Warning: Permanently added '[localhost]:2784' (ECDSA) to the list of known hosts. 2025/01/24 13:15:51 fuzzer started 2025/01/24 13:15:52 dialing manager at localhost:45511 syzkaller login: [ 89.235964] cgroup: Unknown subsys name 'net' [ 89.361776] cgroup: Unknown subsys name 'cpuset' [ 89.381232] cgroup: Unknown subsys name 'rlimit' [ 95.865306] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 13:16:13 syscalls: 2217 2025/01/24 13:16:13 code coverage: enabled 2025/01/24 13:16:13 comparison tracing: enabled 2025/01/24 13:16:13 extra coverage: enabled 2025/01/24 13:16:13 setuid sandbox: enabled 2025/01/24 13:16:13 namespace sandbox: enabled 2025/01/24 13:16:13 Android sandbox: enabled 2025/01/24 13:16:13 fault injection: enabled 2025/01/24 13:16:13 leak checking: enabled 2025/01/24 13:16:13 net packet injection: enabled 2025/01/24 13:16:13 net device setup: enabled 2025/01/24 13:16:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 13:16:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 13:16:13 USB emulation: enabled 2025/01/24 13:16:13 hci packet injection: enabled 2025/01/24 13:16:13 wifi device emulation: enabled 2025/01/24 13:16:13 802.15.4 emulation: enabled 2025/01/24 13:16:13 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 13:16:13 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/24 13:16:13 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/24 13:16:13 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/24 13:16:13 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 13:16:13 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 13:16:17 starting 8 fuzzer processes 13:16:17 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x14000850) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x72}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x180000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5b3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd445}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008800}, 0x10) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000380)=0x63, 0x2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8f, 0xbe, "4a446ff474b3b0f57f33c35fc7bc0f9204f7be34c146c8a514b1f1ee3704314c1e7682e4d55141c8dd38672ff54585bdd8b10f51e781cbd61c85daa699213c6be44d04a7dde10526275176180b2e03e4fc032b3977f98893b754d636f575db9ca3d8f62e0b75a0f5c9bf7bf433ad7a38e43010b01684bbad9691257fe84e9d0e1fc1c6702b85c6600967c9"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044850}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa0, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x89}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0xa0}}, 0x60c0810) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8f}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x7, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40091}, 0x24000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/mdstat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5d}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000bc0)={r1, 0x101, 0x100000000, 0xfd}) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20080) accept4(r3, &(0x7f0000000d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000d80)=0x80, 0x80800) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000dc0)={'rose0\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000e00)={'macvlan1\x00'}) 13:16:17 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x1, 0x0, &(0x7f0000000040)={r0, r1+10000000}, &(0x7f0000000080)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000140)={0x9, "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"}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000400)={0x1, 0x0, 0x1, 0x100, r4}) ppoll(&(0x7f0000000440)=[{r3, 0x601}], 0x1, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x20]}, 0x8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x290, 0x12, 0xb, 0x401, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x5}, [@generic="5472073dd7c8f329dc2310b800e381a38003bfd0aa2fc9", @nested={0x74, 0x8d, 0x0, 0x1, [@generic="9a74c6f47266248bf717684350d557413fe22e0c670e2745d75da7f553967eab669baeec9937600be81fcfd3178eaadfd21f52d3d21af2f236afb1b4f81c57dca76ede0003b7f6d9c9b9387d4c47f9f1", @generic="11831475144dfd7b2f3dc3c5c4c98718b83c9f20258b1111f94bb6053c140e6a"]}, @generic="d8cc59ce3bba6431acf80051dfd01513ef61e7b3aebeb34e8ab304400d653875cb1ff51a0d13bca26e68f9a5cd62b131c0327638d7ab353ed8ff65e68d6f28b190a485e2c23698a387409201d64104534ef455df0d9ef13b7bc3849d712f7c681c3f4c2918697e2c60f21e95ea611497c3e099ed29e6b0064964cd258b7a912df9dec56db339f15f07e5f0918ecb3ab64db3114f486f13d0959bf707aa0fc2e1bf7f1888e267999120f7dea5015a851605156085093218b3bb8fa8e8537f99787414ed9f2b090bb85695300892b8f6b5e837b97f47308b644831e5d13ce5", @typed={0x8, 0x81, 0x0, 0x0, @u32=0x4}, @generic="c6edb989aaf90b63ad000da1a87791e7960f81871f45e6799cb2", @typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@loopback}, @nested={0xdb, 0x2, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x27}, @generic="595db95309c1c3ceb43404c89776791e6aca819e54125f1d97c03879c5386dfda33e3f9075e14b0f5ba21078b081398f3f61f8ac731b3011c4b1bd1a044a56afcbdc088ba77cca3988b73cd169dc74a43c75700f0c72cacb5cc6017232d12ec1650772ac22de0edb9257067aea57ea092f13233a5d8e6b9af9cdf57578cddb77da7c39558a8483d1c477905278579590202ec8dc63865e73203ca44fe0e58eaa7d98ca002a3ca44bf5c7dcc636d28fe5216008d1e41f2254e9a0faa2c1bc41", @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x2b89}]}, @typed={0x4, 