Warning: Permanently added '[localhost]:27934' (ECDSA) to the list of known hosts. 2025/04/26 20:21:30 fuzzer started 2025/04/26 20:21:31 dialing manager at localhost:46629 syzkaller login: [ 100.843149] cgroup: Unknown subsys name 'net' [ 100.991282] cgroup: Unknown subsys name 'cpuset' [ 101.034431] cgroup: Unknown subsys name 'rlimit' 2025/04/26 20:21:56 syscalls: 2214 2025/04/26 20:21:56 code coverage: enabled 2025/04/26 20:21:56 comparison tracing: enabled 2025/04/26 20:21:56 extra coverage: enabled 2025/04/26 20:21:56 setuid sandbox: enabled 2025/04/26 20:21:56 namespace sandbox: enabled 2025/04/26 20:21:56 Android sandbox: enabled 2025/04/26 20:21:56 fault injection: enabled 2025/04/26 20:21:56 leak checking: enabled 2025/04/26 20:21:56 net packet injection: enabled 2025/04/26 20:21:56 net device setup: enabled 2025/04/26 20:21:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/26 20:21:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/26 20:21:56 USB emulation: enabled 2025/04/26 20:21:56 hci packet injection: enabled 2025/04/26 20:21:56 wifi device emulation: enabled 2025/04/26 20:21:56 802.15.4 emulation: enabled 2025/04/26 20:21:56 fetching corpus: 0, signal 0/0 (executing program) 2025/04/26 20:21:58 starting 8 fuzzer processes 20:21:58 executing program 0: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x0, @multicast1}}) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1fc, 0x1, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_EXP={0x160, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2e52}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, @NFQA_PAYLOAD={0xa, 0xa, "0abdc7237350"}, @NFQA_EXP={0x34, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x140}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x29}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x2}}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}]}, @NFQA_PAYLOAD={0x1f, 0xa, "c6c2f2a8896aa346af506685184ec93f479d7c1d5e2a6c0da59908"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4050}, 0x2000) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000003c0)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x401}) socketpair(0x2, 0x5, 0xfffffeff, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000440)={'ip6gre0\x00'}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000480)={0x8000, 0x6, 0x2, 0x7, 0xff, 0x1, 0xab1}, 0xc) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000540)=@req={0x28, &(0x7f0000000500)={'veth1_to_bond\x00', @ifru_data=&(0x7f00000004c0)="3570ad07ccbd9754e0d87beda60a2fa9c5d8c7b4d66cb389cd52fe14aba80af8"}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = fcntl$dupfd(r0, 0x406, r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000840)=0x9, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xc4, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0xa4, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}]}]}, 0xc4}}, 0x4000a) getsockname$inet(r2, &(0x7f0000000a40)={0x2, 0x0, @broadcast}, &(0x7f0000000a80)=0x10) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f0000000ac0), &(0x7f0000000b00)) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000b40)) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000b80)=0x40, &(0x7f0000000bc0)=0x2) 20:21:58 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/245, 0xf5, 0x1, &(0x7f0000000100)=""/246, 0xf6}, &(0x7f0000000240)=0x40) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x100}]}, 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/64, 0x40}], 0x2, &(0x7f0000001480)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000002680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/169, 0xa9}, {&(0x7f0000002640)=""/18, 0x12}], 0x3, &(0x7f00000026c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f0000002b40)=[{&(0x7f00000028c0)=""/196, 0xc4}, {&(0x7f00000029c0)=""/226, 0xe2}, {&(0x7f0000002ac0)=""/91, 0x5b}], 0x3, &(0x7f0000002b80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x3, 0x10000, &(0x7f0000002cc0)={0x0, 0x989680}) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f0000002d00)={0x2, 0x5, 0x2, 0x6, 0x101, 0xbae}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d80), r10) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x20, r11, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000003000)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0xf0, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x67}}}}, [@NL80211_ATTR_VENDOR_DATA={0xb5, 0xc5, "ef0d033cf1f180eddf6dcb6045e005e4fd9242279d1a42cddb0b6e13b7e2400c2b0d59af15a6710db902d80e71d117aa6276efd621240297eb1938b89b4a9950874115a0ba124f6bd3b381c9f03197461f444b22f907be9ec1ea21519218dfbd011127dccbeb38f0b5d6fdb731741db90bb3afa3751a778c6f16c0b06f0a0b6672c2554c71547aeff743b1426ccdbf87dc4e31671f10a6d61d4e63342d27ce1f396db9bf0797e7d3942ba16a0b0d27e6b5"}, @NL80211_ATTR_VENDOR_DATA={0xf, 0xc5, "a3d350eef8eb5dfb91450b"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x20040840) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000003040)=""/12) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003080)='/sys/module/kmemleak', 0x50a402, 0xa0) sendmsg$NFT_MSG_GETTABLE(r12, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x60, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x24002090) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000003240), r8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x2c, r13, 0x91e819de3f5e2166, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000) getsockopt$WPAN_SECURITY_LEVEL(r12, 