Warning: Permanently added '[localhost]:63952' (ECDSA) to the list of known hosts. 2024/12/11 13:46:50 fuzzer started 2024/12/11 13:46:51 dialing manager at localhost:35965 syzkaller login: [ 74.383172] cgroup: Unknown subsys name 'net' [ 74.465413] cgroup: Unknown subsys name 'cpuset' [ 74.484461] cgroup: Unknown subsys name 'rlimit' 2024/12/11 13:47:08 syscalls: 201 2024/12/11 13:47:08 code coverage: enabled 2024/12/11 13:47:08 comparison tracing: enabled 2024/12/11 13:47:08 extra coverage: enabled 2024/12/11 13:47:08 setuid sandbox: enabled 2024/12/11 13:47:08 namespace sandbox: enabled 2024/12/11 13:47:08 Android sandbox: enabled 2024/12/11 13:47:08 fault injection: enabled 2024/12/11 13:47:08 leak checking: enabled 2024/12/11 13:47:08 net packet injection: enabled 2024/12/11 13:47:08 net device setup: enabled 2024/12/11 13:47:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/11 13:47:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/11 13:47:08 USB emulation: enabled 2024/12/11 13:47:08 hci packet injection: enabled 2024/12/11 13:47:08 wifi device emulation: enabled 2024/12/11 13:47:08 802.15.4 emulation: enabled 2024/12/11 13:47:08 fetching corpus: 0, signal 0/0 (executing program) 2024/12/11 13:47:10 starting 8 fuzzer processes 13:47:10 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x4, 0x3, 0x9c5627f88d56c46b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x700, 0x81}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', r0, 0x2f, 0x1, 0x89, 0x8, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x10, 0x7800, 0x6, 0x80}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=@migrate={0x21c, 0x21, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x4e24, 0x5, 0x4e21, 0x6, 0xa, 0x20, 0x80, 0x8, r1, 0xee00}}, [@migrate={0x1cc, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, @in6=@local, @in6=@remote, 0x0, 0x4, 0x0, 0x3505, 0x2, 0x2}, {@in6=@private2, @in=@multicast1, @in=@multicast2, @in6=@mcast1, 0x32, 0x1, 0x0, 0x0, 0x0, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0xd4, 0x4, 0x0, 0x3503, 0x2, 0x2}, {@in=@local, @in6=@private0, @in=@remote, @in6=@loopback, 0x32, 0x2, 0x0, 0x3504, 0x2, 0x2}, {@in=@remote, @in6=@mcast2, @in6=@remote, @in=@local, 0x6c, 0x2, 0x0, 0x3501, 0x2, 0xa}, {@in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @in=@empty, @in=@multicast2, 0x3c, 0x1, 0x0, 0x3507, 0x2, 0xa}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x20048800) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl1\x00', r0, 0x2f, 0x81, 0x4, 0x80e3, 0x21, @mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, 0x80, 0x1, 0x80000001, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', r2, 0x2f, 0x5, 0x9, 0x3, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, 0x10, 0x8, 0x800}}) getsockname$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, &(0x7f0000000680)=0x6e) r3 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x6de694c6, 0x204000) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8008) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x0, 0x425, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa0af}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) sendmsg$802154_raw(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000009c0)={&(0x7f0000000940)="efa856fa71c113bea6af6f24b41c58dc114abc17bbbc37ed6b260f11d63777dc9b08b477d54f50d12987aa84b2e23f610169aa859161b2f326ddcb71b2a34298a3035f850e3033d42ca773c3071adf63818f17a3", 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmsg$unix(r3, &(0x7f0000000ec0)={&(0x7f0000000a40), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/189, 0xbd}, {&(0x7f0000000b80)=""/8, 0x8}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000c80)=""/228, 0xe4}], 0x4, &(0x7f0000000dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x8180) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000f40), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x48, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3ff}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x101, 0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x48400) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001100)={'syztnl2\x00', &(0x7f0000001080)={'syztnl1\x00', r2, 0x2f, 0x0, 0x1, 0x8, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7808, 0x1, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'ip6_vti0\x00', r2, 0x2f, 0xf1, 0x7, 0x2, 0x11, @private2, @private0, 0x40, 0x8, 0x2, 0x81}}) recvmsg$unix(r4, &(0x7f0000001480)={&(0x7f0000001200), 0x6e, &(0x7f0000001380)=[{&(0x7f0000001280)=""/137, 0x89}, {&(0x7f0000001340)=""/50, 0x32}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x100) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000001540)={'ip6tnl0\x00', &(0x7f00000014c0)={'sit0\x00', r0, 0x4, 0x4, 0xf8, 0x3ff, 0x4, @mcast1, @remote, 0x8000, 0x10, 0xccc, 0x7}}) ioctl$CDROMREADTOCHDR(r8, 0x5305, &(0x7f0000001580)={0x40}) r9 = accept$unix(r7, &(0x7f00000015c0)=@abs, &(0x7f0000001640)=0x6e) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001680)={'vlan1\x00'}) 13:47:10 executing program 1: ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x7, 0x2f8]) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x800, 0x4c1, 0x6, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}]}, 0x38}}, 0x4000004) r0 = socket(0x9, 0x800, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x24000000) recvmsg$unix(r0, &(0x7f0000000580)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/137, 0x89}], 0x3, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x10000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r1, 0x822, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x70000000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) recvmsg$unix(r6, &(0x7f0000000980)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f00000008c0)=""/35, 0x23}], 0x2, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}, 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)=@updpolicy={0x198, 0x19, 0x8, 0x70bd25, 0x25dfdbfb, {{@in=@broadcast, @in6=@loopback, 0x4e21, 0xff80, 0x4e20, 0x0, 0x2, 0x20, 0x80, 0x87, 0x0, r9}, {0x0, 0xff, 0x3, 0x8000, 0x2b0, 0x63, 0x8}, {0x2, 0x3, 0x7f, 0x9}, 0x9, 0x6e6bbb, 0x0, 0x0, 0x2, 0x1}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e21, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}, @srcaddr={0x14, 0xd, @in=@multicast1}, @algo_aead={0xa8, 0x12, {{'aegis256-generic\x00'}, 0x2e0, 