Warning: Permanently added '[localhost]:7273' (ECDSA) to the list of known hosts. 2025/01/25 03:04:08 fuzzer started 2025/01/25 03:04:09 dialing manager at localhost:40883 syzkaller login: [ 76.897685] cgroup: Unknown subsys name 'net' [ 77.012863] cgroup: Unknown subsys name 'cpuset' [ 77.064611] cgroup: Unknown subsys name 'rlimit' [ 83.790858] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 03:04:26 syscalls: 2217 2025/01/25 03:04:26 code coverage: enabled 2025/01/25 03:04:26 comparison tracing: enabled 2025/01/25 03:04:26 extra coverage: enabled 2025/01/25 03:04:26 setuid sandbox: enabled 2025/01/25 03:04:26 namespace sandbox: enabled 2025/01/25 03:04:26 Android sandbox: enabled 2025/01/25 03:04:26 fault injection: enabled 2025/01/25 03:04:26 leak checking: enabled 2025/01/25 03:04:26 net packet injection: enabled 2025/01/25 03:04:26 net device setup: enabled 2025/01/25 03:04:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 03:04:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 03:04:26 USB emulation: enabled 2025/01/25 03:04:26 hci packet injection: enabled 2025/01/25 03:04:26 wifi device emulation: enabled 2025/01/25 03:04:26 802.15.4 emulation: enabled 2025/01/25 03:04:26 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/25 03:04:26 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/25 03:04:26 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/25 03:04:26 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/25 03:04:26 fetching corpus: 0, signal 0/9859 (executing program) 2025/01/25 03:04:26 fetching corpus: 0, signal 0/9859 (executing program) 2025/01/25 03:04:28 starting 8 fuzzer processes 03:04:28 executing program 0: lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x4}, [{0x2, 0x5, 0xee01}, {0x2, 0x0, r0}], {0x4, 0x6}, [{0x8, 0x4, r1}, {0x8, 0x4, r2}, {0x8, 0x4, r3}, {}, {0x8, 0x1}, {0x8, 0x5, 0xee00}], {}, {0x20, 0x3}}, 0x64, 0x7) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000480)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000004c0)=0x28) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000500)=',\\/^^\x00', &(0x7f0000000540)='./file1\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x7, 0x5, {{0x39, 0x4, 0x3, 0x2, 0xe4, 0x66, 0x0, 0x3, 0x29, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0x7, 0x43, [@empty]}, @cipso={0x86, 0x9, 0xfffffffffffffffd, [{0x6, 0x3, "c7"}]}, @timestamp_prespec={0x44, 0x34, 0xc3, 0x3, 0x5, [{@multicast2, 0x58}, {@multicast1, 0xffffffe1}, {@empty}, {@private=0xa010101, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x83}, {@rand_addr=0x64010102, 0x2}]}, @cipso={0x86, 0x5a, 0x3, [{0x5, 0xa, "6e68cc36e5944c81"}, {0x7, 0x4, "d0b8"}, {0x5, 0x9, "f09308b82ef038"}, {0x6, 0x8, "df369595e621"}, {0x2, 0x12, "f85ca4082e64c38d85b86c6670029a94"}, {0x3, 0xb, "295ee8433978eb579d"}, {0x2, 0x11, "e6366b53b4c16a97a438d333cf7a96"}, {0x6, 0x4, 'cm'}, {0x0, 0x3, "c3"}]}, @timestamp_addr={0x44, 0xc, 0x11, 0x1, 0x1, [{@private=0xa010100, 0x540}]}, @rr={0x7, 0x23, 0xf3, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}, @loopback, @multicast2, @multicast2, @multicast1, @multicast1]}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="d321c69bad73eff042838236cdf1960ec755519cf634ab087799f63dd915bb6ea914e77bad09c2a5db9eea38e6667ff7aaf321b7502d2f4ac6fbebcb3f542407ae008743f3a79d", 0x47, 0x20040000, &(0x7f0000000780)={0x11, 0xf7, r4, 0x1, 0x1, 0x6, @random="f386e0c82781"}, 0x14) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000007c0), 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000800), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)=""/210, 0xd2}], 0x1, &(0x7f00000009c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x1) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000a80)=""/112, &(0x7f0000000b00)=0x70) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000b40)={'team_slave_0\x00'}) bind$unix(r7, &(0x7f0000000b80)=@file={0x1, './file1\x00'}, 0x6e) r9 = inotify_init1(0x80000) inotify_add_watch(r9, &(0x7f0000000c00)='./file1\x00', 0x808) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000c80)={@local, 0x0}, &(0x7f0000000cc0)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r10, &(0x7f00000011c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f40)={0x214, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2490e240a7bf507b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x13a8d6f0f5bb042}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) 03:04:28 executing program 1: sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7fffffff}}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x11150}]}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000180)={0x1, 0x0, 0x5, 0x6, 0x80000000}, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400cc0, 0x40) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000200), 0x4) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000240), &(0x7f0000000280)=0x4) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x61}) r1 = open_tree(r0, &(0x7f00000003c0)='./file0\x00', 0x8000) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x12, 0x0, "39687c86f4a3ffb1b41934662dce920e303700705dc8403fcc333a5f859dac4aece52ce201cbc52d817af6ef1d718ec276e9375657cd253c73043d32a56e25c5b1c9ddd90ccb4b3ba67150a337667363"}, 0xd8) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000500)) chmod(&(0x7f0000000540)='./file0\x00', 0x84) rt_sigpending(&(0x7f0000000580), 0x8) pread64(r2, &(0x7f00000005c0)=""/113, 0x71, 0x5) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x900, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = dup(r0) tee(r3, r4, 0x2, 0x8) r5 = syz_open_dev$vcsa(&(0x7f00000006c0), 0x4, 0xc0) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x3f7, 0x2, 0x70bd29, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x10) 03:04:28 executing program 2: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000000), 0x0, 0x4) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x141001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_ts_info}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x17c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x6d, 0xc5, "f056414e2fc07016bbac5b27cdaed5c2b57ca6a9d6f9d9148c407a0b421832ef377f1e89552959a25b51f465ebbf18e00c7c253154bcf40c53982e6949d346ff76fa75ebc1abcf7ea793dbc914ddfb6631c033624a8688d6e5d82c5cff84a52db930e0d670fd069398"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffb}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5b8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8001}, @NL80211_ATTR_VENDOR_DATA={0xd5, 