Warning: Permanently added '[localhost]:38644' (ECDSA) to the list of known hosts. 2025/06/14 04:32:54 fuzzer started 2025/06/14 04:32:54 dialing manager at localhost:42061 syzkaller login: [ 94.879775] cgroup: Unknown subsys name 'net' [ 95.001269] cgroup: Unknown subsys name 'cpuset' [ 95.045106] cgroup: Unknown subsys name 'rlimit' 2025/06/14 04:33:09 syscalls: 202 2025/06/14 04:33:09 code coverage: enabled 2025/06/14 04:33:09 comparison tracing: enabled 2025/06/14 04:33:09 extra coverage: enabled 2025/06/14 04:33:09 setuid sandbox: enabled 2025/06/14 04:33:09 namespace sandbox: enabled 2025/06/14 04:33:09 Android sandbox: enabled 2025/06/14 04:33:09 fault injection: enabled 2025/06/14 04:33:09 leak checking: enabled 2025/06/14 04:33:09 net packet injection: enabled 2025/06/14 04:33:09 net device setup: enabled 2025/06/14 04:33:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/14 04:33:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/14 04:33:09 USB emulation: enabled 2025/06/14 04:33:09 hci packet injection: enabled 2025/06/14 04:33:09 wifi device emulation: enabled 2025/06/14 04:33:09 802.15.4 emulation: enabled 2025/06/14 04:33:09 fetching corpus: 0, signal 0/0 (executing program) 2025/06/14 04:33:10 starting 8 fuzzer processes 04:33:10 executing program 0: modify_ldt$read(0x0, &(0x7f0000000000)=""/228, 0xe4) modify_ldt$read(0x0, &(0x7f0000000100)=""/206, 0xce) modify_ldt$read(0x0, &(0x7f0000000200)=""/49, 0x31) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000240)) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000280)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/usbhid', 0x80, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0xa) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000380)={0x1000, ""/4096}) getsockname$packet(r0, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001400)=0x14) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000001440)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000001480)={0x1, @set_cpb_data={{0xc76, 0xff}, {0x0, 0x80, 0x7, "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"}}}, 0x103) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000015c0)={0x66, ""/102}) r4 = fsmount(r0, 0x0, 0x81) read$hidraw(r4, &(0x7f0000001640)=""/92, 0x5c) r5 = fsmount(r4, 0x0, 0x80) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000016c0)='/proc/thread-self\x00', &(0x7f0000001700)='./file0\x00', r5) 04:33:10 executing program 1: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd2c, 0xfff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r0 = socket(0x9, 0xa, 0x401) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x411e0b653944e324) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000008}, 0x40000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x20, 0x6, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8000, 0x8, 0xebf, 0x2}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x40091) sched_setparam(0xffffffffffffffff, &(0x7f00000006c0)=0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) r4 = socket(0x21, 0x5, 0x7) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000780), r0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x140, r5, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fffffff}, @WGDEVICE_A_PEERS={0xc0, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc795}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "51bc435284773abdddb060ac877082d38518926bd41e996e968cd66fb9c93a20"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfffffffb, @private1, 0x1f}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "071eb8d5d4cfcbf466a7c4cb269caaf6247bfd2f65b9c9d4e73a1b4819a1760c"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000810}, 0x40010) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff9508}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000b40), r0) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x98, r8, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfff}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x124, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) 04:33:10 executing program 2: ptrace$cont(0x18, 0x0, 0x2f6, 0x7) r0 = gettid() sched_setparam(r0, &(0x7f0000000000)=0xc3) waitid(0xd78c0d566a40962a, r0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) ptrace$setopts(0x4206, r0, 0x3, 0x1a) sched_setparam(r0, &(0x7f0000000180)=0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000200)) r2 = syz_io_uring_complete(0x0) r3 = fsmount(r2, 0x0, 0x70) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000240)={0x0, 0xfffff376}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000280)) waitid(0x2, r0, &(0x7f00000002c0), 0x4, &(0x7f0000000340)) syz_open_procfs$userns(r0, &(0x7f0000000400)) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000440)=0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0xc80003, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000500)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) io_cancel(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x1, r5, &(0x7f0000000540)="97048fa6d1d2a7c4dd8414534304f2825a264010d7ab4744460c49a28a22aa949294e0a22f3e4a7bb651028feba30c28b83550d89cddee3dccabf0f3122a0063dbab278e556c15e14188a26a793f71e3f9e1f890a7f2cfc90d877344", 0x5c, 0x2, 0x0, 0x2}, &(0x7f0000000600)) [ 110.645493] audit: type=1400 audit(1749875590.808:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:33:10 executing program 