0x180, "374473cc3686c4bd02726a90daf27f9f047864e1aa803fd75d9e299dc4218e9f6327bac8dd65623cef75ec95dda5bda580b2b02015b82b159e225770f2c3577fe69428dfbbc5e9822968ffab153586755a8811e1c57007b34380602c"}}, @tfcpad={0x8, 0x16, 0x1}]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x20001800) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000c40), r7) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x80, r10, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000d80), 0x464802, 0x0) ioctl$RNDGETENTCNT(r11, 0x80045200, &(0x7f0000000dc0)) r12 = syz_open_dev$sg(&(0x7f0000000e00), 0x4, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f00000010c0)={0x53, 0xfffffffffffffffe, 0x4f, 0x7, @scatter={0x2, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/47, 0x2f}, {&(0x7f0000000e80)=""/206, 0xce}]}, &(0x7f0000000fc0)="f186d8c455cb88ae6da4a9590da3fbd3de21183edf977c8d3914fa140fbd1092f25ab7558712c3de0380ee040c5538302cb5ad0a7c33598a2f29e782a9872a4a3346351c79c5b15143438c6c8e7692", &(0x7f0000001040)=""/30, 0x2, 0x10000, 0x3, &(0x7f0000001080)}) sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, r10, 0x200, 0x70bd2a, 0x7ff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x44) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000001700)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001280)={0x424, 0x3f3, 0x200, 0x70bd27, 0x25dfdbfd, {0x4, 0x0, 0x36, [0x9, 0x7, 0x9, 0x7f, 0x70eb, 0x800, 0xfbf, 0x7f, 0x0, 0x598, 0x7, 0x0, 0x0, 0x9, 0x6, 0x20, 0x4, 0x3, 0x1cf5, 0x6, 0xae, 0x20, 0xe9, 0x7, 0x3d, 0x1c, 0x9, 0x4, 0x7, 0x8, 0x1, 0x4, 0x1f, 0x5, 0x7fff, 0x5, 0x1, 0x9, 0x3, 0x6, 0x2, 0x1000, 0x20, 0x401, 0x5, 0xdecf118, 0x1d2187b5, 0x8, 0x5, 0x9, 0x5, 0x7fffffff, 0x200, 0xf0e, 0x7, 0x1000, 0x9e81, 0x70d6, 0x61d, 0x0, 0x5717, 0x7fffffff, 0x1, 0x9], [0xfff, 0x9, 0x4a000000, 0x8000, 0x2, 0x7, 0x9, 0x6a4, 0x5, 0x3, 0x1, 0x9, 0x6, 0x3, 0x8c2c, 0x2, 0xd, 0x20, 0x9, 0x101, 0x8, 0x0, 0xffff, 0x3, 0x800, 0x0, 0x1, 0x5, 0x8, 0x2, 0x0, 0xdd1, 0x8000, 0x1f, 0x1000000, 0xffffffff, 0x4, 0x3, 0x453, 0x100, 0xff, 0x2, 0x5a, 0x8, 0x5, 0x0, 0x8, 0x35, 0x6, 0x5526, 0x400, 0x7, 0x400, 0x0, 0x8, 0xc69, 0x6, 0x2, 0x1000, 0x4, 0x9, 0x9, 0x46e, 0x1f], [0x20, 0x1, 0xdf09, 0x6, 0x9, 0x2, 0x7, 0x5, 0x400, 0x3, 0x3, 0x3, 0xfffffffe, 0x5, 0x6, 0xfffffff7, 0x1, 0x116, 0x7fffffff, 0x9, 0x6, 0x6, 0x8000, 0x7fffffff, 0xfffffffa, 0x0, 0xfffffffc, 0xfa71, 0x8, 0x4, 0xffffffff, 0x70, 0x80, 0x0, 0x10000, 0x3, 0x9, 0x3, 0x7f, 0x1000, 0x85, 0x100, 0x101, 0xffff, 0x10001, 0x3f, 0x2, 0x80000000, 0x1, 0x7, 0x9, 0x401, 0x1000, 0xbe7a, 0x80, 0x0, 0xfd0, 0x4, 0xfffffffc, 0x1ff, 0x8, 0x3, 0x4], [0x2, 0xffffffe1, 0x5, 0x5, 0x1, 0x1, 0x7fff, 0x0, 0xffff, 0x401, 0x8, 0x10001, 0x1, 0xfffff943, 0x3a2, 0xc193, 0x2, 0x9, 0xffff, 0x9, 0x3, 0x2, 0x8, 0x1, 0x8, 0x5, 0xbc7, 0x10, 0xfff, 0x41, 0x0, 0x7f, 0x0, 0x1ff, 0x6, 0x200, 0x62, 0xca8a, 0x40, 0x2, 0x2, 0x7ff, 0x4, 0x1f, 0x1e, 0x6, 0x2, 0x6, 0x1, 0x1, 0x7, 0x1f, 0x20, 0x3, 0x5, 0x100, 0x3, 0xb60b, 0x2, 0x6, 0x8, 0xffff7b61, 0x3a8], 0x2, ['@\x00']}, ["", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000008) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800c084}, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 13:47:10 executing program 2: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = eventfd2(0x80000, 0x1) write$eventfd(r0, &(0x7f0000000080)=0x1, 0x8) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c4) eventfd2(0x3, 0x1) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x43c, 0x3f4, 0x20, 0x70bd27, 0x25dfdbff, {0x3, 0x0, 0x39, [0x75c0, 0xf2b, 0x5, 0x8, 0x3, 0x1, 0x7, 0x5, 0x531, 0x6, 0x10001, 0xa66a, 0x101, 0x40, 0x1, 0x8, 0x7, 0x4, 0x0, 0x7, 0x1, 0xf087, 0x9, 0xff, 0xfffffc13, 0x10000, 0xd29, 0x0, 0x1, 0xdb, 0x9, 0x9d31f2, 0x1cb, 0x0, 0x1f9, 0xd067, 0x0, 0x1f, 0x2, 0x7, 0x2, 0x1, 0x60, 0x7, 0xdd, 0x8, 0x6, 0x3, 0x6, 0xcb2, 0x8001, 0x80, 0x9661, 0x7, 0x2, 0x78, 0x0, 0x81, 0x9, 0x0, 0xfffffff7, 0x1, 0x7, 0x8], [0x2, 0x9, 0x8001, 0x5, 0x80, 0x4, 0x7, 0x7fff, 0x1, 0xffffffff, 0x43, 0x3, 0x4, 0x2, 0xfffffffa, 0x9, 0x4, 0x100, 0x401, 0x4, 0x9, 0x2, 0x2, 0x8000, 0x497f, 0x4, 0x3, 0x7fff, 0x4361, 0x4, 0x4, 0x7fff, 0x4, 0x0, 0x7fffffff, 0x0, 0x87, 0x200, 0x1, 0x2, 0x80, 0x1f0, 0x9, 0xffffff00, 0x81, 0xffff0001, 0x93, 0x3, 0x80000000, 0xffff, 0x5, 0xfffffffa, 0x73, 0x40, 0x5, 0x0, 0xfffffff8, 0x2, 0x2, 0xea, 0x80000001, 0xffff, 0x2], [0x1000, 0xff, 0x1000, 0x2, 0xcdfb, 0x1, 0x0, 0x9, 0x8, 0x0, 0x8, 0xf882, 0x52e9, 0x1ff, 0x1, 0x20, 0x5, 0x4, 0x0, 0x7, 0x4, 0x3, 0x57d, 0xffff380a, 0x100, 0x100, 0x0, 0x9, 0x5, 0xff, 0xdd, 0xfffff658, 0xf693, 0x10001, 0x4, 0x6, 0x1, 0x5, 0x8000, 0x8, 0x20, 0x80, 0x3f, 0x56b, 0x3, 0x3, 0x10001, 0x2, 0x1, 0x3, 0x7fff, 0x1f, 0x7fffffff, 0x5, 0x4, 0x10001, 0xfffffff8, 0xffffffff, 0x4f00000, 0x8000, 0xffffffff, 0x401, 0x7, 0x7], [0x3f, 0xcff4, 0x400, 0x9, 0x6, 0xc171, 0x8f, 0xfffffff7, 0x6ee3, 0x3, 0xcbdf, 0x7, 0x3ff, 0x8, 0x191554c9, 0x9, 0xe10, 0xffffff00, 0x8, 0x5, 0x10000, 0xfff, 0x8, 0x7a, 0x800, 0x39b, 0x200, 0x9, 0xd233, 0xfffffffb, 0xfff, 0x8, 0x9, 0x8001, 0x9, 0x0, 0x800, 0x2d38, 0x0, 0xf2b1, 0xd46a, 0xfffff319, 0x6, 0x401, 0x40, 0x5, 0x11a, 0x0, 0x3, 0x2, 0x4, 0x6d86, 0x0, 0x40, 0x0, 0x3f, 0xffff, 0xdf, 0x80000000, 0x6, 0x2, 0x3f, 0x6, 0x549], 0x19, ['+^\xbf\xdb\x83\x00', '/.:*,,/(\x00', 'SEG6\x00', 'SEG6\x00']}, ["", ""]}, 0x43c}}, 0x48010) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x1ff, 0x180]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x2000c890) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)='./file0\x00', 0x84, 0x81080, 0x23456}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000009c0)={0x10, 0x0, &(0x7f00000008c0)=[@request_death={0x400c630e, 0x1}], 0xab, 0x0, &(0x7f0000000900)="a3cfc4e3021bd28c8d2c4da76417ee8ddd26c70e846016674de28910b16958a432b54df4307d0f4f93d18d18a5c45598a11c3a5adf862320aa05f391df213873d964a02c9440afb5fe1306e16f300872b3970bc28b67916c3fec46025ee64141a4f510f2d1cae6f4453667df10ef8ba108cdb86747ed25ba283895a2eda62c3e0e1fbd4f3ca1e83373f2968b6f6c05ec7d5fe4f979843f30a3b253f854628cf83e2b3fe7baff3d1a1fc9ff"}) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000000a80)=""/228, 0xe4}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/65, 0x41}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/247, 0xf7}, {&(0x7f0000002d00)=""/186, 0xba}, {&(0x7f0000002dc0)=""/95, 0x5f}, {&(0x7f0000002e40)=""/180, 0xb4}], 0x8, &(0x7f0000002f80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x10000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000003040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000003080)='io.pressure\x00', 