Warning: Permanently added '[localhost]:31449' (ECDSA) to the list of known hosts. 2025/04/23 00:37:28 fuzzer started 2025/04/23 00:37:28 dialing manager at localhost:42253 syzkaller login: [ 98.881848] cgroup: Unknown subsys name 'net' [ 99.040822] cgroup: Unknown subsys name 'cpuset' [ 99.088095] cgroup: Unknown subsys name 'rlimit' 2025/04/23 00:37:52 syscalls: 2214 2025/04/23 00:37:52 code coverage: enabled 2025/04/23 00:37:52 comparison tracing: enabled 2025/04/23 00:37:52 extra coverage: enabled 2025/04/23 00:37:52 setuid sandbox: enabled 2025/04/23 00:37:52 namespace sandbox: enabled 2025/04/23 00:37:52 Android sandbox: enabled 2025/04/23 00:37:52 fault injection: enabled 2025/04/23 00:37:52 leak checking: enabled 2025/04/23 00:37:52 net packet injection: enabled 2025/04/23 00:37:52 net device setup: enabled 2025/04/23 00:37:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/23 00:37:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/23 00:37:52 USB emulation: enabled 2025/04/23 00:37:52 hci packet injection: enabled 2025/04/23 00:37:52 wifi device emulation: enabled 2025/04/23 00:37:52 802.15.4 emulation: enabled 2025/04/23 00:37:52 fetching corpus: 0, signal 0/0 (executing program) 2025/04/23 00:37:54 starting 8 fuzzer processes 00:37:54 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x480200) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7a3, 0x6e}}}}, [@NL80211_ATTR_IE={0x40, 0x2a, [@peer_mgmt={0x75, 0x18, {0x1, 0x5, @val=0x7f, @val=0x32, @val="1b9ea28b3fd2d8f0b3f1ddc590da52e0"}}, @challenge={0x10, 0x1, 0x38}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x9, 0x86, @device_b, 0x7, 0x3a91}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x7) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0xb, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '\\\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c800) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x83c571a28b40a73e}, 0x4091) r1 = fsmount(r0, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x40}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x44048880) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000090) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000008c0)={r1, 0x2017, 0x1, 0x40}) recvmmsg$unix(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000900), 0x6e, &(0x7f0000000980), 0x0, &(0x7f00000009c0)}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000a80)=""/206, 0xce}, {&(0x7f0000000b80)=""/252, 0xfc}, {&(0x7f0000000c80)=""/229, 0xe5}], 0x3}}], 0x2, 0x40, &(0x7f0000000e40)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x78, r5, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xaff}, @NL80211_ATTR_VENDOR_DATA={0x53, 0xc5, "44a84818c6f22547d8cd491020401ec384a2e8bedd8a5f5e51c56b849c04ecb32bcf824cccf0a0d817d4da86c5c9de9031ad2fe54199d080a77d7e1f8c0ed7fac8186b76d6145b1b0c842331a79576"}]}, 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x840) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r1) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x52f4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x4004015) 00:37:54 executing program 3: r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xb2040, 0x40, 0x10}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x9, 0x80}, {0x6, 0x2}, 0x200, 0x0, 0x3}) r1 = fcntl$dupfd(r0, 0x0, r0) getsockname$netlink(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc) read(r1, &(0x7f0000000180)=""/164, 0xa4) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x68) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000280)={0x4, 0x4, 0x50}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0xfff7, @any, 0xfff7, 0x2}, 0xe) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x626e) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000380)) setns(r1, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000440)={&(0x7f0000000400)="b989b21360574d74d4f40ced344a38aba1fab12ef6d6c5b05b5e009dc0472191f851f3bc191276a42da2", 0x2a}, 0x1, 0x0, 0x0, 0x4081}, 0x10) r6 = open(&(0x7f00000004c0)='./file0\x00', 0x402400, 0x22) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000500)={0x1, 0xb2ce, 0x2b}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x501000, 0x1, 0xe}, 0x18) ioctl$FICLONE(r1, 0x40049409, r7) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000005c0)={'security\x00', 0x25, "9e9919c42e31e74f9a72f8c10499775e81a5c6fc08b0fe2b4eb96f21650b1d1ac040e69001"}, &(0x7f0000000640)=0x49) 00:37:54 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000000)={0x662c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "d6306f97a41fc3"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001000)={{r0, 0xfffffffffffffffa, 0x3, 0x4, 0x7f, 0x5, 0x526, 0x10000, 0x1000, 0x400, 0x6, 0x80000000, 0x6, 0x6, 0x2c9}}) getrusage(0x0, &(0x7f0000002000)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000020c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000002100)) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000002180)=""/29) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000021c0)=[r1], 