Warning: Permanently added '[localhost]:27064' (ECDSA) to the list of known hosts. 2024/12/11 14:45:40 fuzzer started 2024/12/11 14:45:40 dialing manager at localhost:35965 syzkaller login: [ 70.331320] cgroup: Unknown subsys name 'net' [ 70.451928] cgroup: Unknown subsys name 'cpuset' [ 70.470856] cgroup: Unknown subsys name 'rlimit' 2024/12/11 14:45:57 syscalls: 202 2024/12/11 14:45:57 code coverage: enabled 2024/12/11 14:45:57 comparison tracing: enabled 2024/12/11 14:45:57 extra coverage: enabled 2024/12/11 14:45:57 setuid sandbox: enabled 2024/12/11 14:45:57 namespace sandbox: enabled 2024/12/11 14:45:57 Android sandbox: enabled 2024/12/11 14:45:57 fault injection: enabled 2024/12/11 14:45:57 leak checking: enabled 2024/12/11 14:45:57 net packet injection: enabled 2024/12/11 14:45:57 net device setup: enabled 2024/12/11 14:45:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/11 14:45:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/11 14:45:57 USB emulation: enabled 2024/12/11 14:45:57 hci packet injection: enabled 2024/12/11 14:45:57 wifi device emulation: enabled 2024/12/11 14:45:57 802.15.4 emulation: enabled 2024/12/11 14:45:57 fetching corpus: 0, signal 0/0 (executing program) 2024/12/11 14:45:59 starting 8 fuzzer processes 14:45:59 executing program 3: read$snapshot(0xffffffffffffffff, &(0x7f0000000000)=""/46, 0x2e) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="d19f50546aa73acfae747f", 0xb) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x408400, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000100)) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000140)={0x0, 0x5}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r2) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1) inotify_rm_watch(0xffffffffffffffff, r3) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x108, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3b7}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9ae}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008004}, 0x44000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x18e80, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f00000004c0)=0x400) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) 14:45:59 executing program 0: sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x44044) socketpair(0x9, 0x5, 0x87a, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6b}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000890}, 0x40081) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40008) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000500)) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000540)) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x464, 0x8, 0x70bd2d, 0x25dfdbfc, "fb664efe970482e1e41ca954e8d6973298e004275719cd7fb9e68b8123c23a78a07d26f23e53ababa6ab01948c2d0796a52d", ["", "", "", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044081) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x453, 0x100, 0x70bd26, 0x25dfdbfc, "d77a2ee2fcaf8d9013a8e15a4e2dc42fd9138713385cd0a2506b87099a489095bd791aadaac82cbda76d40bbc306c7fa85ea747cd89ed1ef264d0dee3a5cb5d70a0e576705002cd03e7a8738", ["", "", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x24000090) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000800)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x28}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2d}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x8c1) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a40), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000019c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001980)={&(0x7f0000000a80)={0xecc, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xe54, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xa72}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "56d3dd9d150418d13091c9c54d8846c172fbdad66a5464cbd3b85144d21ab25b"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "42958c8e7c9f0fdb70dd35d2c3b35ea8e4de82d5faafbf142477ee1c8cfe2bb0"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "30d52e5dc2db753ab0ed04aec90ef2b565ad986425ce25c3393a7beadbba0ba2"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6fb6cb98253d34bd0061168b1fe18980e39b0b8a407e18a13676cb994a1eeb64"}]}, {0x488, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5, @remote, 0x9ed}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "030a8487016da68f821a2e5130077b13d2858329555d5825dcbc7ee1e7447442"}, @WGPEER_A_ALLOWEDIPS={0x278, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "475a72d95147467f9c4da42a67f3e8e2866500e5d753d661074671b959d5f4b1"}]}, {0x178, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x174, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}]}, {0x100, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7fff, @empty, 0xe308}}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0xd}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xec}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @empty, 0xff88}}]}, {0x5a4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa61}}, @WGPEER_A_ALLOWEDIPS={0x4c8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6831d4ada07da7ad609f3848c24469871eb03242e5610df5ae1cbd0cf3f8a623"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "810576155b10f81221602a7482f3a9d0b21a27b2289063b5d0ae6b6983f67a64"}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0xecc}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xfc, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x862}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa00}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xfc}}, 0x44894) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) 14:45:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x40}}, 0x24000091) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x4008000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:fsadm_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000804}, 