0x0, 0x2, &(0x7f0000003340), &(0x7f0000003380)=0x4) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x2c, r13, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2004c014) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000034c0)={0x2, 0xc243}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003580)={'syztnl2\x00', &(0x7f0000003500)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x8000, 0x3, {{0x13, 0x4, 0x3, 0x7, 0x4c, 0x66, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0x28, 0x75, 0x0, 0x6, [0x9, 0xad7, 0x8, 0x1000, 0x28, 0x7, 0x9, 0x3000000, 0x80000001]}, @generic={0x7, 0xc, "c2e7fd3546c7b99dac91"}, @noop]}}}}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r5, @out_args}, './file0\x00'}) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000003640), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r14, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x38, r15, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000000) syz_genetlink_get_family_id$SEG6(&(0x7f0000003740), r4) 20:21:58 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/186) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x40000000}) r3 = inotify_init1(0x80000) write$binfmt_misc(r3, &(0x7f0000000180)={'syz1', "bd1b4a6201d87ea93432925991f8d36e96893c77ac4bc93f9ce27980ca9bb56a1ff166c54d70861e2c7462f59d377fec00798c4dc3c844c3dab5fc9c93416621757d0a0bb29a"}, 0x4a) r4 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x7f}}, './file0\x00'}) r6 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r6, 0xc0305302, &(0x7f0000000240)={0x80000000, 0x9, 0x8001, 0x8001, 0x7, 0x3}) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000280)) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x81) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/firmware/dmi', 0x48000, 0xb4) name_to_handle_at(r7, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@reiserfs_5={0x14, 0x5, {0x1, 0x101, 0x0, 0x200, 0x200}}, &(0x7f0000000480), 0x1400) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x401, 0x7fffffff}}, './file0\x00'}) r9 = openat(r8, &(0x7f0000000500)='./file1\x00', 0x44000, 0x145) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$TIOCL_SETVESABLANK(r10, 0x541c, &(0x7f00000005c0)) stat(&(0x7f0000000600)='./file2\x00', &(0x7f0000000640)) 20:21:58 executing program 3: mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x103) lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x6}, [{0x2, 0x3, 0xffffffffffffffff}], {}, [{0x8, 0x0, 0xee00}, {0x8, 0x2, r1}], {0x10, 0x4}}, 0x3c, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x101}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x80000000}, @ETHTOOL_A_CHANNELS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x2004c004) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1000008, &(0x7f0000000400)={[{@huge_advise}, {@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x2c, 0x3a, 0xf]}}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6d, 0x2d, 0x34]}}, {@huge_within_size}, {@size={'size', 0x3d, [0x6b, 0x31]}}, {@huge_advise}, {@huge_never}], [{@euid_eq={'euid', 0x3d, r0}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@hash}]}) r3 = open(&(0x7f00000004c0)='./file1\x00', 0x131600, 0x40) fcntl$setpipe(r3, 0x407, 0x9) mount$9p_virtio(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', &(0x7f0000000580), 0x8000, &(0x7f00000005c0)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x6}}, {@cache_mmap}, {@access_any}], [{@obj_user={'obj_user', 0x3d, 'huge=advise'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'wg2\x00'}}, {@smackfshat={'smackfshat', 0x3d, '{'}}]}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000640)={{0x0, 0x4, 0x0, 0x3, 0x200, 0x400, 0x7, 0x8, 0x1, 0x1f, 0x0, 0x4, 0xf3, 0x0, 0x8}}) write$P9_RWSTAT(r3, &(0x7f0000001640)={0x7, 0x7f, 0x1}, 0x7) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x2c, 0x0, 0x210, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004}, 0x4c000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000017c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000001900)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0x94, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r5 = accept(r3, &(0x7f0000001940)=@qipcrtr, &(0x7f00000019c0)=0x80) copy_file_range(r2, &(0x7f0000001a00)=0x7f, r2, &(0x7f0000001a40), 0xe55, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000001ac0)={0xdf, 0x4, 0x1}) mount$9p_fd(0x0, &(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40), 0x23000, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@aname={'aname', 0x3d, '{:'}}, {@access_user}, {@access_uid={'access', 0x3d, 0xee01}}, {@msize={'msize', 0x3d, 0x100}}, {@access_any}, {@access_user}, {@access_uid={'access', 0x3d, 0xee01}}, {@msize={'msize', 0x3d, 0x8}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_measure}]}}) write$P9_RLCREATE(r2, &(0x7f0000001c80)={0x18, 0xf, 0x2, {{0x8, 0x2, 0x5}, 0x1}}, 0x18) [ 127.640026] audit: type=1400 audit(1745698918.503:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:21:58 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000880) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x3f, 0x1, 0x7ff}}, 0x400002) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x2}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x6a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4010854) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x34}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x20000008) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x96, 