0x1) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000002300)={"d45ae40670a018bd3912a500", &(0x7f0000002200)="649be96604f265e18cbee356413cd1db673b342c6e9dcd977a03be22f7a29a8ec63958e66d6400ab1b09d8437a00b1bb6591ef603755c9b24a3387cb53a732ad005701e732d1b46fe501c9e145987134a3fd1d090f97574340666ae38a26e6ff6cc44ae449ebf6a53c634b8b85a54f2b", 0x70, 0x5, &(0x7f0000002280)={0x69, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, "f73260d3", 0x7, "c85c62c2", 0x8, 0x40, 0x0, "cc94cd", "8fac8bb10ebeceb966ba6ecaca6c6f77ca6b0b2667be02e3c1d240201cf06c77f74b96aa7a9d7441844167f20fdf"}, 0x3, 0x20, 0x7fffffff, &(0x7f00000022c0)}) r2 = syz_open_dev$vcsa(&(0x7f0000002340), 0x2, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002580)={0x60, 0x0, &(0x7f00000024c0)=[@enter_looper, @increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002400)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000002380)=""/119, 0x77, 0x2, 0x33}}, &(0x7f0000002480)={0x0, 0x18, 0x30}}}, @increfs], 0x3b, 0x0, &(0x7f0000002540)="c61ea3c209c64982ff7d86bd743dd6ef668aae9838c3a8e5e35be9303192c209d050e928734d30d68089728a4c6fe9898ddb5d04fd563105d53d0e"}) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000025c0)) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000002600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_cancel(0x0, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000002840)="200bd94535e4cbbe85f0d4a423aa440b6431e57d1df750501ef909df4e3e591570d438e825753175d986671aa7fe0704fcbbf7d3126870eacf8f85f5675546e4c1375cf9be2eb37031fb17900f2a4beedad2fc5cb57a62cf074d71e3853e03778dec3ff138798ba3c9063a407495dd8d30ad2be7ed34b5e5ff20e9a4fe9c05cdb596291dadcf69a36d5abe4cce5c86c1f62e9d6827b2c6e05d0ca185dff63634e65096f88a7b96347989f451e8f01e310de68f76f209750cc2ba", 0xba, 0x0, 0x0, 0x2, r2}, &(0x7f0000002940)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002980), 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000029c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000002a00), &(0x7f0000002a40)=0x40) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000002a80), &(0x7f0000002ac0)=0xc) 00:37:54 executing program 2: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x7f, 0x4, 0x0, 0x5, 0x2, 0x6, 0x400, 0x263, 0x40, 0xf, 0x1ff, 0x9, 0x38, 0x1, 0x4, 0x9, 0x7ff}, [{0x7, 0x7, 0x3, 0xff, 0x800, 0x0, 0xffffffffffffffc0, 0x20fb}], "1077789b3c295bbff514d8746c5f80996408225574e1a74828fbda7e84004de0d3210d016af8f0841861623faa3bc8d2a2e5ced5bfb54a97a311f3bdd984db41204997f9d5e1174c27efd9fa3a2b0c3afeecb4088952d485cb3ed62a884fa578a1472dfae9463a50478e05d40dd182136476327d8a71c848ca2c9b34f3a2b70d6cca06bf8ab80b335898c1b07a912f04251cf4c6903334bdf27f74cb60a3f2cefe1e9813aeb0141204729057202f4b0eac0ce0b71373379a01e170783e6e5ea398a4a080c42d578af4fdc481a65dd98d7c6bcd8b9591f306ebb43bfe70b4e5d71fa998", ['\x00', '\x00', '\x00', '\x00']}, 0x55b) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r0, 0x918, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x3949}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFULA_CFG_NLBUFSIZ={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4048080) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000880)='\x00', 0x0, r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0), 0x440200, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000900)={0x1}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000940)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000980), 0xc00, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3d}}}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x3}, {0x5, 0x3}, {0x8a, 0x7}, {0x6, 0x2}, {0x8, 0x2}, {0x4, 0x4}, {0x9, 0x4}], "444df9fa10b97dd5"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x880) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x200040c0) r5 = semget$private(0x0, 0x4, 0x471) semctl$GETNCNT(r5, 0x0, 0xe, &(0x7f0000000d00)=""/10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xfffd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) 00:37:54 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x5}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) pidfd_send_signal(r2, 0x33, &(0x7f00000000c0)={0x38, 0x7f1, 0x3f}, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}}, 0xc) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x1000, 0x100, 0x0, 0x8, 0x9c1}) read$eventfd(r1, &(0x7f00000001c0), 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x44080, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x7, 0x40, 0xda, 0x4}, {0x2, 0x3, 0x1f, 0x8001}, {0xfef8, 0x1, 0x9, 0x5}, {0x3, 0x8, 0x80, 0xfffffffa}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) r6 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000440)=0x80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000480)={r5, 0x5d5c9f9f675f364, r6, 0x0, 0x80000}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000700)=[0x0, 0xee01, 0xffffffffffffffff]) fsetxattr$system_posix_acl(r2, &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000740)={{}, {0x1, 0x1}, [{0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x5, r7}, {0x2, 0x0, 0xffffffffffffffff}], {0x4, 0x4}, [{0x8, 0x1}, {0x8, 0x7, r8}, {0x8, 0x1}, {0x8, 0x2, r9}, {0x8, 0x1}, {0x8, 0x2, r10}], {}, {0x20, 0x5}}, 0x6c, 0x2) [ 124.558254] audit: type=1400 audit(1745368674.677:7): avc: denied { execmem } for