0x2, 0x0) r5 = socket(0x6, 0x3, 0x6) sendmsg$AUDIT_SET(r5, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x38, 0x3e9, 0x2, 0x70bd2c, 0x25dfdbfb, {0x2, 0x1, 0x1, r4, 0x4, 0x7, 0xb3, 0x5, 0x0, 0x2}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x64000090}, 0x20008000) recvmsg$unix(r5, &(0x7f0000004ac0)={&(0x7f0000003400)=@abs, 0x6e, &(0x7f0000004900)=[{&(0x7f0000003480)=""/63, 0x3f}, {&(0x7f00000034c0)=""/126, 0x7e}, {&(0x7f0000003540)=""/80, 0x50}, {&(0x7f00000035c0)=""/128, 0x80}, {&(0x7f0000003640)=""/181, 0xb5}, {&(0x7f0000003700)=""/207, 0xcf}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/75, 0x4b}, {&(0x7f0000004880)=""/32, 0x20}, {&(0x7f00000048c0)=""/5, 0x5}], 0xa, &(0x7f00000049c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x10000) clone3(&(0x7f0000004bc0)={0x1100000, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240), {0x5}, &(0x7f0000003280)=""/171, 0xab, &(0x7f0000003340)=""/176, &(0x7f0000004b80)=[r4, r4, r4, r6, 0x0, r4], 0x6, {r3}}, 0x58) 13:47:10 executing program 3: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1f, 0x8, 0x9, 0xe0]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x90) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x3f9, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0xc081) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x5, 0xa, 0x400, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, 0x453, 0x200, 0x70bd29, 0x25dfdbfe, "0aae9a5a55b76561552631245faf1395b747cba4db143c83fe4e809346a644390d23bc8030d18b7ef088bc9ef2bbda2115dab40f9b3e669f05cc4eb18e184b2108cbaefd1d7f1e69ac6bbffe49cfe7ec26aedd3b99d3d2e7d72f43585c561fde96e71216f800a71043a5f7c8276b05a408c33a5f8804340c556624915b020aaa0bd72a4161d62c49e1418cf65c00464ec2a61d81b1d1d51eadfe8afaf6f91cbf056d5048120d8bc67d02c205905d7cf8ee523a77b27ad7bbfc46affac7a9504ab7a12b95", ["", "", "", "", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x814}, 0x1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x72}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) r4 = syz_open_dev$sg(&(0x7f0000000900), 0x80000000, 0xef6c048b13fc4dd4) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000940)) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x110) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x3f7, 0x4, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0x60) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000b80)) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000bc0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x805) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000d40), &(0x7f0000000d80)=0x14) 13:47:10 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x20008004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x70669f7537a624e7}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r1) socketpair(0x9, 0x2, 0x9a8d, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r10 = syz_open_dev$vcsu(&(0x7f0000000500), 0xffffffffffff2617, 0x1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, r4, 0x808, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x28000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) write$eventfd(r10, &(0x7f0000000680)=0x7, 0x8) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x22000000}, 0x800) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x5, 0x87cb, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x40, 0x3, 0x10001}}) sendmsg$nl_xfrm(r5, &(0x7f0000000c40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000940)=@acquire={0x2c0, 0x17, 0x800, 0x70bd2c, 0x25dfdbfd, {{@in6=@loopback, 0x4d6, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {@in=@broadcast, @in=@multicast2, 0x4e21, 0x80, 0x4e23, 0x400, 0x2, 0x80, 0x20, 0x87}, {{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e20, 0x1, 0x4e21, 0x0, 0x2, 0x20, 0x80, 0x3b, 0x0, r11}, {0x9, 0xe9, 0x10000, 0x4, 0x6, 0x399, 0x10001, 0xfffffffffffffff9}, {0x7f, 0x0, 0x7fffffff, 0x40}, 0x5, 0x0, 0x2, 0x0, 0x2, 0x3}, 0x400, 0x3, 0x3, 0x70bd29}, [@tmpl={0x84, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x3503, 0x1, 0x3, 0x1f, 0x80000001, 0x4}, {{@in6=@mcast2, 0x4d5, 0xff}, 0xa, @in6=@private2, 0x34ff, 0x0, 0x2, 0x80, 0x5f05e177, 0x59bd, 0x1ff}]}, @XFRMA_IF_ID={0x8, 0x1f, r12}, @address_filter={0x28, 0x1a, {@in6=@mcast1, @in=@loopback, 0x0, 0x9, 0x6}}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e22, 0x1ff, 0x4e21, 0x3f, 0x2, 0xa0, 0x20, 0x33, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x33}, @in=@rand_addr=0x64010100, {0xc55a, 0x8, 0x100000001, 0xfff, 0x10000, 0x400, 0x800, 0x6}, {0x8, 0x6, 0x7ff, 0x2}, {0xfa, 0x0, 0x20}, 0x70bd27, 0x0, 0xa, 0x2, 0x4c, 0x40}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x240408d4}, 0xd1) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r13, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x0) [ 92.815203] audit: type=1400 audit(1733924830.530:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:47:10 executing program 6: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x2c}}, 0x24048840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x84}}, 0x4800) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, 0x3ed, 0x4, 0x70bd29, 0x25dfdbfc, "6610d89a2618aa96f36559fddc614b96847e48fbadd4ca8bdb5b46a3dd32ae4f83199d011654a9543dd02cd886a56dfc9c7a734305fc9a28000e09a7744e40dcfe356c362ffee71e62a669995884718086176b0e26988f621de0aff1f4eaa860afedd6e288e586882264914fede3", ["", "", "", "", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x840) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x240400c1) socketpair(0x2a, 0x4, 0x20, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'veth0_macvtap\x00', 0x0}) sendmsg$AUDIT_SET(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbfb, {0x28, 0x1, 0x1, 0xffffffffffffffff, 0xffff8001, 0x10000, 0x7, 0x7, 0x0, 0x3ff}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xefc17e3f751e89ce}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x3f7, 0x100, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040004}, 0x800) syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), r0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000a00)='tasks\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="337fd2c64f14"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040040}, 0x44000) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40408c0) 13:47:10 executing program 5: r0 = io_uring_setup(0x1644, &(0x7f0000000000)={0x0, 0xaab6, 0x1, 0x2, 