Warning: Permanently added '[localhost]:25131' (ECDSA) to the list of known hosts. 2025/04/27 00:22:57 fuzzer started 2025/04/27 00:22:58 dialing manager at localhost:46629 syzkaller login: [ 93.265784] cgroup: Unknown subsys name 'net' [ 93.406144] cgroup: Unknown subsys name 'cpuset' [ 93.444296] cgroup: Unknown subsys name 'rlimit' 2025/04/27 00:23:13 syscalls: 2214 2025/04/27 00:23:13 code coverage: enabled 2025/04/27 00:23:13 comparison tracing: enabled 2025/04/27 00:23:13 extra coverage: enabled 2025/04/27 00:23:13 setuid sandbox: enabled 2025/04/27 00:23:13 namespace sandbox: enabled 2025/04/27 00:23:13 Android sandbox: enabled 2025/04/27 00:23:13 fault injection: enabled 2025/04/27 00:23:13 leak checking: enabled 2025/04/27 00:23:13 net packet injection: enabled 2025/04/27 00:23:13 net device setup: enabled 2025/04/27 00:23:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 00:23:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 00:23:13 USB emulation: enabled 2025/04/27 00:23:13 hci packet injection: enabled 2025/04/27 00:23:13 wifi device emulation: enabled 2025/04/27 00:23:13 802.15.4 emulation: enabled 2025/04/27 00:23:13 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 00:23:14 starting 8 fuzzer processes 00:23:14 executing program 0: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3a}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x5, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x200008d0}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x13}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1f}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4048010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0xc, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040007}, 0x4084) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x10000, 0x1}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xea}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3b}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1ff}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000740)={0x0, 0x9}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000001c00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001780)={0x42c, 0x3f4, 0x200, 0x70bd28, 0x25dfdbfc, {0x6, 0x1, 0x36, [0x8001, 0x3, 0x7, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x8, 0xfffffffa, 0x1db3, 0x63d7, 0xfffffffb, 0x3, 0x485, 0x1, 0x24b, 0xfffff8a5, 0xf0, 0x9, 0x6, 0x7, 0x5, 0x1, 0x3, 0x5, 0x3f, 0x101, 0xffffffff, 0x2, 0x80, 0x2, 0x2, 0x2, 0xfffffffa, 0x2, 0x3, 0x800, 0x5, 0x400, 0x2, 0x51, 0x8000, 0x200, 0x6, 0x5, 0x9, 0x8, 0x7fffffff, 0xfffffc00, 0x2, 0x2, 0x4591, 0x1, 0x67, 0x9, 0x1ff, 0x11a, 0x7, 0x7, 0x1, 0x9, 0x2], [0x34460dfe, 0xd5, 0x10, 0x100, 0x9, 0x10000, 0x8, 0xffffe0ac, 0x8, 0xffffff9e, 0xc18, 0x2, 0x3, 0x8, 0x7fff, 0x7, 0x7, 0x5, 0x6, 0x7, 0xffff7fff, 0x0, 0x80, 0xffffffff, 0x80000000, 0x81, 0x10000, 0x2c0b, 0x1, 0xfffff509, 0x7f, 0x9, 0x4, 0x0, 0x31c, 0x0, 0x8, 0x4, 0x20, 0x1000, 0x5, 0x7, 0x100, 0x3, 0x0, 0x3, 0x6, 0x4e, 0x43d7, 0x8, 0x10000, 0x1f, 0x94, 0x0, 0x8, 0x80, 0x6, 0x7, 0x5, 0x3, 0x0, 0x6, 0x6, 0x80000000], [0x7ff, 0xf8000000, 0x7ad, 0xffffffe1, 0x7fff, 0xf7a8, 0x1, 0x5, 0x55, 0x5, 0x709ce5c1, 0x8, 0x800, 0x6, 0x1, 0x6, 0x8000, 0x7fff, 0x10000, 0x101, 0x2, 0x200, 0x0, 0x5, 0x80000001, 0x1ff, 0xc5a9, 0x20, 0x401, 0x3, 0x7fff, 0x1f, 0x40, 0xb3, 0x7, 0x8, 0x3, 0xfc97, 0x80, 0x1000, 0x20, 0x1, 0x0, 0x7, 0x8, 0x8, 0x8000, 0x4, 0xf16f, 0x80, 0x3, 0x8, 0x5d92, 0x4, 0x36c, 0x9, 0x2, 0x81, 0x401, 0xffffff00, 0x8e35, 0x5, 0x80000001, 0x3], [0x1, 0x0, 0x1, 0x8000, 0x40, 0x2800, 0x1ff, 0x5, 0xeb1e, 0x7, 0x8, 0x0, 0x2, 0x7, 0x81, 0xfff, 0x9, 0x200, 0x700000, 0x81, 0x6, 0x3, 0x4, 0x2, 0x5, 0x5, 0x1, 0x3, 0x4, 0x400, 0x400, 0x6, 0x5, 0x2, 0x10001, 0xaf8, 0x8, 0xfffffffb, 0x9, 0x3e4, 0x80000000, 0x1, 0x7fff, 0x9, 0x3, 0xda, 0xfffff001, 0x1f, 0x3, 0x6, 0x1f, 0xffff8000, 0x101, 0x6, 0x5, 0x5, 0x20, 0x6, 0x8, 0x0, 0x4, 0x5], 0xc, ['\x00', '}*\'^\x00', '.#\"-\'\x00']}, ["", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000001c80)=0x1, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001cc0), 0x80, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x140000c0}, 0x50) r6 = openat2(r3, &(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x200800, 0x68, 0x2}, 0x18) setsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000001e80)=0x6, 0x4) getdents(r4, &(0x7f0000001ec0), 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f00000020c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001f40)={0x12c, 0x1, 0x3, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x2}}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFQA_PAYLOAD={0xff, 0xa, "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"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x48010}, 0xd1) 00:23:14 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6f76}}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x5, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xa, 0xa, 0x603, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x5d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40d1) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4001810}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x7fff) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/4\x00') write$rfkill(r2, &(0x7f0000000540)={0x2, 0x1, 0x2, 0x1, 0x1}, 0x8) ioctl$TIOCSCTTY(r1, 0x540e, 0x7fff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000580)={r2, 0x6, 0x3, 0x728}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8400080}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xc4}}, 