Warning: Permanently added '[localhost]:39642' (ECDSA) to the list of known hosts. 2025/06/23 04:49:16 fuzzer started 2025/06/23 04:49:17 dialing manager at localhost:33119 syzkaller login: [ 101.714348] cgroup: Unknown subsys name 'net' [ 101.866041] cgroup: Unknown subsys name 'cpuset' [ 101.909243] cgroup: Unknown subsys name 'rlimit' 2025/06/23 04:49:40 syscalls: 212 2025/06/23 04:49:40 code coverage: enabled 2025/06/23 04:49:40 comparison tracing: enabled 2025/06/23 04:49:40 extra coverage: enabled 2025/06/23 04:49:40 setuid sandbox: enabled 2025/06/23 04:49:40 namespace sandbox: enabled 2025/06/23 04:49:40 Android sandbox: enabled 2025/06/23 04:49:40 fault injection: enabled 2025/06/23 04:49:40 leak checking: enabled 2025/06/23 04:49:40 net packet injection: enabled 2025/06/23 04:49:40 net device setup: enabled 2025/06/23 04:49:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/23 04:49:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/23 04:49:40 USB emulation: enabled 2025/06/23 04:49:40 hci packet injection: enabled 2025/06/23 04:49:40 wifi device emulation: enabled 2025/06/23 04:49:40 802.15.4 emulation: enabled 2025/06/23 04:49:40 fetching corpus: 0, signal 0/0 (executing program) 2025/06/23 04:49:42 starting 8 fuzzer processes 04:49:42 executing program 0: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'freezer'}, {0x2d, 'hugetlb'}, {0x2b, 'net'}]}, 0x17) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81a140}, 0xc, &(0x7f0000000080)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x48041}, 0x40000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2b, 'blkio'}]}, 0x7) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x60}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000044) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4008008) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x80, 0x400, {{0x2f, 0x4, 0x3, 0x7, 0xbc, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @empty, {[@cipso={0x86, 0x3b, 0x2, [{0x2, 0x2}, {0x7, 0xa, "a7cc40ec07956e58"}, {0x0, 0x2}, {0xeef0998c152d5c40, 0x10, "41aadc5a49e7ad0403c1f8060ee1"}, {0x0, 0xd, "d01b96e2b42585c346f15f"}, {0x1, 0x5, "042365"}, {0x2, 0x5, "041068"}]}, @timestamp={0x44, 0x4, 0x34, 0x0, 0x3}, @cipso={0x86, 0x15, 0x3, [{0x0, 0xf, "759a5fa777755e869fab3c2d86"}]}, @generic={0x94, 0xd, "68e500124929893ee15763"}, @lsrr={0x83, 0x17, 0x52, [@private=0xa010102, @private=0xa010102, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x12}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xbc, 0x0, 0xb, [0x1, 0xed, 0x0]}, @ssrr={0x89, 0x1b, 0x9, [@private=0xa010102, @broadcast, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r2, 0x4, 0x40, 0x1, 0x8, 0x0, @private2, @loopback, 0x700, 0x8018, 0x1, 0x1}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9da}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)={[{0x2d, 'cpu'}]}, 0x5) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x0, 0x0) socketpair(0x1, 0x4, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r5) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x0, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, &(0x7f00000009c0)="96848ae0e748d536cf81ec2e4469a1e94fe28f3ecfa57bb423148968445091a84dfe52ae60344661658f5f7e48572fc4cbefd0847b924d91b18d4e1b79f8e59928ad9311282413a111d898b1eda0b19fee0e017ec6212e96a7b8056c63d6a0bbbbf25be7fc21ae690b11b8ae4729f5edeb70c04877563bf7e3cc350d914bf3e3177253f075a9ccc583fbd6e35527a054d4c9eb5eb46969ea78d82b1982f649f89280446dd34e5289defae6e547", 0xad) 04:49:42 executing program 2: sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x214, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x2e, 0x2a, [@supported_rates, @challenge={0x10, 0x1, 0xa9}, @supported_rates={0x1, 0x7, [{0x3}, {0x24}, {0x4, 0x1}, {0x6c, 0x1}, {0x9}, {0x36, 0x1}, {0x3, 0x1}]}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}, @NL80211_ATTR_IE={0x136, 0x2a, [@dsss={0x3, 0x1, 0xae}, @preq={0x82, 0x3b, @not_ext={{0x0, 0x0, 0x1}, 0x0, 0x54, 0x9, @broadcast, 0x6, "", 0x8, 0x7fffffff, 0x3, [{{}, @device_b, 0x1}, {{}, @broadcast, 0xdf23}, {{0x1}, @device_b, 0x3}]}}, @cf={0x4, 0x6, {0x81, 0x4, 0x6c55, 0x2b}}, @fast_bss_trans={0x37, 0xe0, {0x20, 0x6, "7659a00ffc07fe30e0b382ab5bc7f78d", "36d2cd586e269797666f1ca1ff628c7f6011568695909e3347123b2263120933", "a5cbf03274a7a2c605b7f98c408ab91167ea2d2ec10f6f3419148850057141f2", [{0x1, 0x1e, "94025a5caf44fb55086bb48f35ff4809e12e73d0286d25794e6fcd48d124"}, {0x1, 0x16, "79994214e9fc0695b2860a5fd291ed8f81157d93ffb3"}, {0x3, 0x21, "d5b9ce494f40bce6c8c853e480a71f01f77351af985793293ca93362998de21cca"}, {0x4, 0x1a, "99b75fcd24715ce1700cfdd8df5a09a8f7e87e11a596826707d4"}, {0x3, 0x13, "a9952be1e9d81d4d7bf27b0ebb159123b54407"}, {0x4}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x8e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x40}}, @fast_bss_trans={0x37, 0x70, {0x4, 0x1, "f331dc0125ae399ec45d2b823f579b8f", "99ebf7546015f13311233e0e99b381181df398d371925d55d054542710c6e03f", "0536a746303fc4c65133f77cd5c04cbcabcba8612fce87b796babbcb2cc771fe", [{0x4, 0x1c, "03aff754f4e6e62e58390e8eb2803411328362e1a67a1779d8845086"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0x9, 0xbd}}, @ibss={0x6, 0x2, 0x40}]}]}, 0x214}, 0x1, 0x0, 0x0, 