0xc5, "f8f1678aeaa074de6315ecce89cc38326630a203fb6cd592ea6f33d35b39ca7356dfdba7e78b76b93a262f3941d022a9cb9dc141efc790bb85abaa4d3cbc3e33afc943ba102ff1a6902350e6b92f0babee978afda65bf7dd87629b4ae6b5f86fdb9967fb360bbdd4f351134437468c8d90fef391ddae9c96e357c29cf6174dd31c906e04b8288cd08449d8224cccd95e7e3b610aa53b037a28c749e187f7b69fce0a52b2d0942dd7e6f80d58e7dbf94b3faac547ac02d5f50341c2ec3cebe93bbb371ca0615db980c535123348f3c81dc6"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4010800}, 0x4) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$RTC_AIE_OFF(r0, 0x7002) r2 = fsmount(r0, 0x0, 0x76) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x9, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0xb}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) rmdir(&(0x7f00000004c0)='./file0\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={0x2f4, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x1ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2b, 0x3, "a43782d6920b7b51ede0bfc65c3b9cbf0a2e7cb6eea5ab8d5eef911d2a9680e26e5a15a19ee07b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "5bc81565a0371db4db4d12eb18cf4ce65e1b33cda91694b220aded25cc"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "be9885681364a1db551bc24b2059cc2f4588f35f4c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4f, 0x3, "f35da48918ce7f3ba9f72e3531b2378365f7b9f5f3da55990194f54e7d3c19e3d1c8a989932562c76fe53037f1d765d5884e3620387203608e85d232097a3b72cb6f8376830a6a942db118"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "d414f0a04af643789aacd2fb9447ab46eff82566e85b845275bf2e0ae34b30c99a"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x44, 0x3, "e26c0c567ef033914791f204f89896be5eebc30f6690ff0d2e9c7d56a9b4fe39b6217b4fd37f13af46867b62a2736ea32f3a337420d942867b0d433b0ba4ef22"}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc65}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb02}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2c9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x16}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f72528a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x14008001}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, 0x0, 0xb5818f840af4fbbc, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x8820480ebd7ad5cc}, 0x4004) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) truncate(&(0x7f0000000b80)='./file0\x00', 0x7fffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2e9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555e}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x58, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 03:04:29 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x942, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x8) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000040)={{r1}, "4c75153c65b2ac2d8dafc6563d79d1512e00cdc4281c7cd18cba8006dde394d6d57c965963307fdcc1a96dece1dde7812b865a8b225106b6f06dc4d141df5b990faa4af27e993a2cda7a2d09eae8442911673449f459bba974f894b229648eceb19ebc759f5f55d01a4f67325e313f3537218dd0439ca8ef5e40e8bee1b2921e5974cbe49d3a7b8caf1fbb55257ece341d1a9591da1de3f63a1aca36e67234069492455809fe22c1cc79bbefeaa4c671f62c4b084ca5abe45f3eab0bbaec5bb6f7447833fff8b9c6bb583f31c1324d951ce6e9741e0239441d03dba1d424aef7827703dd9ac6d239465a86c0620489f86f5fd7a7440297962143ade897c2e567b23a6e18caee5d4a34c940b4f49b1d118d18a1695d0482f254f21646d1933a38f19b12915778f0be6d0270c7c459ead74ea877f6afae5ff914cf18cb54b2558c0e3ecabaf722730d8147921ffbf636e85f7d74511373381b1161b2f3558c2ea9d81d952c179f167e09dbf8a665d5042280c7afa258432115841f956f9d5c5b439ccd6c348ba00f0316e6b487a359baf19741b7ef2ba9a1a7eb37212e81307d542921bb63cd0ff500da417010c2a6e2b0b9f62257fa28e5194b8309a672b6e314c31d91f5a712083090f9004d938695b9e83f0b6094de73798e38df3c023e83eefb7863b0e024de1ead6b95fd67595bbb8089bf0c0f22f63136d40548d97890624da216377d25b14a8ac351d8a51c0e27b05223e817f364a17ed49682264baae0e0ed39108f7c673de0a45a811a33abc6313fbc4c1fbc85dbc31ea4b654cbc4dc4427336d141ac19dfdcd9fd22c11e265737b28410393ec46ed46baf78030a9825e75b9da04c0a0c6cad7b8ef6c27dd5ca9a6e1bd489470a2388ae2d58af9abd99f162113d2d81fe3bef10c774c84dd87caf7588f8691570071dbb7f567fff3ca9ce233358866d67b2218410c17c65a8ebc5e6ab0bd88b969f96ff39a745075934f756cc1b750f80068b3b667d8b1eb1a3550eed4924f02667178b8e2ff26a4ee2eb324a89b0f6b2398498e04bbd173a00891093dcdc41b193977a27b709b60f04dc5e1c80a31e4c3aaf1c4efec9fe9878f98ab62dd290a108836cf0bc500d2056b298522e1d1ba20fabe0658b574e1c6c6c9625813c9c08441bc462fa5c92a2d3e341d5612f1f6cb354ade06bbddc4343b1bcf786facb0e3e0aab53795117994a0e293f32f61de200f2dfaae939e41379a00de17df86b3f4b8e11e8982a75fcff8bc3839353852dda5a951a62f74d1fa81160dd0c231d134b2d7bd6029a210ecc594b150b1fa9ed94704fab3ec9de75247113447a8c181e7ddd40c9698467032ac518a824fd306c244f116586f7873f55afe17c404d8657d1ffe2253c433f588e8a2857975a153194d25005b3bba183c2fe5a34f523db7565aba780f3538259cc1c4f5d64dc3c4f65aa9876422524c19e6701cdcf0f04a3046b49736a6cfb3ada4208e5275e6599a09898363915ababb45768a1901544b4859d9fa08973862dd3e297a437df2e76df0d6baad890185abb6fd412c7908222ca03a93b87f4b4012d651534c9e21f63ba631835a53a3382ae7c3caabe694035cf5a6b021fa3d7e2224d4106e9347c49499136339bd2e6d910eb50858f6bb1316fc4960a572f4501521b58422ea83cece0152aae9710c088467edd6b4e39e418b1f01fb7be4961f46c701eb390749884bbf96c479bd76a31ad98d0fd216bf763e4d27c7a0521b51120c7b11e99d24bb246f2b766fd8a1babf7f40310c0acda2c4f4051b675b2e84b51f631b2cb529b9da6f9bc690d690c7e2fb2c74b25e062cbe654e43fbb597e59b8f5231d32ce9f0b3e3fd1b6fe791eae9fd92f520a1774dcb13c16b828a3649e86f691f25296d78e392e7deb6d90bd96a6e47674807990c21e492522a49eaf1d27097c64b5e5dcbcd1d642a7f5769d2cfaa81b43075a8317f71763d485b26a9a3536ce6ac7da1b4fd1bfbff6595dc0345ec872d243754cc0551e0430903e85bacc52c0c1b4aec874961da501b8336288c31f12ef4ce9b66af79b6893ffaeba1a866fbe00516c2bf50b91ab08f1926cdba46a618cbbfbb3e412ddd1f47201d459bd612c7450a699c1ce89ecdf6152415d3291a4bd41b6f586efb2c8ba011e98e7f543091e306a9a6e9c8eeb907044280ccc653aac4ed371097ae7b325ed646c3733385afc38664c971af7ba7b274288d409aa61736ac91660fb20550dfa3dc19d28c830b6ac2f4909af0131da73da37379ce12b97263e0c3d29e0af713eeffa89b2e631db40bcc8f67ca6cf6747d9603d8428d73b63ba98d1281b59ad04e0b1676ef39d32a16cf433