0x4884) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x158, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000a00)={0x0, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @local}, 0x51, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)='bond0\x00', 0x6, 0x8, 0x7596}) r4 = pidfd_getfd(r0, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000a80)={{0x4, 0x7}, 'port1\x00', 0x4, 0x1014, 0x2, 0xfffff000, 0x4, 0x3, 0x4, 0x0, 0x0, 0x3f}) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000b40)=0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x118442, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8050) 00:23:14 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc084}, 0x4080084) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x244, r1, 0x102, 0xd0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x60}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb70}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x50af}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x8, 0xfff, 0xbee1, 0x3]}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1000]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x101}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0x4, 0x5]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xdd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8001}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0x3]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x32f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x38b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x95}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0xfffffffd, 0x7, 0x0, 0x0, 0x4, 0x0, 0x100, 0x200, 0xff]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe840}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0x81, 0x7e, 0x2, 0x8, 0x200]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4dc}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x7, 0x1, 0xfffffffb, 0x0, 0x10001, 0x4, 0x5, 0x3ff, 0x40000000]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x101}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x8, 0x0, 0x10001, 0x5, 0x1, 0x80, 0x7]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6dc}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x20008080}, 0x10) ioctl$sock_netdev_private(r2, 0x89f2, &(0x7f00000007c0)="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") ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000017c0)) r3 = creat(&(0x7f0000001800)='./file0\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001840)=0x2, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000001880)="e26c14f5ea29361e98160a5426568f9a3b00f2ddd7df9555a3929ccc5c4fb35b6de88ba54454fbebefc2d12eda875f3b7e5d3500c60b6d43ba535acbab2db3c1c19171792cd9f27cf78252d913305a895d8c3fa5cf44c4f1b8a56b74545386ce95bfae768645cb5fbefcdc56c9ab533d022bfaca9a1f08e7267723a7f2a450d9579c611ecafd9512d31b455300faf8b6a172f4296e62ba768a92eb64919478a84ee4931c48d7cf7a981dcf3e135c46899032b723646eb85c7fb4bdaf70a81d39da85721273b04cfead9f9c35ed2ed37a893520b8a45675b83e9361", 0xdb) fcntl$setstatus(r0, 0x4, 0x4000) r4 = signalfd4(r2, &(0x7f0000001980)={[0x5]}, 0x8, 0x800) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f00000019c0)=""/4096, &(0x7f00000029c0)=0x1000) fcntl$setflags(r3, 0x2, 0x1) 00:23:14 executing program 3: r0 = gettid() wait4(r0, 0x0, 0x1, &(0x7f0000000000)) rt_sigqueueinfo(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x100, 0xffff}) ptrace$setregs(0xf, r0, 0xffffffffffff2a68, &(0x7f0000000140)="a718ec5b7a0e29a0b7ab14525b7760d650bb9a95f1af6e4adf1f47c05706c94e55d9b65b23209d8d41739f6a51bc664d9588010a10efae8733cabffa14d4339663bb234a18442346c55735aa7575d9e6565f6a3345bed69b038f099db61ab57436296ca7c71eb89d276cad258d808a4ae906e6287a7da463b88e0065b17eb0420a32a226997f9fb1a6ae2279d063b1d127164a85") r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioprio_set$pid(0x3, r1, 0x6000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3ff, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000380)={'\x00', 0x2, 0x7, 0x6, 0x7fff, 0x5, r0}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7, 0x8, 0xf3, 0x1, 0x1]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), 0xffffffffffffffff) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1e8, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xdeb}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000940)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x400, 0x6, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000015) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000a80)) [ 109.281185] audit: type=1400 audit(1745713394.689:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:23:14 executing program 4: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x80000000, 0x0, [0x8d4, 0x200, 0x865d, 0x401, 0x9], [0x4, 0x400, 0x4714, 0xbe, 0x2803, 0x2, 0x2, 0x6, 0xcda, 0xffffffff, 0x9, 0x3f, 0x9, 0xe58, 0x6, 0xfffffffffffff69a, 0x80000001, 0x351, 0x10000000, 0x0, 0x6, 0x5, 0x0, 0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x9, 0x6, 0x5, 0x4, 0xffff, 0x101, 0x2, 0x4ca3a8a4, 0x2f7102b6, 0xffffffffffff0001, 0x3, 0x2, 0x4, 0xa6fb, 0x3, 0x6fbf, 0x27, 0x7fff, 0x8, 0x80000001, 0x8, 0x3, 0x1000, 0x100, 0x6, 0x8, 0x4, 0xfffffffffffffffb, 0x1, 0x33, 0x800, 0x101, 0x0, 0xffffffffffffffff, 0x800, 0x8, 0x3, 0x3, 0x8001, 0x400, 0x2, 0x10001, 0x4, 0x2, 0x6c000, 0x6, 0x0, 0x0, 0x8, 0x1000, 0x5, 0xfff, 0x6, 0x7, 0x3, 0x8, 0x40, 0x0, 0x7e6e, 0xfffffffffffff1ed, 0x716, 0x800, 0x8f4, 0x1, 0x80000000, 0x400, 0x3, 0x7, 0x95, 0x46bd8cc2, 0x3, 0x4, 0x101, 0x1, 0x3ff, 0x0, 0x3, 0x2, 0x1, 0x800, 0xfffffffffffffffc, 0x6, 0x6, 0x4, 0x0, 0xffffffffffff0000, 0x1ba9, 0x7, 0x5, 0x20, 0x4, 0xe9b, 0x1, 0xd1]}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000008c0)={0x0, 