Warning: Permanently added '[localhost]:28790' (ECDSA) to the list of known hosts. 2025/01/17 12:57:57 fuzzer started 2025/01/17 12:57:57 dialing manager at localhost:45115 syzkaller login: [ 79.379947] cgroup: Unknown subsys name 'net' [ 79.536461] cgroup: Unknown subsys name 'cpuset' [ 79.579899] cgroup: Unknown subsys name 'rlimit' [ 85.271827] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 95.940152] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 12:58:24 syscalls: 215 2025/01/17 12:58:24 code coverage: enabled 2025/01/17 12:58:24 comparison tracing: enabled 2025/01/17 12:58:24 extra coverage: enabled 2025/01/17 12:58:24 setuid sandbox: enabled 2025/01/17 12:58:24 namespace sandbox: enabled 2025/01/17 12:58:24 Android sandbox: enabled 2025/01/17 12:58:24 fault injection: enabled 2025/01/17 12:58:24 leak checking: enabled 2025/01/17 12:58:24 net packet injection: enabled 2025/01/17 12:58:24 net device setup: enabled 2025/01/17 12:58:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 12:58:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 12:58:24 USB emulation: enabled 2025/01/17 12:58:24 hci packet injection: enabled 2025/01/17 12:58:24 wifi device emulation: enabled 2025/01/17 12:58:24 802.15.4 emulation: enabled 2025/01/17 12:58:24 fetching corpus: 0, signal 0/0 (executing program) 2025/01/17 12:58:25 starting 8 fuzzer processes 12:58:25 executing program 0: clock_getres(0x1, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x5, 0x12) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40081}, 0x800) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000200)) clock_gettime(0x7, &(0x7f0000000240)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x364, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x24}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff4b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x126}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x238394fc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x638}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f800}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_LINK={0x158, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd06}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe2b}]}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x4004010}, 0x1) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r2, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x20, 0x17, {0x14, 0x8, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}}}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008090}, 0x4004004) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x80) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x4, 0x5, 0x53, @mcast2, @private1={0xfc, 0x1, '\x00', 0x81}, 0x7800, 0x8000, 0xfff, 0xdbea}}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000b40)={r5, @local, @multicast2}, 0xc) r6 = socket$inet(0x2, 0xa, 0x401) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000b80)={0x0, @remote, @dev}, &(0x7f0000000bc0)=0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/devices/kprobe', 0x420000, 0xc0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8}, 0x10) 12:58:25 executing program 1: ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xb9) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$cgroup_int(r1, &(0x7f0000000080)=0x7, 0x12) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x101) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x41}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x20, 0x7f, 0x736a, 0x8, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0xf830, 0x5, 0xffffffae}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x95, 0x4, 0x6, 0x40, @empty, @mcast1, 0x7, 0x40, 0x9, 0x1}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @multicast1}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x0, 0x8001, 0x8, @mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, 0x8, 0x7, 0x0, 0x5}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000006c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1c0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20004080}, 0xf785b1ee14a41597) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'ip6_vti0\x00', r5, 0x4, 0xff, 0x7, 0x7, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x7, 0x7807, 0x6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6_vti0\x00', r7, 0x29, 0x4, 0x9, 0x8, 0x10, @mcast2, @empty, 0xa1ac03f3770b5269, 0x20, 0x100, 0x8}}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r8, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a00)={0x0, @rand_addr, @initdev}, &(0x7f0000000a40)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl1\x00', r4, 0x29, 0x5, 0x80, 0x9, 0x0, @private0, @loopback, 0x40, 0x40, 0x2, 0x5}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000b40)={0x0, @dev}, &(0x7f0000000b80)=0xc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001000)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c00)={0x398, 0x0, 0x608, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r2}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r7}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xd8e6, 0xb7, 0x3d, 0xb149}, {0x81, 0x80, 0x6, 0xfffffffe}, {0x9, 0x80, 0xde, 0x6}]}}}]}}]}, 0x398}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000) 12:58:25 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x300, 0x7fff, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x31}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x7, 0x7}, {0x8, 0x5}, {0x80, 0x1}, {0xb2, 0x4}, {0x3, 0x6}, {0xf9, 0x1}, {0x5, 0x5}, {0x81, 0x2}, {0x3}, {0x3, 0x5}, {0x40, 0x7}, {0x6, 0x5}, {0x8c, 0x2}, {0x4}, {0x3f, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x80}, {0x8, 0x2}], "cbe021544cbe8965"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x5, 0x6}, {0x7f, 0x1}, {0x3, 0x4}, {0x56, 0x2}, {0x29, 0x7}, {0x3f, 0x7}, {0x8c, 0x1}, {0xae, 0x4}, {0x81, 0x5}, {0x0, 