a08f4dacfa216e2ee1ade86e800c8ea0dd61504969ef7ba426f66caab161fc2bcdc0b8dcd0a889312a9075885236d192784f492cf66c348fedd843dcc15c5d60de1fd11dde33316886c31a6c799191eb4f66a3babcc9848f28f5715ac128450d8549017dd758eaf5451df6abd011e80996648443fea65393689ad3c3657ea3d59c0a515fdac196df56d2ae574814734c6eac46a9d9d248948ceb28db10e7683cf2d73f4f0d479619c004357c583fca31698771cfacdc63a9abbac90b45a68b5d63b297528815d9b9813be8f163865b9859f0c7b78d5c25892dcea3e6e9b1cba326e649bcea3b5e1a3c7a3167cbb388af4b50e68ab0c6232922b74619fa02c5d710f9d24816238f51409e55a75a1639b56fc74776405ecff51573a04af5578ac7cf5b4cbdea178622989d6aed1442341a64e2e36d7b7fc5b04aa6f52b7e3ef3a378bae74ea383993f38092b4b374464448841e456d048dd669f453dd23694e1639b0f5cfd188d0dd3479bd7b4d00df89a1b8989a1ac5d13a75805efab4a98868e273b663c87613f16a28b7a20bd2be99b7104ae510e94dc2d4f14e30fb364198eee09b5383c36bdfd0eee67d4c6d4db7b0ad4dbb140d1a1537aec788622f20198cb5666d311ee39a64b40780ac24b2d6b002c6c986110fddf0c9a4a196bfde4e817358137fbb568f1ee686af2ca6acb369aea0c371156728152876679ce184aa3a705dc1dcd499a3cc3942aa0d31073c1076607dc75e7c0b819715501d6a32fd8b6a1a1cb5077965ce6311ac678f184b4a87ecc8badd4a13918da78bba9ed38a0b1345a3b36dbbd59d911d268e607101bcec257fc2f64faf832c54bcca83b8814d3d5eede884e67bf1487a3bdeec535ced4fb48c6ec942134c9b4368926cc29b66ac4665a5a358e3e37cd9e31e21c3afecd70686ca8bbf11cfef6683b7d0a9cc7bb42228c943ffd62f069716ca1555f58f581c46201b0c5d6f27039390d1be250c41c42a31a2bd6e671619848980b0b97fd4f9a65897571a2312f03ed896620c975618c475a07f054b1aaf1923def4a43945def6b1a4459f5dd07338bda2297be0dda29098eb76032958803cea99859b43b28c578fa30f345f79c9f70476e6dd7739eb88fe25fa151e3f262b888223b79d97e593f2775f0c41b8a27f48834a4bb9ae22ba6c70bfeddb34a32446f229c73f197bf1af159f4e0012f3bdc6bbbee2105911a7e1fbeb63b96887ca5e2e1e0f7ec2b5c3f3d48337d32b4c29905798d051a21b932ee62b6b9d234a15acb6ae69ea94e21d1da1fe5c8d53cf91c70e5cfa3b9b4bf1bf031fb29262a31af8fe15f15099fa902c561a69cb82e4bb7f182b8fa68528edcef1f941d62ca35193705b5fdea4dbdfef02dd32efc511cd2e12e8922d3538c11d6b89c242dbb4fc119730191ce23b28adc36354f69a4baa4f6476e285d49961ba1c84158d444ec0a50a59d9292d98b79eb200adb2f1e1e26c0ab21151a91fbd75723e73e867fa761bb74d97df3e02729a0e03eadec2e1bcea66d0a52bf6ab654f48067ef3c767ce26f537b4f9597194cfd398d515529c3f05cb9c64389cda58c549b96c8743bc01efcdf7ce5870d6d9055e066dfaceb8a434912caa7998de6aca6c39519be4d8b3b9a9a3e2573e6bd67078f9bdf945ae04b48040b97c3037968bd8779ceeab795df1380f18e6601a0de70eb3a2dfe71e6e9db07f632fae87e31413d10bb145bdc2a7d27419df5b1197b6110446dc1a9436be560bc10c250a808248e6c0aec9a930eff1c2d56933bc024ddc7d59b1a85e6bccba63abce3f0a046cad9a925a8eb015bfa55a053ba11bba7dc77af33d91d7df926330651bed58c9595b2167c4cb766b631cc331e64a507854cc8c6285d9a5d20c7ec3e4eef80278131a134f058ddb059ade0b0aeb09ed5d0a94e7634f67ff25714f7018919cea097f46d7c22d968f86d88b67df16c4f469fbd47d18e5513bc177d6aa6e0744f9d5feff7325ac21f940275848c9425e2bd0e12a787b0a3d64213704f45c917af9d7463066d5f29c69f5f6dd4880d3f721e7ab2a2777aee1694019b01a2072f708fc09d2716c0b67b17d9dbcbffd26e4717bb8974aa537fd6f4d1a40a2c5bbfbee3f7de27da269273041ec6cc0f655ef42272280a574147d5a703e4bebfd70b4257b066d8f10bb55c25769e2acb345c9cf365b871665143e49302deb35008a648fe9ab7708511fe0e26b4fedc30f0af7cc48cc368d102dd698a47d4baef0671e0c6de3de8fce3d3ad5b7693c97e0c62920b03c766e0ae950382b6a11c190df846ba7798ea975a79e28a530cb2999462a5388bc7ff389b30f78fb908a9cb889368169dc3a48657fe0c75779c46d8aac0ab794e402ea51e88edee4a7f7fd74c0eec47a19e7a96b42720b8a166eb8eeb6030ec8abde057c278edc6fc09342801dae50e7306597aebb6be2580d107e739149d00d5a103f6c3bc40be60ec9673996044e3ce7f2e9e68a0fb029f6bd22fa0426d15fb8779f76e7172be4c12d253c268d85ce00991d941f8edb4ca94e64d25e8bc20c89b9106ef7dac46008e946db62cdace44a2d93c7abd101f103a205145c9cfb46fbb0bde56cb417a1c25baecf3414774f91b2f73bd9d60688963f21182423215a49613741779ca5a271cde8661fd12e8d5dd608c9989a65f8d1c417fd32fa3ee96ef482e6077f7dba09613144879ef3ace3dde7b854297adb1854bb8303daaed636689cce3f25b2d4d53ca95c82ae82cbaff751efdfc39379c3b202e87ead4bce0f014bf8d242977dda8786498aa00c8d0f82a13312b614b4fa2873594411184bbcad7d7d00f62c5a2eb87e86b88b1ecf0dce36ec8e3505323e5793a998c2d53067606df423ef31e72deb1ab475fdfe178f1e4c9213500c21c209adf934487531f92711cb7689cef4fcc46fd7c96688ccdffb261bd5a857611cc7e76cbfd448647b95d2cac51a1f1c32a668c10f4adb78287852260c9cf5040d825104bf773c9ad036260cb8334745d4823c91cd499e27c8d971f29739f30f851d812e2fef088914743b1c08e2ca93e406c5a161c1e4ea607746a2c7eaeacda7cd703b3b54e7bfe370ee148fedcef727c74522a1104792b4c537d90814dc1c116c1d7085a35fbe411e023b4017effd8a8443e16dea55c55cb977f396fae7c8480321cc73dd28c90d020c54428ab2a53f96e0fd8fc67af4860413fc5dc84da61e9c432a90702002d1f71f1e7b6c19ac2a3ccb53985c3dee1810ccaf662f794756e5dad1b783c6aaf6959a7420efbfcdb50489caa7842fa59690d6cd3758e1dc047a3800209a74e3dc1f6861dfe18e652b84017d700e112f57657b5dda764416d954a16ce7e0a994f0c8ee3a3e3780b73132bf789144453c34edcb469a947ff09338549a1c"}) getsockname$packet(r0, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001080)=0x14) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000010c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040880}, 0x40) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = syz_io_uring_complete(0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000001300)) write$P9_RSETATTR(r2, &(0x7f0000001340)={0x7, 0x1b, 0x2}, 0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x4000, 0x0) r4 = signalfd4(r2, &(0x7f00000013c0)={[0x2]}, 0x8, 0x80000) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001400)=[r2, r1, r3, r2, r1, r4], 0x6) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, 0xe, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001540), 0x82042, 0x0) bind$802154_raw(r5, &(0x7f0000001580)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001600), r2) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2a}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x62}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf800}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb86d}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000001840)={0xe0, r6, 0xb18, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffc1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xef}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x140}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff3b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x4040) 03:04:29 executing program 