3: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x2b8, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x2a4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}]}, {0x218, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x101, @empty, 0x1000}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @local, 0x5}}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x880}, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}}}, &(0x7f00000004c0)=0xe8) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_IFINDEX={0x8, 0xb, r0}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000640)={0x4dc, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x48c, 0x8, 0x0, 0x1, [{0x2d4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5697}, @WGPEER_A_ALLOWEDIPS={0x2b0, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x401, @loopback, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xcc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fa0b6d0bc17aacfab2e6a147ce6a9744777180c1fb2d772c188a235ff5d80e90"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3a769336377968bdfc380d726a567ea9b42f5c00b85ee542a62a4e328d5fce9e"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x84c}, 0x40080) r1 = socket$inet6(0xa, 0xa, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000bc0)={@mcast2, 0x400, 0x1, 0x1, 0x0, 0x500, 0x40}, 0x20) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x24004004) r3 = socket$inet6(0xa, 0x1, 0x2b) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xea}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8844}, 0x4000001) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000f80)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000001080)=0xe8) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001480)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001440)={&(0x7f00000010c0)={0x378, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x2d0, 0x8, 0x0, 0x1, [{0x238, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7fffffff, @mcast1, 0x9}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x1f0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8e, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb72}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0397995694a6b13542d4002997582d5f766da116673e2f8a3e8ac806508dc39d"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0xef4c20755c35edb6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x82000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000001540), &(0x7f0000001580)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001640)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9789}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20041080) eventfd2(0x3f, 0x0) 04:33:10 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/102, 0x66, 0x1, &(0x7f0000000080)=""/75, 0x4b}, &(0x7f0000000140)=0x40) munlock(&(0x7f0000ff4000/0xc000)=nil, 0xc000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/usblp', 0x404000, 0x30) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x10000000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x82010, r1, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x2, &(0x7f00000001c0)="373bc78c70c52f58f446f4cf4a8223289aabceb4b27b0e46aa66c8e8b87f09f2", 0x3, 0x0, 0x0, {0x1}}, 0x9) r5 = fsmount(r1, 0x0, 0x80) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x2000000, 0x2010, r1, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x8a7f, 0x2, &(0x7f0000000240)="3f6d82d4f1408625a7a0da6add01636a1e6dd128d009017b65f692bc07853dfe109d0ef917de90c6449a76c29021d465585a4fd99c3f17cb6c91dc4d35f4553bb3d3bbd80f941528ee189c918297bb2de47f1293bffde3bf33d478ca2d85d0a6f5f80d5b705c1b1853f6c4d19e1e00b97a93014611895b8eaa7b57cb6b86d560b12b284f5824bcc6b07027d7eb10b4d8ef9e0557a3fe7f20c4bddadb", 0x5ea2, 0x0, 0x0, {0x3, r6}}, 0x7) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0xa14, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/pcieportdrv', 0x0, 0x9) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@empty, @in6=@loopback, 0x4e20, 0x5, 0x4e23, 0x0, 0x2, 0x20, 0xa0, 0x3b, 0x0, 0xee00}, {0x8, 0x7, 0xba21, 0x3, 0x7, 0x2, 0x2, 0x6}, {0xffffffff, 0x100000000, 0x8, 0x249}, 0x4, 0x6e6bb5, 0x0, 0x0, 0x3}, {{@in=@private=0xa010101, 0x4d4, 0x2b}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3505, 0x0, 0x1, 0x8, 0x3d, 0x1}}, 0xe8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x801) 04:33:10 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)="8ceda6b9184c32bee8d8a638548512059a73be69ee20cc77eef5da15b11df25eae1c4172d073a71a102d210329c6689af5817f875122e0eb7e885c4ab7ff4e805de045c5433c92e595d7dcf2e731909145e2d02d590222876472d9175d1632a85cfda941f6b839a7d6dab91e1ca19d91d8fdee38223d4d8e24a184f647148e979785a7486e6dd5d815b8") ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000100)="bfc39f7ebe4887f97efa419ece79e13a6fed0e2dc8646ce066bbe820b58f31fdefa8184392f70e0554aca4cdd717f621edfc486dc09f4a1368baae131a53b05ce60233745c3c57975b4cdaf8458eb0a386b1cf1447109efdd57b669374324573b93b67111be233de") ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x5, "684899", 0xf8}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000001c0)=0x5, 0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) r2 = fsmount(0xffffffffffffffff, 0x1, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x880) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/ptp', 0x200000, 0x1cc) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) r4 = io_uring_setup(0x6c89, &(0x7f00000003c0)={0x0, 0xfd7b, 0x1, 0x3, 0x271, 0x0, r3}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000440)=[r3, r5]}, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000004c0)='\x00', &(0x7f0000000500)='./file0\x00', r3) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000540)) r6 = syz_open_dev$sg(&(0x7f0000000580), 0x3, 0x40) ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5385, &(0x7f00000005c0)={0x96, ""/150}) 04:33:10 executing program 5: prctl$PR_GET_CHILD_SUBREAPER(0x25) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='{]-#,^#]\xe5,[[\x00', &(0x7f0000000040)="53fc3444a62aad8bd1c2a6621595c9cb9c651ce983f685bc81e0aff4ab739beceea088bc283707300dd8335d6785a89cc53164437898a13b556f322e23c7f185a4ae34ba6378263f6b0a7ce251a08d2e970d3ea9074f8556a774fd788f098081380ae9e982dda51474", 0x69) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000000c0)='*.%\x92}*>\\\\/\x00', &(0x7f0000000100)="8e117d20a57889fc7d8110f8a3778c68112bddff4d556c744f39aea19616dd863394353bf953f86482e83e037fe855b90afc89070dea09a3b0d7be30cb0898ea4ab71f7ad0dd02c34c807356159274eafe664c9941a008f7e579fda56fae892cf25051df4b44e7e76084248f4fa4b0fef3a374586b783502f010a22e202707f43c87d899c1cd0d0c78bf3cec6032dc52f67e80d7eee0bf0df50aff0d811a4c44e993b1d88bebaed1b40ae0e66341d92a28b9bf823112c6090f04422a98072753fcb2f54a", 0xc4) getgroups(0x2, &(0x7f0000000200)=[0xee00, 0x0]) r0 = fsopen(&(0x7f0000000240)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000280)='async\x00', 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x73) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) r2 = epoll_create1(0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r2, 0x7fff, {0x0, r3}, 0x0, 0x0, 0x1, {0x0, 0x0, r0}}, 0x80) r4 = fsmount(r1, 0x0, 0xf8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000440)={@loopback, 0x3, 0x2, 0x2, 0x6, 0x4de2, 0x2}, &(0x7f0000000480)=0x20) io_setup(0x3f, &(0x7f00000004c0)=0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) r7 = syz_io_uring_complete(0x0) io_cancel(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x4, r6, &(0x7f0000000540)="caceb61148bf16d4b3ab758ba82a9a3685d1f426866a2f9695ee7a0df9b43927509222c3df3d1b7c157c3452afe50e1632ad11cbef41b02e89ce601872d793fbdb26fa8e0eb94ca6b357b4a598085e354b560f9dece04f883368fef079a0cbdfad5d133e52452b53d92d", 0x6a, 0x2, 0x0, 0x2, r7}, &(0x7f0000000600)) syz_open_dev$usbmon(&(0x7f0000000640), 0x800, 0x2000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)=""/140, 0x8c}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x2, &(0x7f00000008c0)=""/35, 0x23}, 0x0, 0x10040, 0x1}, 0x2) 04:33:10 executing program 7: io_setup(0x4f, &(0x7f0000000000)=0x0) io_destroy(r0) io_destroy(r0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_pgetevents(r0, 0xb7d, 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)={r1, r2+60000000}, &(0x7f0000000140)={&(0x7f0000000100)={[0x81]}, 0x8}) io_setup(0x0, &(0x7f0000000180)=0x0) r4 = fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) io_submit(r3, 0x4, &(0x7f00000005c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)="de9cb12a820269ca71e56f4a13e6e5ca6e4af14245022a1174c9a985b58e87a8baaaae8c563948b72850a4a26d7ccf5e3541f0299a80edb983630e6eb32f67626a155e4564610e47c5a614fd2029fae2ecebe4b8abf8b5e7ef7beb823832d41f30cf2280a2aff4dd5ede22fc003e04268eae560f998021b6f8aeef7439ad", 0x7e, 0x6, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000280)="33a4942e462dfe2dc88e8626b2bfb19c3095ffaf6ab426c8403b37012aeeb102262ab26cedbf49aa904ea1fe7d6f10cb48a574f3da1d1669aa6e9cee0df8a08d0db3f5d032f5de9645eb959e320adaa5ac4f26283ca0d2364b9fcb313eb5d3fd28f183efb4b590402a863e0b2ac90be38df67892808a2221a9e37921", 0x7c, 0x6, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x7, r4, &(0x7f0000000380)="8dc4a9988091c10877f1ce6454488718aeee93c551abb2198370046062f2569fc1822eb93e9add8611847637c0fb1047f62b9caba4b65264b13a43dc10940a7022d67521c9fcedda511fefb8432200880940b398ff7082782abb2cc2c4da6188cc46880a559967dbe04f983f1a77127b71e0593e4a534da795615affd745a04f7d19462900986e850dc498dd9afaf65e55317228f7312c770a7b555d0634e99cdde4d38f5551ff9428173e545fd4a7e81249d87aac0a49a061f3319f8bb03c4071286f22f94b27766636c6264d12de8730", 0xd1, 0x0, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0xa3, 0xffffffffffffffff, &(0x7f00000004c0)="b3f6e6d73cd2119a245a2a4fe59fb024e5d039861b4b52522a3f4e5fb039868ca4ed2a862bbef1fa929cdbb4045ebde3c500c453f0e9912354f823ea7293bdfc660f0d6720267f97909b0a0fa9f02acc8c7f8da954ab9551991f6e7d0113cc172245fd884744da27adc69212abdde3bb72c9d6c27aab7ef184b5c546f806644f89447c49be705ab7d3070e64ae4ad90ac945ac0d335db19afd3e042284597d9e0161cf65d1ada5cd8c5f72a509a81eeb8d5b9c5c8f81042454006a", 0xbb, 0x2, 0x0, 0x3}]) io_cancel(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x6ac, r4, &(0x7f0000000600)="6900e5ab6002481d9acbb64b7a349959cd97a07c2aaf2c57d48d536d3e036dda8df9bf20afe31f600713b7dab5710649949d06d7332806313b8fae98112f66437f1806d4821699bb6ad4951d8e4ef4f7765ac1b0cab81cb0988245236827bc6144972b65fbad4c00e7809a7d7fae590c52805d0c5152ec2b2612a2965f4c6568159f3af3ec", 0x85, 0x6, 0x0, 0x3}, &(0x7f0000000700)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x1) r6 = fsmount(r4, 0x1, 0x82) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r7, 0x400, 0x400, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x14}}, @FOU_ATTR_TYPE={0x5, 0x4, 0xb3ab4761426dc53e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x44020}, 