0xd9}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x20010, r0, 0x0) r1 = io_uring_setup(0x7af5, &(0x7f0000000080)={0x0, 0xeed7, 0x2, 0x3, 0x3a4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x0) mmap$binder(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x1, 0x11, 0xffffffffffffffff, 0x5) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x80000001) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom0\x00', 0xc00, 0x0) mmap$binder(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0xff) socketpair(0x10, 0x800, 0xfffffffe, &(0x7f0000000400)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x7) read$eventfd(r2, &(0x7f0000000480), 0x8) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r7 = syz_open_dev$vcsu(&(0x7f00000004c0), 0x7fffffff, 0x105281) mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r7, 0x10000000) shmget(0x3, 0x2000, 0x10, &(0x7f0000ff1000/0x2000)=nil) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000540), 0x2, 0x0) 13:47:10 executing program 7: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe4, 0x464, 0x4, 0x70bd2c, 0x25dfdbff, "320fad6b6e3394887b01bca739e2b8207322c34202c808bb9e8b68cb39456ab68d38c629e20a2a2f57a5239b34b181849c81a02e817bcab4a4237894fd68706c3b9e88ef6497678217f05bde7f31b9b0b92694b5ae3935dc3067fbb951ca909db0060480c468cf783d2bd2127bd85ec80b58bb0834e3d30ac27347d9f6c5cc4d946b385afe4afa899da8a488b96eeb80577a4b4b049d583fe8ea6de30d333db9bb6d5f2fa38ef146edb05c688d0ebf61c3ac5209c353cbf4769e31449a15529c1e26a1b4f79ae6a03bf9e7b46cc6fe28d154", ["", "", "", "", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40048014) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x4008885) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x100, 0x70bd2a, 0x2, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000881}, 0x1) sendto$unix(0xffffffffffffffff, &(0x7f00000004c0)='w', 0x1, 0x4000081, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x4, 0x81, 0x1, 0x1, 0xc, @empty, @remote, 0x80, 0x80, 0x1, 0xfffffffb}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24}, 0x4000) r2 = syz_open_dev$vcsu(&(0x7f0000000780), 0x800, 0x301000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x6, 0x6f8a, 0x10, @local, @private0, 0x8000, 0x10, 0x6, 0xaa}}) r4 = accept$unix(r2, &(0x7f00000009c0)=@abs, &(0x7f0000000a40)=0x6e) recvmsg$unix(r2, &(0x7f0000002300)={&(0x7f0000000f80), 0x6e, &(0x7f0000002200)=[{&(0x7f0000001000)=""/123, 0x7b}, {&(0x7f0000001080)=""/45, 0x2d}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/22, 0x16}, {&(0x7f0000002100)=""/211, 0xd3}], 0x5, &(0x7f0000002280)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x40010000) r6 = epoll_create(0x3) r7 = syz_open_dev$evdev(&(0x7f0000002340), 0xffffffffffffffff, 0x900) recvmsg$unix(r2, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002380)=""/207, 0xcf}, {&(0x7f0000002480)=""/125, 0x7d}, {&(0x7f0000002500)=""/62, 0x3e}, {&(0x7f0000002540)=""/187, 0xbb}], 0x4, &(0x7f0000002640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x10001) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000002740)='ns/pid_for_children\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002780)={0x0, 0x0}, &(0x7f00000027c0)=0xc) sendmmsg$unix(r4, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000a80)="cfc7b1cbd4510410ccbc1e3c6d54", 0xe}, {&(0x7f0000000ac0)="e31f9ad161a48dfa5d451fd395ac77ce6dc6aac32e66f6a5812d15c4436712bf1d1ac8d424e957fd37435d3e26aef89a2c", 0x31}, {&(0x7f0000000b00)="ddd3171a1e49a50039fc2ae77a429247090f824bf339ebf468f07655dcd445e882504306703c0954e5f3f634ea36d81dde9f57d2d56c51b936ed3492796575ad2bab8364f87e6d9ddc25a15e6e0652fde885fa40f8e27dab7e5c0eb2627c7bdcc9abb1d09805ccc5642deda006ab5344b82865ad74449ec6af74c3d22a791c9480998aef05124333639b718fc58f2df80d451c15c689bf73db989ed9353643ef3797bd8023", 0xa5}, {&(0x7f0000000bc0)="7444ff6a3bf20eefacea3e63c356976e67798edabbb370c25ed5f298ca3a1da1edf044caa0be475ec157bd09f7427dd327a07f05c75c139fd7a4f5d08f654ad55f01fe873223f4b723b6a90a10be1d32f1f55518be83107840b6db794b010f821e5c463cb41fb9fd13242c74f382d3f2d4560783fec12c9b3691dc57b2a3d5b3967131ff56d6e2eae1adf05f7e3987331bcc40d0fb8cffac82f50887", 0x9c}, {&(0x7f0000000c80)="061dbc2d825d19cc68a597385538fdf8297a0614031cab5aa06d4010715a0f0f7c2e3f762e509cceb6a001f82c6996f0f33a4cc1a6a85ccbc953ed423357fd310668e3adf1f86e2a8234c1e9f62fd485da36b01f2c57a5eb1bf1d257172f05989f8015637d11e7af416267198d923a2cc9a16196dd6558f0bba129e1964c42de40d4f001299705f8ed29d395e0a0cada414694cf7135a8b8d64eacdf5991db0b8661badd5826bf1c1dcb5de7e01817651946414cc96125bb3519c8db988c5f9f7578bb1bc5321d00f1ebf31ebdb326ba39dd2c2b0eee80f30a0123f1e89330f02895f288eaa299928d40c38c3a", 0xed}, {&(0x7f0000000d80)="6b600d3f9ec6009a1150d753728c94fdcb9a2d8c5eeac4602496d9f240cab83d13b5155759c5dfbea93bbdb1569edefe3225a4ed8f46aef363b0ef8c04ab4604776da595520395855007e307696973ead5e73080abdc8079a968aabf17a0a9b667f49c7527576e1b562eb826e1759d716200d70e8d33aa", 0x77}, {&(0x7f0000000e00)="eb124ffaadb017fb8fc8c6fa8dc379ec1337b2935fff91f68e019c88b99da9e306d756dbeb098eb497c22ca3b3997887b3c39bf3e3fd3dddb724940063a1c51c6bc2a6e2504fe61fff93128f6aae53b489dd0a9120b4d95e46ac87bb6f156720582b9fef24ce07ef0795d778a3df5fc7dd8be9f7d1c8a72921f7cbcc35deb462bf2ce82b100317c815f74f46b638693235941c9fe6a7d76c5e9472c2bab8bec8fa", 0xa1}, {&(0x7f0000000ec0)="aac6efc0f0464ae2fa3ca0da71523e41da3b5b6ffb520c797eddd1ce6831a5d971d0d2892d27ec50724929f58d473ea8", 0x30}], 0x8, &(0x7f00000063c0)=[@rights={{0x20, 0x1, 0x1, [r5, r2, r2, r6]}}, @rights={{0x28, 0x1, 0x1, [r7, r2, 0xffffffffffffffff, r2, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r2, r2, r2, r2, r2, r2]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x150, 0x4}}, {{&(0x7f0000006540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006a80)=[{&(0x7f00000065c0)="d99aed596d9b5cce72536889dd97062ebbc905007711cb93bf328e56cc43d3e827c3a471edd4d2dc162286c93ce95e1ddcad407721327e6495c92e237e2c9817e789004e6fed33f897abd6545dce7bc376b8a21744248967e9692acde6fdedaaddc87f0ea7e09c1b169477", 0x6b}, {&(0x7f0000006640)="39e20bb13c34ce7156a4146964b73d195258d7229090637612", 0x19}, {&(0x7f0000006680)="51f734cf00776d8fa0ae507512c54b96f9eb3cdf36ceabda598398822db7df6bb26b3eb207e9", 0x26}, {&(0x7f00000066c0)="54c2124dd52ed26ccaa81113e032327d167709635f8d796a9a203a59e8f4e14cd2a5cdd4652d35eeeb2937aa6b7d1360ec6fc55ccb75195fb773753b3082c8d695ad4369502bf17f7807a5927394c5b19efe8b6aae5a229256fd6d29eb561932ed1c412d0ecb46a608efc61382136ec8d312f6b0883ffd0f2f435c9a770a01ef956ded7588e6c9860760c0d522df8a9559c368b4ce0daafd885fe88afb2812fbfd390b4471d370b54a3a6cb604a49f6ec67cca84dc87794a058cf2f977c104a5", 