Warning: Permanently added '[localhost]:6373' (ECDSA) to the list of known hosts. 2025/06/16 23:09:00 fuzzer started 2025/06/16 23:09:01 dialing manager at localhost:32817 syzkaller login: [ 94.829354] cgroup: Unknown subsys name 'net' [ 94.962219] cgroup: Unknown subsys name 'cpuset' [ 95.005184] cgroup: Unknown subsys name 'rlimit' 2025/06/16 23:09:17 syscalls: 207 2025/06/16 23:09:17 code coverage: enabled 2025/06/16 23:09:17 comparison tracing: enabled 2025/06/16 23:09:17 extra coverage: enabled 2025/06/16 23:09:17 setuid sandbox: enabled 2025/06/16 23:09:17 namespace sandbox: enabled 2025/06/16 23:09:17 Android sandbox: enabled 2025/06/16 23:09:17 fault injection: enabled 2025/06/16 23:09:17 leak checking: enabled 2025/06/16 23:09:17 net packet injection: enabled 2025/06/16 23:09:17 net device setup: enabled 2025/06/16 23:09:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/16 23:09:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/16 23:09:17 USB emulation: enabled 2025/06/16 23:09:17 hci packet injection: enabled 2025/06/16 23:09:17 wifi device emulation: enabled 2025/06/16 23:09:17 802.15.4 emulation: enabled 2025/06/16 23:09:17 fetching corpus: 0, signal 0/0 (executing program) 2025/06/16 23:09:19 starting 8 fuzzer processes 23:09:19 executing program 0: clock_getres(0x0, &(0x7f0000000000)) futex(&(0x7f0000000040), 0x0, 0x2, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)=0x2, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f0000000180)) ioctl$CDROMREADCOOKED(0xffffffffffffffff, 0x5315, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) futex(&(0x7f0000000c80)=0x1, 0x2, 0x1, &(0x7f0000000cc0)={0x0, 0x3938700}, &(0x7f0000000d00), 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000d40)={0x7, 0x49d4, 0x3, 0x8, 0x8, 0x800, 0x7ff}, &(0x7f0000000d80)={0xbee, 0x0, 0x1f, 0x0, 0xe11, 0x100000001, 0x3, 0x5}, &(0x7f0000000dc0)={0x4e2, 0x2, 0xacf, 0x8, 0xbe4a, 0x234d, 0x0, 0x2}, &(0x7f0000000e40)={r4, r5+10000000}, &(0x7f0000000ec0)={&(0x7f0000000e80)={[0x7]}, 0x8}) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000f00)=""/94, 0x5e, 0x10043, &(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "76ded4c534edec1343f4bfcf75b13003"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}}, 0x40480d0) pselect6(0x40, &(0x7f0000001180)={0x9, 0x9, 0x6, 0x80000001, 0x4, 0x3ff, 0x4, 0x7f}, &(0x7f00000011c0)={0x1, 0xffffffffffff10b7, 0x100000001, 0x80000000, 0x1, 0x2, 0x39, 0x7}, &(0x7f0000001200)={0x3, 0x3, 0x3, 0x5, 0x6, 0x5, 0xdd4, 0x9}, &(0x7f0000001240), &(0x7f00000012c0)={&(0x7f0000001280)={[0x9]}, 0x8}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x68}}, 0x11) r7 = socket(0x38, 0x4, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r9 = openat$incfs(0xffffffffffffffff, &(0x7f00000014c0)='.pending_reads\x00', 0x0, 0x100) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001600)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0xa8, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000006}, 0x20000800) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000001680)) 23:09:19 executing program 1: r0 = socket(0x23, 0x80002, 0x9) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82411000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x811) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x438, 0x3f4, 0x130, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0x1c, [0x100, 0x2, 0x2, 0xffff8000, 0x4, 0xfbcd717, 0x101, 0xb1, 0x1ff, 0x8b2, 0x4, 0x400, 0x5, 0x1, 0x8e, 0x209, 0x7f, 0xd9, 0x2, 0x1, 0x8b38, 0x9, 0x200, 0x3, 0x6, 0x20, 0x3, 0x80000000, 0x2, 0x3, 0x4, 0x10000, 0x6, 0x10000, 0x3, 0x2, 0x3, 0x7, 0xbe, 0x3ff, 0x7, 0x5, 0x4, 0x5, 0x6, 0x81, 0x0, 0x1ff, 0xd9a, 0x6, 0x800, 0xd4, 0x992d, 0x0, 0x1000, 0x0, 0x9, 0x5, 0x656, 0x3, 0x1, 0x7fff, 0xe4bf, 0x3], [0xffff, 0x10001, 0x3, 0x7fff, 0x3, 0x5, 0x154, 0x2, 0xc7, 0x7fffffff, 0x7f, 0x81, 0x2, 0x68c, 0x6, 0xffffffe0, 0x8001, 0x1, 0x4, 0x2, 0x1, 0x401, 0x8, 0x2a, 0x80000001, 0x8, 0xff, 0xfffffeff, 0x8, 0xb9b1, 0x5, 0xfffff405, 0x9, 0x2, 0x4, 0x0, 0x1ada, 0xffff0001, 0x7, 0x8, 0x7ff, 0x10001, 0x2, 0x68, 0x1, 0x4, 0xfff, 0x1ff, 0x131, 0x401, 0x7, 0x0, 0x800, 0x101, 0x4, 0xe, 0x8000, 0x0, 0x4, 0xff, 0x81, 0x3b, 0x0, 0xffffffe0], [0x36, 0x3, 0x88fe, 0x2, 0x410, 0x4, 0x6, 0x96, 0x8f, 0x9, 0x8, 0x2, 0x7fff, 0x3, 0xfffffff8, 0x3f, 0xdff, 0x200, 0x7, 0x200, 0x6, 0x732, 0x80000000, 0x0, 0x0, 0x1000, 0x1, 0xffffffff, 0xffffffad, 0xfff, 0xc7ee, 0x6, 0x40, 0x1, 0x2, 0x6, 0x4, 0x8, 0x7, 0x9, 0xa7b0, 0x44, 0xfff, 0x3, 0x1, 0xe3, 0x10000, 0x4, 0x97, 0x0, 0x0, 0x5, 0x8, 0x9, 0x46, 0x2, 0x9, 0x7, 0xcd, 0x7, 0x686, 0x5, 0x9, 0xfffffffb], [0x0, 0x81, 0x1, 0x9, 0xee, 0x895a, 0x350, 0xde3b, 0x8, 0x9, 0x9, 0x1fa, 0x400, 0x7, 0x9, 0x1, 0x2, 0x6, 0x7, 0x9, 0x72fd, 0x7, 0xffffff01, 0x4, 0x0, 0x6, 0x401, 0x2, 0x6, 0x6, 0x80000000, 0x10000, 0xfff, 0x3, 0x200, 0xffffffff, 0x8, 0x2b, 0xfff, 0x0, 0x20, 0x2, 0x9, 0x3, 0x152, 0x15a7, 0xffffff7f, 0xc01e, 0xffffffe8, 0x7, 0x81d6, 0x1, 0x7, 0x5, 0xffff, 0x7, 0x64, 0x1, 0x0, 0x1000, 0x7, 0x8, 0x8000, 0x7], 0x18, ['batadv\x00', '[[^+:\\{^\x00', '-\x00', '*!