0x14040004) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x2010, r6, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000980)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd_index=0x3, 0x10000, &(0x7f0000000900)="76d9c046dd843b1e5c05238ab96959006abbe295b43f4d3b8a5f31a846f18f3a15d01fa9f93acc5aae27cb97c65adc5b1d8e01787b6015eff8531138b7f26f03a92d42381890034756781102cf38da558e", 0x51, 0x1, 0x1, {0x0, r9}}, 0x6d3c) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x1c) clock_gettime(0x2, &(0x7f0000000bc0)) [ 112.106375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.111226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.115553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.122583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.127136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.175503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.177632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.179805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.185017] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.187977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.189978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.194655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.210520] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.236029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.238309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.244035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.249815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.256573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.282774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.294669] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.301251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.312658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.341556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.342866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.343595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.354713] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.359575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.368669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.371822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.373784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.379112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.382625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.387328] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.394023] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.399469] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.403832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.405958] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 112.427561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.452752] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.462387] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.177697] Bluetooth: hci0: command tx timeout [ 114.242108] Bluetooth: hci1: command tx timeout [ 114.370096] Bluetooth: hci2: command tx timeout [ 114.434127] Bluetooth: hci3: command tx timeout [ 114.497425] Bluetooth: hci6: command tx timeout [ 114.497447] Bluetooth: hci4: command tx timeout [ 114.562141] Bluetooth: hci7: command tx timeout [ 114.562518] Bluetooth: hci5: command tx timeout [ 116.226272] Bluetooth: hci0: command tx timeout [ 116.289519] Bluetooth: hci1: command tx timeout [ 116.417430] Bluetooth: hci2: command tx timeout [ 116.482738] Bluetooth: hci3: command tx timeout [ 116.545257] Bluetooth: hci6: command tx timeout [ 116.546109] Bluetooth: hci4: command tx timeout [ 116.609166] Bluetooth: hci5: command tx timeout [ 116.610122] Bluetooth: hci7: command tx timeout [ 118.273225] Bluetooth: hci0: command tx timeout [ 118.337136] Bluetooth: hci1: command tx timeout [ 118.466079] Bluetooth: hci2: command tx timeout [ 118.529329] Bluetooth: hci3: command tx timeout [ 118.593133] Bluetooth: hci4: command tx timeout [ 118.593453] Bluetooth: hci6: command tx timeout [ 118.658152] Bluetooth: hci7: command tx timeout [ 118.658170] Bluetooth: hci5: command tx timeout [ 120.322126] Bluetooth: hci0: command tx timeout [ 120.386162] Bluetooth: hci1: command tx timeout [ 120.514103] Bluetooth: hci2: command tx timeout [ 120.579068] Bluetooth: hci3: command tx timeout [ 120.642723] Bluetooth: hci6: command tx timeout [ 120.643185] Bluetooth: hci4: command tx timeout [ 120.705262] Bluetooth: hci7: command tx timeout [ 120.707717] Bluetooth: hci5: command tx timeout [ 174.617733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.623368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.628889] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.637325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.640245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.676010] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.680398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.683801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.690363] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.692349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.698574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.700977] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.704922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.706504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.713874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