Warning: Permanently added '[localhost]:42741' (ECDSA) to the list of known hosts. 2023/08/21 03:54:16 fuzzer started 2023/08/21 03:54:17 dialing manager at localhost:46849 syzkaller login: [ 109.059175] cgroup: Unknown subsys name 'net' [ 109.273435] cgroup: Unknown subsys name 'rlimit' [ 120.703714] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/21 03:54:30 syscalls: 200 2023/08/21 03:54:30 code coverage: enabled 2023/08/21 03:54:30 comparison tracing: enabled 2023/08/21 03:54:30 extra coverage: enabled 2023/08/21 03:54:30 setuid sandbox: enabled 2023/08/21 03:54:30 namespace sandbox: enabled 2023/08/21 03:54:30 Android sandbox: enabled 2023/08/21 03:54:30 fault injection: enabled 2023/08/21 03:54:30 leak checking: enabled 2023/08/21 03:54:30 net packet injection: enabled 2023/08/21 03:54:30 net device setup: enabled 2023/08/21 03:54:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/21 03:54:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/21 03:54:30 USB emulation: enabled 2023/08/21 03:54:30 hci packet injection: enabled 2023/08/21 03:54:30 wifi device emulation: enabled 2023/08/21 03:54:30 802.15.4 emulation: enabled 2023/08/21 03:54:30 fetching corpus: 0, signal 0/0 (executing program) 2023/08/21 03:54:31 starting 8 fuzzer processes 03:54:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x40091) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x890) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0xd7727ba312b7c633, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x4000085) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb9f}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040050}, 0x840) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44041}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfc6b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0001}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x4050) r4 = socket$netlink(0x10, 0x3, 0x1e) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe0, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000800}, 0x44) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000b40)={0x40000000}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000b80)=0x3ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4045008c}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x8800) 03:54:31 executing program 1: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x1, 0x1, 0x1, 0xe7cd, 0x8, 0xfff}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000080)={0x3, 0x200, 0x3451}) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000000c0)={0x2, 0x0, 0x8000, 0x3, 0x21d, 0xffffffff}) read$hiddev(r0, &(0x7f0000000100)=""/132, 0x84) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000200)={0x2, 0x3, 0x2, 0x9, 0x6, 0x7f}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x151001, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000280)={0x2, 0x1, 0x8, 0x1000, 0x81, 0x7fff, 0x6a8, 0x62f9, 0xb81c, 0x0, 0x40, 0x6, 0x4, 0x1}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bind$802154_raw(r0, &(0x7f00000003c0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) r3 = inotify_init() inotify_rm_watch(r3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x4d0000, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000440)={0x2, 0x1, 0xfffeffff}) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = io_uring_setup(0x3b2e, &(0x7f0000000600)={0x0, 0x9976, 0x8, 0x2, 0x34e, 0x0, r4}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000680)={r2, r5, 0x5}) inotify_add_watch(r0, &(0x7f00000006c0)='./file0\x00', 0x40000042) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000700)={0x0, 0x92, 0x0, 0x580}) [ 121.939749] audit: type=1400 audit(1692590071.304:6): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:54:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x30000000}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8000020) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000001c0)={0x3, 0x3, 0x80000001}) r2 = syz_open_dev$hiddev(&(0x7f0000000200), 0x3, 0x242502) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000240)={0x1, 0x100, 0x100, 0x9, 0x9, 0x5}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x2}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000300)={0x0, 0x8, "341d93", 0x6, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000380)=0x2) r5 = socket(0x1f, 0x1, 0x8001) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f00000003c0)={0x5, [0x7, 0x200], 0x5}, 0x10) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000400)="09ab629e597f9fb0fe5f9e13568bdc529c9e5713ec118668a0824cd2b57653495610eb14bd4a57") ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000440)={0x2, 0x3, 0x1, 0xffffffff, 0x2, 0x8632}) 03:54:31 executing program 3: ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x5608, 0x7, 0x40, 0x7, 0x1, 0x3f], 0x4, &(0x7f00000000c0)=[{}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000200)=0x3ff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000280)={0x3}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f00000002c0)={0x7, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}, {{0x2, 0x4e20, @remote}}}, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040808}, 0x4000000) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000580)={0x0, @empty, 0x4e20, 0x1, 'lblc\x00', 0x15, 0x0, 0x77}, 0x2c) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40041000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x99e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa8a}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xb0, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000740)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x0, 0x25}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/55, 0x37, 0x2, 0x34}}, &(0x7f00000007c0)={0x0, 0x18, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x2}, @free_buffer, @dead_binder_done, @increfs={0x40046304, 