$*!\x00']}, [""]}, 0x438}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) r4 = socket$inet(0x2, 0x80002, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) r6 = accept$inet(r4, &(0x7f0000000880)={0x2, 0x0, @broadcast}, &(0x7f00000008c0)=0x10) r7 = accept$inet(r6, &(0x7f0000000900)={0x2, 0x0, @multicast2}, &(0x7f0000000940)=0x10) r8 = syz_open_dev$vcsn(&(0x7f0000000980), 0x3, 0x800) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000b80)={'ip_vti0\x00', &(0x7f0000000a40)={'syztnl0\x00', r5, 0x7, 0x20, 0x6, 0x4, {{0x3b, 0x4, 0x3, 0x8, 0xec, 0x66, 0x0, 0x72, 0x29, 0x0, @empty, @private=0xa010100, {[@end, @cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "df82f2da2fa2e03a752ed0d38f"}]}, @rr={0x7, 0xf, 0x3d, [@remote, @multicast2, @local]}, @end, @lsrr={0x83, 0x1b, 0x37, [@empty, @multicast2, @loopback, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xb0, [@remote]}, @rr={0x7, 0x23, 0x49, [@multicast1, @local, @local, @loopback, @local, @broadcast, @remote, @rand_addr=0x64010102]}, @cipso={0x86, 0x63, 0x3, [{0x1, 0xb, "3281e6090a7305b90c"}, {0x6, 0xb, "49e931668073097643"}, {0x2, 0xa, "672756bc9e43a50b"}, {0x5, 0x11, "9566ba1bb3030dc4dd3715b568c31e"}, {0x5, 0x6, "3719a24b"}, {0x6, 0xb, "bb1601d5f2200a3172"}, {0x1, 0x6, "879b3404"}, {0x1, 0x4, "b399"}, {0x2, 0x11, "585c72fd6f901fbc816afe4fe8536e"}]}, @generic={0x86, 0x4, "be80"}]}}}}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000c80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x54, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1a3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040010}, 0x4800) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000d00)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @l2tp={0x2, 0x0, @empty, 0x4}, @nfc={0x27, 0x0, 0x2, 0x3}, 0x21d, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000cc0)='lo\x00', 0x3f, 0xe5, 0x5}) r11 = syz_mount_image$nfs(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x5, 0x1, &(0x7f0000000f00)=[{&(0x7f0000000e00)="298a7ea07d34b9303a9cc1d7b936833bc9de41d914ede3cf67aafd7a12a87de220d76e19ba8e3743a84f56238d6fcd074ad012b63488822c294a938c871b74e6603cac307dbc388613033bf979b68890054e75b7e9867450c70230e9a9ceda98663e967d9dde110b51f1311ea059d340fe262f5253d743e847d0095b187fc5e2b3dd9840e63f9d7acd8fdd6a12d69f41682983f0bd5ba0fde9c49cd5c004b242aa5d93d224a8e1baa68bd34064f3191f4cd29b58f74240fbfeb4c155a916fe0eecada511e6064180ea148e501fe4874660a7b31b96887e91", 0xd8, 0x622b}], 0xab0c24090c3d3a98, &(0x7f0000000f40)={[{}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x12}}, {@seclabel}, {@uid_gt}, {@uid_gt={'uid>', 0xee00}}, {@appraise_type}]}) faccessat(r11, &(0x7f0000001000)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000001040)={{0x2, @remote, 0x4e23, 0x1, 'lc\x00', 0x31, 0x5, 0x45}, {@multicast2, 0x4e21, 0x4, 0x8, 0x1000, 0x8}}, 0x44) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x9, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x2008000) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x2102002}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x38, 0x3e9, 0x400, 0x70bd26, 0x25dfdbfd, {0xc, 0x0, 0x0, 0xffffffffffffffff, 0x30000000, 0x2, 0x7da33e4f, 0x3, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x84) [ 113.078067] audit: type=1400 audit(1750115359.727:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:09:19 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x24040884) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000140), 0x6e, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/202, 0xca}, {&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000380)=""/14, 0xe}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001400)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x22) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x48b}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200008d1) getuid() r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x89}, 0x801) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000001800)={0x1f, 0x7, 0x1, 0x0, 0x0, 0x1}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000022c0), r4) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x14, r9, 0x4, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f00000023c0)=@physical={0x0, 0x2, [{0x7, 0xb, 0x2, 0x5, 0x1, 0x1, 0x3, 0xc, 0x3, 0x1, 0x400, 0x0, 0x1}, {0x7, 0xd, 0x4, 0x3, 0x0, 0x1, 0x1, 0x4, 0x1, 0x0, 0xf02, 0x1, 0xa5}, {0x9, 0x9, 0x0, 0x1, 0x7, 0x1, 0x1, 0x5, 0x6, 0x0, 0x8000, 0x2, 0x7fff}, {0x3, 0x8, 0xa, 0x2, 0x8, 0x0, 0x1, 0x4, 0x9, 0x0, 0x4, 0xa5f2, 0x9}]}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r10, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002d40), r8) r11 = accept4$unix(r2, &(0x7f0000002d80)=@abs, &(0x7f0000002e00)=0x6e, 