Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:51377' (ECDSA) to the list of known hosts. 2025/06/16 12:17:51 fuzzer started 2025/06/16 12:17:51 dialing manager at localhost:42061 syzkaller login: [ 99.516619] cgroup: Unknown subsys name 'net' [ 99.705908] cgroup: Unknown subsys name 'cpuset' [ 99.769274] cgroup: Unknown subsys name 'rlimit' 2025/06/16 12:18:13 syscalls: 209 2025/06/16 12:18:13 code coverage: enabled 2025/06/16 12:18:13 comparison tracing: enabled 2025/06/16 12:18:13 extra coverage: enabled 2025/06/16 12:18:13 setuid sandbox: enabled 2025/06/16 12:18:13 namespace sandbox: enabled 2025/06/16 12:18:13 Android sandbox: enabled 2025/06/16 12:18:13 fault injection: enabled 2025/06/16 12:18:13 leak checking: enabled 2025/06/16 12:18:13 net packet injection: enabled 2025/06/16 12:18:13 net device setup: enabled 2025/06/16 12:18:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/16 12:18:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/16 12:18:13 USB emulation: enabled 2025/06/16 12:18:13 hci packet injection: enabled 2025/06/16 12:18:13 wifi device emulation: enabled 2025/06/16 12:18:13 802.15.4 emulation: enabled 2025/06/16 12:18:13 fetching corpus: 0, signal 0/0 (executing program) 2025/06/16 12:18:14 starting 8 fuzzer processes 12:18:14 executing program 0: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x68}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc008) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040884) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{r2, 0x5, 0x100000001, 0xfff, 0x1f, 0x80000001, 0x4d9fa795, 0xfffffffd, 0x40, 0x5, 0x8, 0x9, 0x9e, 0x8ba3, 0x88d}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x6c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040005}, 0x8000) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740), 0x14, &(0x7f00000017c0)={&(0x7f0000001780)="69a400fa910f9c9a51f566f9099232884e100d00", 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001880), r3) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000022c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002280)={&(0x7f00000018c0)={0x998, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x400}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PEERS={0x934, 0x8, 0x0, 0x1, [{0x394, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x380, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x588, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa6d8}}, @WGPEER_A_ALLOWEDIPS={0x540, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3f}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7f38ed63a3849b19f88a6bbf446e88bdb10e8fb759dec5076bab7040c136fc0c"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x998}, 0x1, 0x0, 0x0, 0x100}, 0x4) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002340), r4) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000002540)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002500)={&(0x7f0000002380)={0x150, r7, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffb}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff0001}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa055}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002680)={&(0x7f00000025c0)={0x8c, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8727}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x4a6b8fd6b9dd6393}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x44401) clock_getres(0x3, &(0x7f0000002700)) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000002740)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000002880)={&(0x7f0000002780)="5dd7a915897b93c7ef0282426472be8b0bd227de260869a8a9625dc5d7846af669c6eae367ed63b9f8332093dc4550584d0db3d3fa679eafbe0e4039160c5386474860fdb920120be3a60bf21abca4aa5726f59ff07ec1369edb9c24ae5bac0bb13f386a28796aa5a63fa16752b4451e422f819920a12c81f10bd8717e24e6ee5865bf67635cfefb648a54d75c1018e3cfe4f300afd3c463ad568edcc24ff6191f70d02e6ecd76081c863dce1d2ad567d2387d3e11fb62b90b6b5a7f8276f6b35744c15afe41", 0xc6}, 0x1, 0x0, 0x0, 0x800}, 0x40010) 12:18:14 executing program 2: getitimer(0x2, &(0x7f0000000000)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_io_uring_complete(0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x25a}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x20, 0x55, 0xfffffffd]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x8c0}, 0xc0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) r2 = geteuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x3, r2, 0x0, 0xee01, 0xee00, 0x1, 0x5}, 0x6cd, 0x1, 0x200, 0x5, 0x0, 0xffffffffffffffff, 0x5}) getresgid(&(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f00000016c0)={{0x3, r2, r3, r2, 0x0, 0x85, 0x8}, 0x7, 0x1ff, 0x4, 0xecd8, 0xffffffffffffffff, 0xffffffffffffffff}) getgid() r4 = shmget(0x0, 0x11000, 0x54000000, &(0x7f0000fef000/0x11000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000001740)=""/100) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000017c0)=0x80000000, 0x1, 0xd) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000001800)=""/139) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x68, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x40, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8a}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 12:18:14 executing program 3: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="2f15ff8cf8fdec24e9975a71d8b47f4d9a307e6db5d68215b0b88906584e634cbe6d4ef5ebc7947e855384f2d4c6aa3fa5423fcb942ebc6be171466e36a3674747dbff73015ac86ced95ef17c98bb6a63699c4a81979bf02426b2d8d81402786cb3e5b8155ca25e438a44443", 