Warning: Permanently added '[localhost]:28586' (ECDSA) to the list of known hosts. 2025/04/27 19:03:02 fuzzer started 2025/04/27 19:03:03 dialing manager at localhost:46629 syzkaller login: [ 95.676053] cgroup: Unknown subsys name 'net' [ 95.829458] cgroup: Unknown subsys name 'cpuset' [ 95.880582] cgroup: Unknown subsys name 'rlimit' 2025/04/27 19:03:27 syscalls: 203 2025/04/27 19:03:27 code coverage: enabled 2025/04/27 19:03:27 comparison tracing: enabled 2025/04/27 19:03:27 extra coverage: enabled 2025/04/27 19:03:27 setuid sandbox: enabled 2025/04/27 19:03:27 namespace sandbox: enabled 2025/04/27 19:03:27 Android sandbox: enabled 2025/04/27 19:03:27 fault injection: enabled 2025/04/27 19:03:27 leak checking: enabled 2025/04/27 19:03:27 net packet injection: enabled 2025/04/27 19:03:27 net device setup: enabled 2025/04/27 19:03:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 19:03:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 19:03:27 USB emulation: enabled 2025/04/27 19:03:27 hci packet injection: enabled 2025/04/27 19:03:27 wifi device emulation: enabled 2025/04/27 19:03:27 802.15.4 emulation: enabled 2025/04/27 19:03:27 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 19:03:29 starting 8 fuzzer processes 19:03:29 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0xf, 0x80000, 0xb9b) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x80}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x8, 0x5, 0x6) sendmsg$AUDIT_USER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfe, "5b6502c978c51487ec4658e93704e8523f47d097917363a598276498846e207a6bacd6289cb9ff965940b33f84edaf6dcee222fd495125bb183826368b5157df340571cc5b3950154321744ce7cfc9630cdee5b5512917c2cb2f46078df716d1af6bc1f0be0eaf44bad906c8e7b25f3fb2b3a20438b1190f21af13608c8b78b1284ce71ed8698d61a5f10d4174848dde3d2e2ac871446cf6fe747f05a0d620db854d43ea6576a728c0a6141a7768aa27c2c4979c1ac6b57bac201987cc6ca903c9", ["", "", "", "", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x41) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000300)=0x9, 0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000340)={0x9, "c198e4"}, 0x6) recvmmsg(r0, &(0x7f0000004080)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)=""/69, 0x45}], 0x1, &(0x7f00000004c0)=""/4096, 0x1000}, 0x20}, {{&(0x7f00000014c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001540)=""/99, 0x63}, {&(0x7f00000015c0)=""/141, 0x8d}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/207, 0xcf}, {&(0x7f0000003780)=""/135, 0x87}, {&(0x7f0000003840)=""/112, 0x70}, {&(0x7f00000038c0)=""/207, 0xcf}, {&(0x7f00000039c0)=""/102, 0x66}], 0x9, &(0x7f0000003b00)=""/158, 0x9e}, 0x3}, {{&(0x7f0000003bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003c40)=""/108, 0x6c}, {&(0x7f0000003cc0)=""/111, 0x6f}, {&(0x7f0000003d40)=""/201, 0xc9}, {&(0x7f0000003e40)=""/150, 0x96}, {&(0x7f0000003f00)=""/87, 0x57}], 0x5, &(0x7f0000004000)=""/126, 0x7e}, 0xffffffff}], 0x3, 0x0, &(0x7f0000004140)) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000004280)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004240)={&(0x7f00000041c0)={0x68, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x100, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000004340)={'sit0\x00', &(0x7f00000042c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0xe, 0x20, 0x59, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x20, 0x0, 0x8}}) r5 = socket(0x15, 0x80000, 0x8) accept4$bt_l2cap(r5, &(0x7f0000004380)={0x1f, 0x0, @fixed}, &(0x7f00000043c0)=0xe, 0x400) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000004500)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004440)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x10001, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000004600)={&(0x7f0000004540), 0xc, &(0x7f00000045c0)={&(0x7f0000004580)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x17}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="60c1adec22b8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8020}, 0x20000044) pipe2$9p(&(0x7f0000004640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCLUNK(r6, &(0x7f0000004680)={0x7, 0x79, 0x2}, 0x7) r7 = syz_open_dev$vcsa(&(0x7f00000046c0), 0x3, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f00000047c0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000004880)={'syztnl0\x00', &(0x7f0000004800)={'ip6_vti0\x00', r4, 0x29, 0x7f, 0x3f, 0x3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x8, 0x7, 0x255}}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000004a80)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004a40)={&(0x7f0000004a00)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048060}, 0x40) 19:03:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x2, 0x9, 0x0, @local, @mcast1, 0x10, 0x20, 0x6, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x2f, 0x40, 0x9, 0x1, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, 0x40, 0x7800, 0x23, 0xfffffff9}}) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x1, 0x2004c0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000280)=""/119, &(0x7f0000000300)=0x77) clock_gettime(0x0, &(0x7f0000003680)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003440)=[{{&(0x7f0000000340)=@sco={0x1f, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/99, 