0x640400c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x0, 0x200, 0x70bd25, 0x5, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2e9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40a}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000814}, 0x4) r4 = accept(0xffffffffffffffff, &(0x7f0000000580)=@nfc_llcp, &(0x7f0000000600)=0x80) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000b40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000680)={0x474, 0x3f3, 0x200, 0x70bd25, 0x25dfdbfe, {0x5, 0x1, 0x5, [0xffff, 0x53cb, 0x7ff, 0x2, 0x30, 0xffff, 0x3, 0x3, 0x8, 0x78, 0x401, 0x5f, 0x6, 0x4, 0x23, 0x101, 0x7f, 0x8, 0x7, 0x3, 0x38, 0x1ff, 0x8000, 0x0, 0x6, 0x7fff, 0x8000, 0x5, 0x33b4dd7f, 0x5, 0x3, 0x7, 0x397, 0x6c, 0x9, 0x9, 0x8, 0x0, 0x4, 0x2, 0x8, 0x24000, 0xb5, 0x7ff, 0xc848, 0x7fff, 0x1d7a, 0x43, 0xc5a4, 0x3, 0x1000, 0x0, 0x81, 0x9, 0x401, 0xfffffff7, 0x3ff, 0x6, 0x5, 0x8001, 0x2, 0x80, 0x1a8c, 0x3], [0xb61, 0xffffffff, 0x100, 0x7, 0x7f, 0x60000, 0x5, 0x7ff, 0xa26, 0x8, 0xff, 0x300000, 0x0, 0x401, 0x397c, 0x2e, 0x1e, 0x7, 0x1, 0xe8e9, 0x4, 0xe9a9, 0x9, 0x9, 0x5, 0xc0000000, 0x10000, 0x4, 0x200000, 0xfffffff9, 0x7fffffff, 0x6d7, 0x7, 0x7fff, 0xe, 0x101, 0x4, 0x3, 0x20, 0x4, 0x80000000, 0x7ff, 0xffff6ce9, 0x8, 0x9, 0x1, 0xffffffc0, 0x1, 0x15ed, 0x5, 0x7, 0x80, 0x1f, 0x4, 0x4, 0xff, 0x7, 0x4, 0x7fff, 0x46, 0x800, 0xffffff81, 0x1, 0x2], [0x1, 0x5, 0x2, 0x4daa, 0x5, 0x100, 0x70800, 0x0, 0xc50, 0xad9b, 0x3f, 0x996, 0x8001, 0x2, 0x0, 0x7ff80, 0x5, 0x6, 0x401, 0x11, 0x7f, 0x3, 0x6, 0x2, 0x0, 0x6, 0xffffff80, 0x1ff, 0x40, 0x8, 0x5, 0xfffffff9, 0x33b4, 0x8000, 0x3ff, 0xf8, 0x800, 0x80000001, 0x1, 0x7, 0x9, 0x1000, 0x20000000, 0x3, 0xfff, 0x5864, 0x1, 0x400, 0xa0, 0x5, 0x2, 0x6, 0x2, 0x3, 0x7fffffff, 0x1, 0x80, 0x401, 0x4, 0x8, 0x2, 0xda, 0xd56b, 0x101], [0xfff00000, 0x5, 0x1, 0x7, 0x3, 0x5, 0x1b2a, 0x2fc8, 0x8000, 0x2, 0x5, 0x80000000, 0xfffffb58, 0x5, 0x7, 0x1, 0x80, 0x3, 0x1, 0xb9, 0x10000, 0x8, 0x1, 0x7f, 0x1, 0x2, 0x1, 0x14129941, 0x3f, 0xe8, 0x0, 0x1, 0x3, 0x40, 0x2d4e21fb, 0x8, 0x9, 0x3, 0xffff2837, 0x2, 0xfff, 0x0, 0xc5f8, 0x3, 0x3ff, 0x6, 0x0, 0x9, 0x5, 0x3, 0x4, 0x8, 0x7, 0x7f, 0x7, 0x81, 0x6, 0x5d67d0dc, 0x80000000, 0x7ab5, 0x4, 0x9, 0x401, 0x8], 0x51, ['\'#\x00', '{#)^!\x00', 'bridge_slave_0\x00', 'NLBL_UNLBL\x00', 'ip6tnl0\x00', 'system_u:object_r:fsadm_exec_t:s0\x00', '--\x00', '\x00']}}, 0x474}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x54}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0d4041d86ea5"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="96e115b4e986"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7052fdc1cb3b"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="70b19cd954a9"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x1) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d00), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x41020}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x7, 0x0}}]}, 0x24}}, 0x40040c0) socketpair(0x0, 0xa, 0x6, &(0x7f0000000e00)={0xffffffffffffffff}) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000001340)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f0000000e80)={0x450, 0x3f3, 0x800, 0x70bd2d, 0x25dfdbff, {0x6, 0x0, 0xa, [0x6, 0x0, 0x400, 0x2, 0x3, 0x9, 0x20, 0x1, 0x7fff, 0xeaa8, 0x4, 0x0, 0x1f, 0x7, 0xe384, 0x3e, 0x10000, 0x9, 0x7fffffff, 0x8, 0x76, 0x3, 0x2, 0xfffffff7, 0xfffffffc, 0x80, 0x5, 0xf8e3, 0x76, 0x45, 0x68, 0x2, 0x4a, 0x20, 0x1, 0x100, 0xfffffff7, 0xffffffff, 0x8, 0x1, 0x9, 0x39, 0x3, 0x10000, 0xa49, 0x80000001, 0x2, 0x8, 0x5, 0x1, 0xfffffffd, 0x2, 0x5, 0x47, 0x0, 0x1, 0x400, 0x6, 0x100, 0x2, 0x32, 0xfffffea8, 0x8, 0x367], [0x81, 0x10000, 0x934, 0x1, 0x3, 0x8001, 0xc31, 0x0, 0x4, 0x0, 0x8, 0xf7c3, 0x1, 0x8, 0x1, 0x40, 0xffffffff, 0x0, 0x3ff, 0xfc7, 0x101, 0x8, 0x80000001, 0x18, 0xffffffff, 0xd4, 0x5, 0x80, 0x4, 0x1f, 0x9, 0x0, 0x9, 0x8, 0x1cf, 0x80000000, 0x5, 0x4, 0x1, 0x1, 0x2, 0x8, 0x187a, 0x5, 0xd, 0xffffff00, 0x2, 0x3, 0x9, 0xb68, 0xffff, 0x80000000, 0x7, 0x7fff, 0x400, 0x2, 0xeb5, 0x5, 0x2, 0x6, 0x400, 0x9, 0x7, 0x9], [0x1d1, 0x0, 0x1, 0x9, 0x3, 0x3, 0xff, 0x80000000, 0x1, 0x0, 0x2, 0x100, 0x6, 0x80000000, 0x8002, 0xfff, 0x8, 0x6, 0x3f, 0x80000000, 0x0, 0xc0000000, 0x1, 0x3, 0x0, 0xfff, 0xac000000, 0xe1e1, 0x7862, 0x1, 0xcee, 0xfffffffe, 0x7, 0xd26, 0x3, 0x0, 0x401, 0x6, 0x1e, 0x7, 0x8000, 0x88b, 0x7, 0x5b43, 0x2, 0x6d2, 0x849, 0x1, 0x4, 0x5, 0x1, 0x101, 0x3f, 0xb903, 0x3, 0x1, 0x90, 0x1, 0x4, 0x1, 0x7fffffff, 0x8, 0x80, 0xe5], [0xffffc54a, 0x8, 0x7, 0x8b, 0x0, 0xae, 0x100, 0x8, 0xdbf2, 0x4, 0x7, 0x0, 0x2, 0x4, 0x7, 0x0, 0x80000001, 0x3, 0xc78, 0x0, 0x9, 0x25, 0xfffffff8, 0x8, 0xfffffb79, 0xcfe, 0x20, 0x8, 0x9, 0xffffffc8, 0x1000, 0xffff, 0x1, 0x0, 0x1, 0x8, 0x81, 0x8, 0x8001, 0x401, 0x9, 0x20, 0x2, 0x9, 0x20, 0x1, 0x6, 0x410, 0x5, 0x2000000, 0xfa, 0x4, 0xd19, 0x1f, 0x7ff, 0x8ad, 0x0, 0x200, 0xe7d2, 0xd, 0xdf16, 0x40, 0x36], 0x2e, ['[-\x00', '$*\x00', 'PPPPPP', '{-\xc3*/)\x97\x00', '{#)^!\x00', '.:\'*&\'!#)@\xd6\x00', 'ip6tnl0\x00']}, ["", "", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x40}, 0x4090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r4) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x74, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xce, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_IE={0x14, 0x2a, [@gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4f}]}, 0x74}}, 0x30000080) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x6c, 0x3ed, 0x2, 0x70bd29, 0x25dfdbfb, "3567c19335b842c2b1c3937475ae499df0e7b28017eb9ea684942260e9aa4272da63182201416b87615776d274652f8e42102caae3973a984cbf653036065f5fa00fc178f0dd47e21e0ea4a6df8c113c436bd4f5310ccaf835b6", ["", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000001980)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001940)={&(0x7f00000016c0)={0x26c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xe6, 0x2a, [@peer_mgmt={0x75, 0x18, {0x1, 