0x7}, {0x8, 0x3}, {0x6, 0x1}], "6432a64446708ddf"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x80, 0x1}, {0x40, 0x3}, {0x4, 0x5}, {0x9, 0x4}, {0x40}, {0xf7, 0x7}], "fa08d834f8bc5a2b"}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040011}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r2, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x70}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40844}, 0x40) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4004000) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x201, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x27}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/module/suspend', 0x4001, 0x20) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3ca6, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8081}, 0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2028080a}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e40)={0x138, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x36}, @NL80211_ATTR_IE={0xfc, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}}, @measure_req={0x26, 0xed, {0xff, 0x40, 0x80, "3c03f5a558f2d7e4746928665d0494f3c63c050a893e76288639a799818a8959a7cd4294594125f65a850ad23fbaa5919dd32b4307d0dea3a9dd8b4fa08946056e850618ecbaaea9b8637e84b2d1e5b67e2bbe05bfde018d088e5220f2520cc839a9366a1e46c613923a046ac25ec3f4eebd0b2a9bd6f05194b8c462558bd3edf4075476fa923f34fb4a1539440c5426a03c4fa7d4cabb714bd1911d6ad1b446c84f16aadd06da9e681e867ac73a4a67aa25da59bf4369c41c71d1c4ba4472b310eda9bc1ed0e90d8cd91290abaf6b15074802c6cdc2bb3e7a86c256d6144c53902d9bacba9e4b1b0233"}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) r7 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r5) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x50, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x42022c204daadf55}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xb82}, 0xa4) [ 106.665963] audit: type=1400 audit(1737118705.882:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:58:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x22, 0x9, 0x14, @remote, @empty, 0x7, 0x8000, 0x9, 0x3}}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="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") r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/ehci_hcd', 0x982, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000200)={0x6, 0x81, 0x4}) ioctl$TIOCEXCL(r1, 0x540c) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x200000000) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000240)) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000002c0)="024b88212cf699838c95e9ac13bd94090450f84a8814c32d1ebe26f1e73b6d2f60ec64d2f40120068a860b75f995602589983b32b6aadf73421de4cde83475c3bbc2b80e692086c78379fbd64fb76a2a4a09f220faa879259f53cd7a7203f546c0e36b903c7f066a8fb61eb719a148882d9e963bca6d44e6606e6f6b5d705aae19dccc0118fe892a22f561d5281601d52c74c4a87d1bd19f50a4b5d80878fe") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380)=0xa0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x468800, 0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000400)=0xffffffffffffffff) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000440)=0x7) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000004c0)={0xfffffffd, 0x5fb, 0x100, 0x80000000, 0x3, "e805d5ef99ad69765d7ac4721d4475a67b5910", 0x8, 0x3}) r7 = syz_io_uring_complete(0x0) ioctl$KDGETMODE(r7, 0x4b3b, &(0x7f0000000500)) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000540)={0x7, 0x2, 0x8, 0xfff9, 0x0, "95b886302e1dfc8d"}) openat$cgroup_int(r7, &(0x7f0000000580)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) 12:58:25 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$TCSBRKP(r0, 0x5425, 0x1) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xa478) ioctl$TCSBRK(r2, 0x5409, 0x1f) r3 = syz_open_pts(r2, 0x408040) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000080)=0x3) r4 = syz_io_uring_complete(0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x18) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x10000000) r6 = socket(0x27, 0x2, 0x6) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, &(0x7f0000000100)=0x80, &(0x7f0000000140), 0x0, 0x800}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101001, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000240)=0xab3) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000280)={0x8001, 0x2, 0x7ff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x10, 0xffffffffffffffff, 0x0) 12:58:25 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) socket$packet(0x11, 0x2, 0x300) modify_ldt$write2(0x11, &(0x7f0000000040)={0xf6, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) r0 = socket(0xa, 0x6, 0x16) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x287e}}, {0x8}}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) r1 = socket(0x21, 0x0, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000300)) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x2d) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x154, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x807}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81fd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf271}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x265}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x400c045) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x4c36b27a73475926) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r4, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x48, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x40800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x29c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @private1, 