0x16}, @typed={0x8, 0x77, 0x0, 0x0, @str=',{,\x00'}]}, 0x290}}, 0x4000) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x14002}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0xb, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xcab}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000980)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @random="0ebf23ba3681"}, 0x66, {0x2, 0x4e22, @loopback}, 'gretap0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'veth1_to_bridge\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4e22, 0x7f, 0x4e23, 0x1, 0xa, 0xa0, 0x10, 0x84, r5}, {0x2, 0x0, 0xffffffff, 0xa8, 0xa59, 0x1f, 0xf9, 0x5}, {0x2, 0x4, 0x7fff, 0x6}, 0x6, 0x6e6bbf, 0x2, 0x0, 0x2, 0x2}, {{@in6=@mcast2, 0x4d4, 0x3c}, 0xa, @in6=@empty, 0x3500, 0x0, 0x3, 0x1f, 0x2, 0x3f, 0x7}}, 0xe8) r6 = openat$incfs(r2, &(0x7f0000000b40)='.pending_reads\x00', 0x103480, 0x1) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000b80)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x4e20, 0x3f, 0x4e22, 0x7ff, 0x2, 0x80, 0x40, 0x3c}, {0x1, 0x4313, 0x1, 0x8000, 0x0, 0x2, 0x16b7}, {0x2, 0x12, 0x9, 0x80000001}, 0x6, 0x6e6bb7, 0x0, 0x1, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@private2, 0x34ff, 0x1, 0x2, 0x5, 0x1f, 0xfffffffd, 0x4}}, 0xe8) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000c80)) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000cc0)={0x1, 0x5, 0x800, 0x401, 0xffffff01, 0x1}) r7 = syz_open_dev$hidraw(&(0x7f0000000d00), 0x2dc, 0x129080) signalfd4(r7, &(0x7f0000000d40)={[0x27]}, 0x8, 0x80000) futex(&(0x7f0000000d80)=0x2, 0xc, 0x1, &(0x7f0000000e00), &(0x7f0000000e40), 0x1) 13:16:17 executing program 2: r0 = shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/158) shmctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)=""/117) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000180)={{0x10001, 0x4}, 0x100, './file0\x00'}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x76) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x7) r5 = semget(0x2, 0x0, 0x10) semctl$GETPID(r5, 0x1, 0xb, &(0x7f00000003c0)=""/51) removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@random={'osx.', '#(*I:}\x00'}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000480)='#(*I:}\x00', &(0x7f00000004c0)='./binderfs/binder-control\x00', 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x400040, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f0000000540)) setsockopt(r2, 0x1, 0x81, &(0x7f0000000580)="431fa5873743bed1f1582c8c49cd72555eff8cc0377ca0aef5ff7c9ebc4f18fbe499b17d2ccdaca64e4c50caccd5284cd35afe3fdd1f414ef623ec9dd1af9be4f0b5fbc58f7a6a4455a0adcc4158e80c3417a75ce6319cbf64dba772ab079e431a2aab89c59d1284903ebd4a0d309452792252cfe2be", 0x76) r7 = socket$inet(0x2, 0x3, 0x1a3e) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000600)={'bond0\x00', {0x2, 0x0, @initdev}}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20040880) [ 114.106003] audit: type=1400 audit(1737724577.101:7): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:16:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept$inet(r0, 0x0, &(0x7f0000000000)) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0xfffffffc, 0xfff, 0x0, 'queue0\x00', 0xffff}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, @short={0x2, 0x2}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000200)="15250af0dc3b3832ca0a1bb13f82bebbc4c714172ecc60dc67e8f340ad93fdd1bb35536272e37e187def7b0892185bf2bb24b3b489fa88abba890e51052bf674b46030a4b566c253088938fea26f67fe1fd16ef5b2ca613714a84f2c714b5fe9fbbb8e2bfba8da3158d478e713bb6efb2e0d462c457262b29d0115b6db82edb08bd675e5544cba40de2156262b915950c5ecfbfc64dd04c3a7d311c12a5e3fe384be924b09", 0xa5}, 0x1, 0x0, 0x0, 0x4040080}, 0xc4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x80}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000800}, 0x20008080) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000480)={0x4, [0x0, 0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000500)={0x6, "03999a"}, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000680)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x6, 0x3, {{0x1f, 0x4, 0x0, 0x7, 0x7c, 0x65, 0x0, 0x3f, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @timestamp={0x44, 0x1c, 0xb7, 0x0, 0x9, [0x5, 0x1f, 0x0, 0x20, 0xffff7fff, 0xb70]}, @timestamp_prespec={0x44, 0x14, 0x5, 0x3, 0x2, [{@multicast1, 0xffffffff}, {@remote, 0x10000}]}, @lsrr={0x83, 0x17, 0xfe, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @multicast1]}, @generic={0x0, 0x6, "967e4a70"}, @lsrr={0x83, 0xb, 0xd7, [@broadcast, @loopback]}, @timestamp={0x44, 0xc, 0xd6, 0x0, 0x3, [0xffffffff, 0x1]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x2f, 0x19, 0x6, 0x7f0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x20, 0x20, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x2f, 0x2a, 0x8, 0x81, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x40, 0x9, 0x4}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000a80)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000540), 0xc, &(0x7f00000010c0)={&(0x7f0000000ac0)={0x5c4, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x9, 0xbc, 0x800}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdbea}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x20000801}, 