0x5, @val=0x7, @val=0x23, @val="1f49014a7ebeb4c28979345f357dd700"}}, @random_vendor={0xdd, 0xa2, "bad29188ffa8d1f01155c76dfef3c79d1897a7ee6c46bb3602c8c5d3c548545b35155f8e699e9a53222fea786df23993d653458a34ec08249ec40ac5c7d61c021e287e65c67b0c63137dad9227fc64161858928df3958ef81b012d53efa558d63cae74223ab7efa868840ed8b129827af71c22651531da6086ed11c2f6523d6afe759028fd1d12afdd79f102b2105b490816941b5977f9f75b7e972367b3571a6565"}, @random_vendor={0xdd, 0x22, "dec454457a408a778f2cbb42256de82b6a2d985606abc51e0a698f3ac02052b499f2"}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@ssid={0x0, 0x4, @random="c16663db"}]}, @NL80211_ATTR_IE={0x163, 0x2a, [@chsw_timing={0x68, 0x4, {0x5, 0xb4}}, @channel_switch={0x25, 0x3, {0x1, 0xaf}}, @ssid={0x0, 0x18, @random="c061dd97c3221086f8e6e6649e044aaa7c21d58af25b8cb6"}, @perr={0x84, 0xfb, {0x3, 0xf, [@ext={{}, @device_b, 0xff, @device_a, 0x5}, @ext={{}, @device_b, 0x60e, @device_b, 0x6}, @ext={{}, @device_b, 0x20, @broadcast, 0x2a}, @not_ext={{}, @device_b, 0x2, "", 0x8}, @not_ext={{}, @broadcast, 0x9, "", 0x10}, @ext={{}, @device_a, 0x5, @device_a, 0x13}, @not_ext={{}, @broadcast, 0x0, "", 0x8}, @ext={{}, @broadcast, 0x0, @device_a, 0x37}, @ext={{}, @device_a, 0x2, @broadcast, 0x13}, @ext={{}, @device_a, 0x6, @broadcast, 0xb}, @ext={{}, @broadcast, 0x7, @device_a, 0x29}, @not_ext={{}, @device_b, 0x40, "", 0x1}, @ext={{}, @device_a, 0xab, @device_b, 0x3c}, @not_ext={{}, @broadcast, 0x5, "", 0x32}, @not_ext={{}, @device_a, 0x10001, "", 0x29}]}}, @preq={0x82, 0x3b, @not_ext={{0x1, 0x1, 0x1}, 0xe, 0x5, 0x0, @device_b, 0xff, "", 0x2a, 0x8, 0x3, [{{0x0, 0x0, 0x1}, @device_b, 0x1}, {{0x1}, @device_a, 0x3}, {{}, @device_a, 0x1}]}}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4080}, 0x4840) 14:45:59 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24044055) socketpair(0x11, 0x800, 0x7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x10) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000440)=""/66, &(0x7f00000004c0)=0x42) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000500)={'wg0\x00'}) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}]}, 0x6c}}, 0x4) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f2, 0x4, 0x70bd27, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xc) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3d81}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x4000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000f00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a40)={0x458, 0x3f3, 0x8, 0x70bd2a, 0x25dfdbff, {0x4, 0x1, 0x32, [0x6, 0x8000, 0x0, 0x562a, 0x3, 0x10000, 0x6, 0xda, 0x1ff, 0x7, 0x3, 0x2d, 0x1000000, 0x4, 0x1, 0xfffffffb, 0x28b3b22e, 0x1f, 0x0, 0x5, 0x1, 0x2, 0x7, 0x5, 0x0, 0x4fe, 0x4, 0xffffffff, 0x0, 0x4, 0x7, 0x5, 0x248f, 0x80000001, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x40, 0x0, 0x3, 0x3f, 0x10001, 0x100, 0x6, 0x4, 0x2, 0x3, 0x4, 0x1330, 0x40000000, 0x838, 0x7f, 0x0, 0x5, 0x9, 0x5c7c73ea, 0x9, 0xfffffff8, 0x37b, 0x4, 0x3], [0x0, 0x2000000, 0x6, 0x6, 0x2, 0x1, 0x77e, 0x4, 0x7, 0xab4, 0x1000, 0x0, 0x4, 0x200, 0x6, 0x8, 0x3, 0x2e6a4296, 0x40, 0x4, 0x7, 0x0, 0x3, 0x5, 0x2, 0x0, 0x101, 0xfffffffb, 0x5, 0x3, 0x4be5, 0x2, 0x1f, 0x0, 0x40, 0x7, 0x5, 0x6de, 0x0, 0xfe, 0xffffffff, 0xd47e, 0xfff, 0x2, 0xff, 0xef8c, 0x4, 0x4, 0xffffffff, 0x6, 0x7, 0x3, 0xfffffffb, 0x10000, 0x81, 0x2, 0x4, 0x9, 0x31e5, 0x401, 0x6, 0xe9f5, 0x3, 0x5], [0x4, 0x6, 0x6, 0xab8, 0x1, 0x7fff, 0x6, 0xcd5, 0x5, 0x0, 0xd91, 0x8000000, 0x1, 0x0, 0x68, 0x40, 0x7, 0x5, 0x6bb0, 0x8, 0x7, 0x3, 0x3, 0x80000001, 0x1, 0xffffec98, 0x20, 0xfffffff9, 0x6, 0xff, 0x3, 0x2, 0x900, 0x1, 0x1, 0x897f, 0x81, 0x46, 0x7f, 0x6, 0x7, 0x80000000, 0x10e, 0x7ff, 0x1, 0x8, 0x1, 0x9, 0x4, 0x9, 0x5e, 0xfffff800, 0x0, 0x4, 0x8cf, 0x4, 0xfffffffb, 0x1, 0x800, 0x2, 0x5, 0x80000001, 0x2, 0x5f], [0x8, 0x6, 0xffffffff, 0xa8, 0x81, 0x5, 0x81, 0x4fd9, 0x0, 0xff, 0x5, 0x1, 0x322ef709, 0x0, 0xff, 0x2, 0x7fffffff, 0x1f7, 0x94c3, 0x8, 0x5, 0x7, 0x3f, 0x401, 0xf3a, 0x5, 0x1, 0xfffffffd, 0x1, 0xa, 0x1, 0x0, 0x7, 0x80000000, 0x1, 0x1, 0x1f, 0x3, 0xd597ab2d, 0x9358, 0x7c, 0x6, 0x200, 0xd30c, 0x0, 0xef5, 0xf3, 0x80, 0x5, 0x10000, 0x3ff, 0x3, 0xffffe58f, 0x8, 0x2, 0x4, 0xe2, 0xd38, 0x8, 0x6, 0x80000001, 0xfffffc00, 0x56aa, 0x20], 0x37, ['system_u:object_r:auditd_etc_t:s0\x00', '\xff\xff\xff\xff\xff\xff', '\xc6\xf8[-/--[\x00', 'wpan1\x00']}, ["", "", "", "", ""]}, 0x458}, 0x1, 0x0, 0x0, 0x4048880}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 14:45:59 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, r0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xef}]}, 0x13c}, 0x1, 0x0, 0x0, 0x804}, 0x2400c0d1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040080}, 0x4004054) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000042}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x31}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000800), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xe4, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51772682}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b99929c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cbd30ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x539231ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x333d}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a00), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24040000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xec, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:hald_log_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x24040000) [ 88.509062] audit: type=1400 audit(1733928359.779:7): avc: denied { execmem } for pid=273 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:45:59 executing program 5: prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x6) prctl$PR_GET_KEEPCAPS(0x7) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd25, 