4: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x8) r1 = socket$inet(0x2, 0x80000, 0x9) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x6c, @remote, 0x4e23, 0x4, 'lblc\x00', 0x20, 0x2, 0x1f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 0x32, 0x5, 0x1}}, 0x44) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x81, 0x11b100) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e21, @local}, {0x306, @multicast}, 0x2, {0x2, 0x4e23, @rand_addr=0x64010102}, 'batadv_slave_0\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000200)={@broadcast, @initdev}, &(0x7f0000000240)=0xc) move_mount(r2, &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000480)=0x400) fsetxattr(r0, &(0x7f00000004c0)=@random={'security.', '/dev/vcs\x00'}, &(0x7f0000000500)='batadv_slave_0\x00', 0xf, 0x0) utime(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0xc66, 0x9888}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000005c0)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pwrite64(r6, &(0x7f0000000600)="a79b0eae1252001292e9e7ab658abcccb24f5ac0d0bd6552d42ddfddd0442d380bd192f3e067", 0x26, 0x5) [ 96.582243] audit: type=1400 audit(1737774269.073:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:04:29 executing program 5: ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0x100, 0x7fffffff}) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x80000000, 0x480) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffff9, 0x0, &(0x7f0000000080)=[r0]}, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000100)={0x1, 0x0, 0x200, 0xb8, 0x8, 0x8}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) fchdir(r1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000880)={'veth1_virt_wifi\x00', &(0x7f00000007c0)=@ethtool_rx_ntuple={0x35, {0x9, @ah_ip4_spec={@local, @rand_addr=0x64010101, 0x6, 0xf0}, @udp_ip4_spec={@dev={0xac, 0x14, 0x14, 0xc}, @broadcast, 0x4e20, 0x4e22, 0x6}, 0x7, 0x3, 0x2db, 0x1, 0xfffffffffffffffe}}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x608000, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000900), 0xff, 0x101401) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_PKTS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000a40)=""/137) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b00), 0x4040, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000b40)={'filter\x00', 0x0, [0xff1, 0x0, 0x100, 0x8, 0x2b]}, &(0x7f0000000bc0)=0x54) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) fcntl$notify(r1, 0x402, 0x18) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000e80)={{}, {0x4}, 0x80, 0x0, 0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)="2fdd683ceaa9", 0x6, 0x0, &(0x7f0000000cc0)={0x2, 0xdf, {0x0, 0xc, 0x60, "bdbb8dc5a7df91ffc7941d101929916c163ffa7b0f47e5cef7b1288731b20a2c6bd40960df795761d286d97a6506cb7ad0cdcfa1b6b062fe25b1209fbf0e5c0b8d6a581a411bc17f8ebae98707efe0eb94ecc3490b98abdb02a3d237c0c5af6e", 0x72, "8fff197df3a148233e28cfa7e9f4f178b1c0ca35cebf190817578125bf1a228daa95e755f7f3d6ae37325a8c620f6b9dc6209a2e920e6dddd7b38389f005d2ad69fa40e9631391763e8db634977725817eba6f8234e76affacb8359327b6505faa2ec2f0693180f7550dfab8961168fb8c15"}, 0xa9, "184b080aa192b493660765183c9aca3ebb367c2a18aeabb7d442b8af0ccf0187feb7331f7fe79768a73462b86bbf1a5f8a93deab2dfc5c243abe3aad44364ec91f5ae5480c32eb3ae387d7ecbbcd878b0e31c33a60f4fb7cb5c5f75bfda7be6d9381eddf71006088d360dbf4bc1a174f84ae631eb58de7e31760c8139b03c857b74138cd6f10850296b348124270247a8f0092e915fefcf8dc98fad43433ffca670593392083201f76"}, 0x194}) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 03:04:29 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3ff, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x15}, 0x48010) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)="98409f67572e0a9caebe714078c6836dea234e92e73ca933ffd7a8010fcccfbae640de1e54a0f025acac3346a16620b2704676032a1baca8371c86ec3225c7e531e780ea2da52f251e8b1b92c8333965f73997861d96d790f13f660d5526a66ed6e4b3a59e8148edcb65891aac53563fe63744e58345359c5d", 0x79, r0}, 0x68) r2 = syz_open_dev$mouse(&(0x7f00000002c0), 0x7, 0x2040) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x144, r1, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x3f, 0x6}, {0x6, 0x5}, {0x1, 0x7}, {0x3, 0x1}, {0x28, 0x3}, {0x1, 0x6}, {0x4}, {0x1, 0x3}, {0x60, 0x7}, {0x4, 0x7}, {0x1, 0x7}, {0x8}, {0x0, 0x6}, {0x61, 0x7}, {0x40, 0x5}, {0x4, 0x3}, {0x5, 0x1}, {0x6, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x83, 0x5}], "2ad9bee3ad5e5fe7"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "f713f88e81b9915a"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x9, 0x3}, {0x1, 0x2}, {0x20, 0x5}, {0x7f, 0x3}, {0x15, 0x2}, {0x4}, {0x0, 0x5}, {0x4, 0x7}, {0x8, 0x6}, {0x9, 0x4}, {0x0, 0x6}, {0x2c, 0x5}, {0x1f, 0x5}, {0x2, 0x1}, {0x4, 0x6}, {0xff, 0x2}, {0x78, 0x2}, {0x1, 0x1}, {0x20, 0x3}, {0xcf, 0x5}], "e1cc0ff486714339"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1, 0x7}, {0x0, 0x7}, {0x8, 0x3}, {0x20, 0x1}, {0x81, 0x7}, {0x5, 0x2}, {0x5, 0x1}], "ecdd728a7b0594a1"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "46113994bbe54cfd"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x0, 0x6}, {0x2, 0x5}, {0x20, 0x3}, {0x6, 0x5}, {0x6, 0x7}, {0xfd, 0x7}, {0xff, 0x5}, {0xc8, 0x3}, {0xd8}, {0xaf, 0x1}, {0x2, 0x2}, {0x9, 0x1}, {0x2, 0x3}, {0x1f, 0x5}, {0x80, 0x3}, {0xff, 0x5}], "e2bb739ea45c4c50"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x8, 0x1}, {0x84, 0x4}, {0x20, 0x5}, {0xe0, 0x7}, {0xef, 0x6}, {0x81, 0x1}, {0x4, 0x4}, {0x40, 0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x9, 0x7}, {0x9c, 0x3}], "87ee3188fe5a3598"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x0, 0x3}, {0x2, 0x5}, {0x40, 0x1}, {0xff, 0x6}], "42d89dcc73c4546b"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x9, 0x6}, {0x1f, 0x5}, {0x5, 0x1}, {0x8}, {0x7, 0x7}, {0x1f, 0x5}, {0x16}, {0x5, 0x3}, {0x7, 0x5}, {0x1f, 0x2}, {0x1, 0x5}], "ead0da32fb3b6a90"}}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x39}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x81}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10040000}, 0x4000804) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r1, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x33, 