0x6c030122cc5c3633) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000001140)={'bond_slave_0\x00'}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001180)={0x0, 0x2, 0xe36, 0x9}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001240)={0x80000000}) 13:16:17 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x901, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x7, 0x15, 0x1, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}, 0x1, 0x700, 0x0, 0x7f}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000300)={@remote, 0x65, r2}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000340)=0xda, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x4008000) r4 = syz_io_uring_complete(0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x0, 0x7f}, {0x7fff, 0x5}, {0x7ff, 0x7}, {0x7ff, 0x6}, {0x4, 0x8000}]}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000540)='$\x00', 0x0, r0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000580)=@hsc={0x1, 0x2, "25562862a6d88095bf89"}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x19d640, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000600)=0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r4, 0x80, &(0x7f0000000640)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'veth0_virt_wifi\x00'}}, 0x0, 0x0, 0x1}, 0x5) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000700)={0x40, 0x3}) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000740)) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x3ed, 0x10, 0x70bd2c, 0x25dfdbfc, "2ba98056ef235b9e2bd124dfe2ec44bb4c2b74218cc64d8ae7fe8f89518973ab4a2954041dca792c0e84802a35d8e140d78cb0", ["", "", "", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x4080) r6 = socket(0x1a, 0x800, 0x4a) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000004) 13:16:17 executing program 5: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) quotactl(0x6, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)="814069e2469a2136d33849a3eabef6ad970b9b487d386615475e0b067194616ac270827045b1f9daad688f7554c21b83f6af26d7918266f8139d9b9dff6b3872d472d8493f7cd0a8fe3eed769b6f48cdfed840b20d95767086e9d3ba6e6f291e08c324cca6fb750c5515b580daabdd208ad7da5a6d18c77f217fb10b62ad33a0909075b82103342a8424d413977dbb2d2b7ca308f5c8e1f9a64b2ec7024ec9522cf50bc07dea1295a4cc941eb4509fd1abb52f7a86") lsetxattr$security_ima(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v1={0x2, "7198c50c8b7a"}, 0x7, 0x98bc3aa7fc1638ed) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000005c0)={{'\x00', 0x3}, {0x10000}, 0x3a, 0x0, 0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)="7c1e4f282d8131e6aed8ff60e3c4e5cd98476f21a75702b4edb90d0d0c372959c9f65781c316a08bec862b130c0d7bbc9f3be99168fc4c134960e5409498809d06ce1f4a24d07d170a5cae43edab551b85d21b94783f8f9c12f67d104400f2171bf2f0f072285eba46ba2e1e66020d8b4bee5f28bc0d162ac56329e3459082788edcf4560b73ed41453480395e2cf27250d5fbeb7643c52e53267cd74ebbf03b17035c531d4208bd7dbf139e0d4a0f260074b13f854c6a5ab48d1055ac33da8cc6b76a48490caa083f1e130ac214370456651ad564476932246017be54b9382feb5e70f1f1a353d82edb0311cc7bd96e036d0c9d7f7f53f9495aaba8f4f9d0329a4358459149545c718b1fb2a8026588cdf75280a22af56be3a1f307062a43ca54b0aa62fa42642e62fd95c5b4a5fbd5571c08939963aaa1c62ff7cf059794d7e3415458a38252b8c6234f5eed17027dc02ec97d0322ec9b6fd30fe4", 0x15c, 0x0, &(0x7f00000004c0)={0x2, 0x80, {0x0, 0xc, 0x12, "8476bedab0d2e52ec6b32fbfe9c5b2fd8c39", 0x61, "c5cf8d183924d8966ff60d5ee29801be100573cbb8599a539efc858c1a2d9cf6543958d21cd75e972ae52448d335b5c096d65265694de92b380815db9c062ad87e2e04a8e7597cba38440937d50b2c47df6609a2c5d687dfb7ac508e44a3b62571"}, 0x60, "9ec41624c26ba5e6f5908d854a9d5da885ebd1eb36f45d17da14f9e76c35d2d52631d9cfcaa2c02f62175dfc69668fee263fc6a84a700345f988bf17395202e5c236ea8401c0827f4ee27b14c2ba786e1bdfafcff6a4fdf7222fcd96fc722c26"}, 0xec}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000680)={0x0, r1, 0x100000001, 0x8000000000, 0x0, 0x3}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000006c0)={0x2, @multicast1, 0x4e23, 0x2, 'ovf\x00', 0x2c, 0x0, 0x10}, 0x2c) lgetxattr(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=@random={'os2.', 'ovf\x00'}, &(0x7f0000000780)=""/199, 0xc7) symlink(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)='./file0/file0\x00') r2 = accept(r0, 0x0, &(0x7f0000000900)) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x0, [0x5, 0x10000, 0x4]}, &(0x7f00000009c0)=0x44) getxattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@known='user.incfs.id\x00', &(0x7f0000000a80)=""/147, 0x93) write$char_usb(r1, &(0x7f0000000b40)="f109971240a0d26bd353b39ec4d97fd3a7c2274ef7b96bf85601a5e9f4e674347be8f5ca17726fe864c7571df39f44d373a03510276d8e42946a20797015f0844b228957259d54b329e546e61b8f2d6f99e7fee1026ee914d2216f2b4e2f38a07939e62e2c14de4eafe901216797f642d163bf652d70e6bcdad0d5b2169cca0e1d73de7a76ef90fa20f3a0eb3b6775391cedbf475e71a223fc3fa7d6c500a5a8e1fab2e1a5e8b0ce244d7b427d43caa6bcdb777877ff37424a319dda2cbf48a0785457f8883599d3d3d74723d4bfcdabe4ddac4a240f842f7eed7424b8bc1a15da2929c6f929853e3f262ab4ac519647e780d6fe128587caf4a2325b", 0xfc) mount$bind(&(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x1000080, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000e00), 0x4d6, 0x608402) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e80)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x20, 0x6, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x80, 0x700, 0x80000001, 