pid=280 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:37:54 executing program 5: capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x1, 0xffffffff, 0x9, 0x3ff, 0x8, 0x3f}) setpriority(0x2, 0xffffffffffffffff, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x103082, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000140)={0x6, 0x4, 0x0, 'queue0\x00', 0x367}) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$P9_RATTACH(r2, &(0x7f00000002c0)={0x14, 0x69, 0x1, {0x80, 0x4, 0x8}}, 0x14) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000300)={0x19, "dbc3955cf5f6ad33f81265c6d870f844cca8bd7242927fac78"}) r3 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400d4}, 0x40080d9) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000500)={{r0}, {@val, @max}}) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000540)=0x1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000940)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000005c0)={0x328, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "edbfaa409e4e29a3354a8c32a3b67739f8cac53d50015c07"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "1c4b0d516d9d9ce6ff6195e8b9f8d024c94924dcb41d1184e8ff96"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "bb9b0df51ba9a9ab44e9d4eb6c54728f0df581fdfc6efc44e9fd619d3c80620129"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x65}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e8c}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86b0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79ab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x8890}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x4) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000a00)=0x41, 0x4) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000a40)) 00:37:54 executing program 6: ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000000)=""/60, 0x3c}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)) r1 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000) openat$cgroup_int(r1, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) ioprio_get$uid(0x0, 0xee01) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000140), 0x6e, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/180, 0xb4}, {&(0x7f0000001280)=""/249, 0xf9}, {&(0x7f0000001380)=""/32, 0x20}, {&(0x7f00000013c0)=""/34, 0x22}, {&(0x7f0000001400)=""/33, 0x21}, {&(0x7f0000001440)=""/225, 0xe1}], 0x7, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001640), 0x309860, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000001680)={0x0, 0x4, "13f050", 0x2, 0x3f}) r4 = syz_open_dev$vcsn(&(0x7f00000016c0), 0x8f1, 0x802) r5 = getpid() fcntl$lock(r4, 0x6, &(0x7f0000001700)={0x2, 0x2, 0x9, 0x200, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000001740)={'macvtap0\x00'}) ioctl$DVD_WRITE_STRUCT(r4, 0x5390, &(0x7f0000001780)=@disckey={0x2, 0x1, "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"}) r7 = getpgid(r2) sched_setscheduler(r7, 0x1, &(0x7f0000001fc0)=0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000002140)={0x7, 0x4d, 0x1}, 0x7) 00:37:54 executing program 7: getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7d39, @any, 0x2, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xe2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, 0xe) syncfs(0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x501982, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x29, 0x67, 0x7f, 0x8, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, @local, 0x8000, 0x8310, 0x34, 0x800}}) fallocate(r0, 0x10, 0xfff, 0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x148, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x70, &(0x7f0000000640)=@generic={0x8, 0x0, 0x68, "89f3fd9d", "8ca0981157a8668d96b09c3c3012d16d16c3fec07edd25cd06cbc31f7faba28271dd58962a5db7a2e4469ff6cdbc74d29db3432d08ad385e19f82edd53c283c68e312128008e1119d013f96f69215de1eb0cdb224d3c0fdea0e1f8ea176f570cc40b777b1b1bbd6c"}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r4, 0x4, 0xff, 0x2d, 0xffffff00, 0x8, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x99, 0x20}}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000780)={@remote, @empty, @multicast1}, 0xc) r6 = openat$incfs(r0, &(0x7f00000007c0)='.log\x00', 0x200, 0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8885}, 0x0) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r7) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f00000009c0)) [ 126.100262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.106554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.109738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.119910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.128804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.174098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.176226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.185289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.190780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.192612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.202957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.204815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.205206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.210248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.228676] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.235644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.239881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.246978] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.250102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.253924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.255769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.298064] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 