0x68}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x45a}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x587}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x762}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000980)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x20) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f00000009c0)={0x0, 0x0, 0x7ff, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000002b40)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$AUDIT_SET(r8, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x38, 0x3e9, 0x1, 0x70bd29, 0x25dfdbfb, {0x1, 0x1, 0x2, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x5, 0x0, 0xffffffff}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000002cc0)={{}, 0x16, 0x7, 0x9}) 03:04:29 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1f, 0x20002) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@remote, @multicast2, @empty}, &(0x7f0000000080)=0xc) r1 = dup3(r0, r0, 0x80000) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x7f, 0x2, 0x9, 0x5, 0xe, "865fd9cf5636537278d76a17dee03f9e2aad26"}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) fchmod(r0, 0x72) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x101903, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000002c0)=0x1) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000300)=0x4) write$P9_RLERROR(r0, &(0x7f0000000340)={0x14, 0x7, 0x2, {0xb, '/dev/nvram\x00'}}, 0x14) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000380)) r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_devices(r4, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000480)={0x4, 0x3f, 0x1, 0x9f3, 0x1, [0x8, 0x6, 0x3, 0x200]}) r6 = openat$cgroup_ro(r2, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x30d, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x841) [ 98.100139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.103465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.105940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.122163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.125302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.126790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.425045] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.426280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.429407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.430490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.432880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.442667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.444241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.446555] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.448142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.450198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.451760] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.453569] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.474534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.479731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.482605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.495498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.501726] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.506023] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.506714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.512041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.513152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.523892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.528017] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.535723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.548531] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.560667] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.562922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.564907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.569850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.572123] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.574116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.623000] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 98.633590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 98.643019] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.654073] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.654352] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.736775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.737834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.741224] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 98.742660] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 98.752528] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.764420] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 100.192765] Bluetooth: hci0: command tx timeout [ 100.512565] Bluetooth: hci1: command tx timeout [ 100.514085] Bluetooth: hci2: command tx timeout [ 100.577197] Bluetooth: hci4: command tx timeout [ 100.578648] Bluetooth: hci3: command tx timeout [ 100.640804] Bluetooth: hci5: command tx timeout [ 100.768549] Bluetooth: hci7: command tx timeout [ 100.897049] Bluetooth: hci6: command tx timeout [ 102.241417] Bluetooth: hci0: command tx timeout [ 102.560824] Bluetooth: hci2: command tx timeout [ 102.561920] Bluetooth: hci1: command tx timeout [ 102.624835] Bluetooth: hci4: command tx timeout [ 102.625888] Bluetooth: hci3: command tx timeout [ 102.688551] Bluetooth: hci5: command tx timeout [ 102.816743] Bluetooth: hci7: command tx timeout [ 102.944522] Bluetooth: hci6: command tx timeout [ 104.289183] Bluetooth: hci0: command tx timeout [ 104.608510] Bluetooth: hci2: command tx timeout [ 104.609122] Bluetooth: hci1: command tx timeout [ 104.672500] Bluetooth: hci3: command tx timeout [ 104.673097] Bluetooth: hci4: command tx timeout [ 104.736689] Bluetooth: hci5: command tx timeout [ 104.864632] Bluetooth: hci7: command tx timeout [ 104.992632] Bluetooth: hci6: command tx timeout [ 106.336387] Bluetooth: hci0: command tx timeout [ 106.657143] Bluetooth: hci1: command tx timeout [ 106.658392] Bluetooth: hci2: command tx timeout [ 106.720852] Bluetooth: hci4: command tx timeout [ 106.721290] Bluetooth: hci3: command tx timeout [ 106.784521] Bluetooth: hci5: command tx timeout [ 106.912445] Bluetooth: hci7: command tx timeout [ 107.040418] Bluetooth: hci6: command tx timeout [ 158.202063] syz-executor.0 (283) used greatest stack depth: 23520 bytes left [ 