0x800) recvmsg$unix(r11, &(0x7f0000002fc0)={&(0x7f0000002e40), 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002ec0)=""/6, 0x6}], 0x1, &(0x7f0000002f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}, 0x10162) r12 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000003000), 0x305280, 0x0) ioctl$CDROMSTOP(r12, 0x5307) recvmsg$unix(r5, &(0x7f0000004580)={&(0x7f0000003040), 0x6e, &(0x7f00000044c0)=[{&(0x7f00000030c0)=""/29, 0x1d}, {&(0x7f0000003100)=""/111, 0x6f}, {&(0x7f0000003180)=""/43, 0x2b}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/40, 0x28}, {&(0x7f0000004200)=""/69, 0x45}, {&(0x7f0000004280)=""/140, 0x8c}, {&(0x7f0000004340)=""/220, 0xdc}, {&(0x7f0000004440)=""/103, 0x67}], 0x9}, 0x141) 23:09:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x7fff, 0x3]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffc0}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x40, 0x57) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}}, 0x80) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r3, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0xc8042) r5 = socket(0x9, 0x80000, 0x8000) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x8c0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}}, 0x4) r6 = syz_open_dev$vcsn(&(0x7f0000000840), 0x3, 0xa200) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc452}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0xcd5, 0x6]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000052}, 0x404c000) 23:09:19 executing program 4: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/103, 0x67, 0x20, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x2, 0x1, 0x81}, {0x8000, 0x8, 0xac, 0x9}, {0x9, 0xec, 0x29, 0x8}, {0xa3c, 0x1, 0x1, 0xfde}, {0x400, 0x81, 0x8c, 0x9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x0, 0x7, 0x0, 0xc9b}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd49e}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000440)='.pending_reads\x00', 0x1, 0x18) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x60004008) r5 = socket(0x27, 0x6, 0x4) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x302}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x814, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000940)={r6, 0xfb7c, 0x1000}) syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r5) epoll_create1(0x0) openat$incfs(r3, &(0x7f00000009c0)='.pending_reads\x00', 0x90000, 0x2) 23:09:19 executing program 5: ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000000)=@type=0x7) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000000040)={@lba=0xfff}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x4, &(0x7f00000011c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x41) ioctl$CDROMSETSPINDOWN(r6, 0x531e, &(0x7f0000001300)=0xe) ioctl$DVD_READ_STRUCT(r9, 0x5390, &(0x7f0000001340)=@physical={0x0, 0x0, [{0x0, 0x6, 0xd, 0x2, 0x1, 0x0, 0x0, 0x2, 0xb, 0x0, 0x6, 0xc098, 0x2}, {0x3, 0x9, 0xa, 0x5, 0x3, 0x1, 0x3, 0xb, 0x1, 0x1, 0x7ff, 0x2, 0xa51}, {0x7, 0x6, 0x1, 0x3, 0x9, 0x0, 0x1, 0x3, 0x8, 0x1, 0x9, 0xc563, 0x1202}, {0x8, 0x6, 0x4, 0x1, 0xd, 0x0, 0x2, 0x7, 0x7, 0x1, 0x1, 0xad, 0x440}]}) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000001b80)=@physical={0x0, 0x2, [{0x1, 0xd, 0x5, 0x7, 0x1, 0x0, 0x3, 0x9, 0x0, 0x0, 0x2, 0x135, 0x1}, {0x4, 0x7, 0x7, 0x0, 0x7, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x2}, {0x9, 0x0, 0x7, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x81, 0x7, 0x530}, {0x7, 0x8, 0x1, 0x9, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x60000, 0x7ff, 0x8}]}) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000002540)={"973f15a323a2d0ab671a8b1d", &(0x7f00000023c0)="8c780670010322c97efae019e4c0294cc7d384d73ebf721bc4371d04676ff028726abfe421d4ae7250db4161fc1fed8df1ffca3529e5ab9742a53a6521a287072b8553c213e809c03f3c589025a0d0fa2ce837e2225a680d6b20c02c746a30f2ed5c20a2b4cf226c566440662be20b2c6d0a7c7efa78b356e1cc713ab373e734b840d7ebd214b22c4f1c2dee035d391e75a16627f0c15568109a7d231fb47e64a237e35755856ba9545586331a0303a8aa66edd37242af04eeed8e93bad53f81b838238442b199fd8a864dcfb1a1072f7173e2b6fc844db90c7a00a10a94f1aa36e3dc6f328e325d0d969ec1", 0xec, 0x80000000, &(0x7f00000024c0)={0x5, 0x0, 0x7a, 0x1, 0x0, 0x1, 0x0, "fb2f0805", 0x1f, "158fcbd5", 0x2, 0x0, 0x2, "5ca514", "86b939b3ba593a72c2a08235cab1a790aed1b3e04cf4a691ed98543259b3b93c06ca342f574028fb22e720acd83d"}, 0x0, 0x9, 0xffff3636, &(0x7f0000002500)}) r10 = eventfd2(0x5, 0x1) kcmp$KCMP_EPOLL_TFD(r5, r0, 0x7, r7, &(0x7f0000002580)={r2, r10, 0xb3}) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f00000025c0)={0x2, 0xa2}) ioctl$CDROMPLAYMSF(r8, 0x5303, &(0x7f0000002600)={0x5, 0x8, 0x9, 0xfe, 0x9, 0x9}) r11 = syz_open_dev$vcsn(&(0x7f0000002980), 0xb4, 0x10000) ioctl$CDROM_DISC_STATUS(r11, 0x5327) r12 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r12, &(0x7f00000029c0)="b9e4aab8329084349173a67717472e76f8945375539bfc7fd61bd2c39160fc1ccef8d80901b625586d8252f8", 0x2c, 0x0, 0x0, 0x0) getdents64(r9, &(0x7f0000002a00)=""/228, 0xe4) ioctl$CDROMSTOP(r4, 0x5307) ioctl$CDROMREADTOCHDR(r2, 0x5305, &(0x7f0000002b00)={0xff, 0x3}) ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000002b80)={0x0, 0x3, 0x0, 0x0, 0x5, 0x4, @lba=0x10001, @msf={0x6, 0x81, 0x9}}) 23:09:19 executing program 6: execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000040)='^\x00', &(0x7f0000000080)='\x00', &(0x7f00000000c0)=',}\xca-{&.