0xfffffd57}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5c3487c48f19"}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x20044814) faccessat2(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x0, 0x100) 13:16:17 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) fstat(r0, &(0x7f0000000040)) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r1, &(0x7f0000000100)=""/29, 0x1d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x80) getsockname(r2, &(0x7f0000000200)=@nfc, &(0x7f0000000280)=0x80) sendto(r2, &(0x7f00000002c0)="adbaf25a0afef815f35c4d75bbc80a31", 0x10, 0x24000800, &(0x7f0000000300)=@ethernet={0x306}, 0x80) r4 = accept(r1, &(0x7f0000000380)=@ieee802154={0x24, @long}, &(0x7f0000000400)=0x80) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000440)) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8005) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d1}, 0x200000c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000680)={[{0x2b, 'net_cls'}, {0x2d, 'rlimit'}, {0x2b, 'net_prio'}, {0x2d, 'net_cls'}]}, 0x24) r5 = epoll_create1(0x80000) r6 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f00000006c0)=[{r4, 0x20b0}, {r4, 0x603}, {r4, 0x2822}, {r5, 0x8}, {r6, 0x2000}], 0x5, &(0x7f0000000700)={0x0, 0x989680}, &(0x7f0000000740)={[0x8]}, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000780)={'HL\x00'}, &(0x7f00000007c0)=0x1e) 13:16:17 executing program 7: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/22, 0x16, 0x1, &(0x7f0000000040)=""/118, 0x76}, &(0x7f0000000100)=0x40) r0 = memfd_secret(0x80000) getsockopt(r0, 0x10001, 0x7, &(0x7f0000000140)=""/221, &(0x7f0000000240)=0xdd) r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x9, 0x101000) setsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f00000002c0)="6100f0a359399f16a709cf8fe194708b7bcd64b4780cccf235d968f1380a8a6f9a09afa8c3441049d18065bc5b6d95f7394f47ec9f80e4e691cebc212ecd100d6a3bfbf66724a5ccd33bc11e29feb8ac4578b5a49a0aafb03a1d5c7df1433bb2b39cc68c81728eccb3cff59ae90d06434df2d980923505680c664dffde42b98231cfabdaa67a4d2465f82e65cec8b3afae6df13769ce6bb234f797a1936ffc48ad7219bb2b23d725e14539a1265e597efb", 0xb1) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0xdb2, 0x8281) accept$unix(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000004c0)={'netdevsim0\x00', {0x2, 0x0, @multicast1}}) r3 = syz_open_dev$vcsu(&(0x7f0000000500), 0x5, 0x802) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000540), 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000580)={'team_slave_0\x00'}) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000600)={'wg0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000001b00)={&(0x7f0000000680)=@un=@abs, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/210, 0xd2}, {&(0x7f0000001800)=""/225, 0xe1}, {&(0x7f0000001900)=""/136, 0x88}], 0x4, &(0x7f0000001a00)=""/214, 0xd6}, 0x40000082) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000001c80)=""/239) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000001d80)={0x7, 'bridge_slave_1\x00', {}, 0x8b35}) [ 115.464108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.468938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.470536] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.474637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.488946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.494875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.702199] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.704074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.705248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.711489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.714936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.737979] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.825566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.827669] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.830047] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.830954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.832429] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.833459] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.835004] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.835787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.837033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.858751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.859476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.862510] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.865314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.866873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.871598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.873159] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.874470] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.875820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.876600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.877488] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.877521] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 115.882278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.916624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.917946] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.918672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.924548] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.961469] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.979428] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.980922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.989017] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.990594] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.033565] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 