0xfa92fd43be3938b6}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x69}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfc}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x40) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4811) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d40)=""/157, 0x9d}, {&(0x7f0000001e00)=""/193, 0xc1}], 0x2, &(0x7f0000001f40)=""/64, 0x40}}, {{&(0x7f0000001f80)=@ax25={{}, [@null, @null, @bcast, @default, @rose, @bcast, @default, @netrom]}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002000)=""/77, 0x4d}, {&(0x7f0000002080)=""/244, 0xf4}, {&(0x7f0000002180)=""/214, 0xd6}, {&(0x7f0000002280)=""/61, 0x3d}, {&(0x7f00000022c0)=""/55, 0x37}], 0x5, &(0x7f0000002380)=""/80, 0x50}, 0x1d}, {{&(0x7f0000002400)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000004640)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/82, 0x52}, {&(0x7f0000003500)=""/125, 0x7d}, {&(0x7f0000003580)=""/191, 0xbf}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x5, &(0x7f00000046c0)=""/151, 0x97}, 0x3}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000004780)=""/247, 0xf7}, {&(0x7f0000004880)=""/160, 0xa0}, {&(0x7f0000004940)=""/41, 0x29}, {&(0x7f0000004980)=""/76, 0x4c}, {&(0x7f0000004a00)=""/4096, 0x1000}], 0x5, &(0x7f0000005a80)=""/112, 0x70}, 0x5}, {{&(0x7f0000005b00)=@phonet, 0x80, &(0x7f0000007000)=[{&(0x7f0000005b80)=""/202, 0xca}, {&(0x7f0000005c80)=""/1, 0x1}, {&(0x7f0000005cc0)=""/180, 0xb4}, {&(0x7f0000005d80)=""/4096, 0x1000}, {&(0x7f0000006d80)=""/109, 0x6d}, {&(0x7f0000006e00)=""/233, 0xe9}, {&(0x7f0000006f00)=""/19, 0x13}, {&(0x7f0000006f40)=""/155, 0x9b}], 0x8, &(0x7f0000007080)=""/96, 0x60}, 0x2}, {{0x0, 0x0, &(0x7f0000008200)=[{&(0x7f0000007100)=""/196, 0xc4}, {&(0x7f0000007200)=""/4096, 0x1000}], 0x2, &(0x7f0000008240)=""/140, 0x8c}, 0xe}, {{&(0x7f0000008300)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000008480)=[{&(0x7f0000008380)=""/11, 0xb}, {&(0x7f00000083c0)=""/94, 0x5e}, {&(0x7f0000008440)}], 0x3, &(0x7f00000084c0)=""/119, 0x77}, 0x6}, {{&(0x7f0000008540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000008640)=[{&(0x7f00000085c0)=""/115, 0x73}], 0x1, &(0x7f0000008680)=""/117, 0x75}, 0x781}, {{&(0x7f0000008700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000008e40)=[{&(0x7f0000008780)=""/171, 0xab}, {&(0x7f0000008840)=""/110, 0x6e}, {&(0x7f00000088c0)=""/4, 0x4}, {&(0x7f0000008900)=""/235, 0xeb}, {&(0x7f0000008a00)=""/23, 0x17}, {&(0x7f0000008a40)=""/12, 0xc}, {&(0x7f0000008a80)=""/237, 0xed}, {&(0x7f0000008b80)=""/163, 0xa3}, {&(0x7f0000008c40)=""/229, 0xe5}, {&(0x7f0000008d40)=""/196, 0xc4}], 0xa, &(0x7f0000008f00)=""/59, 0x3b}, 0x9}], 0x9, 0x1, &(0x7f0000009180)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000091c0)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000009200)='cpuacct.usage_all\x00', 0x0, 0x0) socketpair(0x5, 0x80000, 0x4, &(0x7f0000009700)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f000000b780)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000b740)={&(0x7f000000b640)={0xd4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r0}, {0x8, 0x1, r9}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4044890}, 0x20000010) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f000000b8c0)={&(0x7f000000b7c0)={0x10, 0x0, 0x0, 0x40005200}, 0xc, &(0x7f000000b880)={&(0x7f000000b800)={0x64, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2b8fe60b14e52cb8c896ee325c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "637e7e4f67d3116bebc603d2f7"}, @NL80211_ATTR_KEY_TYPE={0x8}]]}, 0x64}, 0x1, 0x0, 0x0, 0x2404c040}, 0x4000000) socketpair(0x2, 0x1, 0x1, &(0x7f000000b900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_NAN(r10, &(0x7f000000ba00)={&(0x7f000000b940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000b9c0)={&(0x7f000000b980)={0x20, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4881) 04:49:42 executing program 1: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000040)) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200000, 0x0) ioctl$CDROM_SELECT_DISK(r1, 0x5322, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b00)=""/122, 0x7a}, {&(0x7f0000000b80)=""/143, 0x8f}, {&(0x7f0000000c40)=""/251, 0xfb}, {&(0x7f0000000d40)=""/54, 0x36}], 0x4}, 0x3ff}, {{&(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e40)=""/145, 0x91}, {&(0x7f0000000f00)=""/154, 0x9a}, {&(0x7f0000000fc0)=""/160, 0xa0}], 0x3, &(0x7f00000010c0)=""/134, 0x86}, 0x6}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001180)=""/93, 0x5d}], 0x1, &(0x7f0000001240)=""/4096, 0x1000}, 0x9}], 0x3, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000002400)={&(0x7f0000002300), 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x64, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004041}, 0x4000000) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000002440)=@lsasf) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000002480)={@msf={0xfd, 0x2, 0xff}, 0x0, 0x3}) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f00000024c0)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000002f40)={@lba=0x6c500000, 0x0, 0x3}) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000002f80)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003a00)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a80)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2d}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf1a}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x40000) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000003b80), 