0x4}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff0001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3e6c962e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffe0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffb983}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r5) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000001100)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b40)={0x574, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfbc2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffe1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x234, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0xd4, 0x3, "10a20ad3e0df9ae0f962a0754dd3ca97167b958d7881ecbce9a069af1b8ee48d2944c56c7b63da053e81153ad06169b73cbea452a2ec615bb9eb23e93fb4e46455a5937e5a7d293662719f9269cb4f8024a9ba23be6e224c01f0bc9453f1f7f2566d4bf1ba5eb9e99c5cb46f788c94bc32fb46ea4e39ce087b03675df8ba684075f9d4f286debd5855a5486a4f2bac64f378f2bde6266a6eeb6954f14571f57806bf970a40b4e80cbe43c57176044bc04608378e8ed83b8c7e2db98559944f2384b080c8caa378e5588d939f41fec26f"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "8a244c997c864c62d6912a3ae676d812e6c4591a914ea7abea903f6740bbb2"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "eb6ae219e503400f35e1f9c5c341a9de6f4aebd4fb72d3fc088fa42acd3fa5f00d"}}, @TIPC_NLA_NODE_ID={0xb3, 0x3, "50cad29e8eb456ea937667bb2a51a416051ec38f1a9a2ca38dac68c1a6c274fc71e5789742cc716eb649a3f924e558de28a110e1910fc04262416afbce6e9f8355df3088c860fb06d5ad8168955c6a944de2b5a08e990f9d65e6fa17b38e64f4a9fb6c6e6c0fc1f58fe846e7c6695e23e0f21cedea3bceb49d03a12700570673a33eaa44003183f3eef2eecd939707da169796cab745c49f830a89acbbc771078a48d805400f81b85b6425d15d4ded"}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xaf0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x30bf8c18}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x60, 0x3, "6c18b7203d75bcbed76304e9a086984425a073e13fb4e1aaea304229176fa566e004ae82f1e6f05c85e7e76bd89a22689e534b54d080a373d088466a2e4cec8261c7c342e45cf7393fc6ecaecd04c4f3bf2204b156dfe38ad979bdff"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "c3a659e58eda6520e6885a4264bb8053071d34c2"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2f66d953227be5455f3abf4df5c0c3b3f34a3a30d2595bb506d0960a013f0f"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "d05ef9c3e32cabdcabdb68401e09a839da8c7684957339c5fa41951bbae9a1"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb79d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb482}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x423}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x574}, 0x1, 0x0, 0x0, 0x5}, 0x8800) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 12:58:25 executing program 7: ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = syz_open_pts(0xffffffffffffffff, 0x6d40) ioctl$TIOCNOTTY(r0, 0x5422) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x8000) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000480)={0x41, 0x2, &(0x7f0000000080)="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"}) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$TIOCSIG(r3, 0x40045436, 0x7) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000500)) ioctl$KDDISABIO(r4, 0x4b37) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000540)={0x7, 0x1, 0x8, 0x200, 0x6, "4ac395769fc387a2"}) ioctl$VT_ACTIVATE(r2, 0x5606, 0x2) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000580)="7f048bcee8f9ecf8e11fc2295205d2f38f5d1b84fcdbc9983a6b98dd429db5e7e7485f6bf7851dd5dfbdfd68114ad075818215f364faf24ed0976e317eb6fc1fe648934c65c93dc4faeceebc3f371672da0f6e6ed8d1fa58814223ab4dfe5a37accc5fcd7bcabd9c61a20750c3b3ff53bf96723d1d7b13e6f1e65a498eb2b0855c877cb23351141c8f75be5e27012357022509faf66d88ac45875de7500107ae6e46c1604b67f84827985c6531c16399b5d99706086e76f20afe7ac4b5b029369a8b4d44ee5f3e7a62b82c8014d54bacf13fe8a503e8ca84ec41ecd700e605b99e8b6d0be40fb41ccdd5d1f6b39bf4bbd26df2f3ca2811") r6 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f00000006c0)={0x8, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$VT_RELDISP(r5, 0x5605) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000700)) 12:58:26 executing program 6: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x9, 0x2}, 0x3, 0x8, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x1ff, 0xaecf, 0xec21}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000100)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000003c0)={{0x0, 0x5, 0x81, 0x0, 0x2, 0x7, 0x7, 0x9, 0xfffff001, 0x100, 0x4, 0xf0d8, 0x81, 0x6, 0x3}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "a08e2062cc51dd"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001440)={0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "4e3c59c43dbc78"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002440)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "67e74356ce86d5"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x3fffffff800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "358f26f9de0149"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "a7e618224824f3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "2892ee8a3b5a50"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x75, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "318ae93617d5af"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007840)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "d7d96f4faa5a7e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000008840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000008a40)={{0x0, 0x20, 0x31b, 0x7, 0x6, 0x7, 0x81, 0x9, 0x8, 0x0, 0x20, 0xffffffffc3167945, 0x8, 0x7, 0x8a8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053440)={0xa9b, [{}, {r1}, {0x0, r2}, {}, {}, {r3}, {}, {r4}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, r6}, {0x0, r7}, {r8, r9}, {}, {0x0, r10}, {}, {r11}, {}, {0x0, r12}, {r13}], 0x6, "9d8915eaaf4ef8"}) [ 