0x2}, @dead_binder_done, @decrefs={0x40046307, 0x2}, @request_death, @request_death={0x400c630e, 0x1}], 0x4e, 0x0, &(0x7f00000008c0)="61e5f11e20f35319961600f08f7bdf419c1a1b7cae95383ebfbd3a5da9c67eb1df2563db120b5064604bf5880732bec37618477308c029305fdffee946105843e07d04bcb56ad8e5d96fa1e55965"}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000980)={0xff80000, [0x401, 0x1], 0x7}, 0x10) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f00000009c0)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000a00)={0x1f, 0x1, 0x1}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000a40)={0x2, [0x7, 0x6c], 0x1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), r2) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb4, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9436}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xdc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffb}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ab8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x20000004) 03:54:31 executing program 4: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008014) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040020}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x820, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x79}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x44c90}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "6fe6c6d7828695a63040d367a473b3bba9a2943547a03575c2b1d56a30cde9bd"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "80b1942e0979c4c8c96dfa1b534c77d2"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000410}, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xfffe}]}, 0x34}}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x404}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000a40)={'broute\x00', 0x0, 0x3, 0x6e, [0x277, 0x5, 0x0, 0x90000000000000, 0x7a21, 0x3], 0x7, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000009c0)=""/110}, &(0x7f0000000ac0)=0x78) r3 = socket(0x2a, 0x6, 0x6) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x5c}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r3) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x6c, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40004) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 03:54:31 executing program 5: r0 = socket(0x2b, 0x803, 0xc1f) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="4bd413f9991fc2c5c26e14ba5b3c199f", 0x10) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x21, @private=0xa010102, 0x4e22, 0x4, 'lblc\x00', 0x20, 0x5, 0x33}, 0x2c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) r2 = eventfd(0x7) r3 = epoll_create1(0x80000) r4 = eventfd(0x8) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f00000000c0)={r3, r4, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20044800}, 0x8000) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0x5, [0x7, 0x10001], 0x1}, 0x10) epoll_wait(r3, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x1) r6 = syz_open_dev$hiddev(&(0x7f0000000300), 0x401, 0x410401) ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000000340)) r7 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000380)={0xff, 0xf8d, 0x9, 0x2}, 0x10) r8 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x2d5, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r8, 0x40184810, &(0x7f0000000400)={0x2, 0xffffffff, 0x0, 0x80000000, 0xffffff27, 0x8000}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000480)={0x0, 0x0, 0x4}) 03:54:31 executing program 6: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x8000}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0x3f) r2 = accept4$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x100800) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r3 = epoll_create(0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000001c0)={0x2000}) epoll_pwait2(r0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x3]}, 0x8) r5 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000300)=r5, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000340)={0x10000011}) eventfd2(0x2, 0x800) getdents(r0, &(0x7f0000000380)=""/4096, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000001380), 0x1) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001440)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x840}, 0x80) 03:54:31 executing program 7: r0 = socket(0x11, 0x3, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x2, 0x4228], 0x9}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6gre0\x00', r1, 0x4, 0x5, 0x0, 0x8, 0x0, @private0, @loopback, 0x7800, 0x7, 0x6, 0x7fff}}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20000020) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x1800) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40801) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000380)={0xe2, @empty, 0x4e21, 0x2, 'fo\x00', 0x54, 0x7, 0x31}, 0x2c) write$bt_hci(0xffffffffffffffff, &(0x7f00000003c0)={0x1, @set_cpb_data={{0xc76, 0xff}, {0x4, 0xff, 0x80, "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"}}}, 0x103) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000500)={0x2008}) r4 = socket$inet(0x2, 0x5, 0xfe1) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) r5 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x6, 0x7, &(0x7f00000019c0)=[{&(0x7f00000005c0)="610cf26c5ca7a824fb049ef1f9d0b05ddb123a154af21c41acd3b11800951b0f6818ccb48f130539c5139c9ff5a122c0cdb2f25db171af81e04b884beaba0cd8e54f41566900a52db03ecfab1909405bccc6cb90879ad4b8fbf459c1928cda53f28343d8b8e70204fa2c9e6b9ced9c4a541430102993b8cfcc5ac8aad5f9e3370434", 0x82, 0x1}, {&(0x7f0000000680)="579766bfcf038a9ef57b1ffdc3e73682bf32ac82f6724083af2349b0a03aa278a5aa6f7e4e0deba7dfe811e7a1b804885886b86283f29f342e9b461c", 0x3c, 