0xc0}, {&(0x7f0000006780)="8a5f98b6f109eb42de83593e6ff4cdf265d74ee4aeb3972056e305a2a0e79e21de6ae38e11ae", 0x26}, {&(0x7f00000067c0)="1e4c4e068ac70d6b0b775b4808dc0241c4613befa3ab31a715b2ee7ecf22a318bfe7632d77dd4fb6717cfbba4a28dcd654c497df6228a1bca7e2200a42aa677b0c1712298e86acecb68c0563912964b61040f47e81d80ee704464af24019ee319c8e028722c86cc507b7f5aa77d2c0e12d72bb6a345dc9aa1f49d50422d330e8a3543c956bc85269fd", 0x89}, {&(0x7f0000006880)="551950039a7677ff986f8da6f51e5c0ac0595c13dd6b9f24457cf63455e87176837196eaae1086b7e47107f3bdc0a7663683c3546396156b699996d9b6c43bf992e1419b72cda99fe6d8485d440e15d017495fda213a65", 0x57}, {&(0x7f0000006900)="0003a0811e7f2df3495fbb309ab690264c56faa1", 0x14}, {&(0x7f0000006940)="e030373d6d05f00fd4d21a7516bae26f7c8b3100d6ee664aae51745574a2292f05c9ac1e8ce14a9683474cbd", 0x2c}, {&(0x7f0000006980)="61e95b8523712397fbe934f3cbdbe0b2f7647b35ae77552742d83bbae7cd34183e11abdfe99cb7c17a049871384d85f09f71603262eb9a77170405c5c66ff8b631f321d80b0c4e5749351541f3d923c05288e6a1135ff0d2e13ec1283899b370255c2c18dd84a10f3b399cb89632ef8e808dc3bb80aed6636f5ecb591c0e7e147d35958d95a64134d189e5465f4667ea7e2904097f73c225b570dcb64edf53fd64a4adaeaa7cc90388abc7a4a4fd6b44e859f5c3aee1957cb2dc89d09c411e451373e3d6e5222afbe3808a89e96a0726e0eec96c3e45c6f47af9db1a64a59e0667156a2b605069032a1a1843ed", 0xed}], 0xa, &(0x7f0000007500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x90, 0x4}}, {{0x0, 0x0, &(0x7f0000007700)=[{&(0x7f00000075c0)="317c3addf6827f1bfbff", 0xa}, {&(0x7f0000007600)="d1948d5103e71234ccdb14c4a64754c15d395c8f3925e12eec40837eeff94cdf9e6f87c04284477077dab5df715ae18b9877d8777cc5fdaa6582ed98da0b0bd58a2b69cec175bcd29dc0f3cf0829df5de65e77a65d7f3e2c8c2a72773c119ed6f115fc207cd398c53579c0af2804f3c8272102820e", 0x75}, {&(0x7f0000007680)="3eb14448adc0b8b5747a50f8cb3f412611997e2cbc59584f5eb4de9ba0199decefd9fdc5198bbcc494964ed1b175e771c26b9669c5a2a24fb1335a2f53e30634ae698db7629ea18cd263640cb2bbd2812a353de2353f71e207c66cc1d5e7b028342e585ea0ca8b35f21717a6bf97ec455d", 0x71}], 0x3, 0x0, 0x0, 0x40000}}], 0x3, 0x40010) [ 94.147920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.150926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.153490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.163601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.166683] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.169275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.265523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.268535] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.271621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.280241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.283143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.291176] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.343129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.350367] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.351682] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.356342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.358737] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.361005] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.398635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.413439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.415294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.418255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.425193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.428165] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.429448] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.436789] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.440658] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.442944] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.443801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.446132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.463689] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.465614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.467380] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.469817] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.473235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.479473] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.499589] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.501902] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.503749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.510276] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.514032] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.517244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.523126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.526261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.527810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.534209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.543451] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.549202] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.240453] Bluetooth: hci0: command tx timeout [ 96.368009] Bluetooth: hci1: command tx timeout [ 96.431294] Bluetooth: hci2: command tx timeout [ 96.559223] Bluetooth: hci4: command tx timeout [ 96.559961] Bluetooth: hci3: command tx timeout [ 96.560623] Bluetooth: hci6: command tx timeout [ 96.623509] Bluetooth: hci7: command tx timeout [ 96.623539] Bluetooth: hci5: command tx timeout [ 98.287026] Bluetooth: hci0: command tx timeout [ 98.415103] Bluetooth: hci1: command tx timeout [ 98.478938] Bluetooth: hci2: command tx timeout [ 98.608004] Bluetooth: hci6: command tx timeout [ 98.608029] Bluetooth: hci3: command tx timeout [ 98.608485] Bluetooth: hci4: command tx timeout [ 98.671964] Bluetooth: hci7: command tx timeout [ 98.672455] Bluetooth: hci5: command tx timeout [ 100.335083] Bluetooth: hci0: command tx timeout [ 100.463891] Bluetooth: hci1: command tx timeout [ 100.527047] Bluetooth: hci2: command tx timeout [ 100.655311] Bluetooth: hci4: command tx timeout [ 100.655387] Bluetooth: hci3: command tx timeout [ 100.656357] Bluetooth: hci6: command tx timeout [ 100.719938] Bluetooth: hci5: command tx timeout [ 100.721390] Bluetooth: hci7: command tx timeout [ 102.383085] Bluetooth: hci0: command tx timeout [ 102.510951] Bluetooth: hci1: command tx timeout [ 102.576940] Bluetooth: hci2: command tx timeout [ 102.703054] Bluetooth: hci6: command tx