0x200800, 0x0) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000003bc0)=@lrpcs={0x1, 0x2, 0x6, 0x3f, 0xff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003c40), r2) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000003d40)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x5c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c811}, 0x4) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000003d80)=@hrpcs={0xb, 0x80}) 04:49:42 executing program 3: ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000050) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe8, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair(0x1a, 0x2, 0xff, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2000400000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r3) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000094) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x10}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8847}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x3f}, @device_a, @random="e4593ff02bbd"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x15}, 0x10) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x400000, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, r4, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001e40)=""/214, 0xd6}, {&(0x7f0000001f40)=""/203, 0xcb}, {&(0x7f0000002040)=""/142, 0x8e}, {&(0x7f0000002100)=""/200, 0xc8}, {&(0x7f0000002200)=""/160, 0xa0}, {&(0x7f00000022c0)=""/53, 0x35}, {&(0x7f0000002300)=""/196, 0xc4}], 0x7, &(0x7f0000002480)=""/4096, 0x1000}, 0x2) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003500), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x68, r8, 0x104, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffb}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008050}, 0x4000) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000037c0)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003780)={&(0x7f0000003700)={0x54, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x8011) 04:49:42 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/252, 0xfc) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100)) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) ioctl$CDROMEJECT(r0, 0x5309) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x84) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000002c0), 0x1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300), 0x4) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000380)={0x6, 0x64, "51486a79f20d942c8bf47aa713ca9c583e4fc5e42a09f6d74f714a8b10a32f70173781aa61c39dcee04bc568d57ecd0fdfb578754ac5ed06ccafad7d03bc6ee8f25dfa7f4ff99ebdfad61690272f04dd1b18762d885667eab5a02f5b9498256ae522048c"}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000400), 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000440), 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffe1}]}, 0x58}, 0x1, 0x0, 0x0, 0x891}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x134, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc8}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7dc44b3d}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x6}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x39}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x134}, 0x1, 0x0, 0x0, 0x88}, 0x4008001) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000840)=""/14, 0xe) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x64}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4) [ 126.911582] audit: type=1400 audit(1750654182.813:7): avc: denied { execmem } for pid=274 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:49:42 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100240}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x460c8) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1, &(0x7f0000000280)=""/238, 0xee}, 0x2002) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004004}, 0x4040010) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000810) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xe4, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x79}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffff8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x17}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r2) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a79, &(0x7f00000009c0)={0x0, 0xfcee, 0x1, 0x1, 0x1b5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)=0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ac0), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000b00)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x1, 0xffffffff7fffffff, {0x0, r2}, 0xffffffff, 0x9, 0x1, {0x0, 0x0, r6}}, 0x2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xa431, 0x4]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x20040080) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000cc0)={'syztnl2\x00', 0x0, 0x0, 0x1, 0x9, 0x4ab6a980, {{0x15, 0x4, 0x0, 0x2b, 0x54, 0x65, 0x0, 0x3, 0x29, 0x0, @local, @empty, {[@lsrr={0x83, 0xb, 0x6, [@multicast1, @broadcast]}, @rr={0x7, 0x7, 0xe6, [@loopback]}, @end, @rr={0x7, 0x13, 0xc8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @multicast1]}, @noop, @rr={0x7, 0xb, 0x50, [@broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0xff, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r1, 