116.034514] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.044438] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 116.049415] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.051422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.538605] Bluetooth: hci0: command tx timeout [ 117.794831] Bluetooth: hci1: command tx timeout [ 117.992443] Bluetooth: hci3: command tx timeout [ 117.993257] Bluetooth: hci5: command tx timeout [ 117.993805] Bluetooth: hci4: command tx timeout [ 118.050177] Bluetooth: hci2: command tx timeout [ 118.114066] Bluetooth: hci6: command tx timeout [ 118.148421] Bluetooth: hci7: command tx timeout [ 119.585775] Bluetooth: hci0: command tx timeout [ 119.842768] Bluetooth: hci1: command tx timeout [ 120.050768] Bluetooth: hci5: command tx timeout [ 120.051288] Bluetooth: hci3: command tx timeout [ 120.051801] Bluetooth: hci4: command tx timeout [ 120.099541] Bluetooth: hci2: command tx timeout [ 120.194622] Bluetooth: hci6: command tx timeout [ 120.195194] Bluetooth: hci7: command tx timeout [ 121.633788] Bluetooth: hci0: command tx timeout [ 121.889810] Bluetooth: hci1: command tx timeout [ 122.145983] Bluetooth: hci2: command tx timeout [ 122.146530] Bluetooth: hci4: command tx timeout [ 122.147071] Bluetooth: hci3: command tx timeout [ 122.147525] Bluetooth: hci5: command tx timeout [ 122.209966] Bluetooth: hci7: command tx timeout [ 122.210501] Bluetooth: hci6: command tx timeout [ 123.686966] Bluetooth: hci0: command tx timeout [ 123.938087] Bluetooth: hci1: command tx timeout [ 124.194754] Bluetooth: hci5: command tx timeout [ 124.195314] Bluetooth: hci2: command tx timeout [ 124.196478] Bluetooth: hci3: command tx timeout [ 124.205180] Bluetooth: hci4: command tx timeout [ 124.261868] Bluetooth: hci7: command tx timeout [ 124.262430] Bluetooth: hci6: command tx timeout [ 178.237187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.242372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.246242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.265418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.269470] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 178.272326] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.482930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.488469] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.490312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.495476] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.497328] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.500357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.558299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.565996] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.569939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.572188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.577437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.595886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.596712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.597228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.597871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.607950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.609333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.610461] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.612892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.614394] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.621109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.636522] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.644328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 178.645608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.647111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.679538] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.682461] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.743155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.778974] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 178.783345] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.806446] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.811950] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.840995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.844487] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.846938] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 178.848999] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.853429] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.857000] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.858941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.969035] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.970780] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 178.974503] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.324780] Bluetooth: hci0: command tx timeout [ 180.580983] Bluetooth: hci1: command tx timeout [ 180.707631] Bluetooth: hci4: command tx timeout [ 180.769911] Bluetooth: hci2: command tx timeout [ 180.770931] Bluetooth: hci3: command tx timeout [ 181.026999] Bluetooth: hci7: command