108.077855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.083534] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.085438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.088866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.093464] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.094711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.116435] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.119372] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.128343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.134044] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.136073] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.137436] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.153809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.156487] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.157951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.162801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.164567] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.165710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.171932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.177518] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.189315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.195723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.198082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.199453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.215844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.219716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.220944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.230703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.237341] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.241634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.241731] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 108.244261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.244567] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 108.252456] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.252705] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 108.254457] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.260118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.274937] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 108.276528] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.279260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.279627] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 108.281841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 108.416199] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 108.433759] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 108.441372] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 108.459746] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 108.491371] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 108.502399] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.131947] Bluetooth: hci0: command tx timeout [ 110.191324] Bluetooth: hci2: command tx timeout [ 110.191527] Bluetooth: hci1: command tx timeout [ 110.255286] Bluetooth: hci3: command tx timeout [ 110.318249] Bluetooth: hci5: command tx timeout [ 110.319226] Bluetooth: hci4: command tx timeout [ 110.383256] Bluetooth: hci6: command tx timeout [ 110.639265] Bluetooth: hci7: command tx timeout [ 112.174221] Bluetooth: hci0: command tx timeout [ 112.238429] Bluetooth: hci2: command tx timeout [ 112.238536] Bluetooth: hci1: command tx timeout [ 112.302421] Bluetooth: hci3: command tx timeout [ 112.366242] Bluetooth: hci4: command tx timeout [ 112.366348] Bluetooth: hci5: command tx timeout [ 112.430353] Bluetooth: hci6: command tx timeout [ 112.686197] Bluetooth: hci7: command tx timeout [ 114.223182] Bluetooth: hci0: command tx timeout [ 114.290252] Bluetooth: hci2: command tx timeout [ 114.290359] Bluetooth: hci1: command tx timeout [ 114.355341] Bluetooth: hci3: command tx timeout [ 114.414248] Bluetooth: hci5: command tx timeout [ 114.414354] Bluetooth: hci4: command tx timeout [ 114.479925] Bluetooth: hci6: command tx timeout [ 114.736146] Bluetooth: hci7: command tx timeout [ 116.270340] Bluetooth: hci0: command tx timeout [ 116.334382] Bluetooth: hci1: command tx timeout [ 116.334740] Bluetooth: hci2: command tx timeout [ 116.398183] Bluetooth: hci3: command tx timeout [ 116.462194] Bluetooth: hci4: command tx timeout [ 116.462302] Bluetooth: hci5: command tx timeout [ 116.526175] Bluetooth: hci6: command tx timeout [ 116.782228] Bluetooth: hci7: command tx timeout [ 170.758457] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.760982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.762411] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.769774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.771736] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.773048] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.806818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.808567] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.809913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.813027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.819632] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.822446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.918556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.978907] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 170.981790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.982397] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 171.013958] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.014333] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.021079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.027141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 171.027385] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.032585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.032895] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 171.036903] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.042179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.044350] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.045305] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 