126.304839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.308850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.315304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.331821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.355717] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 126.357421] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 126.360105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 126.362044] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 126.364600] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 126.366548] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.380609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.386890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.391593] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 126.406859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 126.410081] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 126.411790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.419103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.421225] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.229243] Bluetooth: hci0: command tx timeout [ 128.293371] Bluetooth: hci5: command tx timeout [ 128.357672] Bluetooth: hci1: command tx timeout [ 128.484500] Bluetooth: hci2: command tx timeout [ 128.484647] Bluetooth: hci6: command tx timeout [ 128.485239] Bluetooth: hci3: command tx timeout [ 128.549556] Bluetooth: hci7: command tx timeout [ 128.550194] Bluetooth: hci4: command tx timeout [ 130.276769] Bluetooth: hci0: command tx timeout [ 130.340720] Bluetooth: hci5: command tx timeout [ 130.404377] Bluetooth: hci1: command tx timeout [ 130.533371] Bluetooth: hci3: command tx timeout [ 130.533832] Bluetooth: hci6: command tx timeout [ 130.534261] Bluetooth: hci2: command tx timeout [ 130.596447] Bluetooth: hci4: command tx timeout [ 130.596887] Bluetooth: hci7: command tx timeout [ 132.324414] Bluetooth: hci0: command tx timeout [ 132.390577] Bluetooth: hci5: command tx timeout [ 132.452563] Bluetooth: hci1: command tx timeout [ 132.580472] Bluetooth: hci2: command tx timeout [ 132.580968] Bluetooth: hci6: command tx timeout [ 132.582422] Bluetooth: hci3: command tx timeout [ 132.644424] Bluetooth: hci7: command tx timeout [ 132.644530] Bluetooth: hci4: command tx timeout [ 134.372758] Bluetooth: hci0: command tx timeout [ 134.437703] Bluetooth: hci5: command tx timeout [ 134.500708] Bluetooth: hci1: command tx timeout [ 134.629378] Bluetooth: hci6: command tx timeout [ 134.629445] Bluetooth: hci3: command tx timeout [ 134.629880] Bluetooth: hci2: command tx timeout [ 134.692627] Bluetooth: hci4: command tx timeout [ 134.693513] Bluetooth: hci7: command tx timeout [ 185.955550] syz-executor.0 (290) used greatest stack depth: 24296 bytes left [ 188.286416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.293206] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.301415] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.308847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.317863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.615542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.629170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.632379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.642064] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.644196] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.655191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.659874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.669600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.679159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.680638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.687930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.689869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.701014] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.706754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.710419] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.967528] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.983104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.023737] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.025127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.037502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.041297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.043419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.048226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.066879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.068872] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.075144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.083863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.110848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.113226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.157058] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.169881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.175118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.186922] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.229917] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.269219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.372472] Bluetooth: hci0: command tx timeout [ 190.694471] Bluetooth: hci1: command tx timeout [ 190.757406] Bluetooth: hci3: command tx timeout [ 190.884570] Bluetooth: hci2: command tx timeout [ 191.269012] Bluetooth: hci5: command tx timeout [ 191.332636] Bluetooth: hci6: command tx timeout [ 191.332827] Bluetooth: hci7: command tx timeout [ 191.333715] Bluetooth: hci4: command tx timeout [ 192.420500] Bluetooth: hci0: command tx timeout [ 192.742018] Bluetooth: hci1: command tx timeout [ 192.805507] Bluetooth: hci3: command tx timeout [ 192.932989] Bluetooth: hci2: command tx timeout [ 193.318953] Bluetooth: hci5: command tx timeout [ 193.380441] Bluetooth: hci7: command tx timeout [ 193.382286] Bluetooth: hci6: command tx timeout [ 193.382426] Bluetooth: hci4: command tx timeout [ 194.468418] Bluetooth: hci0: command tx timeout [ 194.790358] Bluetooth: hci1: command tx timeout [ 194.854339] Bluetooth: hci3: command tx timeout [ 194.981444] Bluetooth: hci2: command tx timeout [ 195.365381] Bluetooth: hci5: command tx timeout [ 195.428489] Bluetooth: hci6: command tx timeout [ 195.428524] Bluetooth: hci4: command tx timeout [ 195.428942] Bluetooth: hci7: command tx timeout [ 196.518350] Bluetooth: hci0: command tx timeout [ 196.836455] Bluetooth: hci1: command tx timeout [ 196.900575] Bluetooth: hci3: command tx timeout [ 197.028539] Bluetooth: hci2: command tx timeout [ 197.412572] Bluetooth: hci5: command tx timeout [ 197.476456] Bluetooth: hci4: command tx timeout [ 197.476516] Bluetooth: hci7: command tx timeout [ 197.476950] Bluetooth: hci6: command tx timeout [ 248.420644] syz-executor.3 (2876) used greatest stack depth: 23704 bytes left [ 250.554521] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.558254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.562922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.570998] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.577844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.868755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.872129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.874634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.882930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.888641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.888992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.893590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.895245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.912288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.932290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.970589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.980896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.994014] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.007991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.019126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.065648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.079059] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 251.124636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 251.147696] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 251.149800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 251.180181] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 251.191738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.192820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.221159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.226585] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 251.241979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.262858] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 251.264741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.289116] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.306781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.313671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.319257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.338913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.363784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.393264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.644625] Bluetooth: hci0: command tx timeout [ 252.965629] Bluetooth: hci1: command tx timeout [ 253.028701] Bluetooth: hci2: command tx timeout [ 253.156598] Bluetooth: hci3: command tx timeout [ 253.348626] Bluetooth: hci6: command tx timeout [ 253.412426] Bluetooth: hci7: command tx timeout [ 253.476444] Bluetooth: hci4: command tx timeout [ 253.540395] Bluetooth: hci5: command tx timeout [ 254.692637] Bluetooth: hci0: command tx timeout [ 255.012578] Bluetooth: hci1: command tx timeout [ 255.076386] Bluetooth: hci2: command tx timeout [ 255.204437] Bluetooth: hci3: command tx timeout [ 255.396391] Bluetooth: hci6: command tx timeout [ 255.460591] Bluetooth: hci7: command tx timeout [ 255.524450] Bluetooth: hci4: command tx timeout [ 255.590344] Bluetooth: hci5: command tx timeout [ 256.740556] Bluetooth: hci0: command tx timeout [ 257.060613] Bluetooth: hci1: command tx timeout [ 257.124425] Bluetooth: hci2: command tx timeout [ 257.252529] Bluetooth: hci3: command tx timeout [ 257.444888] Bluetooth: hci6: command tx timeout [ 257.508412] Bluetooth: hci7: command tx timeout [ 257.572614] Bluetooth: hci4: command tx timeout [ 257.636434] Bluetooth: hci5: command tx timeout [ 258.789523] Bluetooth: hci0: command tx timeout [ 259.108698] Bluetooth: hci1: command tx timeout [ 259.172416] Bluetooth: hci2: command tx timeout [ 259.300533] Bluetooth: hci3: command tx timeout [ 259.492439] Bluetooth: hci6: command tx timeout [ 259.556736] Bluetooth: hci7: command tx timeout [ 259.620398] Bluetooth: hci4: command tx timeout [ 259.684684] Bluetooth: hci5: command tx timeout [ 313.019297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.023481] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.031982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.068296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.076373] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.088121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.094995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.103775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.124571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.142334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.148613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.154159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.161394] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.201803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.215842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.231644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.240243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.243274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.269889] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.281808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.292662] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.305039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.315891] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.347880] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 313.351985] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 313.356854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 313.358709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.369170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.372737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.393659] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 313.395778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.401878] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.406838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.428566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.432054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.435510] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.483583] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.510726] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.521822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.526829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.172482] Bluetooth: hci0: command tx timeout [ 315.236471] Bluetooth: hci1: command tx timeout [ 315.300410] Bluetooth: hci2: command tx timeout [ 315.428553] Bluetooth: hci3: command tx timeout [ 315.492434] Bluetooth: hci4: command tx timeout [ 315.493143] Bluetooth: hci5: command tx timeout [ 315.557591] Bluetooth: hci7: command tx timeout [ 315.620648] Bluetooth: hci6: command tx timeout [ 317.220712] Bluetooth: hci0: command tx timeout [ 317.286351] Bluetooth: hci1: command tx timeout [ 317.349744] Bluetooth: hci2: command tx timeout [ 317.477496] Bluetooth: hci3: command tx timeout [ 317.541152] Bluetooth: hci4: command tx timeout [ 317.542422] Bluetooth: hci5: command tx timeout [ 317.605485] Bluetooth: hci7: command tx timeout [ 317.669483] Bluetooth: hci6: command tx timeout [ 319.268375] Bluetooth: hci0: command tx timeout [ 319.332390] Bluetooth: hci1: command tx timeout [ 319.396427] Bluetooth: hci2: command tx timeout [ 319.525353] Bluetooth: hci3: command tx timeout [ 319.588433] Bluetooth: hci5: command tx timeout [ 319.588896] Bluetooth: hci4: command tx timeout [ 319.652642] Bluetooth: hci7: command tx timeout [ 319.716702] Bluetooth: hci6: command tx timeout [ 321.317644] Bluetooth: hci0: command tx timeout [ 321.380366] Bluetooth: hci1: command tx timeout [ 321.444377] Bluetooth: hci2: command tx timeout [ 321.573379] Bluetooth: hci3: command tx timeout [ 321.637701] Bluetooth: hci4: command tx timeout [ 321.638153] Bluetooth: hci5: command tx timeout [ 321.701671] Bluetooth: hci7: command tx timeout [ 321.764632] Bluetooth: hci6: command tx timeout [ 375.481683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.484971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.488051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.497482] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.502798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.566682] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.569289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.572883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.582811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.590429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.653841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.676901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.680896] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.692914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.696195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.720456] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.741012] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.742672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.745823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.759974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.767641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.770197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.775910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.780114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.785985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.868823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.880657] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.884235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.919601] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.930933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.076091] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 376.079493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 376.081889] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 376.087253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 376.090834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.119568] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.139918] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.199256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.250909] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.282011] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.572861] Bluetooth: hci0: command tx timeout [ 377.637365] Bluetooth: hci1: command tx timeout [ 377.829801] Bluetooth: hci3: command tx timeout [ 377.892759] Bluetooth: hci2: command tx timeout [ 377.892801] Bluetooth: hci4: command tx timeout [ 378.086078] Bluetooth: hci6: command tx timeout [ 378.149385] Bluetooth: hci7: command tx timeout [ 378.404433] Bluetooth: hci5: command tx timeout [ 379.620414] Bluetooth: hci0: command tx timeout [ 379.684864] Bluetooth: hci1: command tx timeout [ 379.877475] Bluetooth: hci3: command tx timeout [ 379.941573] Bluetooth: hci2: command tx timeout [ 379.942021] Bluetooth: hci4: command tx timeout [ 380.133517] Bluetooth: hci6: command tx timeout [ 380.196533] Bluetooth: hci7: command tx timeout [ 380.454344] Bluetooth: hci5: command tx timeout [ 381.669278] Bluetooth: hci0: command tx timeout [ 381.733391] Bluetooth: hci1: command tx timeout [ 381.925154] Bluetooth: hci3: command tx timeout [ 381.989350] Bluetooth: hci4: command tx timeout [ 381.989842] Bluetooth: hci2: command tx timeout [ 382.180703] Bluetooth: hci6: command tx timeout [ 382.245098] Bluetooth: hci7: command tx timeout [ 382.500659] Bluetooth: hci5: command tx timeout [ 383.716688] Bluetooth: hci0: command tx timeout [ 383.780411] Bluetooth: hci1: command tx timeout [ 383.972460] Bluetooth: hci3: command tx timeout [ 384.037507] Bluetooth: hci2: command tx timeout [ 384.038001] Bluetooth: hci4: command tx timeout [ 384.228824] Bluetooth: hci6: command tx timeout [ 384.292445] Bluetooth: hci7: command tx timeout [ 384.548378] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 00:42:56 Registers: info registers vcpu 0 RAX=00000000000020c5 RBX=ffff888036235340 RCX=0000000000000020 RDX=0000000000000001 RSI=0000000000000020 RDI=0000000000000002 RBP=0000000000000000 RSP=ffff88806ce088b0 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=000000000002499a R12=ffff888036235de8 R13=0000000000000001 R14=0000000000000003 R15=ffff888036235d98 RIP=ffffffff815166bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564d000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055eb92c57008 CR3=000000002b5ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff81b543e9 RCX=ffff88802f95f3ac RDX=1ffff11005f2be96 RSI=ffffffff85c1ba80 RDI=ffffffff81b543e9 RBP=ffff88802f95f4b0 RSP=ffff88802f95f430 R8 =0000000000000001 R9 =ffff88802f95f498 R10=000000000003b0b4 R11=000000000002c914 R12=ffff88802f95f520 R13=0000000000000000 R14=ffff88801681d340 R15=0000000000000cc0 RIP=ffffffff8142fcc1 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574d000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4e79f76008 CR3=000000000d58c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000