0x91a, @start={r0, 0x0, "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", "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"}, [0x9, 0x26a, 0x6, 0x1, 0x101, 0xa4af, 0x4, 0x3ff, 0x3, 0xc674, 0x8f, 0xf643, 0x2, 0x63cd, 0x4, 0x7, 0x8, 0xe69, 0x7f, 0x2f4, 0x10001, 0x74ef86e3, 0xfffffffffffffffa, 0x37f571ad, 0x5, 0x100, 0x100000001, 0x6, 0x40, 0x718, 0x1a1e, 0xafe1, 0x9, 0x7d07, 0x200, 0x9, 0x9, 0x2, 0x0, 0x5, 0x1, 0x0, 0x3, 0x8, 0x4, 0x1082, 0x8, 0x76a2, 0x29, 0x8, 0x4, 0x11, 0xffff, 0x80, 0xffffffffffffffc0, 0x708, 0x5, 0x0, 0x8001, 0x200, 0xadf, 0x9, 0x8, 0xc2]}) mount$cgroup(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x4000, &(0x7f0000001380)={[{@none}, {@noprefix}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000013c0)={0x2, 0x2, 0x2, 0x81, 0x10000, 0x81, 0x1c4, 0x4, 0x5, 0x3, 0x6, 0x7, 0x80000000, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) faccessat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x40) r1 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xea}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001580)={{{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000001680)=0xe8) syz_mount_image$ext4(&(0x7f0000001480)='ext2\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001540)=[{&(0x7f0000001500)="b02a5cbe791eeef8cc412bf50e0aa9ebcc7e35de66446328a32e0b6aa62a959e07ab344721b59eb9b7f890e4393cfa", 0x2f, 0x4}], 0x8000, &(0x7f00000016c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {@resuid={'resuid', 0x3d, r4}}, {@jqfmt_vfsv0}, {@grpid}, {@nouser_xattr}], [{@dont_hash}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@permit_directio}]}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), r2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001800)={@empty, @private, 0x0}, &(0x7f0000001840)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001980)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xc0, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r7 = syz_open_dev$mouse(&(0x7f00000019c0), 0x3, 0x200000) sendmsg$AUDIT_SET(r7, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2c000001}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, 0x3e9, 0x420, 0x70bd27, 0x25dfdbfc, {0x42, 0x1, 0x3, 0x0, 0x0, 0x81, 0x1000, 0x2, 0x0, 0x8}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r8 = dup3(r1, r2, 0x80000) ioctl$HIDIOCGCOLLECTIONINFO(r8, 0xc0104811, &(0x7f0000001b00)={0x9, 0x9, 0x5, 0xffffffff}) memfd_secret(0x80000) 00:23:14 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000000)={0x2, 0x5, 0x0, 'queue0\x00', 0x7f}) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1900) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x9, 0x20000) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000180)=0x10000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42100, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0x83, 0x5, 0x4, "77931f7c61167fd66bd4b36e2004b557", "822485810352cac0a9fd91d06585d212aa35c27e2c4f1eef3c940ac81cfad10c4cf0cfc75e3fb57f1ee12d0b873ad4abb4c2edf2b45bd3f2225a0732bcee2977b8849b2f767424983d612fd7f690636274e9d9991bea44c8c8c70a2ec4fe7fd0852b818e76b1421cbb1cb5595f5b"}, 0x83, 0x3) r3 = openat$incfs(r1, &(0x7f0000000300)='.log\x00', 0x90000, 0x109) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000340)={'bond_slave_0\x00'}) clock_gettime(0x0, &(0x7f00000030c0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/50, 0x32}, {&(0x7f00000013c0)=""/249, 0xf9}, {&(0x7f00000014c0)=""/18, 0x12}], 0x4, &(0x7f0000001540)=""/175, 0xaf}, 0x5}, {{&(0x7f0000001600)=@caif=@rfm, 0x80, &(0x7f0000002880)=[{&(0x7f0000001680)=""/131, 0x83}, {&(0x7f0000001740)=""/184, 0xb8}, {&(0x7f0000001800)=""/54, 0x36}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x5, &(0x7f0000002900)=""/3, 0x3}, 0x7}, {{&(0x7f0000002940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000029c0)=""/141, 0x8d}, {&(0x7f0000002a80)=""/165, 0xa5}, {&(0x7f0000002b40)=""/131, 0x83}], 0x3, &(0x7f0000002c40)=""/78, 0x4e}, 0x80}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002cc0)=""/171, 0xab}, {&(0x7f0000002d80)=""/126, 0x7e}, {&(0x7f0000002e00)=""/87, 0x57}, {&(0x7f0000002e80)=""/5, 0x5}, {&(0x7f0000002ec0)=""/89, 0x59}], 0x5}, 0x1}], 0x4, 0xa100, &(0x7f0000003100)={r4, r5+60000000}) write$P9_RWALK(r3, &(0x7f0000003140)={0x71, 0x6f, 0x1, {0x8, [{0x4, 0x4, 0x7}, {0x8, 0x3, 0x8}, {0x1, 0x3, 0x1}, {0x22, 0x2, 0x5}, {0x2, 0x1, 0x7}, {0x80, 0x0, 0x4}, {0x4, 0x3, 0x6}, {0x1, 0x0, 0x7}]}}, 0x71) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat2(r3, &(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)={0x18500, 0x6e, 0xf}, 0x18) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xa00, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2200c8c4}, 0x44040) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000033c0)={'syztnl1\x00', &(0x7f0000003380)={'gre0\x00', 0x0, 0x8, 0x40, 0x4, 0x8, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x68, 0x0, 0x9, 0x2f, 0x0, @broadcast, @local, {[@generic={0x88, 0x8, "fb8b04d0c492"}]}}}}}) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000003400)={0x4, 0x8, 0x10000, 0x4, 0x2}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000003440), 0x200, 0x0) getpeername$netlink(r7, &(0x7f0000003480), &(0x7f00000034c0)=0xc) 00:23:14 executing program 6: r0 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="9beba20f6a16b0e50657be86edf4e4d5cc6390c51ec68466c4b2cb1c83d1d6287342db79eaaaf5008a83705457d88137e26c6bf4bc2fa5f6944947dfa8d20353d10afd4e1a1d6f00837ca7ad55163a748b77e83f2c90c68e14f0beb2d31f889c724b3fba2a1976cbff4a9b4c54564f8252fe4e25b5e306893d83cf64e74a2bf1d4b3a907b287807295d64f911d39a3ec2cf6af368f955ac5b184c72e4d287006b4bf51604917c247708ee6681f50347fa56e91b430ad0a0dfb921c2c1f055fece999d28dc005b650d82cd7752d4afe8555c3a98518aaa649727f689e79ad5c753ea255b72dc21a4d3a7bb8df1e990bb9cd5d5933a62d39507d", 0xf9, 0x1}, {&(0x7f0000000180)="a81fdb7a5aedaac99e0b68a392eaccbe22810b32cf43cf461945f3c3cdb625226908fc35f3008d800101e5a9a7f07f94959bf0ee", 0x34, 0x401}], 0x0, &(0x7f0000000200)={[{']{:.