bluetooth: hci2: command tx timeout [ 95.531217] Bluetooth: hci1: command tx timeout [ 95.594822] Bluetooth: hci4: command tx timeout [ 95.595004] Bluetooth: hci0: command tx timeout [ 95.595596] Bluetooth: hci3: command tx timeout [ 95.596160] Bluetooth: hci5: command tx timeout [ 95.723018] Bluetooth: hci6: command tx timeout [ 95.723584] Bluetooth: hci7: command tx timeout [ 97.578818] Bluetooth: hci1: command tx timeout [ 97.581936] Bluetooth: hci2: command tx timeout [ 97.642902] Bluetooth: hci5: command tx timeout [ 97.643385] Bluetooth: hci4: command tx timeout [ 97.643892] Bluetooth: hci3: command tx timeout [ 97.644341] Bluetooth: hci0: command tx timeout [ 97.770805] Bluetooth: hci6: command tx timeout [ 97.770903] Bluetooth: hci7: command tx timeout [ 151.988033] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.991458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.993006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.994146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.996670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.004902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.007318] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.008375] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.016972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.032671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.055505] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.056512] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.058025] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.065271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.068042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.070035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.074082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.076953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.078919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.083932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.086083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.097976] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.105600] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.107310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.133503] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.138087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.150915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.156908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.159375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.194744] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.201442] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.206179] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.207655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.209540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.221500] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.224061] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.225818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.231436] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.243130] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.262165] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.268538] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.279890] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.298782] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.300896] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.305654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.331928] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.374931] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.400924] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.091128] Bluetooth: hci1: command tx timeout [ 154.091900] Bluetooth: hci0: command tx timeout [ 154.154822] Bluetooth: hci2: command tx timeout [ 154.220861] Bluetooth: hci3: command tx timeout [ 154.346865] Bluetooth: hci4: command tx timeout [ 154.348128] Bluetooth: hci6: command tx timeout [ 154.476750] Bluetooth: hci5: command tx timeout [ 154.538785] Bluetooth: hci7: command tx timeout [ 156.138881] Bluetooth: hci0: command tx timeout [ 156.140502] Bluetooth: hci1: command tx timeout [ 156.202825] Bluetooth: hci2: command tx timeout [ 156.267848] Bluetooth: hci3: command tx timeout [ 156.396768] Bluetooth: hci6: command tx timeout [ 156.398195] Bluetooth: hci4: command tx timeout [ 156.523751] Bluetooth: hci5: command tx timeout [ 156.587756] Bluetooth: hci7: command tx timeout [ 158.186880] Bluetooth: hci0: command tx timeout [ 158.187634] Bluetooth: hci1: command tx timeout [ 158.251757] Bluetooth: hci2: command tx timeout [ 158.315794] Bluetooth: hci3: command tx timeout [ 158.442816] Bluetooth: hci6: command tx timeout [ 158.443351] Bluetooth: hci4: command tx timeout [ 158.570798] Bluetooth: hci5: command tx timeout [ 158.635951] Bluetooth: hci7: command tx timeout [ 160.234804] Bluetooth: hci1: command tx timeout [ 160.235371] Bluetooth: hci0: command tx timeout [ 160.299907] Bluetooth: hci2: command tx timeout [ 160.363857] Bluetooth: hci3: command tx timeout [ 160.492809] Bluetooth: hci4: command tx timeout [ 160.493336] Bluetooth: hci6: command tx timeout [ 160.619816] Bluetooth: hci5: command tx timeout [ 160.683779] Bluetooth: hci7: command tx timeout [ 214.203228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.204858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.210115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.212537] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.214169] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.215215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.261142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.270586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.272046] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.276572] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.278639] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.285095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.328247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.335064] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.340113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.363950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.368585] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.370621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.389859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.401984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.409134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.417232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.424501] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