160.704899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.716240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.718817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.727782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.730526] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.732924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.747857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.750730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.754935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.761475] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.766721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.771258] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.774255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.777277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.779122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.789573] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.791907] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.793820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.820719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.841008] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.843708] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.847815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.857615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.861892] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.871352] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 160.873645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.884950] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 160.886369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.887647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.890782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.895820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.895890] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.916722] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 160.918970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.921750] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.930039] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 160.931413] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.933000] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.933868] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 160.936591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.944427] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.946242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.949068] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.956728] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.958195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.958816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.959849] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 160.963091] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 162.784407] Bluetooth: hci0: command tx timeout [ 162.848494] Bluetooth: hci2: command tx timeout [ 162.848620] Bluetooth: hci1: command tx timeout [ 162.976546] Bluetooth: hci3: command tx timeout [ 163.040479] Bluetooth: hci6: command tx timeout [ 163.040517] Bluetooth: hci4: command tx timeout [ 163.041149] Bluetooth: hci7: command tx timeout [ 163.104402] Bluetooth: hci5: command tx timeout [ 164.834353] Bluetooth: hci0: command tx timeout [ 164.898441] Bluetooth: hci1: command tx timeout [ 164.898905] Bluetooth: hci2: command tx timeout [ 165.024438] Bluetooth: hci3: command tx timeout [ 165.088497] Bluetooth: hci4: command tx timeout [ 165.088993] Bluetooth: hci6: command tx timeout [ 165.089599] Bluetooth: hci7: command tx timeout [ 165.152378] Bluetooth: hci5: command tx timeout [ 166.880412] Bluetooth: hci0: command tx timeout [ 166.946343] Bluetooth: hci2: command tx timeout [ 166.946365] Bluetooth: hci1: command tx timeout [ 167.073471] Bluetooth: hci3: command tx timeout [ 167.136438] Bluetooth: hci6: command tx timeout [ 167.136669] Bluetooth: hci7: command tx timeout [ 167.136924] Bluetooth: hci4: command tx timeout [ 167.201386] Bluetooth: hci5: command tx timeout [ 168.928428] Bluetooth: hci0: command tx timeout [ 168.992623] Bluetooth: hci1: command tx timeout [ 168.993432] Bluetooth: hci2: command tx timeout [ 169.121355] Bluetooth: hci3: command tx timeout [ 169.184635] Bluetooth: hci7: command tx timeout [ 169.185501] Bluetooth: hci4: command tx timeout [ 169.186154] Bluetooth: hci6: command tx timeout [ 169.248485] Bluetooth: hci5: command tx timeout [ 222.723170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.724685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.726006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.728781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.735737] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.736981] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.763695] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.772634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.782848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.793669] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.796997] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.799635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.893254] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.901499] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.903427] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.908215] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.911925] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 