0x63}], 0x1, &(0x7f0000000480)=""/248, 0xf8}, 0x7f}, {{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/147, 0x93}], 0x3, &(0x7f0000000900)=""/93, 0x5d}, 0x9}, {{&(0x7f0000000980)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a00)=""/49, 0x31}, {&(0x7f0000000a40)=""/32, 0x20}, {&(0x7f0000000a80)=""/34, 0x22}, {&(0x7f0000000ac0)=""/155, 0x9b}, {&(0x7f0000000b80)=""/118, 0x76}, {&(0x7f0000000c00)=""/86, 0x56}, {&(0x7f0000000c80)=""/142, 0x8e}, {&(0x7f0000000d40)=""/155, 0x9b}], 0x8, &(0x7f0000000e80)=""/97, 0x61}, 0x3}, {{&(0x7f0000000f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000f80)}, {&(0x7f0000000fc0)=""/146, 0x92}, {&(0x7f0000001080)=""/123, 0x7b}, {&(0x7f0000001100)=""/76, 0x4c}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x5, &(0x7f0000002200)=""/94, 0x5e}, 0x80000000}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002280)=""/72, 0x48}, {&(0x7f0000002300)=""/69, 0x45}, {&(0x7f0000002380)=""/152, 0x98}, {&(0x7f0000002440)=""/240, 0xf0}, {&(0x7f0000002540)=""/227, 0xe3}, {&(0x7f0000002640)=""/49, 0x31}], 0x6, &(0x7f0000002700)=""/195, 0xc3}, 0x7}, {{&(0x7f0000002800)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/150, 0x96}, {&(0x7f0000002940)=""/120, 0x78}, {&(0x7f00000029c0)=""/93, 0x5d}], 0x3}, 0x3f}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002a80)=""/61, 0x3d}], 0x1, &(0x7f0000002b00)=""/225, 0xe1}, 0x101}, {{&(0x7f0000002c00)=@un=@abs, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002c80)=""/184, 0xb8}, {&(0x7f0000002d40)=""/168, 0xa8}, {&(0x7f0000002e00)=""/157, 0x9d}, {&(0x7f0000002ec0)=""/133, 0x85}], 0x4}, 0xc00}, {{&(0x7f0000002fc0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003040)=""/195, 0xc3}, {&(0x7f0000003140)=""/111, 0x6f}, {&(0x7f00000031c0)=""/53, 0x35}, {&(0x7f0000003200)=""/71, 0x47}, {&(0x7f0000003280)=""/218, 0xda}], 0x5, &(0x7f0000003400)=""/43, 0x2b}, 0x8000}], 0x9, 0x40000000, &(0x7f00000036c0)={r4, r5+10000000}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000003780)={'syztnl0\x00', &(0x7f0000003700)={'ip6gre0\x00', r1, 0x4, 0xff, 0x3, 0x828d, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8000, 0x8, 0x8, 0x7fff}}) eventfd2(0xffff, 0x80800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000003980)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x4004800) eventfd2(0x4, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000003a80)={'syztnl0\x00', &(0x7f0000003a00)={'ip6_vti0\x00', r7, 0x2f, 0x3, 0x5, 0x1, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x15}, 0x20, 0x7, 0x7, 0x7c29}}) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000003d00)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003ac0)={0x1d8, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe82e}}}]}}, {{0x8, 0x1, r1}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x890}, 0x4001) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r11, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000003d40)=""/181, 0xb5}, {&(0x7f0000003e00)=""/174, 0xae}, {&(0x7f0000003ec0)=""/48, 0x30}, {&(0x7f0000003f00)=""/50, 0x32}, {&(0x7f0000003f40)=""/130, 0x82}, {&(0x7f0000004000)=""/8, 0x8}, {&(0x7f0000004040)=""/102, 0x66}, {&(0x7f00000040c0)=""/246, 0xf6}], 0x8, &(0x7f0000004240)=""/200, 0xc8}, 0x5}], 0x1, 0x10020, &(0x7f0000004380)={0x0, 0x989680}) getpgrp(0xffffffffffffffff) r12 = syz_open_dev$vcsa(&(0x7f00000043c0), 0x9, 0x400000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r12, 0x89f7, &(0x7f0000004480)={'syztnl0\x00', &(0x7f0000004400)={'syztnl2\x00', r8, 0x29, 0x3b, 0x1, 0x20, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8000, 0x1, 0x8, 0x6}}) 19:03:29 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x1ff}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x4c}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x1, 0x7}, {0x7, 0x3}, {0x81, 0x2}], "a0f361535ca67045"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x6}, {0x0, 0x6}, {0x96, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x8, 0x6}, {0x8, 0x6}, {0x2}, {0x7f, 0x7}, {0x9, 0x5}, {0x3}, {0x7f, 0x5}, {0x4, 0x1}, {0x9}, {0x80, 0x3}, {0xe, 0x6}, {0xaf, 0x3}, {0x5, 0x7}, {0x3, 0x4}, {0xff, 0x7}, {0x1, 0x2}], "71a72ef14fce29bc"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) write$P9_RUNLINKAT(r0, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x1, {0x1, 0x4, 0x7}, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x5986, 0x7fff, 0x7, 0x9, 0x4, 0x1000, 0x45a6, 0xd5, 0x0, 0x75, 0xbe, 0x0, 0x4, 0x5, 0x200}}, 0xa0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x6, 0x200081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x40, 0x280040) write$P9_RWRITE(r3, &(0x7f0000000440)={0xb, 0x77, 0x1, 0x6}, 0xb) write$eventfd(r3, &(0x7f0000000480)=0x39, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) r4 = syz_open_dev$vcsa(&(0x7f0000000500), 0x5, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/39, 0x27}], 0x1) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = geteuid() write$P9_RGETATTR(r5, &(0x7f0000000600)={0xa0, 0x19, 0x2, {0x2023, {0x40, 0x0, 0x6}, 0x40, r6, 0xee00, 0x8, 0x1000, 0xbb15, 0x8, 0x3, 0x400, 0x10001, 0x5, 0x100000000, 0xcc, 0x80, 0x1, 0x1932, 0x8000, 0xc64}}, 