\xc0'}, {}, {',%'}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@subj_role={'subj_role', 0x3d, '['}}, {@appraise}, {@fowner_eq}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'd'}}, {@smackfsdef}]}) faccessat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000300)={0x2, 0xffffffffffffffff}) r1 = syz_open_pts(0xffffffffffffffff, 0x200000) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000340)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @empty, @empty}, &(0x7f0000000400)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000440)={@loopback, 0x0}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x160, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000091}, 0x9800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x8d, 0x1000, {{0x10, 0x4, 0x2, 0x2, 0x40, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x15}, {[@rr={0x7, 0x13, 0x77, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0xc}, @local]}, @lsrr={0x83, 0x17, 0x50, [@broadcast, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) r5 = open_tree(r0, &(0x7f0000000840)='./file0\x00', 0x1000) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000880)='macvtap0\x00') getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f00000008c0)=0x800, &(0x7f0000000900)=0x2) r6 = open(&(0x7f0000000940)='./file0\x00', 0x210c00, 0xf9) getpeername$packet(r5, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xdc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x840}, 0x8000) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800d}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r5, {0xefb}}, './file0\x00'}) ioctl$TIOCGSERIAL(r8, 0x541e, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/244}) tee(r1, r6, 0x5, 0x0) 00:23:14 executing program 7: r0 = memfd_secret(0x80000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x3, {{0x2, 0x4e22, @private=0xa010101}}, 0x1, 0x1, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}}]}, 0x110) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000180)={0x2, 0x8, [0x6, 0x1, 0xffff, 0x5], &(0x7f0000000140)=[0x0]}) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f00000001c0)={0x9, 0x36c0}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={r0, 0xfffffffffffffffc, 0x81, 0xfffffffffffff001}) openat$cgroup(r1, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000280)={0x7, 'bridge0\x00', {0x33}, 0x800}) r2 = memfd_secret(0x80000) r3 = openat$cgroup_type(r2, &(0x7f00000002c0), 0x2, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000004c0)={0x1, 0x3106f07fbb2289ea, 0x1}) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf4, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x14c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x110, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff8489}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x22}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x72e0}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x78bc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x876}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004880) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0) close(r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000ec0)={&(0x7f0000000980), 0xc, &(0x7f0000000e80)={&(0x7f00000009c0)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0xfc000000}, 0x7f, 0x8, 0xcc97, 0x8, 0x1a, 'syz1\x00', "6dd0346ec3ee21866d516fb41773a1079d59f5f36471fb19a891b7d62f7ae87b", "fa1bdda0d04fd75cbe5a8366d1ff02695757e8c2535220d22f8d9c04a4aa8aa9", [{0x0, 0xb078, {0x3}}, {0xa1, 0xff00, {0x0, 0xe9d0}}, {0x800, 0x49, {0x1, 0x2}}, {0x7f, 0x1900, {0x0, 0x6}}, {0xff01, 0x400, {0x3, 0x7fff}}, {0x7, 0x7, {0x1, 0xaa22}}, {0x6, 0x9, {0x1, 0xdc}}, {0x1, 0x68, {0x2, 0x71}}, {0x9, 0x9ac, {0x1, 0xfffffffa}}, {0xb98, 0x9, {0x0, 0x101}}, {0xfff8, 0x6, {0x2, 0x3ff}}, {0x800, 0x1, {0x3, 0x3}}, {0x7, 0x400, {0x1, 0xffffffff}}, {0x83a, 0xce, {0x1, 0x5}}, {0x3ff, 0x1f, {0x0, 0x1}}, {0x8d6, 0x1ff, {0x1, 0x6553}}, {0x6, 0x6, {0x0, 0x8}}, {0x1, 0x8, {0x1, 0x8bbe}}, {0x5, 0x0, {0x2, 0xb4}}, {0x8000, 0x5}, {0x4, 0x1, {0x2, 0x5}}, {0x50, 0x401, {0x2, 0xd7}}, {0x6, 0x7ff, {0x0, 0x4}}, {0xbe, 0xfffb, {0x2, 0xfff}}, {0xfffb, 0x5, {0x1, 0x3f}}, {0x7ff, 0x1, {0x0, 0xa0}}, {0x3, 0x80, {0x0, 0x5}}, {0x1, 0x7, {0x2, 0x4}}, {0x1000, 0xb4, {0x3, 0x3}}, {0x2, 0x400, {0x0, 0x80000001}}, {0x1, 0x6, {0x1, 0x8000}}, {0x9, 0xffff, {0x2, 0xffffffff}}, {0x100, 0x8, {0x0, 0x3}}, {0x20, 0x8, {0x2, 0x7}}, {0xff, 0x81, {0x3, 0x100}}, {0x200, 0x81, {0x0, 0xfff}}, {0x91, 0x3f, {0x1, 0x10000}}, {0x6, 0x20, {0x1, 0xd9}}, {0x8000, 0x40, {0x0, 0x10000}}, {0x3, 0x6, {0x3, 0x800}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x40, 0x1, 0x8, 0x4d00, 0x11, 'syz1\x00', "67e67ac520c98612f802de5ce07dbe6a6bbdc45320a3c17d284e0dc10f8104e9", "e09f2e58838e5f6a88823edf3d7a51683930f3005dba4047cba62bbeaba77348", [{0x7, 0x6, {0x1, 0x6}}, {0xfffb, 0x80, {0x1, 0x7}}, {0x7f, 0x7, {0x1, 0x100}}, {0x765, 0x2, {0x0, 0xfff}}, {0xfffa, 0x1f, {0x1, 0x8000}}, {0x701, 0x7, {0x2, 0x3}}, {0x1, 0xfffd, {0x3}}, {0x2, 0x5, {0x1, 0x9}}, {0x5, 0x8001, {0x3, 0x4}}, {0x3, 0xffff, {0x2, 0x80000000}}, {0x0, 0x1ff, {0x0, 0x9}}, {0x3, 0x1, {0x3, 0x7ff}}, {0x6, 0x87, {0x2, 0x6}}, {0x7b15, 0x66b7, {0x2, 0xc598c3f}}, {0x7fff, 0x8000, {0x3}}, {0x7f, 0x8001, {0x3, 