0xd5b51147292541bd, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x8010) rt_sigsuspend(&(0x7f0000000ec0)={[0x7f]}, 0x8) 04:49:42 executing program 6: socketpair(0x29, 0x800, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6b}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8088}, 0x80) socketpair(0x29, 0xa, 0x1d6a, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @xdp={0x2c, 0x4, r2, 0x27}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, @nfc={0x27, 0x1, 0x1, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='veth1_to_bond\x00', 0x0, 0x2, 0xfff}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffa3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) socketpair(0x2b, 0x5, 0x8, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x66}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001c00), 0x400000, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x55}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x48000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005b80), r3) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000005d80)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005d40)={&(0x7f0000005bc0)={0x16c, r9, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x11c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x64}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8637}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffeffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x30b8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2ae}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4800}, 0x40000840) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000005e00), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000005f00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000005fc0)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005f80)={&(0x7f0000005f40)={0x34, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x100}, 0x4000000) openat$cgroup_pressure(r7, &(0x7f0000006000)='io.pressure\x00', 0x2, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000006100)={&(0x7f0000006040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000060c0)={&(0x7f0000006080)={0x28, r9, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x2b}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8844}, 0x4000000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000006480)={&(0x7f00000063c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006440)={&(0x7f0000006400)={0x14, r9, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 04:49:42 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "e7fc3dd8037b117f", "66478ec8037ab419e8a8bef33fa05a94", "e9293841", "9473df9005d1edaf"}, 0x28) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x79c1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x800) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x3a3471022c24dcd4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x24}}, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000680)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000006c0)=0x5, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_merged\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x64}}, 0x48840) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000008c0), 0x4) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000c80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000940)={0x2c4, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0xfc, 0x3, 0x30, 0x1}}]}, @NL80211_ATTR_IE={0x98, 0x2a, [@fast_bss_trans={0x37, 0x90, {0x0, 0x2, "eabab0b12c699e608c0b23e59c3bcd79", "7a9c14fdcb36ea809b093d88f37c04fff6cffe4698a44ce364a6bffd2bdbf8ff", "5418245f5532eaf3b6b99f95b0c3442d877a6b6b9fdba641ee0379a91922827b", [{0x1, 0x26, "2444b87c0563a6553f6d4869848d6bd63b650d75200690442227aa24f5993913ee8e20478541"}, {0x3, 0x14, "514ef6bce23929e2b354298f437b83232b5e8157"}]}}, @supported_rates]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x3f, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @mesh_chsw={0x76, 0x6, {0x91, 0x6, 0x31, 0x120}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0xc, 0x3, 0x6, 0x0, {0x3, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x7db, 0x20}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x189, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2, 0x40, 0x20}}, @measure_req={0x26, 0xbf, {0x9, 0x0, 0xff, "db72340e84d5d73485b6da08145a8f5f52973aa50e2bc2ae63eeef4ae4c4e252b134aae9ef47f31b99c7aadadbbc65ecf4da9bd980c91766c553c651bf5bce4cd7c4fefea1fadecdc872a997a80508d0b1a2bf756333c6cc58d41e3df5054427d7973e0a0cbc79bcdfc6030c6a05ac24999e5c7ede3263ead255bdc4c5dafd27ffb6bed02604f4a0701001cad53403a65d22e3f7176178fbb24aff2bb315489b83ce1ab78c5b11eebde2a2d2bcd92d5891a0ce8cc6bec5d52a56ad59"}}, @link_id={0x65, 0x12, {@random="7ef57a289caf", @broadcast}}, @preq={0x82, 0x62, @ext={{0x1, 0x1}, 0x9, 0x1, 0xb515, @device_b, 0xffff, @broadcast, 0x0, 0x1, 0x6, [{{0x1, 0x0, 0x1}, @device_b, 0x8000}, {{0x1}, @device_a, 0x8}, {{0x1}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0xa12eaef}, {{0x1}, @device_a, 0x1ff}, {{0x1}, @device_b, 0x2}]}}, @rann={0x7e, 0x15, {{0x1}, 0xa9, 0x6, @device_b, 0x3ff, 0x3000000, 0x2}}, @mesh_chsw={0x76, 0x6, {0x2, 0xff, 0x29, 0x62e8}}, @prep={0x83, 0x1f, @not_ext={{}, 0x4, 0xf9, @device_a, 0x40, "", 0x5, 0x1, @device_a, 0xfff}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20048850}, 