0x9, 0xe6, 0x58, @mcast1, @loopback, 0x20, 0x8000, 0x2, 0x8}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xff}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x80000000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xfff9}, {0x8, 0x13, 0x10001}, {0x5, 0x14, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20050}, 0x4000000) r6 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "528bb57f8d42cf7f30d3e94739bb72836e7cc99c72fbbdd7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f46f6d7bc4d6682d6ac2445b21e5f951137151b3d562794a"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d7303a522b6d0ef26e65f95438d2eb4e7991f19c46fb599b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2ec99e3578c8f196262788d7fab483c5bb4e1e2e2ff095c1"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x110}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) r7 = dup(r1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000d00)={{'\x00', 0x2}, {0x5}, 0x40, 0x0, 0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)="3859a64147c1b6cd03cb0f41717cf0e7d45effd424a2c80601de2a7995190120463629093647bb2a6ae699b497929bfd8ca4dfa2dd601116f02933fa7754f3dd01729be5396cd0ea8497cd5219bf659bd02c3a117fa1393e249734c9fe3968371e327c78b38575ac0e392970ee0fa796ef9d41ee1288e38a18404279c9457ecc7b900b002d022c6a96553e5850", 0x8d, 0x0, &(0x7f0000000b40)={0x2, 0x122, {0x0, 0xc, 0x79, "0f0d2c78989beb8f4de6e5808203629c2fd9dd908e07bd4878af888e525425f203d91bec7605e5e786c2f5a225202dc15aae372770749bbae2996c08b4cb83a870ce096503cf67f8fe029242781ad8d1883ab1ec3a05730905e2cc9b4798dc4fc62ca001d95122b82e81e3339fbea5b078e822b27e314c1fa5", 0x9c, "07e020db54cd96a08a04d9256e3201790f72d66768c8470581588c93aa07d7e980501a1f7143f2ba3f99e7b03626925072c889a75695654d05855ea4f7d1e0815da045cdbccb33bee45cd64aa3b49309198771bc5b4fdba492fed927f3915a04b176cb712acbffdd52d8ecf9d0ce2fb7f4ba249daee318c68c3b4b9a80fe6ac781743f4af1c947f7f919c89a0486b0ca28368e221f8e2b31d67935aa"}, 0x66, "7d2137abf011550b95d231c960f20cc20aa024d44eaec06472db901d70d1fe16585951ac53e9ccf7d37729bd969b2391dc4df0ce6f19a1d6a0be9f26ce314bd33789117f46e230eb2130b83cab0c64e187ce2b9b2c4dd1044478cef11dc9b4cc9d4be6bb6659"}, 0x194}) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000d80)) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004080}, 0x4) 20:21:58 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x8, @multicast1, 0x4e24, 0x4, 'nq\x00', 0x0, 0x8, 0x4}, {@remote, 0x4e23, 0x2, 0x5, 0x5, 0x5}}, 0x44) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000003c0)={0x5, &(0x7f0000000300)=[{0x3f, 0x1b, &(0x7f00000000c0)="0ec2c9edfdcd58188bd5ef6bceb4aa1979398c6d278151cf3cb66d", 0x0, 0x1}, {0x8001, 0x7, &(0x7f0000000100)="d32f2540c00fd2", 0x0, 0x1}, {0x6, 0x3b, &(0x7f0000000140)="9d0315dce127918793738cc0b452ce13434e23a7c5c77efb75be294839348b41036d518d4341dc39db5ef3de9d3bdaa613ab26b0504977c8e3193c", 0x1, 0x1}, {0x1, 0xfe, &(0x7f0000000180)="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", 0x0, 0x1}, {0x4, 0x42, &(0x7f0000000280)="c1697760ed663ed851ac292ad882d1242d0324336caecd04e3eb0ce3cd607c05903bbd3a37cec6f23f9367803fd19e3018999da8732781c0963e634c36102a2b5984", 0x1, 0x1}]}) r1 = dup2(r0, r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000400)=0x1) prctl$PR_SET_UNALIGN(0x6, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) r3 = pidfd_open(0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000004c0)={0x53, 0x1580, 0x4, {0x7, 0x1}, {0x1, 0x80}, @ramp={0xf32, 0x5, {0x200, 0x0, 0x3f, 0x7}}}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='nq\x00', &(0x7f0000000540)='(\x00', 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000600)={0x2, 'macvlan0\x00', {0x3}, 0x8}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000640)={{0x2d, @rand_addr=0x64010102, 0x4e20, 0x2, 'ovf\x00', 0x10, 0x4, 0x61}, {@rand_addr=0x64010101, 0x4e21, 0x0, 0x3, 0x9, 0x3}}, 0x44) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000006c0)=0xd) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000700)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 'ovf\x00', 0x10, 0xd5, 0x45}, {@remote, 0x4e23, 0x2, 0x800, 0x8001, 0x1f}}, 0x44) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000780)={0x3c, 0x8, 0x2, 0x94, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @loopback]}, 0x48) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000800)) syz_open_dev$vcsn(&(0x7f0000000840), 0x7, 0x10080) 20:21:58 executing program 6: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x1, 0x1, 0x2a34}) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x82, "7151991d7634e568c193847bae77615f3a7cac1c73a3be64060456da3df420d98cbf60a82dc1243833f7c20b7dec0818d31e959334d2d7ad42c2af9c8d8a3c60002be87c11224fc228aaf4e9152de2fd4d4e03102cd96d9b2d220ae8336e46bec1c75991abc1730ca304ace365e7eed84086825b7f0c6abf305641b034020161866a"}) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000100)) fchmod(0xffffffffffffffff, 0x246) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100) mknod(&(0x7f0000000280)='./file0\x00', 0x8000, 0x1) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x3, 0xfb, 0x1c, 0x0, 0x0, 0xfffffffffffffffa, 0x448, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x1102, 0x7fffffff, 0x8000, 0x2, 0x9, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x4) r3 = socket$inet6(0xa, 0x4, 0x0) readv(r3, &(0x7f0000002740)=[{&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x3) lsetxattr(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)=@random={'osx.', '-\'):\x00'}, &(0x7f0000002800)='net_prio.ifpriomap\x00', 