0x25dfdbff, {0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9fb360717f18"}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x24000000) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0xa0080008}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffd}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xc0, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x14}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb7c0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x40801) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000a80)) 14:45:59 executing program 6: r0 = clone3(&(0x7f0000000280)={0x10000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x22}, &(0x7f00000000c0)=""/251, 0xfb, &(0x7f00000001c0)=""/96, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000300)={r1, 0x0, 0xfffffff9}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000340)=0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x70, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/20, 0x14, 0x2, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/150, 0x96, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}}, &(0x7f0000000540)={0x0, 0x28, 0x50}}, 0x40}, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x2}], 0xa6, 0x0, &(0x7f0000000600)="b99689295a77b94752318a3b6f04d6ba4cc2281ec8878af0aa5356a7e50a3df58929955b5bde6e95bde0875504f72aa2fc9f58595bfdd652d52ce17bce37db0921cda677551c6098d56dff206ec42ee5dbeb4d4be0e4e4b72ed02e78ae83f13e5526f1f7113e154d961a748290bdf8bb44b74d38a553b2ce02461574a0c0a53932a58f851bb05d4de3a259ec1cf485dd1ca06cd2d8f2de0981a37b4f2c026377528f1f57e771"}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000740)) clone3(&(0x7f0000000c00)={0x800, &(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f0000000a40), {0x2a}, &(0x7f0000000a80)=""/216, 0xd8, &(0x7f0000000b80)=""/35, &(0x7f0000000bc0)=[r2, r1, r2], 0x3}, 0x58) r5 = clone3(&(0x7f0000001e00)={0x10004000, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00), {0x10}, &(0x7f0000000d40)=""/4096, 0x1000, &(0x7f0000001d40)=""/112, &(0x7f0000001dc0)=[r1, r2, r1, r0, r1], 0x5}, 0x58) clone3(&(0x7f0000001ec0)={0x4801400, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800), {0x3d}, &(0x7f0000000840)=""/69, 0x45, &(0x7f00000008c0)=""/226, &(0x7f0000001e80)=[r0, r4, r5, r2], 0x4}, 0x58) socketpair(0x1d, 0x1, 0x24143930, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000002040)={@empty, 0x0}, &(0x7f0000002080)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000021c0)={'gre0\x00', &(0x7f00000020c0)={'erspan0\x00', r7, 0x7800, 0x7, 0x400, 0x5, {{0x37, 0x4, 0x2, 0x2, 0xdc, 0x67, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x54, 0x79, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f}, {@local, 0x402f}, {@private=0xa010100, 0x5}, {@rand_addr=0x64010102, 0x8}, {@private=0xa010102, 0x2}, {@loopback, 0x5}, {@broadcast, 0x5}, {@private=0xa010102, 0x2}]}, @generic={0x7, 0xa, "ca3bbf5eca5d62db"}, @generic={0x94, 0x8, "b0671d8ef1bb"}, @end, @timestamp_prespec={0x44, 0x44, 0xa4, 0x3, 0x1, [{@empty, 0x3}, {@empty, 0x9}, {@remote, 0x709}, {@broadcast, 0xb2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback}, {@private=0xa010101, 0xffffffff}, {@broadcast, 0x1}]}, @timestamp={0x44, 0x14, 0xf2, 0x0, 0x5, [0x9, 0x3f, 0x9, 0x3f]}, @noop, @timestamp={0x44, 0x8, 0xae, 0x0, 0x4, [0x2]}]}}}}}) r8 = syz_open_dev$loop(&(0x7f0000002200), 0x0, 0x30000) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f0000002240)={0x0, {}, 0x0, {}, 0x3, 0x1, 0x1, 0x8, "29b072b0ab4db57ca7bb7d89ef317193e9f59475636acfa54a36b1a1794018c65f2fbfe1a1aeacdb8be9d6a3551a5a29fc37f93adec450fd08152ef98687f5bf", "32ee8e99b1422b4c73af3014503396bbbaae260a70760cb6f866bff44c784b45", [0x1000, 0x1]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x137) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002300), 0x40, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000002340)={0x73622a85, 0x1}) sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20046011}, 0x20004080) 14:45:59 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2c8a21d1cc5aeecd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2405c090) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x404004}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r0, 0x2, 0x70bd26, 0x7, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r2, 0x18, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socketpair(0x22, 0x3, 0x80, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x18c, r4, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_IE={0x14f, 0x2a, [@random_vendor={0xdd, 0x8f, "d819bbc455224acd6308bfec2eaf26142a516de2c092ab91860863af8119f7f6724c875178d04e48859acc79dd56ab042ffec14a1944421353ddc4e214a3910fcb8e91184aff10f501166d4dfdc1d6139f4f080d6748cdf2bd2dd69f418096579704fbe1f07c5b9b27303818e96147b0f22d0281a3339ecb49a3fcd1ed8231f550c75b11e25298cdc4152fdd5e3c2e"}, @chsw_timing={0x68, 0x4, {0x0, 0x3}}, @prep={0x83, 0x1f, @not_ext={{}, 0x20, 0x5, @device_a, 0x1, "", 0xf31, 0x1f, @device_a, 0x100}}, @challenge={0x10, 0x1, 0x82}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x9c, 0x4c}}, @rann={0x7e, 0x15, {{0x0, 0x13}, 0x2, 0x5, @broadcast, 0xff, 0x1, 0x9}}, @prep={0x83, 0x1f, @not_ext={{}, 0x40, 0x7, @device_a, 0x80000001, "", 0x2, 0xf817, @device_b, 0x81}}, @ibss={0x6, 0x2, 0x7f}, @preq={0x82, 0x4c, @ext={{0x1, 0x1}, 0xf0, 0xff, 0x5, @device_b, 0x7, @device_b, 0x0, 0x0, 0x4, [{{0x0, 0x0, 0x1}, @device_a, 0x872}, {{0x0, 0x0, 0x1}, @broadcast, 0x100}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}]}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x31}]}, 0x18c}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x9c, 0x0, 0x204, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:hald_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x40001) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xd4, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r7) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xac, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0xac}}, 0x4000000) [ 