0xa0) pipe2$9p(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSETATTR(r7, &(0x7f0000000700)={0x7, 0x1b, 0x2}, 0x7) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000740)={'custom0\x00'}) 19:03:29 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000300)=""/195, 0xc3}], 0x4}, 0x1}, {{&(0x7f0000000440)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/253, 0xfd}], 0x1, &(0x7f0000000600)=""/182, 0xb6}, 0x8}, {{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)=""/35, 0x23}], 0x1}, 0x8}], 0x3, 0x40, &(0x7f00000008c0)={r0, r1+10000000}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x29, 0x5, 0x1, 0x6, 0x29, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x8000, 0x1, 0x80000000, 0x24}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x4, 0xe6, 0x4, 0x3f, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x1, 0x1, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x37c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x73}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2452}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x23}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x20000480}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000ec0), 0x6, 0x8c180) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000000f00)={0x100, 0x7}) getpgrp(0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000019c0)={'ip6tnl0\x00', &(0x7f0000001940)={'ip6tnl0\x00', r4, 0x29, 0x7, 0x2, 0x9, 0x13, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x8000, 0x28, 0xf6000000, 0x8}}) ioctl$KIOCSOUND(r5, 0x4b2f, 0x7) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000001a00)=0xa) syz_genetlink_get_family_id$wireguard(&(0x7f0000001a40), r5) r8 = socket(0x2b, 0x5, 0xbe) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4b}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88a8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20040005) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001c40)={'sit0\x00', &(0x7f0000001bc0)={'syztnl2\x00', r7, 0x29, 0x0, 0x2, 0x1ff, 0x1f, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x1, 0xffffff81, 0x7b}}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001f80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001c80)={0x2bc, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x248, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x0, 0x4, 0xfffffbff}, {0x3, 0x9c, 0x1, 0x7}, {0x20, 0x6, 0x7, 0x3}, {0x80, 0x2, 0x7, 0x7}, {0x4, 0x48, 0x9, 0x9}, {0x400, 0xcf, 0xfb, 0xfff}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5c}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3c2a}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x800, 0x1, 0x0, 0x7fff}, {0x4, 0x80, 0x7, 0x6}, {0x8, 0x31, 0x9, 0x3}]}}}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20008044}, 0x40000) [ 121.428134] audit: type=1400 audit(1745780609.192:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:03:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3ff, 0x80800) r1 = eventfd2(0x314, 0x80800) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="2ead3a30c2e85b190b10fe96afa6af216dc474be9b5de02dc5b47acd3cc10cec9349dc794bae8de38f1ddf23251b30eb3c64c97d541defc8c637a71880fa9fa9027a3821ef83cdc01000a91b16101c95f3c687434dbf614188cc1688e4c8b83521de49e4f226224c27a84c31372820d5a5fde03c4a", 0x75, 0x9, 0x0, 0x2, r1}, &(0x7f0000000100)) write$P9_RFLUSH(r0, &(0x7f0000000140)={0x7, 0x6d, 0x2}, 0x7) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFSYNC(r2, &(0x7f00000001c0)={0x7, 0x33, 0x1}, 0x7) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc671fe24cc4f6364) write$P9_RLERROR(r3, &(0x7f0000000240)={0x9, 0x7, 0x1}, 0x9) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x9, 0x2040) write$P9_RREADDIR(r4, &(0x7f00000002c0)={0xa6, 0x29, 0x1, {0xff4, [{{0x80, 0x2}, 0x6, 0x0, 0x7, './file0'}, {{0x20, 0x3, 0x1}, 0xfffffffffffffe01, 0x1, 0x7, './file0'}, {{0x1, 0x3, 0x2}, 0x7ff, 0x14, 0x7, './file0'}, {{0x4, 0x0, 0x8}, 0x8, 0x0, 0x7, './file0'}, {{0x10, 0x2, 0x3}, 0x101, 0x3, 0x7, './file0'}]}}, 0xa6) write$P9_RXATTRWALK(r3, &(0x7f0000000380)={0xf, 0x1f, 0x1, 0x4eae5835}, 0xf) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x0, 0x28a401) r6 = geteuid() write$P9_RGETATTR(r5, &(0x7f0000000400)={0xa0, 0x19, 0x2, {0x2a8, {0x40, 0x0, 0x2}, 0x8, r6, 0x0, 0xc0f, 0x9c4a, 0x0, 0x8, 0xc2f, 0x200, 0x8, 0x4d022035, 0x80, 0x81, 0x5, 0x4, 0x1000, 0x4, 0x100}}, 0xa0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x1b, 0x1}, 0x7) r7 = accept(r4, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x80) sendmsg$AUDIT_USER(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x3ed, 0x200, 0x70bd27, 0x25dfdbfe, "e3f6976f474271fd972f70224bef52d7a1fe1fef3fe78a4122a04ab769aa2629e414e072261ef128e49678bcbae8a0851da519f3a50650b5efa071", [""]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080) write$P9_RWRITE(r0, &(0x7f0000000700)={0xb, 0x77, 0x1}, 0xb) pipe2$9p(&(0x7f0000000740), 0x4000) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, 0x0, 0x821, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7b974718e069"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 19:03:29 executing program 5: getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket(0x10, 0x5, 0x4f) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x8000, 0x20, 0x240, 0x4, 