{]@\x00', &(0x7f0000000100)='!\x00', &(0x7f0000000140)='-\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='%&-*\x00'], &(0x7f0000000440)=[&(0x7f0000000280)='\'.(}+\x00', &(0x7f00000002c0)=':\\\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='!\\)*$+,:\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='{(\x00', &(0x7f0000000400)='#:\'**$\x00'], 0x1000) symlinkat(&(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000500), 0x7ff, 0x40001) fchmodat(r0, &(0x7f0000000540)='./file0\x00', 0x0) r1 = accept4$unix(r0, &(0x7f0000000580), &(0x7f0000000600)=0x6e, 0x80000) recvmsg$unix(r1, &(0x7f0000001980)={&(0x7f0000000640), 0x6e, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/233, 0xe9}, {&(0x7f00000017c0)=""/105, 0x69}], 0x3, &(0x7f0000001880)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x2) getdents64(r0, &(0x7f00000019c0), 0x0) getsockname$unix(r4, &(0x7f0000001a00), &(0x7f0000001a80)=0x6e) recvfrom$unix(r5, &(0x7f0000001ac0)=""/252, 0xfc, 0x2000, &(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e) recvfrom$unix(0xffffffffffffffff, &(0x7f0000001c40)=""/85, 0x55, 0x2122, &(0x7f0000001cc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r6 = syz_open_dev$vcsn(&(0x7f0000001d40), 0x80000001, 0x400) recvmsg$unix(r6, &(0x7f0000002080)={&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/96, 0x60}, {&(0x7f0000001e80)=""/66, 0x42}, {&(0x7f0000001f00)=""/1, 0x1}], 0x3, &(0x7f0000001f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x40000000) accept4$unix(r2, 0x0, &(0x7f00000020c0), 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x20080, 0x81) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, 0x0, 0x210, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20000010) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000002240)) accept4$unix(r1, &(0x7f0000002280), &(0x7f0000002300)=0x6e, 0x800) r8 = syz_open_dev$vcsn(&(0x7f0000002380), 0x3ff80000000000, 0x2184c0) linkat(r3, &(0x7f0000002340)='./file0\x00', r8, &(0x7f00000023c0)='./file0\x00', 0x400) 23:09:19 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x200, 0x70bd29, 0x3fcb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f00000002c0)={@id={0x2, 0x0, @a}}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000340), 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x46}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x8) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x24000895) r6 = syz_open_dev$vcsn(&(0x7f0000000740), 0xfffffffffffffff9, 0x585000) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) fchownat(r6, &(0x7f0000000780)='./file0\x00', 0xee01, r7, 0x100) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000008c0), r5) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8054}, 0x64800) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x840) [ 114.350762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.354020] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.355131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.358241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.361889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.549997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.557738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.558984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.561982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.563014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.564232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.571979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.575205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.599962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.602094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.622222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.625685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.627756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.636257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.639635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.648545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.659795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.663957] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.664787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.674543] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.692439] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.697348] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.698894] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.701122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.703197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.707565] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.724118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.731361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.751246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.754415] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.756125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.756154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.760293] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.766036] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.770403] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.382301] Bluetooth: hci0: command tx timeout [ 116.639256] Bluetooth: hci2: command tx timeout [ 116.639922] Bluetooth: hci1: command tx timeout [ 116.765862] Bluetooth: hci4: command tx timeout [ 116.766658] Bluetooth: hci3: command tx timeout [ 116.830922] Bluetooth: hci5: command tx timeout [ 116.831478] Bluetooth: hci7: command tx timeout [ 116.832024] Bluetooth: hci6: command tx timeout [ 118.429832] Bluetooth: hci0: command tx timeout [ 118.686074] Bluetooth: hci1: command tx timeout [ 118.686526] Bluetooth: hci2: command tx timeout [ 118.814300] Bluetooth: hci3: command tx timeout [ 118.814951] Bluetooth: hci4: command tx timeout [ 118.879981] Bluetooth: hci6: command tx timeout [ 118.880402] Bluetooth: hci7: command tx timeout [ 118.881059] Bluetooth: hci5: command tx timeout [ 120.480945] Bluetooth: hci0: command tx timeout [ 120.733806] Bluetooth: hci2: command tx timeout [ 120.734282] Bluetooth: hci1: command tx timeout [ 120.863230] Bluetooth: hci3: command tx timeout [ 120.863810] Bluetooth: hci4: command tx timeout [ 120.926145] Bluetooth: hci7: command tx timeout [ 120.926570] Bluetooth: hci5: command tx timeout [ 120.927872] Bluetooth: hci6: command tx timeout [ 122.525790] Bluetooth: hci0: command tx timeout [ 122.781958] Bluetooth: hci2: command tx timeout [ 122.782407] Bluetooth: hci1: command tx timeout [ 122.909786] Bluetooth: hci3: command tx timeout [ 122.910225] Bluetooth: hci4: command tx timeout [ 122.973776] Bluetooth: hci7: command tx timeout [ 122.974990] Bluetooth: hci5: command tx timeout [ 122.975412] Bluetooth: hci6: command tx timeout [ 177.406758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.409377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.413966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.420311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.426293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.549188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.567359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.575137] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.580391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.583426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.590934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.599579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.606519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.606540] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.618304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.627242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.632301] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.636624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.656035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.664245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.666202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.733300] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.739307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.764050] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.769185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.773327] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.779039] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.782980] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.790524] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.791399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.804096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.822783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.828139] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.833253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.846093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.846512] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.857400] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.863104] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.888193] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.910538] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.486343] Bluetooth: hci0: command tx timeout [ 179.742915] Bluetooth: hci2: command tx timeout [ 179.744152] Bluetooth: hci1: command tx timeout [ 179.806868] Bluetooth: hci3: command tx timeout [ 179.871098] Bluetooth: hci4: command tx timeout [ 179.998811] Bluetooth: hci6: command tx timeout [ 180.000071] Bluetooth: hci5: command tx timeout [ 180.001025] Bluetooth: hci7: command tx timeout [ 181.534743] Bluetooth: hci0: command tx timeout [ 181.790255] Bluetooth: hci2: command tx timeout [ 181.790915] Bluetooth: hci1: command tx timeout [ 181.854902] Bluetooth: hci3: command tx timeout [ 181.917831] Bluetooth: hci4: command tx timeout [ 182.046089] Bluetooth: hci6: command tx timeout [ 182.046594] Bluetooth: hci7: command tx timeout [ 182.046778] Bluetooth: hci5: command tx timeout [ 183.581770] Bluetooth: hci0: command tx timeout [ 183.837951] Bluetooth: hci2: command tx timeout [ 183.838467] Bluetooth: hci1: command tx timeout [ 183.901802] Bluetooth: hci3: command tx timeout [ 183.965801] Bluetooth: hci4: command tx timeout [ 184.094663] Bluetooth: hci5: command tx timeout [ 184.095202] Bluetooth: hci6: command tx timeout [ 184.095664] Bluetooth: hci7: command tx timeout [ 185.630808] Bluetooth: hci0: command tx timeout [ 185.885802] Bluetooth: hci1: command tx timeout [ 185.886329] Bluetooth: hci2: command tx timeout [ 185.950756] Bluetooth: hci3: command tx timeout [ 186.014006] Bluetooth: hci4: command tx timeout [ 186.141849] Bluetooth: hci7: command tx timeout [ 186.142364] Bluetooth: hci6: command tx timeout [ 186.143225] Bluetooth: hci5: command tx timeout [ 239.852727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.855998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.857330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.863390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.865142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.045158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.057498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.060934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.065514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.070882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.076227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.077492] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.102954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.105234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.108384] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.131548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.159019] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.166210] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.185488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.190159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.196042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.199338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.216463] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.244680] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.263766] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.265843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.277395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.278450] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.292944] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.301558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.308941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.377395] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.381154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.388154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.398632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.406500] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.406984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.420070] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.479943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.514635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.885964] Bluetooth: hci0: command tx timeout [ 242.141897] Bluetooth: hci2: command tx timeout [ 242.143132] Bluetooth: hci1: command tx timeout [ 242.271880] Bluetooth: hci3: command tx timeout [ 242.333814] Bluetooth: hci4: command tx timeout [ 242.398370] Bluetooth: hci5: command tx timeout [ 242.525852] Bluetooth: hci6: command tx timeout [ 242.653912] Bluetooth: hci7: command tx timeout [ 243.934082] Bluetooth: hci0: command tx timeout [ 244.190840] Bluetooth: hci2: command tx timeout [ 244.191335] Bluetooth: hci1: command tx timeout [ 244.317761] Bluetooth: hci3: command tx timeout [ 244.381882] Bluetooth: hci4: command tx timeout [ 244.445774] Bluetooth: hci5: command tx timeout [ 244.573820] Bluetooth: hci6: command tx timeout [ 244.701788] Bluetooth: hci7: command tx timeout [ 245.981790] Bluetooth: hci0: command tx