89.981062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.988647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.991136] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.994219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.996266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.998668] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.004006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.006062] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.009132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.015004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.017069] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.026803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.041303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.057233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.064887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.068558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.071128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.078879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.081480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.083808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.086257] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.088313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.091374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.093535] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.098453] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.104591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.105789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.109827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.112931] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.116931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.139578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.146815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.149054] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.155921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.157298] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.158576] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.160918] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.161943] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.164839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.168544] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.172088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.174142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.176980] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.178162] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.179840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.181919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.193920] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.197925] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.091082] Bluetooth: hci0: command tx timeout [ 92.092050] Bluetooth: hci1: command tx timeout [ 92.154903] Bluetooth: hci3: command tx timeout [ 92.155794] Bluetooth: hci4: command tx timeout [ 92.155907] Bluetooth: hci2: command tx timeout [ 92.218973] Bluetooth: hci6: command tx timeout [ 92.219064] Bluetooth: hci7: command tx timeout [ 92.219689] Bluetooth: hci5: command tx timeout [ 94.138791] Bluetooth: hci0: command tx timeout [ 94.138893] Bluetooth: hci1: command tx timeout [ 94.202743] Bluetooth: hci3: command tx timeout [ 94.203675] Bluetooth: hci4: command tx timeout [ 94.204178] Bluetooth: hci2: command tx timeout [ 94.267870] Bluetooth: hci7: command tx timeout [ 94.268544] Bluetooth: hci6: command tx timeout [ 94.268573] Bluetooth: hci5: command tx timeout [ 96.186763] Bluetooth: hci0: command tx timeout [ 96.187284] Bluetooth: hci1: command tx timeout [ 96.250768] Bluetooth: hci2: command tx timeout [ 96.252200] Bluetooth: hci3: command tx timeout [ 96.253491] Bluetooth: hci4: command tx timeout [ 96.314742] Bluetooth: hci7: command tx timeout [ 96.314769] Bluetooth: hci6: command tx timeout [ 96.316123] Bluetooth: hci5: command tx timeout [ 98.235021] Bluetooth: hci0: command tx timeout [ 98.236739] Bluetooth: hci1: command tx timeout [ 98.300728] Bluetooth: hci4: command tx timeout [ 98.302250] Bluetooth: hci3: command tx timeout [ 98.303882] Bluetooth: hci2: command tx timeout [ 98.362952] Bluetooth: hci6: command tx timeout [ 98.364521] Bluetooth: hci5: command tx timeout [ 98.364551] Bluetooth: hci7: command tx timeout [ 153.108097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.110981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.113846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.118844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.120879] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.122043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.161538] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.166785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.171890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.175658] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.176864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.180865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.181766] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.184183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.185397] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.213900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.217872] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.222963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.232246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.246094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.251966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.282097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.284519] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.285774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.313100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