0x4}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ab7b55c0cf8642f", "c202ed77fc0d049fe026dce8e7bc0bb1e25d527f86721c8e01cb944dd8a5349f", "86aa2c09", "531f9d738dc437a9"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x7, 0x1, 0x8, 0x0, 0x5}, 0x14) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "31c24d600ac28531", "5ad4f9c33e4fe5130c11af38fda8c116", "9f46924c", "caf518f55cefb240"}, 0x28) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x800) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000380)=@gcm_256={{0x303}, "2ee87caa23dc3147", "86d6de3bc88b02ee7eb0d25527330e8d49298c4117c3510b17bfbbf2eb52567d", "ec3d8a7c", "cfa210e2d402f48c"}, 0x38) r2 = io_uring_setup(0x4e0b, &(0x7f00000003c0)={0x0, 0xff01, 0x1b3fd6a9e9d20178, 0x3, 0x398}) r3 = eventfd(0x2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000440)=r3, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg2\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000580), 0x4) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000006c0)=r3, 0x1) 19:03:29 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x3, 0xffffffc1, 0x18, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x80, 0x2, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x4, 0x8, 0x2, 0x0, 0x20, @empty, @mcast1, 0x7800, 0x8000, 0x2e1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0x40, 0xfe, 0x0, 0x56, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x10, 0x40, 0x4, 0x5}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x29, 0xfa, 0xff, 0x7f, 0x6b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x40, 0x0, 0x3ff, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', r5, 0x4, 0x40, 0x4, 0xfffffffe, 0xa, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x700, 0x7, 0x80000000, 0xfff}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x2f, 0xe3, 0x3f, 0x8000, 0x20, @mcast2, @remote, 0x7800, 0x8000, 0x6, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'sit0\x00', r1, 0x2f, 0xff, 0x6, 0x7, 0x64, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8, 0x0, 0x2, 0x3}}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x2f, 0xdd, 0x57, 0x80, 0x10, @local, @loopback, 0x1, 0x8000, 0x9dd, 0x7}}) r8 = syz_open_dev$vcsa(&(0x7f0000000640), 0x3f, 0x6000) ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000680)) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f00000006c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x1, 0x0, 0x32, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x700, 0x80, 0x83, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r9, 0x89f6, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl0\x00', r10, 0x4, 0x98, 0x8, 0xc4, 0x30, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x8000, 0x0, 0x8}}) 19:03:29 executing program 7: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0xfffffff7, 0x40, 0x0, 0x2, 0x0, "3dc446b7c44d08ebee4fb3e8be36c740a9230a", 0x80, 0x1}) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x80000001, 0xc6b6}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0xea, 0x2, 0x2, 0x12, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7, 0x40, 0x7, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', r1, 0x4, 0x4, 0x0, 0x1, 0x2, @private0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7, 0x700, 0x3, 0x415}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000200)={0xfffffc01, 0x0, 0x4, 0x63a, 0x1, "fc993485169b01fe947f1e4523173e788f62cd", 0x81, 0x40}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', r2, 0x29, 0x1, 0x9, 0x6, 0x42, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, 0x700, 0x700, 0x40, 0x1f}}) r4 = syz_open_dev$vcsa(&(0x7f0000004780), 0x401, 0x20202) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000004880)={'ip6gre0\x00', &(0x7f0000004800)={'sit0\x00', r1, 0x29, 0x5, 0xff, 0x4, 0x2, @mcast2, @rand_addr=' \x01\x00', 0x1, 0x7800, 0x3, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000004980)={&(0x7f00000047c0), 0xc, &(0x7f0000004940)={&(0x7f00000048c0)={0x60, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x488c0}, 0x10) read$char_usb(r4, &(0x7f00000049c0)=""/159, 0x9f) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000004a80), 0x0, 0x400000) r7 = syz_genetlink_get_family_id$team(&(0x7f0000004b00), r4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000004bc0)={'ip6tnl0\x00', &(0x7f0000004b40)={'ip6gre0\x00', r3, 0x4, 0x0, 0x9, 0x0, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x700, 0x80, 0xb62, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000004c80)={'ip6gre0\x00', &(0x7f0000004c00)={'syztnl2\x00', r1, 0x29, 0x5, 0x2e, 0x104c956b, 0x29, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x700, 0x6, 0xcd44}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000005440)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005400)={&(0x7f0000005040)={0x398, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfeff, 0xee, 0x8, 0x9}, {0x8, 0x9, 0x7, 0xf66}, {0x0, 0x1f, 0x7, 0x4}, {0x800, 0x6, 0x9, 0x4}, {0x1, 0xe, 0x2, 0xffff2f29}, {0x6, 0x5, 0x3, 0x6}, {0x6, 0x81, 0x3, 0x1}]}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x398}, 0x1, 0x0, 0x0, 0x2000}, 0x40891) [ 