222.915627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.990845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.993585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.000838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.010525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.012175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.028919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.044441] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.046603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.057492] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.059792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.065895] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.074152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.076050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.083876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.085676] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.117810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.163693] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.169577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.188805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.205668] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.222073] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.259646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.266701] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.271483] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.273147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.280922] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.283715] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.285943] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.291100] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.293935] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.800662] Bluetooth: hci0: command tx timeout [ 224.866383] Bluetooth: hci1: command tx timeout [ 224.993154] Bluetooth: hci2: command tx timeout [ 225.248439] Bluetooth: hci4: command tx timeout [ 225.249102] Bluetooth: hci3: command tx timeout [ 225.313356] Bluetooth: hci5: command tx timeout [ 225.377441] Bluetooth: hci7: command tx timeout [ 225.377458] Bluetooth: hci6: command tx timeout [ 226.849427] Bluetooth: hci0: command tx timeout [ 226.913368] Bluetooth: hci1: command tx timeout [ 227.040383] Bluetooth: hci2: command tx timeout [ 227.296417] Bluetooth: hci3: command tx timeout [ 227.297436] Bluetooth: hci4: command tx timeout [ 227.361324] Bluetooth: hci5: command tx timeout [ 227.426349] Bluetooth: hci7: command tx timeout [ 227.426380] Bluetooth: hci6: command tx timeout [ 228.897932] Bluetooth: hci0: command tx timeout [ 228.961362] Bluetooth: hci1: command tx timeout [ 229.088377] Bluetooth: hci2: command tx timeout [ 229.344503] Bluetooth: hci4: command tx timeout [ 229.344634] Bluetooth: hci3: command tx timeout [ 229.409469] Bluetooth: hci5: command tx timeout [ 229.472480] Bluetooth: hci6: command tx timeout [ 229.474550] Bluetooth: hci7: command tx timeout [ 230.944377] Bluetooth: hci0: command tx timeout [ 231.008443] Bluetooth: hci1: command tx timeout [ 231.136588] Bluetooth: hci2: command tx timeout [ 231.393493] Bluetooth: hci4: command tx timeout [ 231.393562] Bluetooth: hci3: command tx timeout [ 231.457413] Bluetooth: hci5: command tx timeout [ 231.521384] Bluetooth: hci7: command tx timeout [ 231.521475] Bluetooth: hci6: command tx timeout [ 284.782966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.786744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.792711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.799534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.803050] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 284.806689] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.175215] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.180067] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.184862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.186317] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.189020] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.191870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.198640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.203041] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.206608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.209998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.211872] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.214884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.241932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.247551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.250205] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.262489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.270544] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.271629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.273089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.293534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.322847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.331732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.337340] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.342875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.343529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.345559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.349555] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.350379] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.352966] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.353120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.356148] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 285.358669] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.361836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.373723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.374964] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 285.375965] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.389245] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.393091] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 285.420789] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.458553] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 285.465677] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 285.471668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.881445] Bluetooth: hci0: command tx timeout [ 287.264616] Bluetooth: hci1: command tx timeout [ 287.328413] Bluetooth: hci2: command tx timeout [ 287.392673] Bluetooth: hci4: command tx timeout [ 287.457410] Bluetooth: hci5: command tx timeout [ 287.457446] Bluetooth: hci6: command tx timeout [ 287.458732] Bluetooth: hci3: command tx timeout [ 287.521782] Bluetooth: hci7: command tx timeout [ 288.928489] Bluetooth: hci0: command tx timeout [ 289.312404] Bluetooth: hci1: command tx timeout [ 289.378448] Bluetooth: hci2: command tx timeout [ 289.440573] Bluetooth: hci4: command tx timeout [ 289.504387] Bluetooth: hci6: command tx timeout [ 289.504888] Bluetooth: hci3: command tx timeout [ 289.506336] Bluetooth: hci5: command tx timeout [ 289.568339] Bluetooth: hci7: command tx timeout [ 290.978320] Bluetooth: hci0: command tx