0xe9a0}}, {0x7, 0x0, {0x1, 0x80000000}}, {0x400, 0x1, {0x0, 0x6}}, {0xffff, 0x8000, {0x0, 0x120}}, {0x40, 0x1, {0x0, 0x5}}, {0x4, 0x1, {0x0, 0x6}}, {0x2, 0x4, {0x1, 0x4}}, {0x9, 0x40, {0x3, 0xff}}, {0x4, 0xee, {0x2, 0xaf}}, {0x93b2, 0x9, {0x0, 0x3}}, {0x0, 0x8, {0x1, 0x9}}, {0x81, 0x5c02, {0x0, 0x80}}, {0x2, 0x6, {0x1, 0x49}}, {0x1000, 0x4, {0x1, 0x3}}, {0x7, 0xdc, {0x3, 0x400}}, {0x0, 0x100, {0x3}}, {0x7fff, 0xa44, {0x3, 0x400}}, {0x40, 0x4, {0x2, 0x200}}, {0x3, 0x3, {0x0, 0x5}}, {0x401, 0x7, {0x0, 0x3}}, {0x6, 0x4, {0x0, 0x4}}, {0xbc6, 0xe8d, {0x0, 0x5}}, {0xff73, 0x7, {0x2, 0x3}}, {0xffff, 0x6, {0x2, 0x7}}, {0x1, 0x4, {0x3, 0x2cf}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) writev(r2, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="d0387ab8707ed68ef4df1853899321b14c20c568c363c9e2d6763c1fd5c622a43e1aed94be232bd3129a14a9065e0ac30a16ddce62155d108965bcd71efde2847fa08467841bb2d589f3ae88f38e2f560701b17f02de1ed8e4dd5f142f47797dd1f5799e7f8fb6c658c101de2fe87cee9a73c51893c930946c690e20d0e3ff559c72080bacada4336c2eb71275d82dca00e0a94e748e7a1dcfd1be6ec26e27404d05b4e854c64ff4c76bc27841cc86125edbc440ad77a91c7788e96a84eba0b5", 0xc0}], 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000001000)) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000001040)) [ 110.936127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.940350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.942571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.950165] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.952345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.954818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.957193] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.971634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.978024] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.981431] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.990347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.992386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.006137] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.007695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.008165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.019702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.025991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.030449] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.059531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.061945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.067192] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.075346] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.081634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.085607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.104968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.107176] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.126760] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.128570] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.132895] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.135065] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.141536] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.141733] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.150729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.160560] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.161558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.171565] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.233654] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.238431] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.240463] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.254853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.076686] Bluetooth: hci1: command tx timeout [ 113.141797] Bluetooth: hci2: command tx timeout [ 113.143433] Bluetooth: hci0: command tx timeout [ 113.205120] Bluetooth: hci3: command tx timeout [ 113.269159] Bluetooth: hci5: command tx timeout [ 113.269809] Bluetooth: hci4: command tx timeout [ 113.333479] Bluetooth: hci6: command tx timeout [ 113.334462] Bluetooth: hci7: command tx timeout [ 115.124410] Bluetooth: hci1: command tx timeout [ 115.188206] Bluetooth: hci2: command tx timeout [ 115.188646] Bluetooth: hci0: command tx timeout [ 115.252486] Bluetooth: hci3: command tx timeout [ 115.318150] Bluetooth: hci5: command tx timeout [ 115.318614] Bluetooth: hci4: command tx timeout [ 115.380729] Bluetooth: hci7: command tx timeout [ 115.383290] Bluetooth: hci6: command tx timeout [ 117.172108] Bluetooth: hci1: command tx timeout [ 117.237170] Bluetooth: hci2: command tx timeout [ 117.237627] Bluetooth: hci0: command tx timeout [ 117.300470] Bluetooth: hci3: command tx timeout [ 117.364133] Bluetooth: hci4: command tx timeout [ 117.364583] Bluetooth: hci5: command tx timeout [ 117.428164] Bluetooth: hci7: command tx timeout [ 117.428617] Bluetooth: hci6: command tx timeout [ 119.220446] Bluetooth: hci1: command tx timeout [ 119.284763] Bluetooth: hci0: command tx timeout [ 119.285232] Bluetooth: hci2: command tx timeout [ 119.348122] Bluetooth: hci3: command tx timeout [ 119.412171] Bluetooth: hci5: command tx timeout [ 119.412625] Bluetooth: hci4: command tx timeout [ 119.477071] Bluetooth: hci6: command tx timeout [ 119.477525] Bluetooth: hci7: command tx timeout [ 170.801655] syz-executor.1 (284) used greatest stack depth: 24400 bytes left [ 