.433111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.553178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.555166] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.593498] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.597109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.598040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.599135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.630840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.631803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.633331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.634355] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.644893] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.658073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.661283] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.662290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.665143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.736108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.749306] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.750275] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.756142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.756956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.767872] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.796272] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.830911] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.840908] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.234969] Bluetooth: hci0: command tx timeout [ 216.363744] Bluetooth: hci1: command tx timeout [ 216.426765] Bluetooth: hci2: command tx timeout [ 216.618774] Bluetooth: hci3: command tx timeout [ 216.747842] Bluetooth: hci5: command tx timeout [ 216.749754] Bluetooth: hci4: command tx timeout [ 216.810768] Bluetooth: hci6: command tx timeout [ 216.939968] Bluetooth: hci7: command tx timeout [ 218.282853] Bluetooth: hci0: command tx timeout [ 218.411759] Bluetooth: hci1: command tx timeout [ 218.475715] Bluetooth: hci2: command tx timeout [ 218.666837] Bluetooth: hci3: command tx timeout [ 218.796737] Bluetooth: hci4: command tx timeout [ 218.796757] Bluetooth: hci5: command tx timeout [ 218.860727] Bluetooth: hci6: command tx timeout [ 218.986860] Bluetooth: hci7: command tx timeout [ 220.331006] Bluetooth: hci0: command tx timeout [ 220.458895] Bluetooth: hci1: command tx timeout [ 220.524752] Bluetooth: hci2: command tx timeout [ 220.714895] Bluetooth: hci3: command tx timeout [ 220.844334] Bluetooth: hci4: command tx timeout [ 220.844408] Bluetooth: hci5: command tx timeout [ 220.906800] Bluetooth: hci6: command tx timeout [ 221.049777] Bluetooth: hci7: command tx timeout [ 222.381853] Bluetooth: hci0: command tx timeout [ 222.507901] Bluetooth: hci1: command tx timeout [ 222.570962] Bluetooth: hci2: command tx timeout [ 222.762751] Bluetooth: hci3: command tx timeout [ 222.901740] Bluetooth: hci4: command tx timeout [ 222.902267] Bluetooth: hci5: command tx timeout [ 222.954835] Bluetooth: hci6: command tx timeout [ 223.082781] Bluetooth: hci7: command tx timeout [ 276.480437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.482170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.483306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.484449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.485538] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.487796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.491528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.493462] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.493581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.495266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.496439] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.500050] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.656790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.658170] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.660714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.663885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.665966] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.667112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.726495] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.729318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.731097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.734730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.736555] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.737607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.739087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.744914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.748760] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.762631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.764197] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.765230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.807479] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.826174] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.863126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.880266] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.893906] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.896456] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.897607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.908990] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.922982] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.930975] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.935802] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.957543] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.974213] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.978013] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.982020] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.986956] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.989375] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.999472] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.570766] Bluetooth: hci0: command tx timeout [ 278.571812] Bluetooth: hci1: command tx timeout [ 278.698765] Bluetooth: hci2: command tx timeout [ 278.762729] Bluetooth: hci3: command tx timeout [ 278.827749] Bluetooth: hci4: command tx timeout [ 279.019738] Bluetooth: hci5: command tx timeout [ 279.082909] Bluetooth: hci7: command tx timeout [ 279.083612] Bluetooth: hci6: command tx timeout [ 280.618862] Bluetooth: hci0: command tx timeout [ 280.619413] Bluetooth: hci1: command tx timeout [ 280.746723] Bluetooth: hci2: command tx timeout [ 280.811786] Bluetooth: hci3: command tx timeout [ 280.876695] Bluetooth: hci4: command tx timeout [ 281.067705] Bluetooth: hci5: command tx timeout [ 281.132037] Bluetooth: hci6: command tx timeout [ 281.132517] Bluetooth: hci7: command tx timeout [ 282.669737] Bluetooth: hci1: command tx timeout [ 282.670308] Bluetooth: hci0: command tx timeout [ 282.794736] Bluetooth: hci2: command tx timeout [ 282.858757] Bluetooth: hci3: command tx timeout [ 282.924753] Bluetooth: hci4: command tx timeout [ 283.114789] Bluetooth: hci5: command tx timeout [ 283.179829] Bluetooth: hci7: command tx timeout [ 283.180318] Bluetooth: hci6: command tx timeout [ 284.715823] Bluetooth: hci0: command tx timeout [ 284.716342] Bluetooth: hci1: command tx timeout [ 284.842745] Bluetooth: hci2: command tx timeout [ 284.906779] Bluetooth: hci3: command tx timeout [ 284.971708] Bluetooth: hci4: command tx timeout [ 285.162738] Bluetooth: hci5: command tx timeout [ 285.226747] Bluetooth: hci7: command tx timeout [ 285.227238] Bluetooth: hci6: command tx timeout [ 338.833087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.837300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.838566] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.840803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.843331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.844461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.868193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.869941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.871135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.873588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.875276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.876305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.952531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.955519] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.957033] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.960475] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.964198] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.965376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.062369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.069221] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.070602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.073332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.075068] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.076172] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.188162] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.190384] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.207237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.208346] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.210352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.212145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.226028] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.233194] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.235884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.240939] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.273031] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.274327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.275708] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.280235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.281302] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.282443] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.287933] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.289059] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.289574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.290602] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.295295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.297392] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.346850] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.368477] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.906834] Bluetooth: hci1: command tx timeout [ 340.906888] Bluetooth: hci0: command tx timeout [ 341.036393] Bluetooth: hci2: command tx timeout [ 341.098830] Bluetooth: hci3: command tx timeout [ 341.354804] Bluetooth: hci4: command tx timeout [ 341.418796] Bluetooth: hci5: command tx timeout [ 341.418847] Bluetooth: hci7: command tx timeout [ 341.546761] Bluetooth: hci6: command tx timeout [ 342.955383] Bluetooth: hci1: command tx timeout [ 342.955787] Bluetooth: hci0: command tx timeout [ 343.083847] Bluetooth: hci2: command tx timeout [ 343.147849] Bluetooth: hci3: command tx timeout [ 343.404369] Bluetooth: hci4: command tx timeout [ 343.466846] Bluetooth: hci5: command tx timeout [ 343.467425] Bluetooth: hci7: command tx timeout [ 343.595052] Bluetooth: hci6: command tx timeout [ 345.002912] Bluetooth: hci0: command tx timeout [ 345.002966] Bluetooth: hci1: command tx timeout [ 345.133672] Bluetooth: hci2: command tx timeout [ 345.196944] Bluetooth: hci3: command tx timeout [ 345.450845] Bluetooth: hci4: command tx timeout [ 345.514855] Bluetooth: hci7: command tx timeout [ 345.514942] Bluetooth: hci5: command tx timeout [ 345.642714] Bluetooth: hci6: command tx timeout [ 347.050916] Bluetooth: hci0: command tx timeout [ 347.051854] Bluetooth: hci1: command tx timeout [ 347.179708] Bluetooth: hci2: command tx timeout [ 347.243844] Bluetooth: hci3: command tx timeout [ 347.499847] Bluetooth: hci4: command tx timeout [ 347.562855] Bluetooth: hci5: command tx timeout [ 347.563943] Bluetooth: hci7: command tx timeout [ 347.690837] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 21:02:32 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff85c15d60 RBP=ffffffff8576d946 RSP=ffff8880360b7a08 R8 =00000000ffffffff R9 =ffff888022330a38 R10=ffffffff863f7797 R11=0000000000000000 R12=0000000000000141 R13=0000000000000cc0 R14=0000000000000168 R15=ffffffff819165a6 RIP=ffffffff84838f8f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb85fb53540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd91c9ff30 CR3=0000000025a90000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff838d3140 RDX=1ffffffff0c4958b RSI=0000000000000004 RDI=ffffffff8624ac58 RBP=ffff88800da97b40 RSP=ffff88802380faf8 R8 =0000000000000001 R9 =ffffed1004684a28 R10=ffff888023425143 R11=0000000000000000 R12=ffff88800da97c08 R13=ffff88802380fc40 R14=ffff8880091aed40 R15=000000000000003c RIP=ffffffff838d3252 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555583f3e400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005650b0271fa8 CR3=0000000033e8e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000ff0000 XMM02=0000ff00000000000000000000ff0000 XMM03=000000000000ff000000000000000000 XMM04=00ff0000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000