171.045750] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.066571] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.069660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.070073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.071840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 171.078209] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.081222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.116792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.120692] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.124967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.143017] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.146015] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.153622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.160565] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.171287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.171518] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.177834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.192801] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.194486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.211947] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 171.213426] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 172.846236] Bluetooth: hci0: command tx timeout [ 172.913324] Bluetooth: hci1: command tx timeout [ 173.102189] Bluetooth: hci5: command tx timeout [ 173.168564] Bluetooth: hci7: command tx timeout [ 173.247152] Bluetooth: hci3: command tx timeout [ 173.294479] Bluetooth: hci6: command tx timeout [ 173.297471] Bluetooth: hci4: command tx timeout [ 173.297660] Bluetooth: hci2: command tx timeout [ 174.933143] Bluetooth: hci0: command tx timeout [ 174.959255] Bluetooth: hci1: command tx timeout [ 175.169206] Bluetooth: hci5: command tx timeout [ 175.235420] Bluetooth: hci7: command tx timeout [ 175.297679] Bluetooth: hci3: command tx timeout [ 175.343186] Bluetooth: hci2: command tx timeout [ 175.343425] Bluetooth: hci4: command tx timeout [ 175.343549] Bluetooth: hci6: command tx timeout [ 176.942168] Bluetooth: hci0: command tx timeout [ 177.006193] Bluetooth: hci1: command tx timeout [ 177.198232] Bluetooth: hci5: command tx timeout [ 177.262346] Bluetooth: hci7: command tx timeout [ 177.327202] Bluetooth: hci3: command tx timeout [ 177.392157] Bluetooth: hci6: command tx timeout [ 177.392271] Bluetooth: hci4: command tx timeout [ 177.392378] Bluetooth: hci2: command tx timeout [ 178.997237] Bluetooth: hci0: command tx timeout [ 179.057591] Bluetooth: hci1: command tx timeout [ 179.247181] Bluetooth: hci5: command tx timeout [ 179.336666] Bluetooth: hci7: command tx timeout [ 179.393610] Bluetooth: hci3: command tx timeout [ 179.451152] Bluetooth: hci2: command tx timeout [ 179.451262] Bluetooth: hci4: command tx timeout [ 179.451364] Bluetooth: hci6: command tx timeout [ 233.069683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.072606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.074358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.096445] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.097166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.104173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.104536] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.105034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.107197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.108141] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.108593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.130677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.132961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.133740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.134882] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.139757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.168153] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 233.168883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.316873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.340426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.349411] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.425444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.429403] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.436933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.442804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.444400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.449395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.459761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.463391] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.466431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.518638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.527272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 233.533470] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.549364] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.559463] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 233.564799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 233.565470] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.569225] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 233.571461] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 233.572512] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 233.572711] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 233.576219] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.581361] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 233.585626] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 233.586655] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.671432] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 233.726300] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 