0x20040000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000cc0)=[@sack_perm, @timestamp, @sack_perm], 0x3) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000d00)=0x7) [ 128.387914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.391554] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.394563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.396882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.399563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.407096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.411550] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.420350] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.426282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.428544] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.429809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.436911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.438060] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.446661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.456634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.463197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.469155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.474970] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.519571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.522864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.552180] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.564409] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.580514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.581295] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.591276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.604218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.608147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.624952] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.627124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.638807] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.641607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.651194] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.653754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.658478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.664244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.678406] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.695153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.706274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 128.719785] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.747459] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.525534] Bluetooth: hci0: command tx timeout [ 130.526444] Bluetooth: hci1: command tx timeout [ 130.526662] Bluetooth: hci2: command tx timeout [ 130.589804] Bluetooth: hci3: command tx timeout [ 130.717399] Bluetooth: hci5: command tx timeout [ 130.717851] Bluetooth: hci4: command tx timeout [ 130.781887] Bluetooth: hci6: command tx timeout [ 130.844884] Bluetooth: hci7: command tx timeout [ 132.573152] Bluetooth: hci1: command tx timeout [ 132.573264] Bluetooth: hci2: command tx timeout [ 132.574082] Bluetooth: hci0: command tx timeout [ 132.636835] Bluetooth: hci3: command tx timeout [ 132.765823] Bluetooth: hci4: command tx timeout [ 132.766611] Bluetooth: hci5: command tx timeout [ 132.830817] Bluetooth: hci6: command tx timeout [ 132.893622] Bluetooth: hci7: command tx timeout [ 134.621007] Bluetooth: hci0: command tx timeout [ 134.621486] Bluetooth: hci1: command tx timeout [ 134.622036] Bluetooth: hci2: command tx timeout [ 134.684780] Bluetooth: hci3: command tx timeout [ 134.812877] Bluetooth: hci4: command tx timeout [ 134.813310] Bluetooth: hci5: command tx timeout [ 134.876855] Bluetooth: hci6: command tx timeout [ 134.941761] Bluetooth: hci7: command tx timeout [ 136.669094] Bluetooth: hci2: command tx timeout [ 136.669551] Bluetooth: hci1: command tx timeout [ 136.670164] Bluetooth: hci0: command tx timeout [ 136.733837] Bluetooth: hci3: command tx timeout [ 136.862019] Bluetooth: hci5: command tx timeout [ 136.862475] Bluetooth: hci4: command tx timeout [ 136.926005] Bluetooth: hci6: command tx timeout [ 136.989835] Bluetooth: hci7: command tx timeout [ 191.040691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.045568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.048484] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.053354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.061550] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.069555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.071498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.074383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.088365] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.092622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.180842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.183463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.186592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.190406] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.204566] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.207397] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.213875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.216206] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.221277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.225363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