timeout [ 102.703631] Bluetooth: hci3: command tx timeout [ 102.704950] Bluetooth: hci4: command tx timeout [ 102.767172] Bluetooth: hci5: command tx timeout [ 102.767193] Bluetooth: hci7: command tx timeout [ 154.338157] syz-executor.7 (288) used greatest stack depth: 23488 bytes left [ 156.793789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.795513] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.796993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.801545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.805294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.806945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.049708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.056168] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.057424] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.059627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.062222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.062471] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.066393] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.070094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.070257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.074155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.075239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.076135] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.079642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.080810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.085359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.085434] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.097125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.118433] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.139659] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.152525] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.158207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.159056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.162270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.175964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.183399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.185022] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.186272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.187813] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.191268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.192553] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.404358] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.420668] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.423918] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.430535] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.440311] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.457093] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.459207] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.460587] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.506572] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.542157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.571057] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.584186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.894973] Bluetooth: hci0: command tx timeout [ 159.151233] Bluetooth: hci1: command tx timeout [ 159.152238] Bluetooth: hci2: command tx timeout [ 159.152308] Bluetooth: hci3: command tx timeout [ 159.280922] Bluetooth: hci5: command tx timeout [ 159.282158] Bluetooth: hci4: command tx timeout [ 159.599071] Bluetooth: hci7: command tx timeout [ 159.727929] Bluetooth: hci6: command tx timeout [ 160.943074] Bluetooth: hci0: command tx timeout [ 161.200015] Bluetooth: hci1: command tx timeout [ 161.200073] Bluetooth: hci3: command tx timeout [ 161.200640] Bluetooth: hci2: command tx timeout [ 161.326978] Bluetooth: hci4: command tx timeout [ 161.327059] Bluetooth: hci5: command tx timeout [ 161.648979] Bluetooth: hci7: command tx timeout [ 161.775928] Bluetooth: hci6: command tx timeout [ 162.992038] Bluetooth: hci0: command tx timeout [ 163.246991] Bluetooth: hci3: command tx timeout [ 163.248082] Bluetooth: hci2: command tx timeout [ 163.248561] Bluetooth: hci1: command tx timeout [ 163.375902] Bluetooth: hci4: command tx timeout [ 163.375980] Bluetooth: hci5: command tx timeout [ 163.696201] Bluetooth: hci7: command tx timeout [ 163.822960] Bluetooth: hci6: command tx timeout [ 165.039022] Bluetooth: hci0: command tx timeout [ 165.295111] Bluetooth: hci1: command tx timeout [ 165.295652] Bluetooth: hci2: command tx timeout [ 165.296248] Bluetooth: hci3: command tx timeout [ 165.422996] Bluetooth: hci5: command tx timeout [ 165.423084] Bluetooth: hci4: command tx timeout [ 165.745067] Bluetooth: hci7: command tx timeout [ 165.871048] Bluetooth: hci6: command tx timeout [ 219.141142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.144098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.145268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.150055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.169278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.170944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.257290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.258991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.260557] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.264295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.266074] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.272138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.388689] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.392023] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.395553] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.402633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.410472] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.417163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.458153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.473152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.482334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.496542] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.511250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.512472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.561066] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.563194] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.564627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.568512