0x13, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000002840)='./file0\x00', &(0x7f0000002880), &(0x7f00000028c0)={'L+', 0x3}, 0x16, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000002940)={0x9, 0x30, '\x00', 0x0, &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket(0x1a, 0x2, 0xfffffffb) fallocate(r4, 0x2, 0x8000, 0xb4) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000002980)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000029c0)) 20:21:58 executing program 7: sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf4, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5b}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2a90e0}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4040040) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x11994c2e15e2c171) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc5) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8840) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, @in_args={0x2}}, './file0\x00'}) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000640)=0x6) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4048000}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000840)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd0, 0x0, 0x808, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x7ff, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x5) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x158, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) bind$802154_raw(r0, &(0x7f0000000d40)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000d80)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000001140)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e40)={0x294, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x278, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x1}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0xa}, {}, {0x4, 0x4}, {0x0, 0x4}, {0x3}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x5}, {0x4, 0x7}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x5, 0x6}, {0x0, 0x8}, {0x3, 0x5}, {0x6, 0x8}, {0x5, 0x3}, {}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x2}, {0x3, 0x2}, {0x6, 0x2}, {0x1, 0x9}, {0x6, 0x9}, {0x7, 0x5}, {0x4, 0xa}, {0x2, 0x8}, {0x4, 0x7}, {0x4, 0x6}, {0x5, 0x3}, {0x2, 0x3}, {0x2, 0x8}, {0x7, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x2}, {0x6, 0xa}, {0x5}, {0x4, 0x7}, {0x1, 0x6}, {}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x8}, {0x0, 0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x6, 0x5}, {0x3, 0x6}, {0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x7, 0x3}, {0x4, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x5}, {0x4, 0x7}, {0x5, 0x6}, {0x2, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0xa}, {0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x1}, {0x5, 0x9}, {0x3, 0x5}, {0x6, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0x5}, {0x1}, {0x1, 0x4}, {}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0xa}, {}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0x6}, {0x3}, {0x3, 0x6}, {0x7, 0x1}, {0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x6, 0x5}, {0x7, 0x8}, {0x0, 0x5}, {0x4}, {0x1, 0x3}, {0x4, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x4, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x9, 0x60, 0x6c, 0xc, 0x12, 0x5, 0x5, 0x6c, 0x6c, 0x2, 0xb, 0x24, 0x5, 0x24, 0x6, 0x48, 0x4, 0x2, 0x9, 0x48, 0x6, 0x6, 0x9, 0x18]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x24, 0xb, 0x12, 0x0, 0x60, 0x5, 0x16, 0x5, 0xb, 0x3, 0x6c, 0x1, 0x2, 0x6c, 0x36, 0x16, 0x3, 0x9, 0x1, 0x1, 0x1b, 0x2, 0x24, 0x1b, 0x24]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x4}, {0x0, 0x6}, {0x2, 0x1}, {0x2, 0x7}, {0x4, 0x9}, {0x4, 0x1}, {0x5, 0x5}, {0x3, 0x8}, {0x5, 0x5}, {0x2, 0x6}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x4}, {0x2}, {0x0, 0x7}, {0x1, 0xa}, {0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0x2}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x5}, {0x4, 0x4}, {0x4, 0x8}, {}, {0x6, 0x4}, {0x7, 0x3}, {}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x3}, {0x3, 0x8}, {}, {0x3, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x6}, {0x6, 0x5}, {0x5, 0x2}, {0x4, 0xa}, {0x7, 0xa}, {0x0, 0x4}, {0x4, 0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x3, 0x1, 0x1, 0x3, 0x1, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x7f, 0x7fff, 0xb5, 0x5, 0xffff, 0x400]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0xb, 0xc, 0x1, 0xc, 0x1, 0x1, 0x48, 0xc, 0xc, 0x2, 0x0, 0x12, 0x16, 0xb, 0xb, 0x16, 0x0, 0x4, 0x1b, 0x5, 0xb3dc12e594e21c4b, 0xc, 0x5, 0x4, 0x9]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x7f, 0x7, 0x1, 0x2, 0x0, 0x2d]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x12, 0x9, 0x7e, 0x48, 0xc, 0x1d, 0xb, 0x3, 0x3, 0x30, 0x30, 0x6, 0x6c, 0x2, 0xc, 0x2, 0x3d]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x24, 0x24, 0x4, 0x4, 0x36, 0x24, 0x2, 0xa, 0x5, 0x9, 0x4]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x6, 0x3, 0x5, 0x1b, 0x1b, 0x48, 0x9, 0x6d, 0x12, 0x60, 0x24, 0x36, 0x24, 0x2, 0x9, 0x1, 0x3, 0x36, 0x60, 0xc, 0x30, 0x11, 0x6b, 0x60, 0xc, 0x9, 0x4, 0x7d, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x400, 0x1, 0x3ff, 0x4, 0x0, 0x0, 0x1]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xab5f, 0x5, 0x8, 0x80, 0x200, 0xfeda, 