tx timeout [ 181.028009] Bluetooth: hci5: command tx timeout [ 181.028623] Bluetooth: hci6: command tx timeout [ 182.369987] Bluetooth: hci0: command tx timeout [ 182.625774] Bluetooth: hci1: command tx timeout [ 182.755715] Bluetooth: hci4: command tx timeout [ 182.804118] hrtimer: interrupt took 5734206 ns [ 182.838777] Bluetooth: hci3: command tx timeout [ 182.839432] Bluetooth: hci2: command tx timeout [ 183.076019] Bluetooth: hci7: command tx timeout [ 183.076594] Bluetooth: hci5: command tx timeout [ 183.077176] Bluetooth: hci6: command tx timeout [ 184.417825] Bluetooth: hci0: command tx timeout [ 184.673859] Bluetooth: hci1: command tx timeout [ 184.801948] Bluetooth: hci4: command tx timeout [ 184.866995] Bluetooth: hci2: command tx timeout [ 184.867592] Bluetooth: hci3: command tx timeout [ 185.123125] Bluetooth: hci7: command tx timeout [ 185.123846] Bluetooth: hci6: command tx timeout [ 185.124410] Bluetooth: hci5: command tx timeout [ 186.465790] Bluetooth: hci0: command tx timeout [ 186.722032] Bluetooth: hci1: command tx timeout [ 186.857775] Bluetooth: hci4: command tx timeout [ 186.929737] Bluetooth: hci3: command tx timeout [ 186.930285] Bluetooth: hci2: command tx timeout [ 187.177420] Bluetooth: hci7: command tx timeout [ 187.197465] Bluetooth: hci5: command tx timeout [ 187.198064] Bluetooth: hci6: command tx timeout [ 240.936093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.937489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.959223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.961927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.963402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 240.964591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.965909] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.968927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.989349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.991600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.992977] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 240.996272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.017526] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.043754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.046976] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.051405] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.075625] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.078490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.088764] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.091024] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.092430] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.095289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.097988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.105529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.107074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.109432] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.111337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 241.112594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.118251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.119480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.157883] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.162318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.172128] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.205022] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.206638] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 241.220597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.227256] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.230200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.234780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.234836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.235800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.238545] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.242088] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 241.243161] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.248371] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.278224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.289502] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 241.291346] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 243.042814] Bluetooth: hci1: command tx timeout [ 243.043819] Bluetooth: hci0: command tx timeout [ 243.171787] Bluetooth: hci3: command tx timeout [ 243.172864] Bluetooth: hci2: command tx timeout [ 243.236725] Bluetooth: hci4: command tx timeout [ 243.297813] Bluetooth: hci6: command tx timeout [ 243.299315] Bluetooth: hci5: command tx timeout [ 243.382745] Bluetooth: hci7: command tx timeout [ 245.090841] Bluetooth: hci1: command tx timeout [ 245.091378] Bluetooth: hci0: command tx timeout [ 245.218896] Bluetooth: hci2: command tx timeout [ 245.219427] Bluetooth: hci3: command tx timeout [ 245.282784] Bluetooth: hci4: command tx timeout [ 245.346947] Bluetooth: hci5: command tx timeout [ 245.347428] Bluetooth: hci6: command tx timeout [ 245.410770] Bluetooth: hci7: command tx timeout [ 247.138951] Bluetooth: hci0: command tx timeout [ 247.139477] Bluetooth: hci1: command tx timeout [ 247.267142] Bluetooth: hci3: command tx timeout [ 247.267633] Bluetooth: hci2: command tx timeout [ 247.330734] Bluetooth: hci4: command tx timeout [ 247.394710] Bluetooth: hci6: command tx