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.571336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.572490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.600535] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.602269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.604068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.613034] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.614190] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.616295] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.617334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.629118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.638657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.646083] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.665121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.676246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.676665] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.698062] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.724099] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.756155] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.775935] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.778679] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.231217] Bluetooth: hci0: command tx timeout [ 221.294919] Bluetooth: hci1: command tx timeout [ 221.487960] Bluetooth: hci2: command tx timeout [ 221.616012] Bluetooth: hci4: command tx timeout [ 221.617073] Bluetooth: hci3: command tx timeout [ 221.743076] Bluetooth: hci5: command tx timeout [ 221.872159] Bluetooth: hci6: command tx timeout [ 221.873226] Bluetooth: hci7: command tx timeout [ 223.280028] Bluetooth: hci0: command tx timeout [ 223.345728] Bluetooth: hci1: command tx timeout [ 223.535911] Bluetooth: hci2: command tx timeout [ 223.662955] Bluetooth: hci4: command tx timeout [ 223.663482] Bluetooth: hci3: command tx timeout [ 223.791964] Bluetooth: hci5: command tx timeout [ 223.920234] Bluetooth: hci6: command tx timeout [ 223.920758] Bluetooth: hci7: command tx timeout [ 225.328058] Bluetooth: hci0: command tx timeout [ 225.391014] Bluetooth: hci1: command tx timeout [ 225.584160] Bluetooth: hci2: command tx timeout [ 225.712979] Bluetooth: hci4: command tx timeout [ 225.713541] Bluetooth: hci3: command tx timeout [ 225.839900] Bluetooth: hci5: command tx timeout [ 225.966940] Bluetooth: hci7: command tx timeout [ 225.967496] Bluetooth: hci6: command tx timeout [ 227.374907] Bluetooth: hci0: command tx timeout [ 227.439073] Bluetooth: hci1: command tx timeout [ 227.631925] Bluetooth: hci2: command tx timeout [ 227.760035] Bluetooth: hci3: command tx timeout [ 227.761619] Bluetooth: hci4: command tx timeout [ 227.887964] Bluetooth: hci5: command tx timeout [ 228.015944] Bluetooth: hci6: command tx timeout [ 228.016473] Bluetooth: hci7: command tx timeout [ 281.907586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.939271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.958033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.963917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.965780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.969061] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.004492] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.009357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.012067] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.015089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.018199] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.019335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.170413] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.179454] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.184129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.185279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.186844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.187405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.191115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.192048] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.193638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.202093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.217162] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.223300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.223881] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.227505] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.229126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.230103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.245790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.246764] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.310400] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.316930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.318115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.322413] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.326719] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.328013] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.328737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.338363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.342124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.344226] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.349086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.358164] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.362537] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.371024] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.371922] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.375733] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.381066] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.383080] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.015102] Bluetooth: hci0: command tx timeout [ 284.079162] Bluetooth: hci1: command tx timeout [ 284.270974] Bluetooth: hci2: command tx timeout [ 284.355994] Bluetooth: hci4: command tx timeout [ 284.357088] Bluetooth: hci3: command tx timeout [ 284.399288] Bluetooth: hci6: command tx timeout [ 284.463587] Bluetooth: hci5: command tx timeout [ 284.527024] Bluetooth: hci7: command tx timeout [ 286.063161] Bluetooth: hci0: command tx timeout [ 286.126927] Bluetooth: hci1: command tx timeout [ 286.319047] Bluetooth: hci2: command tx timeout [ 286.382980] Bluetooth: hci3: command tx timeout [ 286.383533] Bluetooth: hci4: command tx timeout [ 286.447062] Bluetooth: hci6: command tx timeout [ 