timeout [ 246.237818] Bluetooth: hci1: command tx timeout [ 246.238322] Bluetooth: hci2: command tx timeout [ 246.365766] Bluetooth: hci3: command tx timeout [ 246.429803] Bluetooth: hci4: command tx timeout [ 246.493800] Bluetooth: hci5: command tx timeout [ 246.622056] Bluetooth: hci6: command tx timeout [ 246.751771] Bluetooth: hci7: command tx timeout [ 248.030346] Bluetooth: hci0: command tx timeout [ 248.285927] Bluetooth: hci1: command tx timeout [ 248.286987] Bluetooth: hci2: command tx timeout [ 248.415467] Bluetooth: hci3: command tx timeout [ 248.477815] Bluetooth: hci4: command tx timeout [ 248.541807] Bluetooth: hci5: command tx timeout [ 248.669898] Bluetooth: hci6: command tx timeout [ 248.798327] Bluetooth: hci7: command tx timeout [ 302.202295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.206599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.212942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.221645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.227432] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.324832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.336457] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.341381] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.342016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.348426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.352152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.355548] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.358934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.390159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.405287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.454315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.482354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.487215] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.514246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.551550] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.641346] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.644456] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.664281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.718343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.740276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.777236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.782029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.785619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.789872] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.796121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.798090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.811727] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.822179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.825527] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.857191] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.867621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.882342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.895307] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.910289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.912311] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.287853] Bluetooth: hci0: command tx timeout [ 304.413900] Bluetooth: hci1: command tx timeout [ 304.480741] Bluetooth: hci2: command tx timeout [ 304.670928] Bluetooth: hci3: command tx timeout [ 304.926828] Bluetooth: hci4: command tx timeout [ 304.990634] Bluetooth: hci6: command tx timeout [ 305.053908] Bluetooth: hci7: command tx timeout [ 305.055266] Bluetooth: hci5: command tx timeout [ 306.333938] Bluetooth: hci0: command tx timeout [ 306.461759] Bluetooth: hci1: command tx timeout [ 306.525807] Bluetooth: hci2: command tx timeout [ 306.717797] Bluetooth: hci3: command tx timeout [ 306.973788] Bluetooth: hci4: command tx timeout [ 307.038004] Bluetooth: hci6: command tx timeout [ 307.103043] Bluetooth: hci5: command tx timeout [ 307.103515] Bluetooth: hci7: command tx timeout [ 308.382401] Bluetooth: hci0: command tx timeout [ 308.509780] Bluetooth: hci1: command tx timeout [ 308.573848] Bluetooth: hci2: command tx timeout [ 308.765757] Bluetooth: hci3: command tx timeout [ 309.022076] Bluetooth: hci4: command tx timeout [ 309.085763] Bluetooth: hci6: command tx timeout [ 309.150009] Bluetooth: hci5: command tx timeout [ 309.150327] Bluetooth: hci7: command tx timeout [ 310.429803] Bluetooth: hci0: command tx timeout [ 310.557953] Bluetooth: hci1: command tx timeout [ 310.622111] Bluetooth: hci2: command tx timeout [ 310.813783] Bluetooth: hci3: command tx timeout [ 311.069782] Bluetooth: hci4: command tx timeout [ 311.134468] Bluetooth: hci6: command tx timeout [ 311.198183] Bluetooth: hci5: command tx timeout [ 311.198212] Bluetooth: hci7: command tx timeout [ 