.316996] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.353385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.363297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.366898] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.368149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.378823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.381880] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.384989] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.386026] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.387338] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.391834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.394525] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.401152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.406033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.406108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.421479] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.422378] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.423778] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.429163] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.432940] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.434316] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.538040] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.541874] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.194713] Bluetooth: hci0: command tx timeout [ 155.258757] Bluetooth: hci1: command tx timeout [ 155.259748] Bluetooth: hci2: command tx timeout [ 155.322742] Bluetooth: hci3: command tx timeout [ 155.450736] Bluetooth: hci5: command tx timeout [ 155.514729] Bluetooth: hci4: command tx timeout [ 155.580929] Bluetooth: hci6: command tx timeout [ 155.642823] Bluetooth: hci7: command tx timeout [ 157.242742] Bluetooth: hci0: command tx timeout [ 157.307665] Bluetooth: hci2: command tx timeout [ 157.308228] Bluetooth: hci1: command tx timeout [ 157.370938] Bluetooth: hci3: command tx timeout [ 157.499082] Bluetooth: hci5: command tx timeout [ 157.562759] Bluetooth: hci4: command tx timeout [ 157.626909] Bluetooth: hci6: command tx timeout [ 157.692069] Bluetooth: hci7: command tx timeout [ 159.290868] Bluetooth: hci0: command tx timeout [ 159.355687] Bluetooth: hci1: command tx timeout [ 159.356242] Bluetooth: hci2: command tx timeout [ 159.418748] Bluetooth: hci3: command tx timeout [ 159.546683] Bluetooth: hci5: command tx timeout [ 159.610777] Bluetooth: hci4: command tx timeout [ 159.675375] Bluetooth: hci6: command tx timeout [ 159.739734] Bluetooth: hci7: command tx timeout [ 161.339656] Bluetooth: hci0: command tx timeout [ 161.403650] Bluetooth: hci1: command tx timeout [ 161.404219] Bluetooth: hci2: command tx timeout [ 161.468711] Bluetooth: hci3: command tx timeout [ 161.594705] Bluetooth: hci5: command tx timeout [ 161.658757] Bluetooth: hci4: command tx timeout [ 161.722951] Bluetooth: hci6: command tx timeout [ 161.786829] Bluetooth: hci7: command tx timeout [ 215.822767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.824722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.826048] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.835500] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.838324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.839798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.856461] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.859621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.861996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.864374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.866376] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.868963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.878742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.891965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.893176] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.900303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.902067] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.903260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.013253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.015062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.016184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.018944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.020800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.022288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.131913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.133173] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.135534] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.137421] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.138638] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.139559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.147259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.148888] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.150059] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.151083] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.162955] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.163945] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.164890] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.168056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.171075] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.172325] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.185963] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.187181] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.198823] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.200318] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.203895] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.213954] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.242942] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.249115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.914695] Bluetooth: hci1: command tx timeout [ 217.916424] Bluetooth: hci0: command tx timeout [ 217.978715] Bluetooth: hci2: command tx timeout [ 218.110876] Bluetooth: hci3: command tx timeout [ 218.234820] Bluetooth: hci5: command tx timeout [ 218.236504] Bluetooth: hci4: command tx timeout [ 218.298723] Bluetooth: hci7: command tx timeout [ 218.300383] Bluetooth: hci6: command tx timeout [ 219.963874] Bluetooth: hci1: command tx timeout [ 219.965047] Bluetooth: hci0: command tx timeout [ 220.026669] Bluetooth: hci2: command tx timeout [ 220.154872] Bluetooth: hci3: command tx timeout [ 220.283829] Bluetooth: hci4: command tx timeout [ 220.284338] Bluetooth: hci5: command tx timeout [ 220.348662] Bluetooth: hci7: command tx timeout [ 220.349170] Bluetooth: hci6: command tx timeout [ 222.010695] Bluetooth: hci1: command tx timeout [ 222.011253] Bluetooth: hci0: command tx timeout [ 222.076178] Bluetooth: hci2: command tx timeout [ 222.202659] Bluetooth: hci3: command tx timeout [ 222.331897] Bluetooth: hci5: command tx timeout [ 222.332426] Bluetooth: hci4: command tx timeout [ 222.394691] Bluetooth: hci6: command tx timeout [ 222.395195] Bluetooth: hci7: command tx timeout [ 224.058712] Bluetooth: hci0: command tx timeout [ 224.060651] Bluetooth: hci1: command tx timeout [ 224.122762] Bluetooth: hci2: command tx timeout [ 224.251666] Bluetooth: hci3: command tx timeout [ 224.379683] Bluetooth: hci5: command tx timeout [ 224.381061] Bluetooth: hci4: command tx timeout [ 224.442671] Bluetooth: hci7: command tx timeout [ 224.444777] Bluetooth: hci6: command tx timeout [ 276.192463] syz-executor.1 (5869) used greatest stack depth: 24488 bytes left [ 278.410513] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.412988] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.415396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.415525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.426538] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.431210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.434294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.440526] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.442995] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.446981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.454356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.456795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.533421] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.547920] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.554036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.569827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.580322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.584387] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.600993] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.604341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.611599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.630074] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.638915] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.642287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.672453] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.689693] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.710743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.729942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.760017] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.766728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.891762] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.898472] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.900980] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.908725] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.918198] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.921056] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.954518] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.960929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.965899] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.977677] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.030853] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.039405] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.189281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.199836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.214798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.289129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.292825] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.296710] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.507924] Bluetooth: hci1: command tx timeout [ 280.510529] Bluetooth: hci0: command tx timeout [ 280.635706] Bluetooth: hci2: command tx timeout [ 280.826779] Bluetooth: hci4: command tx timeout [ 280.827936] Bluetooth: hci3: command tx timeout [ 281.084750] Bluetooth: hci6: command tx timeout [ 281.275675] Bluetooth: hci7: command tx timeout [ 281.402908] Bluetooth: hci5: command tx timeout [ 282.555671] Bluetooth: hci1: command tx timeout [ 282.556243] Bluetooth: hci0: command tx timeout [ 282.683681] Bluetooth: hci2: command tx timeout [ 282.874888] Bluetooth: hci3: command tx timeout [ 282.875434] Bluetooth: hci4: command tx timeout [ 283.130789] Bluetooth: hci6: command tx timeout [ 283.323962] Bluetooth: hci7: command tx timeout [ 283.452666] Bluetooth: hci5: command tx timeout [ 284.602929] Bluetooth: hci0: command tx timeout [ 284.604664] Bluetooth: hci1: command tx timeout [ 284.731693] Bluetooth: hci2: command tx timeout [ 284.924152] Bluetooth: hci4: command tx timeout [ 284.925888] Bluetooth: hci3: command tx timeout [ 285.179848] Bluetooth: hci6: command tx timeout [ 285.371844] Bluetooth: hci7: command tx timeout [ 285.499681] Bluetooth: hci5: command tx timeout [ 286.650694] Bluetooth: hci1: command tx timeout [ 286.651228] Bluetooth: hci0: command tx timeout [ 286.779626] Bluetooth: hci2: command tx timeout [ 