.719615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.723736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.724881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.728566] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.730642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.738246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.750082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.750152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.757389] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.757668] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.766782] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.767167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.790413] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.792178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.805543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.806720] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.807642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.826890] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.831816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.834671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.843220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.845358] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.858411] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.865590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.872884] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.705438] Bluetooth: hci0: command tx timeout [ 176.769173] Bluetooth: hci1: command tx timeout [ 176.833428] Bluetooth: hci4: command tx timeout [ 176.833953] Bluetooth: hci3: command tx timeout [ 176.834507] Bluetooth: hci2: command tx timeout [ 177.025189] Bluetooth: hci6: command tx timeout [ 177.025767] Bluetooth: hci5: command tx timeout [ 177.089786] Bluetooth: hci7: command tx timeout [ 178.753375] Bluetooth: hci0: command tx timeout [ 178.817158] Bluetooth: hci1: command tx timeout [ 178.881698] Bluetooth: hci4: command tx timeout [ 178.882424] Bluetooth: hci2: command tx timeout [ 178.882830] Bluetooth: hci3: command tx timeout [ 179.073858] Bluetooth: hci5: command tx timeout [ 179.074443] Bluetooth: hci6: command tx timeout [ 179.137413] Bluetooth: hci7: command tx timeout [ 180.801140] Bluetooth: hci0: command tx timeout [ 180.865447] Bluetooth: hci1: command tx timeout [ 180.929424] Bluetooth: hci3: command tx timeout [ 180.929861] Bluetooth: hci2: command tx timeout [ 180.930362] Bluetooth: hci4: command tx timeout [ 181.121506] Bluetooth: hci5: command tx timeout [ 181.121972] Bluetooth: hci6: command tx timeout [ 181.185409] Bluetooth: hci7: command tx timeout [ 182.849484] Bluetooth: hci0: command tx timeout [ 182.913245] Bluetooth: hci1: command tx timeout [ 182.977380] Bluetooth: hci2: command tx timeout [ 182.977812] Bluetooth: hci4: command tx timeout [ 182.978602] Bluetooth: hci3: command tx timeout [ 183.171090] Bluetooth: hci6: command tx timeout [ 183.171514] Bluetooth: hci5: command tx timeout [ 183.233135] Bluetooth: hci7: command tx timeout [ 236.750178] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.752514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.753604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.759441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.761246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.812987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.819449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.825443] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.837485] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.840828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.876799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.880575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.899172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.904984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.919487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.941970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.943632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.944815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.949312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.951076] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.072530] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.085991] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.089501] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.092501] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.097647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.102918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.106294] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.107008] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.124170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.126775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.133765] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.146745] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.166354] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.166379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.184731] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.201390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.215763] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.216357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.286532] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.383559] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.785184] Bluetooth: hci0: command tx timeout [ 238.913140] Bluetooth: hci1: command tx timeout [ 238.977491] Bluetooth: hci3: command tx timeout [ 239.041365] Bluetooth: hci2: command tx timeout [ 239.172192] Bluetooth: hci6: command tx timeout [ 239.361214] Bluetooth: hci5: command tx timeout [ 239.362019] Bluetooth: hci4: command tx timeout [ 239.489154] Bluetooth: hci7: command tx timeout [ 240.834292] Bluetooth: hci0: command tx timeout [ 240.961132] Bluetooth: hci1: command tx timeout [ 241.025433] Bluetooth: hci3: command tx timeout [ 241.089304] Bluetooth: hci2: command tx timeout [ 241.218287] Bluetooth: hci6: command tx timeout [ 241.409363] Bluetooth: hci4: command tx timeout [ 241.409867] Bluetooth: hci5: command tx timeout [ 241.537173] Bluetooth: hci7: command tx timeout [ 242.881140] Bluetooth: hci0: command tx timeout [ 243.010144] Bluetooth: hci1: command tx timeout [ 243.074144] Bluetooth: hci3: command tx timeout [ 243.137911] Bluetooth: hci2: command tx timeout [ 243.266088] Bluetooth: hci6: command tx timeout [ 243.457292] Bluetooth: hci4: command tx timeout [ 243.457785] Bluetooth: hci5: command tx timeout [ 243.586129] Bluetooth: hci7: command tx timeout [ 244.929319] Bluetooth: hci0: command tx timeout [ 245.057114] Bluetooth: hci1: command tx timeout [ 245.122294] Bluetooth: hci3: command tx timeout [ 245.186110] Bluetooth: hci2: command tx timeout [ 245.313334] Bluetooth: hci6: command tx timeout [ 245.506106] Bluetooth: hci5: command tx timeout [ 245.506605] Bluetooth: hci4: command tx timeout [ 245.633383] Bluetooth: hci7: command tx timeout [ 299.097022] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.103017] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.106635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.122106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.132815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.238763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.249892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.257737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.262545] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.270717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.282963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.285873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.287743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.297614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.299256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.305366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.316414] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.324960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.334134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.367432] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.435996] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.440690] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.451824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.462559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.466846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.534642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.538967] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.549348] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.559384] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.565824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.990555] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.053202] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.061681] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.111830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.133773] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.398693] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.412513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.417979] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.427655] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.432007] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.187236] Bluetooth: hci0: command tx timeout [ 301.377404] Bluetooth: hci3: command tx timeout [ 301.441200] Bluetooth: hci1: command tx timeout [ 301.441745] Bluetooth: hci2: command tx timeout [ 301.570457] Bluetooth: hci4: command tx timeout [ 301.635344] Bluetooth: hci5: command tx timeout [ 302.273248] Bluetooth: hci7: command tx timeout [ 302.532386] Bluetooth: hci6: command tx timeout [ 303.233113] Bluetooth: hci0: command tx timeout [ 303.425176] Bluetooth: hci3: command tx timeout [ 303.489284] Bluetooth: hci2: command tx timeout [ 303.490311] Bluetooth: hci1: command tx timeout [ 303.618807] Bluetooth: hci4: command tx timeout [ 303.682272] Bluetooth: hci5: command tx timeout [ 304.321123] Bluetooth: hci7: command tx timeout [ 304.579086] Bluetooth: hci6: command tx timeout [ 305.281149] Bluetooth: hci0: command tx timeout [ 305.474102] Bluetooth: hci3: command tx timeout [ 305.537204] Bluetooth: hci1: command tx timeout [ 305.537829] Bluetooth: hci2: command tx timeout [ 305.665165] Bluetooth: hci4: command tx timeout [ 305.729467] Bluetooth: hci5: command tx timeout [ 306.370145] Bluetooth: hci7: command tx timeout [ 306.626114] Bluetooth: hci6: command tx timeout [ 307.329380] Bluetooth: hci0: command tx timeout [ 307.521117] Bluetooth: hci3: command tx timeout [ 307.585115] Bluetooth: hci1: command tx timeout [ 307.586375] Bluetooth: hci2: command tx timeout [ 307.714410] Bluetooth: hci4: command tx timeout [ 307.779128] Bluetooth: hci5: command tx timeout [ 308.417248] Bluetooth: hci7: command tx timeout [ 308.674375] Bluetooth: hci6: command tx timeout [ 362.133704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.139658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.143451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.153977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.158828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.288000] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.292796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.300484] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.311688] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.316758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.453092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.463900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.477551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.503291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.508582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.525843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.539604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.542419] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.558517] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.577543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.648405] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.662337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.666334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.678137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.686785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.749708] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.787530] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.803807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.810109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.819095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.822518] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.905898] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.919943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.043124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.047487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.049613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.053553] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.063599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.080933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.162696] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.226173] Bluetooth: hci0: command tx timeout [ 364.417544] Bluetooth: hci1: command tx timeout [ 364.609493] Bluetooth: hci2: command tx timeout [ 364.737133] Bluetooth: hci3: command tx timeout [ 364.738173] Bluetooth: hci4: command tx timeout [ 364.866147] Bluetooth: hci5: command tx timeout [ 365.251108] Bluetooth: hci7: command tx timeout [ 365.377386] Bluetooth: hci6: command tx timeout [ 366.273367] Bluetooth: hci0: command tx timeout [ 366.465183] Bluetooth: hci1: command tx timeout [ 366.657126] Bluetooth: hci2: command tx timeout [ 366.786103] Bluetooth: hci4: command tx timeout [ 366.786576] Bluetooth: hci3: command tx timeout [ 366.914075] Bluetooth: hci5: command tx timeout [ 367.297127] Bluetooth: hci7: command tx timeout [ 367.425126] Bluetooth: hci6: command tx timeout [ 368.321239] Bluetooth: hci0: command tx timeout [ 368.514066] Bluetooth: hci1: command tx timeout [ 368.705367] Bluetooth: hci2: command tx timeout [ 368.833408] Bluetooth: hci4: command tx timeout [ 368.833887] Bluetooth: hci3: command tx timeout [ 368.963072] Bluetooth: hci5: command tx timeout [ 369.347093] Bluetooth: hci7: command tx timeout [ 369.473160] Bluetooth: hci6: command tx timeout [ 370.369441] Bluetooth: hci0: command tx timeout [ 370.561125] Bluetooth: hci1: command tx timeout [ 370.753379] Bluetooth: hci2: command tx timeout [ 370.881142] Bluetooth: hci3: command tx timeout [ 370.881601] Bluetooth: hci4: command tx timeout [ 371.009115] Bluetooth: hci5: command tx timeout [ 371.394220] Bluetooth: hci7: command tx timeout [ 371.521345] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:38:13 Registers: info registers vcpu 0 RAX=35d470860e417200 RBX=ffff88802dbafbf0 RCX=ffff88802dbaf664 RDX=0000000000000001 RSI=ffffffff85c1cc40 RDI=ffff888009a4dd00 RBP=ffffffff85c1cc40 RSP=ffff88802dbaf658 R8 =0000000000000001 R9 =ffff88802dbaf750 R10=000000000003b4ed R11=00000000000266c8 R12=ffffffff81354012 R13=0000000000000202 R14=ffff888009a4d280 R15=0000000000000002 RIP=ffffffff8151acf2 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005620036884c8 CR3=000000002d241000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff110019db55a RBX=ffff88800cedaad0 RCX=ffff88800d0243a0 RDX=ffff88801c569610 RSI=ffffffff883147b0 RDI=ffff8880070e4630 RBP=ffff8880070e45c8 RSP=ffff8880160d77a0 R8 =0000000000000000 R9 =ffff8880070e4630 R10=0000000000000003 R11=0000000000000001 R12=ffff88800d024360 R13=0000000000000040 R14=0000000000000001 R15=0000000000000282 RIP=ffffffff81b21bfd RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f30b6c55540 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f30b6d128b0 CR3=000000002716a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000