286.511619] Bluetooth: hci5: command tx timeout [ 286.575884] Bluetooth: hci7: command tx timeout [ 288.111169] Bluetooth: hci0: command tx timeout [ 288.175160] Bluetooth: hci1: command tx timeout [ 288.366949] Bluetooth: hci2: command tx timeout [ 288.432079] Bluetooth: hci3: command tx timeout [ 288.432613] Bluetooth: hci4: command tx timeout [ 288.494963] Bluetooth: hci6: command tx timeout [ 288.558981] Bluetooth: hci5: command tx timeout [ 288.624059] Bluetooth: hci7: command tx timeout [ 290.159869] Bluetooth: hci0: command tx timeout [ 290.224873] Bluetooth: hci1: command tx timeout [ 290.414947] Bluetooth: hci2: command tx timeout [ 290.479124] Bluetooth: hci3: command tx timeout [ 290.479694] Bluetooth: hci4: command tx timeout [ 290.544020] Bluetooth: hci6: command tx timeout [ 290.606984] Bluetooth: hci5: command tx timeout [ 290.671004] Bluetooth: hci7: command tx timeout [ 344.133128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.135885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.142277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.155619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.163454] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.181588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.190158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.203712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.206083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.212349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.215266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.217924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.261898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.271459] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.276902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.288252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.295463] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.297733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.382714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.385811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.405929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.406373] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.412131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.415308] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.424076] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.424124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.429359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.441126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.453578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.465449] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.470636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.473403] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.474171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.481333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.488366] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.502184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.527066] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.533043] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.536984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.554270] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.585944] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.588515] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.589752] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.597651] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.627100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.650535] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.653359] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.656237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.223085] Bluetooth: hci0: command tx timeout [ 346.287859] Bluetooth: hci1: command tx timeout [ 346.350875] Bluetooth: hci2: command tx timeout [ 346.480833] Bluetooth: hci3: command tx timeout [ 346.543205] Bluetooth: hci4: command tx timeout [ 346.607059] Bluetooth: hci5: command tx timeout [ 346.671967] Bluetooth: hci7: command tx timeout [ 346.735183] Bluetooth: hci6: command tx timeout [ 348.271142] Bluetooth: hci0: command tx timeout [ 348.335861] Bluetooth: hci1: command tx timeout [ 348.398854] Bluetooth: hci2: command tx timeout [ 348.526875] Bluetooth: hci3: command tx timeout [ 348.591950] Bluetooth: hci4: command tx timeout [ 348.656902] Bluetooth: hci5: command tx timeout [ 348.719013] Bluetooth: hci7: command tx timeout [ 348.783034] Bluetooth: hci6: command tx timeout [ 350.319837] Bluetooth: hci0: command tx timeout [ 350.383038] Bluetooth: hci1: command tx timeout [ 350.446967] Bluetooth: hci2: command tx timeout [ 350.574951] Bluetooth: hci3: command tx timeout [ 350.639008] Bluetooth: hci4: command tx timeout [ 350.706005] Bluetooth: hci5: command tx timeout [ 350.766979] Bluetooth: hci7: command tx timeout [ 350.830934] Bluetooth: hci6: command tx timeout [ 352.367004] Bluetooth: hci0: command tx timeout [ 352.432005] Bluetooth: hci1: command tx timeout [ 352.494852] Bluetooth: hci2: command tx timeout [ 352.623059] Bluetooth: hci3: command tx timeout [ 352.687115] Bluetooth: hci4: command tx timeout [ 352.751093] Bluetooth: hci5: command tx timeout [ 352.814864] Bluetooth: hci7: command tx timeout [ 352.878930] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:52:20 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880092482c0 RCX=ffffffff84a3982f RDX=ffff88802b1ed340 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffff88802f10fa00 R8 =0000000000000001 R9 =fffffbfff0fddddc R10=ffff8880092482c2 R11=0000000000000001 R12=ffff8880092482c2 R13=dffffc0000000000 R14=ffff88802f10fc50 R15=0000000000000000 RIP=ffffffff8171e734 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0808b63540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005620af2891b0 CR3=000000002ba0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff813a3c43 RCX=0000000000000001 RDX=1ffff110058fff0a RSI=ffff88802c7ffeb8 RDI=ffffffff813a3c43 RBP=ffff88802c7ff850 RSP=ffff88802c7ff7c8 R8 =0000000000000001 R9 =ffff88802c7ff838 R10=000000000003a7e3 R11=00000000000081c5 R12=ffff88802c7ff8c0 R13=0000000000000000 R14=ffff888032f38000 R15=ffff888034329c00 RIP=ffffffff8142275f RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2ad8534260 CR3=0000000027d8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000