.229107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.230695] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.242186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.249457] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.254545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.356367] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.358420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.363225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.372295] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.374013] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.405016] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.406499] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.434058] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.439272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.458422] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.460633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.501621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.543570] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.558551] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.589909] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.118283] Bluetooth: hci0: command tx timeout [ 193.180984] Bluetooth: hci1: command tx timeout [ 193.309350] Bluetooth: hci4: command tx timeout [ 193.309669] Bluetooth: hci3: command tx timeout [ 193.374013] Bluetooth: hci5: command tx timeout [ 193.565761] Bluetooth: hci2: command tx timeout [ 193.694050] Bluetooth: hci6: command tx timeout [ 193.821027] Bluetooth: hci7: command tx timeout [ 195.165522] Bluetooth: hci0: command tx timeout [ 195.230747] Bluetooth: hci1: command tx timeout [ 195.356865] Bluetooth: hci4: command tx timeout [ 195.357324] Bluetooth: hci3: command tx timeout [ 195.420971] Bluetooth: hci5: command tx timeout [ 195.613022] Bluetooth: hci2: command tx timeout [ 195.740889] Bluetooth: hci6: command tx timeout [ 195.869005] Bluetooth: hci7: command tx timeout [ 197.214901] Bluetooth: hci0: command tx timeout [ 197.277748] Bluetooth: hci1: command tx timeout [ 197.406004] Bluetooth: hci3: command tx timeout [ 197.406972] Bluetooth: hci4: command tx timeout [ 197.468880] Bluetooth: hci5: command tx timeout [ 197.660886] Bluetooth: hci2: command tx timeout [ 197.788850] Bluetooth: hci6: command tx timeout [ 197.917770] Bluetooth: hci7: command tx timeout [ 199.260790] Bluetooth: hci0: command tx timeout [ 199.326220] Bluetooth: hci1: command tx timeout [ 199.452987] Bluetooth: hci4: command tx timeout [ 199.453550] Bluetooth: hci3: command tx timeout [ 199.516839] Bluetooth: hci5: command tx timeout [ 199.709032] Bluetooth: hci2: command tx timeout [ 199.837206] Bluetooth: hci6: command tx timeout [ 199.965023] Bluetooth: hci7: command tx timeout [ 252.911922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.916190] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.919134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.927151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.935304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.114808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.122542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.127219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.143642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.166240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.234479] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.250433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.255598] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.264294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.281193] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.374798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.386483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.398183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.400597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.407443] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.411061] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.413180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.416579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.436849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.444562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.776752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.780861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.784237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.826357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.870271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.880118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.891593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.897980] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.905623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.914122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.079871] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.085397] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.087488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.120258] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.158382] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.005922] Bluetooth: hci0: command tx timeout [ 255.261811] Bluetooth: hci1: command tx timeout [ 255.388910] Bluetooth: hci2: command