364.724453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.731291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.735084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.737193] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.743218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.747128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.754661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.757074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.770663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.776967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.865893] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.872656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.876193] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.885517] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.891276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.935077] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.993859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.007006] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.013263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.016962] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.024950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.024959] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.042105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.048905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.058317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.064296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.073019] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.076525] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.082270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.090505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.097004] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.119189] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.126345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.128638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.145277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.163786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.179505] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.193763] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.213988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.265667] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.814098] Bluetooth: hci0: command tx timeout [ 366.815447] Bluetooth: hci1: command tx timeout [ 367.008739] Bluetooth: hci2: command tx timeout [ 367.262017] Bluetooth: hci6: command tx timeout [ 367.325821] Bluetooth: hci4: command tx timeout [ 367.453832] Bluetooth: hci3: command tx timeout [ 367.517829] Bluetooth: hci7: command tx timeout [ 367.518563] Bluetooth: hci5: command tx timeout [ 368.863758] Bluetooth: hci1: command tx timeout [ 368.864249] Bluetooth: hci0: command tx timeout [ 369.054056] Bluetooth: hci2: command tx timeout [ 369.310055] Bluetooth: hci6: command tx timeout [ 369.374042] Bluetooth: hci4: command tx timeout [ 369.501815] Bluetooth: hci3: command tx timeout [ 369.565843] Bluetooth: hci7: command tx timeout [ 369.566328] Bluetooth: hci5: command tx timeout [ 370.909809] Bluetooth: hci1: command tx timeout [ 370.910295] Bluetooth: hci0: command tx timeout [ 371.103835] Bluetooth: hci2: command tx timeout [ 371.358980] Bluetooth: hci6: command tx timeout [ 371.421775] Bluetooth: hci4: command tx timeout [ 371.550068] Bluetooth: hci3: command tx timeout [ 371.613784] Bluetooth: hci7: command tx timeout [ 371.614254] Bluetooth: hci5: command tx timeout [ 372.957989] Bluetooth: hci0: command tx timeout [ 372.958458] Bluetooth: hci1: command tx timeout [ 373.150069] Bluetooth: hci2: command tx timeout [ 373.406023] Bluetooth: hci6: command tx timeout [ 373.470923] Bluetooth: hci4: command tx timeout [ 373.597786] Bluetooth: hci3: command tx timeout [ 373.662379] Bluetooth: hci5: command tx timeout [ 373.662886] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:14:29 Registers: info registers vcpu 0 RAX=000000008b4f5991 RBX=ffff888034953700 RCX=00000000fd3800be RDX=00000000fd3800be RSI=00000000fbc386a6 RDI=00000000dab44b10 RBP=ffff888034954158 RSP=ffff88802e167160 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888034954180 R13=00000000f8fb8764 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff815192ce RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0d4192d540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0d419fe710 CR3=00000000357d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff817bb6b6 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf31850 RBP=0000000000000000 RSP=ffff888032ac76e8 R8 =0000000000000000 R9 =fffffbfff0c828ca R10=ffffffff86414657 R11=ffff88806cf37058 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff817bb6c5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f41dc749028 CR3=0000000027d90000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000