122.879310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.882608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.885967] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.895168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.901951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.955431] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.968708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.974065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.978939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.982607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.983966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.989776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.994848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.998883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.006388] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.006516] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.015605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.021958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.025993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.037199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.039895] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.041650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.043444] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.076770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.087827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.101171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.101318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.108642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.146825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.149381] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.155716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.164212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.168888] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.171039] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.172990] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.183608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.185146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.187632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.200936] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.216866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 124.960040] Bluetooth: hci0: command tx timeout [ 125.087800] Bluetooth: hci2: command tx timeout [ 125.151644] Bluetooth: hci3: command tx timeout [ 125.152228] Bluetooth: hci1: command tx timeout [ 125.279623] Bluetooth: hci5: command tx timeout [ 125.280289] Bluetooth: hci6: command tx timeout [ 125.280892] Bluetooth: hci4: command tx timeout [ 125.344453] Bluetooth: hci7: command tx timeout [ 127.007664] Bluetooth: hci0: command tx timeout [ 127.135474] Bluetooth: hci2: command tx timeout [ 127.200414] Bluetooth: hci1: command tx timeout [ 127.200875] Bluetooth: hci3: command tx timeout [ 127.328136] Bluetooth: hci4: command tx timeout [ 127.328940] Bluetooth: hci6: command tx timeout [ 127.329411] Bluetooth: hci5: command tx timeout [ 127.391596] Bluetooth: hci7: command tx timeout [ 129.057108] Bluetooth: hci0: command tx timeout [ 129.183401] Bluetooth: hci2: command tx timeout [ 129.247631] Bluetooth: hci3: command tx timeout [ 129.248079] Bluetooth: hci1: command tx timeout [ 129.375748] Bluetooth: hci5: command tx timeout [ 129.376199] Bluetooth: hci6: command tx timeout [ 129.377527] Bluetooth: hci4: command tx timeout [ 129.439453] Bluetooth: hci7: command tx timeout [ 131.103443] Bluetooth: hci0: command tx timeout [ 131.231553] Bluetooth: hci2: command tx timeout [ 131.295460] Bluetooth: hci1: command tx timeout [ 131.295908] Bluetooth: hci3: command tx timeout [ 131.424513] Bluetooth: hci6: command tx timeout [ 131.424961] Bluetooth: hci4: command tx timeout [ 131.425480] Bluetooth: hci5: command tx timeout [ 131.488708] Bluetooth: hci7: command tx timeout [ 185.525272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.531992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.540726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.548644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.562864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.615899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.621079] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.626906] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.637587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.645114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.655623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.670705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.686050] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.698987] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.715236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.741863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.748838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.750695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.755875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.766538] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.787006] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.790146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.797413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