tx timeout [ 255.517870] Bluetooth: hci4: command tx timeout [ 255.583349] Bluetooth: hci3: command tx timeout [ 256.029818] Bluetooth: hci5: command tx timeout [ 256.094501] Bluetooth: hci6: command tx timeout [ 256.349073] Bluetooth: hci7: command tx timeout [ 257.055181] Bluetooth: hci0: command tx timeout [ 257.309102] Bluetooth: hci1: command tx timeout [ 257.436795] Bluetooth: hci2: command tx timeout [ 257.564935] Bluetooth: hci4: command tx timeout [ 257.628804] Bluetooth: hci3: command tx timeout [ 258.077149] Bluetooth: hci5: command tx timeout [ 258.140979] Bluetooth: hci6: command tx timeout [ 258.397883] Bluetooth: hci7: command tx timeout [ 259.103165] Bluetooth: hci0: command tx timeout [ 259.358878] Bluetooth: hci1: command tx timeout [ 259.484790] Bluetooth: hci2: command tx timeout [ 259.613079] Bluetooth: hci4: command tx timeout [ 259.676973] Bluetooth: hci3: command tx timeout [ 260.124928] Bluetooth: hci5: command tx timeout [ 260.188782] Bluetooth: hci6: command tx timeout [ 260.445107] Bluetooth: hci7: command tx timeout [ 261.149782] Bluetooth: hci0: command tx timeout [ 261.404993] Bluetooth: hci1: command tx timeout [ 261.533059] Bluetooth: hci2: command tx timeout [ 261.660981] Bluetooth: hci4: command tx timeout [ 261.725004] Bluetooth: hci3: command tx timeout [ 262.172778] Bluetooth: hci5: command tx timeout [ 262.236802] Bluetooth: hci6: command tx timeout [ 262.493788] Bluetooth: hci7: command tx timeout [ 315.312943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.317088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.321143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.328761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.335041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.451488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.461364] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.469613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.499215] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.515651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.573991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.580251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.586319] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.600227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.608264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.675239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.683639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.688479] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.693237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.697328] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.705648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.710215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.726004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.749024] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.759490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.855987] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.864952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.885665] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.935953] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.955365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.989547] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.999789] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.009173] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.019273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.028320] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.112596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.129256] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.188357] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.211267] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.223329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.404828] Bluetooth: hci0: command tx timeout [ 317.597154] Bluetooth: hci1: command tx timeout [ 317.661079] Bluetooth: hci2: command tx timeout [ 317.789057] Bluetooth: hci4: command tx timeout [ 317.916796] Bluetooth: hci3: command tx timeout [ 318.109040] Bluetooth: hci5: command tx timeout [ 318.109064] Bluetooth: hci7: command tx timeout [ 318.300979] Bluetooth: hci6: command tx timeout [ 319.455036] Bluetooth: hci0: command tx timeout [ 319.646752] Bluetooth: hci1: command tx timeout [ 319.710062] Bluetooth: hci2: command tx timeout [ 319.837810] Bluetooth: hci4: command tx timeout [ 319.964782] Bluetooth: hci3: command tx timeout [ 320.157315] Bluetooth: hci5: command tx timeout [ 320.157343] Bluetooth: hci7: command tx timeout [ 320.348933] Bluetooth: hci6: command tx timeout [ 321.500864] Bluetooth: hci0: command tx timeout [ 321.692920] Bluetooth: hci1: command tx timeout [ 321.757473] Bluetooth: hci2: command tx timeout [ 321.884908] Bluetooth: hci4: command tx timeout [ 322.013758] Bluetooth: hci3: command tx timeout [ 322.205347] Bluetooth: hci5: command tx timeout [ 322.205837] Bluetooth: hci7: command tx timeout [ 322.396770] Bluetooth: hci6: command tx timeout [ 323.548826] Bluetooth: hci0: command tx timeout [ 323.740827] Bluetooth: hci1: command tx timeout [ 323.804829] Bluetooth: hci2: command tx timeout [ 323.933038] Bluetooth: hci4: command tx timeout [ 324.061121] Bluetooth: hci3: command tx timeout [ 324.252932] Bluetooth: hci7: command