233.730754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.182209] Bluetooth: hci0: command tx timeout [ 235.182620] Bluetooth: hci2: command tx timeout [ 235.247769] Bluetooth: hci1: command tx timeout [ 235.502190] Bluetooth: hci3: command tx timeout [ 235.503353] Bluetooth: hci4: command tx timeout [ 235.694166] Bluetooth: hci6: command tx timeout [ 235.758394] Bluetooth: hci5: command tx timeout [ 235.822192] Bluetooth: hci7: command tx timeout [ 237.231157] Bluetooth: hci0: command tx timeout [ 237.231280] Bluetooth: hci2: command tx timeout [ 237.294164] Bluetooth: hci1: command tx timeout [ 237.556226] Bluetooth: hci4: command tx timeout [ 237.558154] Bluetooth: hci3: command tx timeout [ 237.742181] Bluetooth: hci6: command tx timeout [ 237.806270] Bluetooth: hci5: command tx timeout [ 237.870160] Bluetooth: hci7: command tx timeout [ 239.284153] Bluetooth: hci2: command tx timeout [ 239.284176] Bluetooth: hci0: command tx timeout [ 239.344132] Bluetooth: hci1: command tx timeout [ 239.598316] Bluetooth: hci4: command tx timeout [ 239.599144] Bluetooth: hci3: command tx timeout [ 239.791169] Bluetooth: hci6: command tx timeout [ 239.855222] Bluetooth: hci5: command tx timeout [ 239.918150] Bluetooth: hci7: command tx timeout [ 241.328127] Bluetooth: hci0: command tx timeout [ 241.328157] Bluetooth: hci2: command tx timeout [ 241.390185] Bluetooth: hci1: command tx timeout [ 241.646160] Bluetooth: hci4: command tx timeout [ 241.647456] Bluetooth: hci3: command tx timeout [ 241.840211] Bluetooth: hci6: command tx timeout [ 241.903152] Bluetooth: hci5: command tx timeout [ 241.974196] Bluetooth: hci7: command tx timeout [ 295.449964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.474100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.477537] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.480948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.482827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.483984] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.564472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.567627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.569347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.570808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.577103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.578169] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.578784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.591010] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.596762] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.602201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.605232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.610893] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.715334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.785807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.789205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.912583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.916780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.923570] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 295.926284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.927630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.930232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 295.930371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.932711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.934267] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 295.938713] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 295.942197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 295.942384] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.947414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.959853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.960706] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 295.970191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.979522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.980449] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.981039] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.009799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.053555] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.055247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.149368] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 296.155532] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.265446] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.277172] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 296.279629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.521688] Bluetooth: hci0: command tx timeout [ 297.652265] Bluetooth: hci2: command tx timeout [ 297.655188] Bluetooth: hci1: command tx timeout [ 298.031308] Bluetooth: hci5: command tx timeout [ 298.350225] Bluetooth: hci4: command tx timeout [ 298.350304] Bluetooth: hci6: command tx timeout [ 298.351280] Bluetooth: hci3: command tx timeout [ 298.446372] Bluetooth: hci7: command tx timeout [ 299.566409] Bluetooth: hci0: command tx timeout [ 299.722475] Bluetooth: hci1: command tx timeout [ 299.722598] Bluetooth: hci2: command tx timeout [ 300.079159] Bluetooth: hci5: command tx timeout [ 300.398284] Bluetooth: hci4: command tx timeout [ 300.398311] Bluetooth: hci6: command tx timeout [ 300.399539] Bluetooth: hci3: command tx timeout [ 300.463312] Bluetooth: hci7: command tx timeout [ 301.640264] Bluetooth: hci0: command tx timeout [ 301.764155] Bluetooth: hci2: command tx timeout [ 301.764277] Bluetooth: hci1: command tx timeout [ 302.153151] Bluetooth: hci5: command tx timeout [ 302.446320] Bluetooth: hci3: command tx timeout [ 302.446381] Bluetooth: hci4: command tx timeout [ 302.447375] Bluetooth: hci6: command tx timeout [ 302.514402] Bluetooth: hci7: command tx timeout [ 303.662151] Bluetooth: hci0: command tx timeout [ 303.790453] Bluetooth: hci1: command tx timeout [ 303.790572] Bluetooth: hci2: command tx timeout [ 304.175167] Bluetooth: hci5: command tx timeout [ 304.495150] Bluetooth: hci6: command tx timeout [ 304.495263] Bluetooth: hci4: command tx timeout [ 304.495368] Bluetooth: hci3: command tx timeout [ 304.559146] Bluetooth: hci7: command tx timeout [ 357.762653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.770284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.774203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.780385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.782679] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 357.787870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.264316] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.267220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.269243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.272326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.276592] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 358.278826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.337384] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.340769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.343304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.351305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.368737] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 358.369971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.469855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.475651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.485280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.489412] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.493263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.496752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.497352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.509293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 358.513661] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.530421] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 358.538489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.548302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.592121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.593799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 358.596465] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 358.596947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 358.602174] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 358.605155] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 358.612317] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 358.621285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.634325] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.644333] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.645688] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.646285] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.649287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.650496] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 358.651135] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 358.672988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.675570] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 358.687181] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.882128] Bluetooth: hci0: command tx timeout [ 360.366215] Bluetooth: hci1: command tx timeout [ 360.435792] Bluetooth: hci2: command tx timeout [ 360.622139] Bluetooth: hci3: command tx timeout [ 360.623440] Bluetooth: hci4: command tx timeout [ 360.686173] Bluetooth: hci7: command tx timeout [ 360.686590] Bluetooth: hci6: command tx timeout [ 360.750172] Bluetooth: hci5: command tx timeout [ 361.902196] Bluetooth: hci0: command tx timeout [ 362.414142] Bluetooth: hci1: command tx timeout [ 362.479364] Bluetooth: hci2: command tx timeout [ 362.670196] Bluetooth: hci4: command tx timeout [ 362.670320] Bluetooth: hci3: command tx timeout [ 362.734295] Bluetooth: hci6: command tx timeout [ 362.734513] Bluetooth: hci7: command tx timeout [ 362.798175] Bluetooth: hci5: command tx timeout [ 363.950372] Bluetooth: hci0: command tx timeout [ 364.462148] Bluetooth: hci1: command tx timeout [ 364.526101] Bluetooth: hci2: command tx timeout [ 364.720095] Bluetooth: hci4: command tx timeout [ 364.720206] Bluetooth: hci3: command tx timeout [ 364.784139] Bluetooth: hci6: command tx timeout [ 364.784954] Bluetooth: hci7: command tx timeout [ 364.846183] Bluetooth: hci5: command tx timeout [ 365.999155] Bluetooth: hci0: command tx timeout [ 366.510157] Bluetooth: hci1: command tx timeout [ 366.574155] Bluetooth: hci2: command tx timeout [ 366.766198] Bluetooth: hci3: command tx timeout [ 366.766330] Bluetooth: hci4: command tx timeout [ 366.830309] Bluetooth: hci6: command tx timeout [ 366.831130] Bluetooth: hci7: command tx timeout [ 366.894202] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 13:03:37 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88803732f848 RCX=0000000000000000 RDX=0000000000000070 RSI=0000000000000000 RDI=ffff88803732f7b0 RBP=ffff888028455340 RSP=ffff88803732f758 R8 =0000000000000001 R9 =0000000000000000 R10=ffff88803732f7b0 R11=0000000000000000 R12=0000000000000000 R13=ffff88803732f7d8 R14=ffff888028455340 R15=ffff88803732f7b0 RIP=ffffffff84a90a26 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3638060000 CR3=0000000015f2e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffea00009b4ac0 RCX=ffffffff818e6393 RDX=ffffea00009b4ac0 RSI=0000000000000008 RDI=ffffea00009b4ac0 RBP=ffffea00009b4ac0 RSP=ffff888036b3f628 R8 =0000000000000000 R9 =fffff94000136958 R10=ffffea00009b4ac7 R11=0000000000000001 R12=8000000026d2b027 R13=00007f9f8f2d5000 R14=ffff888036b3fad8 R15=0000000000000000 RIP=ffffffff818e63a0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feed69a26f4 CR3=000000000dd00000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007feed69b147000007feed69b0f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000