0x7]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x7}, {0x4, 0x5}, {0x0, 0x6}, {0x5, 0x1}, {0x6, 0x7}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x4, 0x1}, {0x6, 0x3}, {0x4, 0xa}, {0x7, 0x7}, {0x6, 0x3}, {}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x5, 0x5}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x4, 0x39, 0x2e, 0x12, 0xa, 0xc, 0xb, 0xc, 0x1, 0xc, 0x2, 0x16, 0x6, 0xc, 0xb, 0x4, 0x5, 0x5, 0x2, 0x1b]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x48, 0xc, 0x60, 0x2, 0x1b, 0x36, 0x6c, 0x18, 0x16, 0x0, 0x0]}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000}, 0x20040891) [ 128.977675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.983765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.989216] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.991573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.996332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.999480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.009235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.013960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.022928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.050883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.057940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.063218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.071090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.079474] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.083230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.098166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.100525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.101124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.123217] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.131332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.201809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.217933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.220455] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.234481] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.239467] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.241331] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.245521] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.249081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.254476] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.258101] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.260994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.262985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.263359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.269784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.275285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.279287] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.285038] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.292073] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.302164] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.313061] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.055271] Bluetooth: hci1: command tx timeout [ 131.118696] Bluetooth: hci0: command tx timeout [ 131.182246] Bluetooth: hci2: command tx timeout [ 131.248663] Bluetooth: hci3: command tx timeout [ 131.373904] Bluetooth: hci4: command tx timeout [ 131.375407] Bluetooth: hci7: command tx timeout [ 131.376062] Bluetooth: hci6: command tx timeout [ 131.438934] Bluetooth: hci5: command tx timeout [ 133.102266] Bluetooth: hci1: command tx timeout [ 133.165723] Bluetooth: hci0: command tx timeout [ 133.229707] Bluetooth: hci2: command tx timeout [ 133.294678] Bluetooth: hci3: command tx timeout [ 133.422052] Bluetooth: hci7: command tx timeout [ 133.422529] Bluetooth: hci6: command tx timeout [ 133.423750] Bluetooth: hci4: command tx timeout [ 133.485800] Bluetooth: hci5: command tx timeout [ 135.149768] Bluetooth: hci1: command tx timeout [ 135.214702] Bluetooth: hci0: command tx timeout [ 135.278029] Bluetooth: hci2: command tx timeout [ 135.341755] Bluetooth: hci3: command tx timeout [ 135.470824] Bluetooth: hci6: command tx timeout [ 135.470931] Bluetooth: hci4: command tx timeout [ 135.471287] Bluetooth: hci7: command tx timeout [ 135.533760] Bluetooth: hci5: command tx timeout [ 137.198662] Bluetooth: hci1: command tx timeout [ 137.262998] Bluetooth: hci0: command tx timeout [ 137.325888] Bluetooth: hci2: command tx timeout [ 137.389734] Bluetooth: hci3: command tx timeout [ 137.517710] Bluetooth: hci7: command tx timeout [ 137.518199] Bluetooth: hci4: command tx timeout [ 137.518654] Bluetooth: hci6: command tx timeout [ 137.582880] Bluetooth: hci5: command tx timeout [ 191.743658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.746302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.749225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.761550] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.770768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.827904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.835524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.851516] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.857380] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.873330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.881797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.892815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.898302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.915845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.921350