173.253738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.256738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.258792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.286329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.289490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.348897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.352968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.363499] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.378281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.381677] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.409454] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.417707] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.421776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.428600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.454393] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.475327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.503481] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.505569] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.512927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.532932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.539845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.540534] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.544893] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.546477] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.553592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.560584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.564587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.575600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.576959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.581813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.703748] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.709363] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.712934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.730332] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.736434] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.745474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.756382] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.757757] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.774445] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.782668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.348157] Bluetooth: hci0: command tx timeout [ 175.413112] Bluetooth: hci1: command tx timeout [ 175.541107] Bluetooth: hci2: command tx timeout [ 175.604128] Bluetooth: hci3: command tx timeout [ 175.732368] Bluetooth: hci5: command tx timeout [ 175.732494] Bluetooth: hci4: command tx timeout [ 175.924237] Bluetooth: hci6: command tx timeout [ 175.924266] Bluetooth: hci7: command tx timeout [ 177.396376] Bluetooth: hci0: command tx timeout [ 177.460141] Bluetooth: hci1: command tx timeout [ 177.588638] Bluetooth: hci2: command tx timeout [ 177.652403] Bluetooth: hci3: command tx timeout [ 177.780137] Bluetooth: hci4: command tx timeout [ 177.780232] Bluetooth: hci5: command tx timeout [ 177.974082] Bluetooth: hci7: command tx timeout [ 177.974111] Bluetooth: hci6: command tx timeout [ 179.444117] Bluetooth: hci0: command tx timeout [ 179.508114] Bluetooth: hci1: command tx timeout [ 179.636101] Bluetooth: hci2: command tx timeout [ 179.701121] Bluetooth: hci3: command tx timeout [ 179.829638] Bluetooth: hci4: command tx timeout [ 179.829766] Bluetooth: hci5: command tx timeout [ 180.020278] Bluetooth: hci7: command tx timeout [ 180.020331] Bluetooth: hci6: command tx timeout [ 181.492443] Bluetooth: hci0: command tx timeout [ 181.556357] Bluetooth: hci1: command tx timeout [ 181.684114] Bluetooth: hci2: command tx timeout [ 181.748397] Bluetooth: hci3: command tx timeout [ 181.877170] Bluetooth: hci4: command tx timeout [ 181.877321] Bluetooth: hci5: command tx timeout [ 182.069097] Bluetooth: hci7: command tx timeout [ 182.069547] Bluetooth: hci6: command tx timeout [ 235.341427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.345378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.350114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.355402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.358746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.455508] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.459226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.462406] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.469711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.474430] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.529355] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.533563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.545321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.564726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.570704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.602502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.627302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.631221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.641569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.645361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.731718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.740485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.773484] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.791627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.834283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.868558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.918290] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.939232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.958403] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.997709] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.033501] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.035512] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.039016] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.039660] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.048595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.058708] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.067609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.121313] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.139492] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.146962] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.428479] Bluetooth: hci0: command tx timeout [ 237.556253] Bluetooth: hci1: command tx timeout [ 237.620124] Bluetooth: hci2: command tx timeout [ 237.684158] Bluetooth: hci3: command tx timeout [ 238.068195] Bluetooth: hci4: command tx timeout [ 238.196144] Bluetooth: hci7: command tx timeout [ 238.260127] Bluetooth: hci6: command tx timeout [ 238.260181] Bluetooth: hci5: command tx timeout [ 239.477119] Bluetooth: hci0: command tx timeout [ 239.604138] Bluetooth: hci1: command tx timeout [ 239.668127] Bluetooth: hci2: command tx timeout [ 239.733116] Bluetooth: hci3: command tx timeout [ 240.116127] Bluetooth: hci4: command tx timeout [ 240.244254] Bluetooth: hci7: command tx timeout [ 240.308128] Bluetooth: hci5: command tx timeout [ 240.308563] Bluetooth: hci6: command tx timeout [ 241.524344] Bluetooth: hci0: command tx timeout [ 241.652219] Bluetooth: hci1: command tx timeout [ 241.718113] Bluetooth: hci2: command tx timeout [ 241.783085] Bluetooth: hci3: command tx timeout [ 242.164162] Bluetooth: hci4: command tx timeout [ 242.292329] Bluetooth: hci7: command tx timeout [ 242.356116] Bluetooth: hci6: command tx timeout [ 242.356137] Bluetooth: hci5: command tx timeout [ 243.573141] Bluetooth: hci0: command tx timeout [ 243.702595] Bluetooth: hci1: command tx timeout [ 243.767102] Bluetooth: hci2: command tx timeout [ 243.830103] Bluetooth: hci3: command tx timeout [ 244.212774] Bluetooth: hci4: command tx timeout [ 244.341561] Bluetooth: hci7: command tx timeout [ 244.404346] Bluetooth: hci5: command tx timeout [ 244.405091] Bluetooth: hci6: command tx timeout [ 298.829008] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.834485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.838887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.849704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.861906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.009396] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.013470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.018774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.024811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.031509] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.119208] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.125340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.127791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.141779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.148637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.159881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.167663] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.172105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.240637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.249478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.258294] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.262466] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.267996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.273636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.285379] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.286280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.291982] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.299715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.302676] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.308275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.312795] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.312976] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.317116] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.325086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.329869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.334327] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.363283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.369527] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.378611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.407548] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.916123] Bluetooth: hci0: command tx timeout [ 301.109424] Bluetooth: hci1: command tx timeout [ 301.172209] Bluetooth: hci3: command tx timeout [ 301.365128] Bluetooth: hci7: command tx timeout [ 301.431139] Bluetooth: hci2: command tx timeout [ 301.492176] Bluetooth: hci6: command tx timeout [ 301.493109] Bluetooth: hci4: command tx timeout [ 301.556211] Bluetooth: hci5: command tx timeout [ 302.964110] Bluetooth: hci0: command tx timeout [ 303.156207] Bluetooth: hci1: command tx timeout [ 303.220396] Bluetooth: hci3: command tx timeout [ 303.414074] Bluetooth: hci7: command tx timeout [ 303.476151] Bluetooth: hci2: command tx timeout [ 303.541299] Bluetooth: hci4: command tx timeout [ 303.541748] Bluetooth: hci6: command tx timeout [ 303.604103] Bluetooth: hci5: command tx timeout [ 305.012313] Bluetooth: hci0: command tx timeout [ 305.205056] Bluetooth: hci1: command tx timeout [ 305.268332] Bluetooth: hci3: command tx timeout [ 305.461834] Bluetooth: hci7: command tx timeout [ 305.524287] Bluetooth: hci2: command tx timeout [ 305.588373] Bluetooth: hci6: command tx timeout [ 305.588817] Bluetooth: hci4: command tx timeout [ 305.652262] Bluetooth: hci5: command tx timeout [ 307.060229] Bluetooth: hci0: command tx timeout [ 307.252167] Bluetooth: hci1: command tx timeout [ 307.316097] Bluetooth: hci3: command tx timeout [ 307.509074] Bluetooth: hci7: command tx timeout [ 307.572297] Bluetooth: hci2: command tx timeout [ 307.636131] Bluetooth: hci4: command tx timeout [ 307.636570] Bluetooth: hci6: command tx timeout [ 307.700246] Bluetooth: hci5: command tx timeout [ 361.033893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.039992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.042959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.050337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.056550] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.178839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.197382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.203530] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.221929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.228987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.288418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.295393] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.312629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.319733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.324648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.572975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.582583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.598699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.655444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.690459] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.738781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.745206] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.751972] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.761330] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.763636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.770709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.796550] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.801158] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.803372] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.804884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.806813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.822530] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.830802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.848873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.856928] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.866518] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.944439] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.946131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.960338] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.965573] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.124232] Bluetooth: hci0: command tx timeout [ 363.316201] Bluetooth: hci1: command tx timeout [ 363.381099] Bluetooth: hci2: command tx timeout [ 363.828128] Bluetooth: hci3: command tx timeout [ 363.956119] Bluetooth: hci4: command tx timeout [ 364.020300] Bluetooth: hci5: command tx timeout [ 364.084308] Bluetooth: hci6: command tx timeout [ 364.084378] Bluetooth: hci7: command tx timeout [ 365.172116] Bluetooth: hci0: command tx timeout [ 365.365345] Bluetooth: hci1: command tx timeout [ 365.430076] Bluetooth: hci2: command tx timeout [ 365.876144] Bluetooth: hci3: command tx timeout [ 366.005235] Bluetooth: hci4: command tx timeout [ 366.071108] Bluetooth: hci5: command tx timeout [ 366.132288] Bluetooth: hci7: command tx timeout [ 366.133385] Bluetooth: hci6: command tx timeout [ 367.220142] Bluetooth: hci0: command tx timeout [ 367.412277] Bluetooth: hci1: command tx timeout [ 367.476232] Bluetooth: hci2: command tx timeout [ 367.924316] Bluetooth: hci3: command tx timeout [ 368.052356] Bluetooth: hci4: command tx timeout [ 368.116349] Bluetooth: hci5: command tx timeout [ 368.180348] Bluetooth: hci6: command tx timeout [ 368.180425] Bluetooth: hci7: command tx timeout [ 369.269039] Bluetooth: hci0: command tx timeout [ 369.460135] Bluetooth: hci1: command tx timeout [ 369.524677] Bluetooth: hci2: command tx timeout [ 369.972101] Bluetooth: hci3: command tx timeout [ 370.100337] Bluetooth: hci4: command tx timeout [ 370.166060] Bluetooth: hci5: command tx timeout [ 370.228316] Bluetooth: hci6: command tx timeout [ 370.231124] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:28:16 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=bde53094b5b1327e RDX=00000000db688f6a RSI=000000000b6dc639 RDI=00000000e6d655a3 RBP=ffffffff85c1bac0 RSP=ffff88806ce089a8 R8 =0000000000000002 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000003 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff815185bf RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8ce15d8540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b41d8a34c8 CR3=0000000029220000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888016b7d008 RCX=ffffffff8138995e RDX=1ffff11002d6facd RSI=0000000000000004 RDI=ffff888016b7d670 RBP=ffff888016b7ce00 RSP=ffff888029247e00 R8 =0000000000000001 R9 =ffffed1002d6facd R10=ffff888016b7d66b R11=0000000000000000 R12=ffff888016b7d668 R13=ffff888030a05520 R14=ffff88802ac90000 R15=ffff888016b7d300 RIP=ffffffff81389986 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7f7f979710 CR3=000000002b416000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ff0000000000000000000000ff00 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000