timeout [ 291.360437] Bluetooth: hci1: command tx timeout [ 291.424416] Bluetooth: hci2: command tx timeout [ 291.488353] Bluetooth: hci4: command tx timeout [ 291.552485] Bluetooth: hci3: command tx timeout [ 291.552944] Bluetooth: hci5: command tx timeout [ 291.553600] Bluetooth: hci6: command tx timeout [ 291.617334] Bluetooth: hci7: command tx timeout [ 293.025356] Bluetooth: hci0: command tx timeout [ 293.409373] Bluetooth: hci1: command tx timeout [ 293.472547] Bluetooth: hci2: command tx timeout [ 293.536353] Bluetooth: hci4: command tx timeout [ 293.601368] Bluetooth: hci5: command tx timeout [ 293.601895] Bluetooth: hci6: command tx timeout [ 293.601953] Bluetooth: hci3: command tx timeout [ 293.664420] Bluetooth: hci7: command tx timeout [ 346.803552] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.805463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.808501] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.814945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.816690] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 346.818588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.929761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.935907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.936936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.941870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.943372] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.944990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.954741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.957119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.958612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.959127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.963498] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 346.968568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.066283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.070484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.078196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.086722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.097150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 347.104371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.126056] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.127616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.128540] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.130564] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.131887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.133023] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 347.135033] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 347.135981] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 347.140582] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 347.141416] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.145999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 347.147469] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.178435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.199534] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.200884] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 347.202320] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 347.209532] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 347.217107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.260056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 347.304407] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 347.306271] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 347.348392] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 347.352165] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 347.361378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 348.832454] Bluetooth: hci0: command tx timeout [ 349.024381] Bluetooth: hci1: command tx timeout [ 349.025619] Bluetooth: hci2: command tx timeout [ 349.152501] Bluetooth: hci3: command tx timeout [ 349.152706] Bluetooth: hci4: command tx timeout [ 349.281451] Bluetooth: hci6: command tx timeout [ 349.344371] Bluetooth: hci5: command tx timeout [ 349.472523] Bluetooth: hci7: command tx timeout [ 350.881489] Bluetooth: hci0: command tx timeout [ 351.072349] Bluetooth: hci1: command tx timeout [ 351.072418] Bluetooth: hci2: command tx timeout [ 351.200404] Bluetooth: hci4: command tx timeout [ 351.200425] Bluetooth: hci3: command tx timeout [ 351.328310] Bluetooth: hci6: command tx timeout [ 351.392348] Bluetooth: hci5: command tx timeout [ 351.520335] Bluetooth: hci7: command tx timeout [ 352.928317] Bluetooth: hci0: command tx timeout [ 353.120357] Bluetooth: hci1: command tx timeout [ 353.123284] Bluetooth: hci2: command tx timeout [ 353.248358] Bluetooth: hci3: command tx timeout [ 353.251589] Bluetooth: hci4: command tx timeout [ 353.376357] Bluetooth: hci6: command tx timeout [ 353.440538] Bluetooth: hci5: command tx timeout [ 353.568380] Bluetooth: hci7: command tx timeout [ 354.978292] Bluetooth: hci0: command tx timeout [ 355.168367] Bluetooth: hci2: command tx timeout [ 355.168392] Bluetooth: hci1: command tx timeout [ 355.296398] Bluetooth: hci4: command tx timeout [ 355.296438] Bluetooth: hci3: command tx timeout [ 355.424361] Bluetooth: hci6: command tx timeout [ 355.488303] Bluetooth: hci5: command tx timeout [ 355.616376] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:09:37 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880278cdd90 RCX=ffffffff814fd769 RDX=0000000000000001 RSI=0000000000000003 RDI=ffffffff87f33a1d RBP=ffff8880278cddb8 RSP=ffff8880331cf7f8 R8 =dffffc0000000000 R9 =fffffbfff0fe15f0 R10=ffffffff87f0af87 R11=0000000000000001 R12=ffff8880278cd340 R13=0000000000000000 R14=0000000000000001 R15=ffff8880278cdd89 RIP=ffffffff814fd8a3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f10e15de4a1 CR3=0000000026a34000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff8684b762 RBX=0000000000000001 RCX=ffffffff8684b762 RDX=0000000000000000 RSI=ffffffff8684b732 RDI=ffffffff864d1dcc RBP=ffff888026caf900 RSP=ffff888026caf838 R8 =ffffffff8684b732 R9 =ffff888026caf8e8 R10=000000000003ab7c R11=00000000000241a1 R12=ffff888026caf908 R13=ffff888026caf8f0 R14=ffff888026caf8e9 R15=ffff888026caf8a8 RIP=ffffffff8134910a RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0593a44008 CR3=000000001651e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000