tx timeout [ 324.253062] Bluetooth: hci5: command tx timeout [ 324.445796] Bluetooth: hci6: command tx timeout [ 377.908975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.913468] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.916249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.924613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.932441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.982303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.990897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.993671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.996115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.002223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.005505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.011398] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.017239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.021911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.027286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.109644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.117960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.120500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.132963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.140071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.190068] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.195501] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.213315] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.222408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.225657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.238073] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.240340] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.244123] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.246993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.248405] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.253366] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.259381] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 378.261620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.264386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.269459] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.336065] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.351390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.357826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.376642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.381064] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.997840] Bluetooth: hci0: command tx timeout [ 380.061191] Bluetooth: hci1: command tx timeout [ 380.125009] Bluetooth: hci2: command tx timeout [ 380.188922] Bluetooth: hci3: command tx timeout [ 380.317811] Bluetooth: hci7: command tx timeout [ 380.445073] Bluetooth: hci6: command tx timeout [ 380.445850] Bluetooth: hci5: command tx timeout [ 380.508804] Bluetooth: hci4: command tx timeout [ 382.046790] Bluetooth: hci0: command tx timeout [ 382.108856] Bluetooth: hci1: command tx timeout [ 382.172933] Bluetooth: hci2: command tx timeout [ 382.237753] Bluetooth: hci3: command tx timeout [ 382.365800] Bluetooth: hci7: command tx timeout [ 382.492856] Bluetooth: hci5: command tx timeout [ 382.493297] Bluetooth: hci6: command tx timeout [ 382.558740] Bluetooth: hci4: command tx timeout [ 384.092880] Bluetooth: hci0: command tx timeout [ 384.157089] Bluetooth: hci1: command tx timeout [ 384.221398] Bluetooth: hci2: command tx timeout [ 384.285050] Bluetooth: hci3: command tx timeout [ 384.412764] Bluetooth: hci7: command tx timeout [ 384.540865] Bluetooth: hci6: command tx timeout [ 384.541295] Bluetooth: hci5: command tx timeout [ 384.604790] Bluetooth: hci4: command tx timeout [ 386.141351] Bluetooth: hci0: command tx timeout [ 386.204976] Bluetooth: hci1: command tx timeout [ 386.268988] Bluetooth: hci2: command tx timeout [ 386.332773] Bluetooth: hci3: command tx timeout [ 386.460806] Bluetooth: hci7: command tx timeout [ 386.588951] Bluetooth: hci5: command tx timeout [ 386.589384] Bluetooth: hci6: command tx timeout [ 386.652935] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 04:54:45 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888025e89b80 RCX=0000000000000000 RDX=0000000000000008 RSI=ffff888025e8a5d8 RDI=ffff888025e89b80 RBP=ffff888025e8a5d8 RSP=ffff888035d47c50 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff888025e8a5d8 R13=0000000000000000 R14=0000000000000000 R15=0000000000000005 RIP=ffffffff81518236 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f940604d540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f94060e0500 CR3=0000000034475000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=0000000000ffffffffffff00ff0000ff XMM02=0000000000ffffffffffff0000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=6f7473756300000000000073252f7325 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff815f9cb2 RDI=ffffffff85c1cc40 RBP=ffffffff85c1cc40 RSP=ffff88803276f5f0 R8 =0000000000000000 R9 =0000000000000000 R10=00007fb396e51000 R11=0000000000000003 R12=0000000000000002 R13=ffffffff815f9cb2 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81aefeae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb39691e540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb396b09620 CR3=00000000317c0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000