timeout [ 247.395194] Bluetooth: hci5: command tx timeout [ 247.458893] Bluetooth: hci7: command tx timeout [ 249.186060] Bluetooth: hci1: command tx timeout [ 249.186640] Bluetooth: hci0: command tx timeout [ 249.314729] Bluetooth: hci2: command tx timeout [ 249.315267] Bluetooth: hci3: command tx timeout [ 249.377726] Bluetooth: hci4: command tx timeout [ 249.442805] Bluetooth: hci5: command tx timeout [ 249.443293] Bluetooth: hci6: command tx timeout [ 249.505762] Bluetooth: hci7: command tx timeout [ 303.411531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.421141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.472569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.475807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.484309] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.485500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.644386] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.668383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.683198] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.686301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.709363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.733433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.734920] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.743220] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 303.745256] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.745584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.746171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.747959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.758906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.764585] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 303.765629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.772435] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.774530] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 303.776359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.841191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.844401] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.845325] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.847106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.848819] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.850163] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.851563] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.854243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.855219] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.857127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.858070] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 303.859212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.864891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.883452] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.884459] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.885541] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.886552] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.887518] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 303.940359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.942203] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 303.943153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.944331] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.946565] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 303.952674] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.573730] Bluetooth: hci0: command tx timeout [ 305.762817] Bluetooth: hci1: command tx timeout [ 305.825795] Bluetooth: hci2: command tx timeout [ 305.826876] Bluetooth: hci3: command tx timeout [ 305.891720] Bluetooth: hci4: command tx timeout [ 306.017861] Bluetooth: hci6: command tx timeout [ 306.019130] Bluetooth: hci7: command tx timeout [ 306.019781] Bluetooth: hci5: command tx timeout [ 307.617811] Bluetooth: hci0: command tx timeout [ 307.809761] Bluetooth: hci1: command tx timeout [ 307.873815] Bluetooth: hci2: command tx timeout [ 307.874371] Bluetooth: hci3: command tx timeout [ 307.937767] Bluetooth: hci4: command tx timeout [ 308.123156] Bluetooth: hci6: command tx timeout [ 308.124133] Bluetooth: hci5: command tx timeout [ 308.125398] Bluetooth: hci7: command tx timeout [ 309.665732] Bluetooth: hci0: command tx timeout [ 309.857759] Bluetooth: hci1: command tx timeout [ 309.921945] Bluetooth: hci2: command tx timeout [ 309.922473] Bluetooth: hci3: command tx timeout [ 309.985910] Bluetooth: hci4: command tx timeout [ 310.177868] Bluetooth: hci7: command tx timeout [ 310.178412] Bluetooth: hci5: command tx timeout [ 310.179721] Bluetooth: hci6: command tx timeout [ 311.713936] Bluetooth: hci0: command tx timeout [ 311.923950] Bluetooth: hci1: command tx timeout [ 311.973890] Bluetooth: hci3: command tx timeout [ 311.974404] Bluetooth: hci2: command tx timeout [ 312.033954] Bluetooth: hci4: command tx timeout [ 312.225777] Bluetooth: hci7: command tx timeout [ 312.226490] Bluetooth: hci6: command tx timeout [ 312.227874] Bluetooth: hci5: command tx timeout [ 366.194454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.196337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.197560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.209282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.228873] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 