286.970662] Bluetooth: hci3: command tx timeout [ 286.971212] Bluetooth: hci4: command tx timeout [ 287.228819] Bluetooth: hci6: command tx timeout [ 287.419628] Bluetooth: hci7: command tx timeout [ 287.547637] Bluetooth: hci5: command tx timeout [ 341.061776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.063339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.066208] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.070355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.071984] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.077871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.253651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.257826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.260224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.265168] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.268848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.270936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.316005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.324363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.328272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.335827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.339249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.341450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.347173] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.367767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.394455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.405111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.448007] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.453153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.455067] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.459100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.461209] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.463381] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.466294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.468373] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.473908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.473909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.480432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.485705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.501898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.502876] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.511766] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.515471] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.522787] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.528421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.540799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.542070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.633411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.647909] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.649104] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.653347] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.655226] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.658866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.162942] Bluetooth: hci0: command tx timeout [ 343.290689] Bluetooth: hci1: command tx timeout [ 343.419597] Bluetooth: hci2: command tx timeout [ 343.610727] Bluetooth: hci6: command tx timeout [ 343.610799] Bluetooth: hci4: command tx timeout [ 343.612771] Bluetooth: hci5: command tx timeout [ 343.738760] Bluetooth: hci7: command tx timeout [ 343.934317] Bluetooth: hci3: command tx timeout [ 345.210716] Bluetooth: hci0: command tx timeout [ 345.339634] Bluetooth: hci1: command tx timeout [ 345.430925] journal-offline (11924) used greatest stack depth: 24288 bytes left [ 345.467658] Bluetooth: hci2: command tx timeout [ 345.658657] Bluetooth: hci4: command tx timeout [ 345.659794] Bluetooth: hci5: command tx timeout [ 345.659927] Bluetooth: hci6: command tx timeout [ 345.786698] Bluetooth: hci7: command tx timeout [ 345.980701] Bluetooth: hci3: command tx timeout [ 347.261052] Bluetooth: hci0: command tx timeout [ 347.386692] Bluetooth: hci1: command tx timeout [ 347.514681] Bluetooth: hci2: command tx timeout [ 347.707353] Bluetooth: hci5: command tx timeout [ 347.707381] Bluetooth: hci4: command tx timeout [ 347.707891] Bluetooth: hci6: command tx timeout [ 347.835680] Bluetooth: hci7: command tx timeout [ 348.027621] Bluetooth: hci3: command tx timeout [ 349.306736] Bluetooth: hci0: command tx timeout [ 349.435799] Bluetooth: hci1: command tx timeout [ 349.562797] Bluetooth: hci2: command tx timeout [ 349.754626] Bluetooth: hci6: command tx timeout [ 349.755121] Bluetooth: hci4: command tx timeout [ 349.756093] Bluetooth: hci5: command tx timeout [ 349.883772] Bluetooth: hci7: command tx timeout [ 350.074730] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 14:51:09 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c16120 RDI=ffff8880157e2608 RBP=ffffffff85c16120 RSP=ffff88800e3c7850 R8 =00000000ffffffff R9 =ffff8880157e2600 R10=ffffffff863fbc97 R11=0000000000000000 R12=ffff8880157e1bc0 R13=ffff8880157e2608 R14=00000000ffffffff R15=ffff8880157e2608 RIP=ffffffff84a54d20 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2b450de4a1 CR3=000000000b2a4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000ff0000000000 XMM02=000000ff0000000000000000ff000000 XMM03=0000000000000000000000ff00000000 XMM04=0000ff00000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=1ffff110058ccf52 RCX=ffffffff8150283e RDX=0000000000000000 RSI=0000000000000008 RDI=ffff888025acc1c4 RBP=ffffffff863fca34 RSP=ffff88802c667a80 R8 =0000000000000001 R9 =fffffbfff0c7f792 R10=ffffffff863fbc97 R11=0000000000000000 R12=ffffffff85d01b78 R13=ffffffff81aef376 R14=ffff888025acb780 R15=ffff888030afe000 RIP=ffffffff815028cf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f216a992000 CR3=000000000fa8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000