0x6}, {&(0x7f00000006c0)="d32ebc5acfd4c99efef524c86dcdc016c5dca0548cf59a9f3d32e4395feccc2e43ff1f2b6b8315f2fa9139c9b1da2c6c8fd7402cf1249fd090208506027662adf32cf5d47d39807e0fb2c0fc27ff92fe6de50e95d88cec5a54e1c34dd42fe02b13a0881a7c0431ddeab8110883946e9d003d06aa391a659bae7adb64ef895d44205078366471a1ccccc2a018f1c62c66c49caa521cd28ac657ebe40190fa4b72e4e33d5a011af6943ca2e487a1bde558fec3a1a69f7839896bb75313", 0xbc, 0x4}, {&(0x7f0000000780)="c1a3ff91f25aebcb293449ca796de38e7787799064e9ef9f2f439b9dad09ae6996217f7f62463c61e345c5c45456679e3aef02133ba5318b7e969489d0ceb4e4488c02450a9d35d669f0e4fd90c4c9a0515d852df81bd7d295f97da93de93bbffca6cc717e08a1c9c3b46c9328743d272959090dfe903516e41ac2ad1aeab7eb5b5fa386af30f7b26bc73f49c04ae8f071482d", 0x93, 0x9}, {&(0x7f0000000840)="d46f6c602d2be328a8a3fd034a8527fe88a1ce1eca1624535a58fa74c1651095a7b7f646d6c148b678880c66623ced9ca4aa715d41d3da4356defe7474e69c1d8fb7253775f9856457e8d4b8732d91d442124c08fff2a572cdcf86a841dcaa9a3d5ddaf920846f5991d5ebfb1a39345ed2930d4fdccc7910e556faf300", 0x7d, 0x2}, {&(0x7f00000008c0)="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", 0x1000, 0x3}, {&(0x7f00000018c0)="90e095ce86ae9417dcf3c29beed42591b85719d5610f10c3d7994daa3945b10a7e07f23245ec4c04e55d105b7b30b17def9f002bc15223c168da6284480336d10affd8016d67a2fec0b1ddb2d6a689eccc1de109feebe9d5d93282f5c76cf1ef4990f15a9070ff6aa0e3b759d0f3c2323125a2c988d14b01c45ff383eecbc45908b7d95122eee9969f6855f3ff2e6221c4e6ebc49da9396c29fda4dabe69638bab29e291f505d7fbb0eee604de3fd2703c4a00716dce7fb4f61209d5fa87cbdf3b4cf396a704cbc25f48babe0418379cd07d6877b1b68c9b845d4b774090476a967c04d6cc", 0xe5, 0x7fff}], 0x0, &(0x7f0000001a80)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}], [{@hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) linkat(r5, &(0x7f0000001ac0)='./file1\x00', r2, &(0x7f0000001b00)='./file1\x00', 0x400) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000001b40)={0x2, 0x1, 0xfffffff9}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r6) [ 123.137280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.143506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.145576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.154927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.157979] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.164256] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.367360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.382981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.390347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.392207] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.394981] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.396920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.398704] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.401087] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.403811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.408080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.409383] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.415187] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.416636] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 123.417365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.419484] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.470323] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.474224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.476598] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.490242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.495698] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.495854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.516207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.520956] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 123.527016] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.220940] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 125.221896] Bluetooth: hci0: command 0x0409 tx timeout [ 125.350139] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 125.413211] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 125.476926] Bluetooth: hci6: command 0x0409 tx timeout [ 125.477934] Bluetooth: hci5: command 0x0409 tx timeout [ 125.604894] Bluetooth: hci3: command 0x0409 tx timeout [ 125.668966] Bluetooth: hci7: command 0x0409 tx timeout [ 127.270313] Bluetooth: hci0: command 0x041b tx timeout [ 127.525365] Bluetooth: hci6: command 0x041b tx timeout [ 127.525738] Bluetooth: hci5: command 0x041b tx timeout [ 127.653818] Bluetooth: hci3: command 0x041b tx timeout [ 127.717866] Bluetooth: hci7: command 0x041b tx timeout [ 128.457229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.458447] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.468226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.489254] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.495539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.499534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.502383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.519252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.522645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.528312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.531213] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 128.563920] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.576262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.598390] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.601125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.641306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.690041] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 128.714908] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.317821] Bluetooth: hci0: command 0x040f tx timeout [ 129.574830] Bluetooth: hci6: command 0x040f tx timeout [ 129.575241] Bluetooth: hci5: command 0x040f tx timeout [ 129.702809] Bluetooth: hci3: command 0x040f tx timeout [ 129.765045] Bluetooth: hci7: command 0x040f tx timeout [ 130.597049] Bluetooth: hci1: command 0x0409 tx timeout [ 130.725290] Bluetooth: hci2: command 0x0409 tx timeout [ 130.789852] Bluetooth: hci4: command 0x0409 tx timeout [ 131.365823] Bluetooth: hci0: command 0x0419 tx timeout [ 131.621123] Bluetooth: hci5: command 0x0419 tx timeout [ 131.621555] Bluetooth: hci6: command 0x0419 tx timeout [ 131.748840] Bluetooth: hci3: command 0x0419 tx timeout [ 131.814988] Bluetooth: hci7: command 0x0419 tx timeout [ 132.645359] Bluetooth: hci1: command 0x041b tx timeout [ 132.772857] Bluetooth: hci2: command 0x041b tx timeout [ 132.836841] Bluetooth: hci4: command 0x041b tx timeout [ 134.693253] Bluetooth: hci1: command 0x040f tx timeout [ 134.821815] Bluetooth: hci2: command 0x040f tx timeout [ 134.884938] Bluetooth: hci4: command 0x040f tx timeout [ 136.743032] Bluetooth: hci1: command 0x0419 tx timeout [ 136.868820] Bluetooth: hci2: command 0x0419 tx timeout [ 136.935794] Bluetooth: hci4: command 0x0419 tx timeout [ 182.733188] syz-executor.1 (275) used greatest stack depth: 24136 bytes left [ 185.727462] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.728913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.739041] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.761375] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.772525] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 185.773743] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.044835] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 187.620811] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 187.685071] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 187.686374] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 187.876917] Bluetooth: hci7: command 0x0409 tx timeout [ 189.303959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.308117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.311096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.318273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.323689] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.327253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.488108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.491138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.492293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.498144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.500713] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.502762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.566278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.568453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.570259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.581983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.583340] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 189.584705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.925134] Bluetooth: hci7: command 0x041b tx timeout [ 190.226543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.230011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.230984] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.237131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.238558] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 190.239984] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.397981] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 191.398009] Bluetooth: hci0: command 0x0409 tx timeout [ 191.524860] Bluetooth: hci2: command 0x0409 tx timeout [ 191.653919] Bluetooth: hci3: command 0x0409 tx timeout [ 191.972862] Bluetooth: hci7: command 0x040f tx timeout [ 192.229838] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 192.292886] Bluetooth: hci4: command 0x0409 tx timeout [ 192.292919] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 193.444875] Bluetooth: hci0: command 0x041b tx timeout [ 193.572849] Bluetooth: hci2: command 0x041b tx timeout [ 193.701646] Bluetooth: hci3: command 0x041b tx timeout [ 194.021180] Bluetooth: hci7: command 0x0419 tx timeout [ 194.025009] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.032020] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.084262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.098609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.108386] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 194.110292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.341151] Bluetooth: hci4: command 0x041b tx timeout [ 195.341065] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.354065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.365193] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.370473] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.372095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 195.374080] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.493101] Bluetooth: hci0: command 0x040f tx timeout [ 195.620815] Bluetooth: hci2: command 0x040f tx timeout [ 195.749852] Bluetooth: hci3: command 0x040f tx timeout [ 196.198241] Bluetooth: hci1: command 0x0409 tx timeout [ 196.389003] Bluetooth: hci4: command 0x040f tx timeout [ 197.476871] Bluetooth: hci5: command 0x0409 tx timeout [ 197.477218] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 197.541012] Bluetooth: hci0: command 0x0419 tx timeout [ 197.668844] Bluetooth: hci2: command 0x0419 tx timeout [ 197.797806] Bluetooth: hci3: command 0x0419 tx timeout [ 198.244852] Bluetooth: hci1: command 0x041b tx timeout [ 198.436863] Bluetooth: hci4: command 0x0419 tx timeout [ 199.524820] Bluetooth: hci5: command 0x041b tx timeout [ 200.294139] Bluetooth: hci1: command 0x040f tx timeout [ 200.408841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.410749] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.413910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.422471] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.432352] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 200.433521] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.573300] Bluetooth: hci5: command 0x040f tx timeout [ 