0x6c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000) r0 = syz_io_uring_complete(0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40488c0}, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{0x0, 0x1, 0x7, 0x100000000, 0x1000, 0x1e, 0x3, 0x76, 0x8001, 0x40, 0x6, 0x80, 0xfffffffffffffffa, 0x7ff, 0x5}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000300), 0x0, 0x4) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000340)=0x1, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r0, 0x0) r2 = syz_io_uring_setup(0x4a97, &(0x7f0000000380)={0x0, 0xaf72, 0x4, 0x3, 0x209, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) r5 = openat$cgroup_int(r0, &(0x7f0000000480)='cpuset.cpu_exclusive\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000540)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000500)=[r5, r0, r0, r0, r0, r6], 0x6, 0x0, 0x1, {0x0, r7}}, 0x2) r8 = syz_io_uring_complete(r3) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000580)=[r2, r2], 0x2) mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000005c0)=0x100000000, 0x247b, 0x0) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000600)='./file0\x00', 0x80) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000640)=@IORING_OP_FSYNC={0x3, 0x7, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r10}}, 0x4c8b) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)) 12:18:14 executing program 1: mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6800) r0 = syz_io_uring_complete(0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffff119) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = syz_io_uring_setup(0x4af5, &(0x7f0000000180)={0x0, 0xdc4e, 0x8, 0x3, 0x1b1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r5 = socket(0x2c, 0x5, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r6, 0x3, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x6d7, 0xad, 0x20]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x164, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x89}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2943af8b}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1a6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffc1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x164}, 0x1, 0x0, 0x0, 0x890}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000840)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000780)="4181c06c0a3a0c4fee3f80c9f45e7daaf444a5ca7ab4626a35a47a1df2721ab960c001c43cec93b553940193ba7dd7611fdd4f7921b34cff7803f38b73f176fcc42e2bc7e19f204aa4e83403f690abaabc12fbdabbd35dee79c531adf8b8e36a3b0987e354c6fb93286ecb0e782db9a4d046560857375abddfe13b3a79cac9ee87d2f361386ea1a13ef6b9749d97868747003d1ab79d9527", 0x98, r4}, 0x68) syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), r2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000940), r5) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001080)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000b40)={0x4d0, r9, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5c0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xcb1, 0x34, 0x0, 0x8}, {0x0, 0x0, 0x57, 0x884}, {0x5, 0xcd, 0x0, 0xfffffffb}, {0x7f, 0x7f, 0xf8, 0xfffffffe}, {0x9, 0x1, 0x2, 0x8}, {0x5, 0x78, 0x1, 0x3}, {0x5, 0xc0, 0x81, 0xff}, {0x0, 0x6, 0x78, 0x720}, {0x1, 0x6, 0x4, 0x408}]}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0x6, 0x6, 0xff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x80}, 0x24000004) 12:18:14 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1000000, 0x0) waitid(0x2, 0x0, &(0x7f0000000100), 0x40000000, &(0x7f0000000180)) r0 = socket(0x2a, 0x3, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x50) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f00000003c0), 0x1, &(0x7f0000000440)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) waitid$P_PIDFD(0x3, r2, &(0x7f0000000540), 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r4, 0x900, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40014) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000700)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000740)='memory.oom.group\x00', 0x2, 0x0) accept4$inet(r0, 0x0, &(0x7f0000000780), 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000007c0)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40840) [ 122.473309] audit: type=1400 audit(1750076294.731:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:18:14 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000884) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', r0, 0x7, 0x80, 0x6, 0x8001, {{0x3a, 0x4, 0x0, 0x3, 0xe8, 0x66, 0x0, 0x1, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ssrr={0x89, 0x1f, 0x1a, [@loopback, @loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xa}, @local, @local, @local]}, @ssrr={0x89, 0xb, 0xbd, [@multicast2, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1a, 0x2, [{0x0, 0x2}, {0x7, 0x6, "11ea4e5a"}, {0x7, 0xc, "1107a641afce2e77fca9"}]}, @timestamp={0x44, 0xc, 0xdc, 0x0, 0x7, [0xe4a, 0x9]}, @cipso={0x86, 0x62, 0x3, [{0x0, 0xd, "49caeb8ec8c3498c214d6d"}, {0x5, 0x10, "82fe8e3dd2220e336769a6a1d22a"}, {0x2, 0x10, "93f7b6bf2d76a3ff29d2ca928b51"}, {0x2, 0x3, 'P'}, {0x2, 0x2}, {0x0, 0xb, "0d4704bf58e66ef85c"}, {0x1, 0x10, "30e5c54e84fea73887d1edc1cf19"}, {0x5, 0x9, "2369bd1688a11f"}, {0x5, 0x6, "90f32c2b"}]}, @timestamp={0x44, 