366.235377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.257277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.263584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.272663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.274205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.277212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.282967] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 366.284154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.286918] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.288403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.300197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.316050] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 366.322135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.345368] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.356243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.359926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.386041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.400913] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 366.405111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.420166] syz-executor.2 (11164) used greatest stack depth: 23632 bytes left [ 366.440294] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.441889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.443728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.446406] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.447535] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.448480] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.450004] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.460849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.465032] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 366.467151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.477025] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.478436] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.482907] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 366.489194] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.490074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.502339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.503094] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.504490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.531369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.559057] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.561458] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 366.563221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.566857] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 366.569015] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.289836] Bluetooth: hci0: command tx timeout [ 368.353758] Bluetooth: hci1: command tx timeout [ 368.418948] Bluetooth: hci3: command tx timeout [ 368.499333] Bluetooth: hci2: command tx timeout [ 368.567104] Bluetooth: hci6: command tx timeout [ 368.568116] Bluetooth: hci5: command tx timeout [ 368.622168] Bluetooth: hci4: command tx timeout [ 368.674910] Bluetooth: hci7: command tx timeout [ 370.338684] Bluetooth: hci0: command tx timeout [ 370.402806] Bluetooth: hci1: command tx timeout [ 370.465960] Bluetooth: hci3: command tx timeout [ 370.529856] Bluetooth: hci2: command tx timeout [ 370.594491] Bluetooth: hci5: command tx timeout [ 370.595136] Bluetooth: hci6: command tx timeout [ 370.657708] Bluetooth: hci4: command tx timeout [ 370.722844] Bluetooth: hci7: command tx timeout [ 372.386706] Bluetooth: hci0: command tx timeout [ 372.450980] Bluetooth: hci1: command tx timeout [ 372.549396] Bluetooth: hci3: command tx timeout [ 372.586673] Bluetooth: hci2: command tx timeout [ 372.641774] Bluetooth: hci5: command tx timeout [ 372.642358] Bluetooth: hci6: command tx timeout [ 372.707758] Bluetooth: hci4: command tx timeout [ 372.770317] Bluetooth: hci7: command tx timeout [ 374.434767] Bluetooth: hci0: command tx timeout [ 374.497951] Bluetooth: hci1: command tx timeout [ 374.562880] Bluetooth: hci3: command tx timeout [ 374.626778] Bluetooth: hci2: command tx timeout [ 374.691843] Bluetooth: hci5: command tx timeout [ 374.692327] Bluetooth: hci6: command tx timeout [ 374.753883] Bluetooth: hci4: command tx timeout [ 374.817724] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:21:21 Registers: info registers vcpu 0 RAX=0000000000000013 RBX=0000000000000002 RCX=ffffffff84a8d08f RDX=0000000000000013 RSI=ffffffff86c0311c RDI=ffffffff8674c408 RBP=ffff88806ce09ad0 RSP=ffff88806ce099e8 R8 =ffffffff86c0311c R9 =ffff88806ce09ab8 R10=000000000003ab7c R11=00000000000c2b36 R12=ffff88806ce09ad8 R13=ffff88806ce09ac0 R14=ffff88806ce09ab9 R15=ffff88806ce09a78 RIP=ffffffff81348498 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc15e0216f4 CR3=0000000015ccc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fc15e03047000007fc15e02ff20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888024fc0001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888024fbfc01 RSI=ffff888024fbfbf8 RDI=ffff888024fbf7c0 RBP=ffff888024fbf808 RSP=ffff888024fbf740 R8 =0000000000000001 R9 =ffff888024fbf7f0 R10=000000000003ab7c R11=0000000000021ebc R12=ffff888024fbf810 R13=ffff888024fbf7f8 R14=ffff888024fbfbf8 R15=ffff888024fbf7b0 RIP=ffffffff81349aac RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c891d4d008 CR3=000000002ade2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000