202.341085] Bluetooth: hci1: command 0x0419 tx timeout [ 202.469263] Bluetooth: hci6: command 0x0409 tx timeout [ 203.620818] Bluetooth: hci5: command 0x0419 tx timeout [ 204.517884] Bluetooth: hci6: command 0x041b tx timeout [ 206.568230] Bluetooth: hci6: command 0x040f tx timeout [ 208.612988] Bluetooth: hci6: command 0x0419 tx timeout [ 249.509876] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 251.091374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.095985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.100054] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.109171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.118441] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 251.133013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.396666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.402182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.412407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.431973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.439205] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 251.447629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.617251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.625604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.642359] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.671161] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.688742] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 251.690666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.881320] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 251.883455] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 251.885703] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 251.891164] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 251.893703] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 251.895494] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 253.221928] Bluetooth: hci0: command 0x0409 tx timeout [ 253.286124] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 253.541041] Bluetooth: hci3: command 0x0409 tx timeout [ 253.796905] Bluetooth: hci4: command 0x0409 tx timeout [ 253.925299] Bluetooth: hci7: command 0x0409 tx timeout [ 255.269023] Bluetooth: hci0: command 0x041b tx timeout [ 255.588828] Bluetooth: hci3: command 0x041b tx timeout [ 255.845899] Bluetooth: hci4: command 0x041b tx timeout [ 255.947599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.963404] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.969968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.973859] Bluetooth: hci7: command 0x041b tx timeout [ 255.984529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.999964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.032038] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.386428] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.397503] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.404151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.416171] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.425557] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 256.468460] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.318157] Bluetooth: hci0: command 0x040f tx timeout [ 257.639176] Bluetooth: hci3: command 0x040f tx timeout [ 257.892818] Bluetooth: hci4: command 0x040f tx timeout [ 258.020814] Bluetooth: hci7: command 0x040f tx timeout [ 258.021334] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 258.150002] Bluetooth: hci1: command 0x0409 tx timeout [ 258.533866] Bluetooth: hci5: command 0x0409 tx timeout [ 259.364917] Bluetooth: hci0: command 0x0419 tx timeout [ 259.684846] Bluetooth: hci3: command 0x0419 tx timeout [ 259.940834] Bluetooth: hci4: command 0x0419 tx timeout [ 260.068812] Bluetooth: hci7: command 0x0419 tx timeout [ 260.197040] Bluetooth: hci1: command 0x041b tx timeout [ 260.582797] Bluetooth: hci5: command 0x041b tx timeout [ 261.902398] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 261.917359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 261.922280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 261.958228] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 261.962260] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 261.963210] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 262.244993] Bluetooth: hci1: command 0x040f tx timeout [ 262.629083] Bluetooth: hci5: command 0x040f tx timeout [ 262.949129] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 264.044884] Bluetooth: hci6: command 0x0409 tx timeout [ 264.294819] Bluetooth: hci1: command 0x0419 tx timeout [ 264.680614] Bluetooth: hci5: command 0x0419 tx timeout [ 266.085136] Bluetooth: hci6: command 0x041b tx timeout [ 268.132995] Bluetooth: hci6: command 0x040f tx timeout [ 268.260839] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 270.180829] Bluetooth: hci6: command 0x0419 tx timeout [ 273.321873] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 278.244832] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 283.108855] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 287.909352] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 291.274346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.355825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.356959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.360435] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.361948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.374581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.606018] Bluetooth: hci2: command 0x0409 tx timeout [ 295.654804] Bluetooth: hci2: command 0x041b tx timeout [ 297.700984] Bluetooth: hci2: command 0x040f tx timeout [ 299.749564] Bluetooth: hci2: command 0x0419 tx timeout [ 313.789377] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.795813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.799163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.809042] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.821701] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 