0x1c, 0xff, 0x0, 0x5, [0x3, 0x0, 0x3225, 0x295, 0x1, 0x9]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', r1, 0x700, 0x20, 0xdb2, 0xff, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x24, 0xcb, 0x1, 0x6, [{@local}, {@remote, 0x3}, {@loopback, 0x3}, {@private=0xa010101, 0x1}]}, @rr={0x7, 0xf, 0x30, [@loopback, @private=0xa010100, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'gre0\x00', r3, 0x40, 0x7, 0x954, 0x8, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x64, 0x0, 0xfe, 0x29, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x14, 0x4e, 0x1, 0x2, [{@broadcast, 0x10000}, {@private=0xa010101, 0x7f}]}, @ssrr={0x89, 0x1f, 0xc2, [@dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x24}]}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'tunl0\x00', &(0x7f00000007c0)={'ip_vti0\x00', r3, 0x20, 0x40, 0x101, 0x6, {{0x10, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x1b, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ssrr={0x89, 0x2b, 0x37, [@broadcast, @multicast1, @empty, @broadcast, @multicast1, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @rand_addr=0x64010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'erspan0\x00', r1, 0x7800, 0x10, 0x2, 0x2, {{0xe, 0x4, 0x2, 0x3d, 0x38, 0x66, 0x0, 0x4, 0x4, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x17, 0xa, [@multicast2, @remote, @loopback, @multicast1, @multicast1]}, @timestamp={0x44, 0xc, 0x6c, 0x0, 0x6, [0x400, 0x1000]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'gre0\x00', &(0x7f0000000a00)={'syztnl1\x00', r0, 0x8, 0x700, 0x963, 0x800, {{0x22, 0x4, 0x2, 0x0, 0x88, 0x66, 0x0, 0xd7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x42}, {[@timestamp_prespec={0x44, 0x54, 0x93, 0x3, 0x7, [{@broadcast, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x1ff}, {@local, 0xa0000000}, {@broadcast, 0xffff51e8}, {@private=0xa010100}, {@multicast1, 0xfffffff8}, {@local, 0x80000001}, {@local, 0x3}, {@remote, 0x1}]}, @ssrr={0x89, 0x1f, 0xa6, [@broadcast, @broadcast, @rand_addr=0x64010102, @remote, @loopback, @rand_addr=0x64010101, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b80)={'erspan0\x00', &(0x7f0000000b00)={'ip_vti0\x00', r2, 0x1, 0x8, 0xffffffff, 0x0, {{0xd, 0x4, 0x2, 0x1b, 0x34, 0x68, 0x0, 0x1f, 0x29, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x17, 0x15, [@multicast2, @loopback, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0x5e, [@remote]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000640), 0xc, &(0x7f0000001180)={&(0x7f0000000bc0)={0x5b8, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5bec7687}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x63d6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x40, 0x7}, {0xa2, 0x40, 0xc1, 0x4}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x20000090}, 0x800) r13 = syz_io_uring_complete(0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r13, &(0x7f00000014c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001480)={&(0x7f0000001240)={0x20c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x44000}, 0x40488c0) r14 = syz_io_uring_complete(0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r14, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x88, r15, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "182cb03a854869b65199126a1205b61c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4734bac72b264d5d68edd353009c9ddc"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3897eee8929bbcf4eece734d585279d9"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "49c5b480eabcd4092c030664cb2e2e9a"}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x40001) 12:18:14 executing program 7: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/125, 0x7d, 0x0, &(0x7f0000000080)=""/132, 0x84}, &(0x7f0000000180)=0x40) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000200)=""/4096, 0x1000}) r0 = syz_io_uring_complete(0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001300)={&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001280)=""/90, 0x5a}) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000001340)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x4c, 0x0, 0x228, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1a3ca5e9d0fc4033}, 0x20008018) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000014c0), &(0x7f0000001500)=0x4) r1 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) syz_io_uring_setup(0x171a, &(0x7f0000001540)={0x0, 0xac6d, 0x8, 0x3, 0x299, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000015c0), &(0x7f0000001600)) r2 = shmget(0x2, 0x4000, 0x78000000, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000001640)=""/19) r3 = socket(0x8, 0x2, 0x7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000017c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/163, 0xa3, 0x1, &(0x7f0000001740)=""/73, 0x49}, &(0x7f0000001800)=0x40) r4 = syz_open_dev$usbmon(&(0x7f0000001840), 0x7, 0x10000) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000028c0)={&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/4096, 0x1000, 0x1, &(0x7f0000002880)=""/5, 0x5}, &(0x7f0000002900)=0x40) 12:18:15 executing program 6: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4050}, 0x400c0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r1, 0xd18, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r1, 0x1, 0x70bd28, 0xab, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) socketpair(0x11, 0x4, 