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.035120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.047529] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.056828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.066110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.075327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.084912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.088765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.098068] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.110123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.111511] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.114365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.117325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.121075] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.124052] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.129521] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.132219] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.134022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.150463] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.153762] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.155898] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.161346] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.163096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.246874] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.258261] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.269976] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.837712] Bluetooth: hci0: command tx timeout [ 193.902805] Bluetooth: hci1: command tx timeout [ 193.965714] Bluetooth: hci2: command tx timeout [ 194.221804] Bluetooth: hci4: command tx timeout [ 194.222729] Bluetooth: hci5: command tx timeout [ 194.351775] Bluetooth: hci3: command tx timeout [ 194.415329] Bluetooth: hci6: command tx timeout [ 194.416551] Bluetooth: hci7: command tx timeout [ 195.885686] Bluetooth: hci0: command tx timeout [ 195.949711] Bluetooth: hci1: command tx timeout [ 196.013665] Bluetooth: hci2: command tx timeout [ 196.270639] Bluetooth: hci4: command tx timeout [ 196.271148] Bluetooth: hci5: command tx timeout [ 196.397852] Bluetooth: hci3: command tx timeout [ 196.461854] Bluetooth: hci7: command tx timeout [ 196.462356] Bluetooth: hci6: command tx timeout [ 197.933797] Bluetooth: hci0: command tx timeout [ 197.997671] Bluetooth: hci1: command tx timeout [ 198.061714] Bluetooth: hci2: command tx timeout [ 198.318217] Bluetooth: hci5: command tx timeout [ 198.318768] Bluetooth: hci4: command tx timeout [ 198.445867] Bluetooth: hci3: command tx timeout [ 198.510063] Bluetooth: hci6: command tx timeout [ 198.510560] Bluetooth: hci7: command tx timeout [ 199.981668] Bluetooth: hci0: command tx timeout [ 200.046325] Bluetooth: hci1: command tx timeout [ 200.111700] Bluetooth: hci2: command tx timeout [ 200.365733] Bluetooth: hci4: command tx timeout [ 200.366283] Bluetooth: hci5: command tx timeout [ 200.493670] Bluetooth: hci3: command tx timeout [ 200.558844] Bluetooth: hci7: command tx timeout [ 200.559349] Bluetooth: hci6: command tx timeout [ 251.727779] syz-executor.3 (2850) used greatest stack depth: 24400 bytes left [ 253.948254] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.954861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.958363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.967476] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.974841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.027409] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.034310] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.044106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.055487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.067084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.149484] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.158122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.164749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.193985] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.197303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.209977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.217854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.223626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.237541] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.263894] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.266179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.267542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.276853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.280746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.282483] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.284426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.286568] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.291282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.309029] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.319962] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.323313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.329192] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.344774] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.356090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.358149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.359984] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.373957] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.407862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.414124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.450046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.045816] Bluetooth: hci0: command tx timeout [ 256.110771] Bluetooth: hci1: command tx timeout [ 256.237980] Bluetooth: hci2: command tx timeout [ 256.366700] Bluetooth: hci3: command tx timeout [ 256.366717] Bluetooth: hci5: command tx timeout [ 256.429718] Bluetooth: hci4: command tx timeout [ 256.429733] Bluetooth: hci7: command tx timeout [ 256.558637] Bluetooth: hci6: command tx timeout [ 258.093780] Bluetooth: hci0: command tx timeout [ 258.159315] Bluetooth: hci1: command tx timeout [ 258.285687] Bluetooth: hci2: command tx timeout [ 258.413765] Bluetooth: hci5: command tx timeout [ 258.414486] Bluetooth: hci3: command tx timeout [ 258.477896] Bluetooth: hci4: command tx timeout [ 258.480626] Bluetooth: hci7: command tx timeout [ 258.607922] Bluetooth: hci6: command tx timeout [ 260.142721] Bluetooth: hci0: command tx timeout [ 260.206773] Bluetooth: hci1: command tx timeout [ 260.334081] Bluetooth: hci2: command tx timeout [ 260.463376] Bluetooth: hci3: command tx timeout [ 260.463413] Bluetooth: hci5: command tx timeout [ 260.525788] Bluetooth: hci7: command tx timeout [ 260.526240] Bluetooth: hci4: command tx timeout [ 260.653725] Bluetooth: hci6: command tx timeout [ 262.189671] Bluetooth: hci0: command tx timeout [ 262.253708] Bluetooth: hci1: command tx timeout [ 262.381686] Bluetooth: hci2: command tx timeout [ 262.509703] Bluetooth: hci5: command tx timeout [ 262.510205] Bluetooth: hci3: command tx timeout [ 262.574441] Bluetooth: hci4: command tx timeout [ 262.574515] Bluetooth: hci7: command tx timeout [ 262.701675] Bluetooth: hci6: command tx timeout [ 316.418675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.424044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.430464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.439100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.448063] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.547185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.552086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.554289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.563836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.572982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.782381] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.790437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.793286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.797156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.805471] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.813909] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.840187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.857154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.861991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.880227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.886279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.890790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.895038] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.923439] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.931219] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.939086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.939363] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.943037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.945538] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.949733] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.954135] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.957337] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.968122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.973334] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.987262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.015166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.033078] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 317.060436] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 317.167152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 317.183393] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.509840] Bluetooth: hci0: command tx timeout [ 318.637772] Bluetooth: hci1: command tx timeout [ 318.957849] Bluetooth: hci3: command tx timeout [ 319.022071] Bluetooth: hci2: command tx timeout [ 319.022773] Bluetooth: hci6: command tx timeout [ 319.085797] Bluetooth: hci5: command tx timeout [ 319.087051] Bluetooth: hci4: command tx timeout [ 319.342881] Bluetooth: hci7: command tx timeout [ 320.559668] Bluetooth: hci0: command tx timeout [ 320.686801] Bluetooth: hci1: command tx timeout [ 321.006901] Bluetooth: hci3: command tx timeout [ 321.069710] Bluetooth: hci6: command tx timeout [ 321.072173] Bluetooth: hci2: command tx timeout [ 321.133734] Bluetooth: hci5: command tx timeout [ 321.134716] Bluetooth: hci4: command tx timeout [ 321.390729] Bluetooth: hci7: command tx timeout [ 322.605687] Bluetooth: hci0: command tx timeout [ 322.735549] Bluetooth: hci1: command tx timeout [ 323.054826] Bluetooth: hci3: command tx timeout [ 323.117698] Bluetooth: hci2: command tx timeout [ 323.117718] Bluetooth: hci6: command tx timeout [ 323.184771] Bluetooth: hci4: command tx timeout [ 323.184798] Bluetooth: hci5: command tx timeout [ 323.439103] Bluetooth: hci7: command tx timeout [ 324.654748] Bluetooth: hci0: command tx timeout [ 324.782680] Bluetooth: hci1: command tx timeout [ 325.103673] Bluetooth: hci3: command tx timeout [ 325.167915] Bluetooth: hci2: command tx timeout [ 325.168103] Bluetooth: hci6: command tx timeout [ 325.229802] Bluetooth: hci4: command tx timeout [ 325.230978] Bluetooth: hci5: command tx timeout [ 325.486030] Bluetooth: hci7: command tx timeout [ 378.817140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.826413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.829220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.837150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.841249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.890317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.895209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.898275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.909366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.916181] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.086978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.102856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.105252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.110572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.114306] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.155973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.160189] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.162749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.174796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.194880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.199285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.212004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.216684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.255108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.259728] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.264716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.269409] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.274959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.278372] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.285392] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.362560] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.377475] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.383067] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.398659] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.400361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.405913] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.426533] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.430049] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.435316] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.441701] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.911000] Bluetooth: hci0: command tx timeout [ 380.974718] Bluetooth: hci1: command tx timeout [ 381.168711] Bluetooth: hci2: command tx timeout [ 381.358016] Bluetooth: hci3: command tx timeout [ 381.423816] Bluetooth: hci5: command tx timeout [ 381.425567] Bluetooth: hci4: command tx timeout [ 381.486721] Bluetooth: hci6: command tx timeout [ 381.487634] Bluetooth: hci7: command tx timeout [ 382.957717] Bluetooth: hci0: command tx timeout [ 383.021961] Bluetooth: hci1: command tx timeout [ 383.213654] Bluetooth: hci2: command tx timeout [ 383.407707] Bluetooth: hci3: command tx timeout [ 383.470653] Bluetooth: hci4: command tx timeout [ 383.471156] Bluetooth: hci5: command tx timeout [ 383.533779] Bluetooth: hci7: command tx timeout [ 383.534278] Bluetooth: hci6: command tx timeout [ 385.005692] Bluetooth: hci0: command tx timeout [ 385.070625] Bluetooth: hci1: command tx timeout [ 385.262694] Bluetooth: hci2: command tx timeout [ 385.454110] Bluetooth: hci3: command tx timeout [ 385.517677] Bluetooth: hci5: command tx timeout [ 385.518165] Bluetooth: hci4: command tx timeout [ 385.582985] Bluetooth: hci6: command tx timeout [ 385.583476] Bluetooth: hci7: command tx timeout [ 387.055053] Bluetooth: hci0: command tx timeout [ 387.117964] Bluetooth: hci1: command tx timeout [ 387.309657] Bluetooth: hci2: command tx timeout [ 387.501731] Bluetooth: hci3: command tx timeout [ 387.565737] Bluetooth: hci4: command tx timeout [ 387.566183] Bluetooth: hci5: command tx timeout [ 387.629693] Bluetooth: hci7: command tx timeout [ 387.630138] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 20:26:59 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888032ac7c48 RCX=ffffffff818bd9b2 RDX=0000000000000003 RSI=ffffffff818bd9c0 RDI=ffffffff85c27530 RBP=ffff888009232ec0 RSP=ffff888032ac7af0 R8 =0000000000000001 R9 =fffff94000039f78 R10=0000000000000000 R11=0000000000000000 R12=ffffea00001cfbc0 R13=0000000000000000 R14=0000000000000001 R15=ffff888032ac7d90 RIP=ffffffff8159b1bd RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f76c0828540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f76c09c34a1 CR3=0000000036022000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff84adaf3f RCX=ffff888023f8f77c RDX=1ffff110047f1f10 RSI=ffffffff85c1bac0 RDI=ffffffff84adaf3f RBP=ffff888023f8f880 RSP=ffff888023f8f800 R8 =0000000000000001 R9 =ffff888023f8f868 R10=000000000003b0c2 R11=000000000002604c R12=ffff888023f8f8f0 R13=0000000000000000 R14=ffff88800b723780 R15=0000000000000cc0 RIP=ffffffff8142facf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2c4b064540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd539a3fd8 CR3=00000000368c0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000