313.825334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.916867] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 315.493267] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 315.877950] Bluetooth: hci4: command 0x0409 tx timeout [ 315.941060] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 317.119373] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.121614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.122548] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.129506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.133911] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 317.135577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.394557] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.398316] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.401941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.404568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.408483] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 317.409558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.885206] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.894409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.896520] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.924027] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.924838] Bluetooth: hci4: command 0x041b tx timeout [ 317.925305] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 317.926327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.848160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.850067] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.887582] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.900375] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.918091] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 318.941151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.206835] Bluetooth: hci0: command 0x0409 tx timeout [ 319.460855] Bluetooth: hci1: command 0x0409 tx timeout [ 319.652846] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 319.975836] Bluetooth: hci5: command 0x0409 tx timeout [ 319.976355] Bluetooth: hci4: command 0x040f tx timeout [ 320.997059] Bluetooth: hci7: command 0x0409 tx timeout [ 321.252886] Bluetooth: hci0: command 0x041b tx timeout [ 321.509172] Bluetooth: hci1: command 0x041b tx timeout [ 322.021019] Bluetooth: hci5: command 0x041b tx timeout [ 322.021038] Bluetooth: hci4: command 0x0419 tx timeout [ 323.045849] Bluetooth: hci7: command 0x041b tx timeout [ 323.301477] Bluetooth: hci0: command 0x040f tx timeout [ 323.558832] Bluetooth: hci1: command 0x040f tx timeout [ 324.069851] Bluetooth: hci5: command 0x040f tx timeout [ 324.390842] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 325.096808] Bluetooth: hci7: command 0x040f tx timeout [ 325.284833] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 325.348835] Bluetooth: hci0: command 0x0419 tx timeout [ 325.604831] Bluetooth: hci1: command 0x0419 tx timeout [ 326.116959] Bluetooth: hci5: command 0x0419 tx timeout [ 326.990232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.996283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.009017] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.015241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.018458] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 327.020609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.140814] Bluetooth: hci7: command 0x0419 tx timeout [ 328.076846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.082012] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.085026] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.096448] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 328.099452] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 328.102111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.060978] Bluetooth: hci3: command 0x0409 tx timeout [ 330.213837] Bluetooth: hci6: command 0x0409 tx timeout [ 331.110892] Bluetooth: hci3: command 0x041b tx timeout [ 332.263127] Bluetooth: hci6: command 0x041b tx timeout [ 333.157004] Bluetooth: hci3: command 0x040f tx timeout [ 334.309138] Bluetooth: hci6: command 0x040f tx timeout [ 335.204835] Bluetooth: hci3: command 0x0419 tx timeout [ 336.356806] Bluetooth: hci6: command 0x0419 tx timeout 2023/08/21 03:58:19 executor 0 failed 11 times: executor 0: not serving VM DIAGNOSIS: 03:58:20 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88800b648850 RCX=ffff88800b648850 RDX=00000000000d000d RSI=ffff88800b648850 RDI=ffff88800844f780 RBP=ffff888030d0fbe8 RSP=ffff888030d0fb50 R8 =00000000800d000c R9 =0000000000000000 R10=ffffea00002d9200 R11=00000000000d000a R12=ffffea00002d9200 R13=0000000000000000 R14=00000000000d000c R15=ffff88800844f780 RIP=ffffffff8182fee2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb7a6c77580 CR3=000000002640c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=14722328537de2ed4bec6da5a812c10d XMM02=fb42e9abb49b922e218a16f15ab6030d XMM03=1e3eac3ccc570249fea04de11f8c7979 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=64707466730073254073250070746673 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff110044fded7 RCX=0000000000000000 RDX=ffff888033150000 RSI=ffffffff8114f2ec RDI=ffff8880227ef6d8 RBP=80000000314dc027 RSP=ffff8880227ef6b0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=ffff8880243f77c0 R15=dffffc0000000000 RIP=ffffffff814d916b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9e5d0e48e0 CR3=0000000033798000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff000000000000ffff000000000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=45525f4b434f4c425f57485f4c4c494b XMM05=520068746f6f7465756c623d45505954 XMM06=4e5f4c4c494b4652006c6c696b66723d XMM07=66722f376963682f68746f6f7465756c XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000