0x178, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40044004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640), 0xd350) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000680)=0x4, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x202, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000700)) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x0, 0x1a0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4004080) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x20080, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r4) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000078500)={0x17, [], 0x8, "26e7a88e6456fb"}) [ 123.932038] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.936782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.940751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.941823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.948055] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.951155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.952015] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.952883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.954478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.955324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.958488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.962754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.966874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.968714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.969734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.972070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.974666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.979000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.007577] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.021394] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.022053] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.033392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.041396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.048830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.057708] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.063697] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.073927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.077781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.081046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.084481] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.087984] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.092767] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.104826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.109181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.121252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.341299] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.363065] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.385846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.421267] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.429864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 126.009335] Bluetooth: hci2: command tx timeout [ 126.073690] Bluetooth: hci3: command tx timeout [ 126.075346] Bluetooth: hci1: command tx timeout [ 126.076689] Bluetooth: hci0: command tx timeout [ 126.137707] Bluetooth: hci4: command tx timeout [ 126.201855] Bluetooth: hci6: command tx timeout [ 126.203366] Bluetooth: hci5: command tx timeout [ 126.521656] Bluetooth: hci7: command tx timeout [ 128.057564] Bluetooth: hci2: command tx timeout [ 128.120665] Bluetooth: hci3: command tx timeout [ 128.121166] Bluetooth: hci1: command tx timeout [ 128.123001] Bluetooth: hci0: command tx timeout [ 128.184860] Bluetooth: hci4: command tx timeout [ 128.251272] Bluetooth: hci5: command tx timeout [ 128.251793] Bluetooth: hci6: command tx timeout [ 128.568656] Bluetooth: hci7: command tx timeout [ 130.106798] Bluetooth: hci2: command tx timeout [ 130.168705] Bluetooth: hci3: command tx timeout [ 130.169201] Bluetooth: hci0: command tx timeout [ 130.170634] Bluetooth: hci1: command tx timeout [ 130.233906] Bluetooth: hci4: command tx timeout [ 130.296646] Bluetooth: hci5: command tx timeout [ 130.297167] Bluetooth: hci6: command tx timeout [ 130.616987] Bluetooth: hci7: command tx timeout [ 132.152627] Bluetooth: hci2: command tx timeout [ 132.217554] Bluetooth: hci0: command tx timeout [ 132.218049] Bluetooth: hci1: command tx timeout [ 132.218572] Bluetooth: hci3: command tx timeout [ 132.280598] Bluetooth: hci4: command tx timeout [ 132.346607] Bluetooth: hci6: command tx timeout [ 132.347098] Bluetooth: hci5: command tx timeout [ 132.665445] Bluetooth: hci7: command tx timeout [ 