.802012] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.808041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.815063] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.825594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.836491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.838227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.843510] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.845741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.850300] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.852937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.856098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.866414] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.875599] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 185.883921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.885708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.933069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.948862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.615575] Bluetooth: hci0: command tx timeout [ 187.679861] Bluetooth: hci1: command tx timeout [ 187.808999] Bluetooth: hci2: command tx timeout [ 187.936509] Bluetooth: hci6: command tx timeout [ 187.937497] Bluetooth: hci7: command tx timeout [ 187.999588] Bluetooth: hci4: command tx timeout [ 188.063605] Bluetooth: hci3: command tx timeout [ 188.064578] Bluetooth: hci5: command tx timeout [ 189.664625] Bluetooth: hci0: command tx timeout [ 189.727451] Bluetooth: hci1: command tx timeout [ 189.855749] Bluetooth: hci2: command tx timeout [ 189.983861] Bluetooth: hci6: command tx timeout [ 189.984828] Bluetooth: hci7: command tx timeout [ 190.048055] Bluetooth: hci4: command tx timeout [ 190.111557] Bluetooth: hci3: command tx timeout [ 190.113031] Bluetooth: hci5: command tx timeout [ 191.711607] Bluetooth: hci0: command tx timeout [ 191.776383] Bluetooth: hci1: command tx timeout [ 191.903902] Bluetooth: hci2: command tx timeout [ 192.031550] Bluetooth: hci6: command tx timeout [ 192.032443] Bluetooth: hci7: command tx timeout [ 192.095944] Bluetooth: hci4: command tx timeout [ 192.159555] Bluetooth: hci3: command tx timeout [ 192.160426] Bluetooth: hci5: command tx timeout [ 193.762371] Bluetooth: hci0: command tx timeout [ 193.823413] Bluetooth: hci1: command tx timeout [ 193.951457] Bluetooth: hci2: command tx timeout [ 194.079443] Bluetooth: hci7: command tx timeout [ 194.079939] Bluetooth: hci6: command tx timeout [ 194.144472] Bluetooth: hci4: command tx timeout [ 194.208460] Bluetooth: hci5: command tx timeout [ 194.208950] Bluetooth: hci3: command tx timeout [ 245.197892] syz-executor.0 (2888) used greatest stack depth: 24400 bytes left [ 247.564056] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.567174] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.570098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.573182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.575969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.581402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.590762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.596555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.602304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.606424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.689810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.717496] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.720039] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.738876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.751883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.821169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.824914] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.828081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.832239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.835819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.839295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.844659] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.854856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.876934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.911174] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.934860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.942661] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.948152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.959705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.963533] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.023838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.090480] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.121387] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.134639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.169007] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.176559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.188607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.208298] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 248.211389] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.218888] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.695554] Bluetooth: hci0: command tx timeout [ 249.697107] Bluetooth: hci1: command tx timeout [ 249.823466] Bluetooth: hci2: command tx timeout [ 249.887438] Bluetooth: hci3: command tx timeout [ 250.079545] Bluetooth: hci4: command tx timeout [ 250.144407] Bluetooth: hci5: command tx timeout [ 250.273102] Bluetooth: hci6: command tx timeout [ 250.335440] Bluetooth: hci7: command tx timeout [ 251.743769] Bluetooth: hci0: command tx timeout [ 251.744264] Bluetooth: hci1: command tx timeout [ 251.871403] Bluetooth: hci2: command tx timeout [ 251.935748] Bluetooth: hci3: command tx timeout [ 252.129402] Bluetooth: hci4: command tx timeout [ 252.191685] Bluetooth: hci5: command tx timeout [ 252.319600] Bluetooth: hci6: command tx timeout [ 252.383425] Bluetooth: hci7: command tx timeout [ 253.791726] Bluetooth: hci1: command tx timeout [ 253.792222] Bluetooth: hci0: command tx timeout [ 253.921407] Bluetooth: hci2: command tx timeout [ 253.984400] Bluetooth: hci3: command tx timeout [ 254.175541] Bluetooth: hci4: command tx timeout [ 254.239781] Bluetooth: hci5: command tx timeout [ 254.367485] Bluetooth: hci6: command tx timeout [ 254.431525] Bluetooth: hci7: command tx timeout [ 255.840415] Bluetooth: hci1: command tx timeout [ 255.840888] Bluetooth: hci0: command tx timeout [ 255.967658] Bluetooth: hci2: command tx timeout [ 256.031406] Bluetooth: hci3: command tx timeout [ 256.223491] Bluetooth: hci4: command tx timeout [ 256.288567] Bluetooth: hci5: command tx timeout [ 256.415411] Bluetooth: hci6: command tx timeout [ 256.480383] Bluetooth: hci7: command tx timeout [ 309.757149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.763692] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.768906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.778419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.784622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.942364] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.948923] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.953685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.969126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.984739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.005300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.016142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.023666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.037017] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.046696] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.170039] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.217048] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.253475] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.256207] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.260303] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.284775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.307788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.314790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.319655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.322633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.326608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.331462] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.338100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.346309] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.352618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.358601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.362607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.364038] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.366089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.367769] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.415860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.416205] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 310.451999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.464065] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.523988] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.839436] Bluetooth: hci0: command tx timeout [ 312.031537] Bluetooth: hci1: command tx timeout [ 312.095677] Bluetooth: hci2: command tx timeout [ 312.480124] Bluetooth: hci5: command tx timeout [ 312.481275] Bluetooth: hci3: command tx timeout [ 312.608454] Bluetooth: hci4: command tx timeout [ 312.609386] Bluetooth: hci6: command tx timeout [ 312.672581] Bluetooth: hci7: command tx timeout [ 313.888704] Bluetooth: hci0: command tx timeout [ 314.079663] Bluetooth: hci1: command tx timeout [ 314.144893] Bluetooth: hci2: command tx timeout [ 314.527429] Bluetooth: hci5: command tx timeout [ 314.527909] Bluetooth: hci3: command tx timeout [ 314.656628] Bluetooth: hci6: command tx timeout [ 314.657114] Bluetooth: hci4: command tx timeout [ 314.720415] Bluetooth: hci7: command tx timeout [ 315.937421] Bluetooth: hci0: command tx timeout [ 316.128598] Bluetooth: hci1: command tx timeout [ 316.192623] Bluetooth: hci2: command tx timeout [ 316.576677] Bluetooth: hci5: command tx timeout [ 316.577184] Bluetooth: hci3: command tx timeout [ 316.704585] Bluetooth: hci6: command tx timeout [ 316.705088] Bluetooth: hci4: command tx timeout [ 316.768525] Bluetooth: hci7: command tx timeout [ 317.984418] Bluetooth: hci0: command tx timeout [ 318.175395] Bluetooth: hci1: command tx timeout [ 318.240442] Bluetooth: hci2: command tx timeout [ 318.623564] Bluetooth: hci3: command tx timeout [ 318.624073] Bluetooth: hci5: command tx timeout [ 318.751450] Bluetooth: hci4: command tx timeout [ 318.751946] Bluetooth: hci6: command tx timeout [ 318.816654] Bluetooth: hci7: command tx timeout [ 372.276700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.286589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.290977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.300745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.305745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.474766] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 372.481232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 372.485355] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 372.494663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 372.499264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.548928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.551852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.562075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.569327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.574861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.580862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.590906] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.600268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.608309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.610619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.617193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.618600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.620546] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.638035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.645530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.661053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.682239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.685057] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.697919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 372.702700] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.739901] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.742308] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 372.755574] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 372.793772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 372.821963] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 373.304706] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.367858] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 373.405586] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 373.456770] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 373.486014] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 374.367431] Bluetooth: hci0: command tx timeout [ 374.560413] Bluetooth: hci1: command tx timeout [ 374.687448] Bluetooth: hci3: command tx timeout [ 374.815671] Bluetooth: hci2: command tx timeout [ 374.816070] Bluetooth: hci4: command tx timeout [ 374.816882] Bluetooth: hci5: command tx timeout [ 374.943622] Bluetooth: hci6: command tx timeout [ 375.648403] Bluetooth: hci7: command tx timeout [ 376.415583] Bluetooth: hci0: command tx timeout [ 376.607586] Bluetooth: hci1: command tx timeout [ 376.735411] Bluetooth: hci3: command tx timeout [ 376.863407] Bluetooth: hci5: command tx timeout [ 376.864450] Bluetooth: hci4: command tx timeout [ 376.864508] Bluetooth: hci2: command tx timeout [ 376.992354] Bluetooth: hci6: command tx timeout [ 377.695520] Bluetooth: hci7: command tx timeout [ 378.463780] Bluetooth: hci0: command tx timeout [ 378.655715] Bluetooth: hci1: command tx timeout [ 378.783474] Bluetooth: hci3: command tx timeout [ 378.911411] Bluetooth: hci2: command tx timeout [ 378.911496] Bluetooth: hci4: command tx timeout [ 378.911864] Bluetooth: hci5: command tx timeout [ 379.041923] Bluetooth: hci6: command tx timeout [ 379.743703] Bluetooth: hci7: command tx timeout [ 380.513778] Bluetooth: hci0: command tx timeout [ 380.703685] Bluetooth: hci1: command tx timeout [ 380.832453] Bluetooth: hci3: command tx timeout [ 380.960485] Bluetooth: hci4: command tx timeout [ 380.961016] Bluetooth: hci2: command tx timeout [ 380.962575] Bluetooth: hci5: command tx timeout [ 381.088390] Bluetooth: hci6: command tx timeout [ 381.793384] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 19:08:31 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c1ba00 RDI=ffff8880349ca618 RBP=ffffffff85c1ba00 RSP=ffff888023707620 R8 =0000000000000000 R9 =0000000000000000 R10=ffff8880237077b0 R11=0000000000000000 R12=ffff8880349c9bc0 R13=ffff8880349ca618 R14=00000000ffffffff R15=ffff8880349ca618 RIP=ffffffff84ae10f3 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f42f874e3c0 CR3=000000002c5ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000100073 RCX=ffffffff819c4d40 RDX=ffff8880349c8000 RSI=ffffffff819c4d51 RDI=0000000000000005 RBP=0000000000100073 RSP=ffff888023e8fc10 R8 =0000000000000001 R9 =fffff940001ac068 R10=0000000000000001 R11=0000000000013ad0 R12=0000000000000200 R13=ffffea0000d60340 R14=0000000007783000 R15=ffffea0000000000 RIP=ffffffff819c4d54 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdf2ff32310 CR3=00000000294fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000