186.317645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.319326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.324194] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.334247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.340203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.499133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.502017] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.506800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.511015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.514493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.529158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.539070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.547240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.552032] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.570669] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.573332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.577450] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.594919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.623586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.636854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.656862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.659344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.659447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.662299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.667989] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.670096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.676813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.680479] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.683035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.688235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.700054] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.710655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 186.719388] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.723256] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.735752] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 186.743112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.760837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.763061] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 186.780418] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 186.788744] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 188.408912] Bluetooth: hci0: command tx timeout [ 188.536615] Bluetooth: hci1: command tx timeout [ 188.665731] Bluetooth: hci2: command tx timeout [ 188.728899] Bluetooth: hci3: command tx timeout [ 188.792720] Bluetooth: hci4: command tx timeout [ 188.792781] Bluetooth: hci6: command tx timeout [ 188.856819] Bluetooth: hci7: command tx timeout [ 188.856881] Bluetooth: hci5: command tx timeout [ 190.456852] Bluetooth: hci0: command tx timeout [ 190.584691] Bluetooth: hci1: command tx timeout [ 190.712673] Bluetooth: hci2: command tx timeout [ 190.777613] Bluetooth: hci3: command tx timeout [ 190.840716] Bluetooth: hci4: command tx timeout [ 190.842204] Bluetooth: hci6: command tx timeout [ 190.904694] Bluetooth: hci7: command tx timeout [ 190.906048] Bluetooth: hci5: command tx timeout [ 192.504621] Bluetooth: hci0: command tx timeout [ 192.632818] Bluetooth: hci1: command tx timeout [ 192.761636] Bluetooth: hci2: command tx timeout [ 192.824664] Bluetooth: hci3: command tx timeout [ 192.888661] Bluetooth: hci6: command tx timeout [ 192.888681] Bluetooth: hci4: command tx timeout [ 192.952738] Bluetooth: hci5: command tx timeout [ 192.953247] Bluetooth: hci7: command tx timeout [ 194.556558] Bluetooth: hci0: command tx timeout [ 194.680646] Bluetooth: hci1: command tx timeout [ 194.808688] Bluetooth: hci2: command tx timeout [ 194.874848] Bluetooth: hci3: command tx timeout [ 194.936682] Bluetooth: hci6: command tx timeout [ 194.936723] Bluetooth: hci4: command tx timeout [ 195.001674] Bluetooth: hci7: command tx timeout [ 195.002200] Bluetooth: hci5: command tx timeout [ 248.721933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.724224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.729690] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.731317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.735066] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.740010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.742897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.748033] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.765747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.768044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.912280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.916800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.930486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.939247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.943397] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.056032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.057968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.065824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.071440] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.074978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.087690] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.104874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.106426] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.113888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.116901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.122221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.130905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.149989] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.152078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.158790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.168096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.177941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.180284] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.188905] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.201902] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.223206] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.240704] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.248750] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.324231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.338111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.808873] Bluetooth: hci1: command tx timeout [ 250.810628] Bluetooth: hci0: command tx timeout [ 251.000662] Bluetooth: hci2: command tx timeout [ 251.133565] Bluetooth: hci3: command tx timeout [ 251.193565] Bluetooth: hci4: command tx timeout [ 251.256689] Bluetooth: hci6: command tx timeout [ 251.257333] Bluetooth: hci5: command tx timeout [ 251.448604] Bluetooth: hci7: command tx timeout [ 252.857010] Bluetooth: hci1: command tx timeout [ 252.858050] Bluetooth: hci0: command tx timeout [ 253.048926] Bluetooth: hci2: command tx timeout [ 253.178555] Bluetooth: hci3: command tx timeout [ 253.241247] Bluetooth: hci4: command tx timeout [ 253.304648] Bluetooth: hci5: command tx timeout [ 253.305129] Bluetooth: hci6: command tx timeout [ 253.496593] Bluetooth: hci7: command tx timeout [ 254.904894] Bluetooth: hci1: command tx timeout [ 254.905453] Bluetooth: hci0: command tx timeout [ 255.098552] Bluetooth: hci2: command tx timeout [ 255.224688] Bluetooth: hci3: command tx timeout [ 255.290004] Bluetooth: hci4: command tx timeout [ 255.352685] Bluetooth: hci6: command tx timeout [ 255.353178] Bluetooth: hci5: command tx timeout [ 255.545037] Bluetooth: hci7: command tx timeout [ 256.953757] Bluetooth: hci0: command tx timeout [ 256.954294] Bluetooth: hci1: command tx timeout [ 257.145612] Bluetooth: hci2: command tx timeout [ 257.272810] Bluetooth: hci3: command tx timeout [ 257.336587] Bluetooth: hci4: command tx timeout [ 257.400839] Bluetooth: hci5: command tx timeout [ 257.401350] Bluetooth: hci6: command tx timeout [ 257.592598] Bluetooth: hci7: command tx timeout [ 311.479331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.508653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.517930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.532199] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.546754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.563249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.566614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.568422] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.577463] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.583383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.827315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.831477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.836706] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.847928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.852903] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.885148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.907314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.917912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.951882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.961871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.969955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.986974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.994680] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.000814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.011210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.084624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.090844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.102238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.133220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.159229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.273856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.278678] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.281575] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.289939] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.294813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.452476] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.456746] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.459059] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.472285] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.476813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.593019] Bluetooth: hci0: command tx timeout [ 313.656787] Bluetooth: hci1: command tx timeout [ 313.912646] Bluetooth: hci2: command tx timeout [ 314.104703] Bluetooth: hci4: command tx timeout [ 314.106728] Bluetooth: hci3: command tx timeout [ 314.361047] Bluetooth: hci7: command tx timeout [ 314.367339] Bluetooth: hci5: command tx timeout [ 314.616638] Bluetooth: hci6: command tx timeout [ 315.640933] Bluetooth: hci0: command tx timeout [ 315.704945] Bluetooth: hci1: command tx timeout [ 315.960708] Bluetooth: hci2: command tx timeout [ 316.153591] Bluetooth: hci4: command tx timeout [ 316.155104] Bluetooth: hci3: command tx timeout [ 316.409024] Bluetooth: hci7: command tx timeout [ 316.410474] Bluetooth: hci5: command tx timeout [ 316.664656] Bluetooth: hci6: command tx timeout [ 317.688774] Bluetooth: hci0: command tx timeout [ 317.753556] Bluetooth: hci1: command tx timeout [ 318.009735] Bluetooth: hci2: command tx timeout [ 318.200869] Bluetooth: hci4: command tx timeout [ 318.202439] Bluetooth: hci3: command tx timeout [ 318.457771] Bluetooth: hci7: command tx timeout [ 318.459244] Bluetooth: hci5: command tx timeout [ 318.712713] Bluetooth: hci6: command tx timeout [ 319.736775] Bluetooth: hci0: command tx timeout [ 319.801725] Bluetooth: hci1: command tx timeout [ 320.056830] Bluetooth: hci2: command tx timeout [ 320.249072] Bluetooth: hci4: command tx timeout [ 320.250693] Bluetooth: hci3: command tx timeout [ 320.507544] Bluetooth: hci5: command tx timeout [ 320.508090] Bluetooth: hci7: command tx timeout [ 320.760826] Bluetooth: hci6: command tx timeout [ 374.291891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.298814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.309601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.316233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.320384] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.680632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.682437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.687911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.689185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.692895] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.695350] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.698434] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.701257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.703456] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.710394] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.766378] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.770752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.791857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.795068] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.796690] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.801455] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.807193] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.808587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.833863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.862709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.869064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.891211] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.898894] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.913931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.948407] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.950970] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.952716] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.956865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.967264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.971207] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.147259] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.158756] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.168780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.186305] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.204170] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.376741] Bluetooth: hci0: command tx timeout [ 376.761590] Bluetooth: hci1: command tx timeout [ 376.762611] Bluetooth: hci2: command tx timeout [ 376.888686] Bluetooth: hci4: command tx timeout [ 377.081000] Bluetooth: hci6: command tx timeout [ 377.082181] Bluetooth: hci5: command tx timeout [ 377.144817] Bluetooth: hci3: command tx timeout [ 377.528619] Bluetooth: hci7: command tx timeout [ 378.424596] Bluetooth: hci0: command tx timeout [ 378.808729] Bluetooth: hci2: command tx timeout [ 378.809285] Bluetooth: hci1: command tx timeout [ 378.936642] Bluetooth: hci4: command tx timeout [ 379.128969] Bluetooth: hci6: command tx timeout [ 379.129589] Bluetooth: hci5: command tx timeout [ 379.194828] Bluetooth: hci3: command tx timeout [ 379.576818] Bluetooth: hci7: command tx timeout [ 380.472606] Bluetooth: hci0: command tx timeout [ 380.856685] Bluetooth: hci2: command tx timeout [ 380.858426] Bluetooth: hci1: command tx timeout [ 380.985625] Bluetooth: hci4: command tx timeout [ 381.176947] Bluetooth: hci6: command tx timeout [ 381.178601] Bluetooth: hci5: command tx timeout [ 381.240624] Bluetooth: hci3: command tx timeout [ 381.624656] Bluetooth: hci7: command tx timeout [ 382.520647] Bluetooth: hci0: command tx timeout [ 382.904658] Bluetooth: hci2: command tx timeout [ 382.904898] Bluetooth: hci1: command tx timeout [ 383.032601] Bluetooth: hci4: command tx timeout [ 383.224745] Bluetooth: hci6: command tx timeout [ 383.227747] Bluetooth: hci5: command tx timeout [ 383.288611] Bluetooth: hci3: command tx timeout [ 383.672839] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 12:23:20 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88802c12fba0 RCX=ffff88802c12f60c RDX=0000000000000001 RSI=ffffffff85c1cc40 RDI=ffff88801867dd00 RBP=ffffffff85c1cc40 RSP=ffff88802c12f600 R8 =0000000000000001 R9 =ffff88802c12f6f8 R10=000000000003b4ed R11=00000000000231ac R12=ffffffff81354012 R13=0000000000000202 R14=ffff88801867d280 R15=0000000000000002 RIP=ffffffff8151acda RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff60aa14000 CR3=000000003056c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00007ffcd74436d0 RBX=0000000000000001 RCX=ffffffff8678ebbc RDX=dffffc0000000000 RSI=1ffff1100d9e1150 RDI=ffff8880159a7ff0 RBP=ffff88806cf08a80 RSP=ffff88806cf089b8 R8 =ffffffff8678ebc0 R9 =0000000000000000 R10=000000000003b4ed R11=00000000000002f3 R12=ffff88806cf08a88 R13=ffff88806cf08a70 R14=ffff8880159a7f58 R15=ffff88806cf08a28 RIP=ffffffff813549d9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f536166e540 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5361b36008 CR3=000000000cb76000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000