Warning: Permanently added '[localhost]:47727' (ECDSA) to the list of known hosts. 2025/05/25 06:10:02 fuzzer started 2025/05/25 06:10:03 dialing manager at localhost:46087 syzkaller login: [ 105.885222] cgroup: Unknown subsys name 'net' [ 106.065174] cgroup: Unknown subsys name 'cpuset' [ 106.134286] cgroup: Unknown subsys name 'rlimit' 2025/05/25 06:10:18 syscalls: 2214 2025/05/25 06:10:18 code coverage: enabled 2025/05/25 06:10:18 comparison tracing: enabled 2025/05/25 06:10:18 extra coverage: enabled 2025/05/25 06:10:18 setuid sandbox: enabled 2025/05/25 06:10:18 namespace sandbox: enabled 2025/05/25 06:10:18 Android sandbox: enabled 2025/05/25 06:10:18 fault injection: enabled 2025/05/25 06:10:18 leak checking: enabled 2025/05/25 06:10:18 net packet injection: enabled 2025/05/25 06:10:18 net device setup: enabled 2025/05/25 06:10:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/25 06:10:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/25 06:10:18 USB emulation: enabled 2025/05/25 06:10:18 hci packet injection: enabled 2025/05/25 06:10:18 wifi device emulation: enabled 2025/05/25 06:10:18 802.15.4 emulation: enabled 2025/05/25 06:10:18 fetching corpus: 0, signal 0/0 (executing program) 2025/05/25 06:10:20 starting 8 fuzzer processes 06:10:20 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1b) ioctl$RTC_PIE_OFF(r0, 0x7006) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x92) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x4, 0x7, 0x18, 0x8, 0x0, @private0, @local, 0x8, 0x7800, 0x0, 0x4}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x130, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x114, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x2, 0x9}, {0x1f, 0x3, 0x1f, 0xb658}, {0xff, 0xff, 0xff, 0x8000}, {0xff, 0x23, 0x39, 0xa76e}, {0x6, 0x3, 0xbd, 0x8001}]}}}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000001}, 0x890) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x684) r2 = inotify_init1(0x80000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000500)={0x0, r2, 0x400, 0x100000000, 0x5, 0xde}) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r3, 0x6, 0xfc, 0x3f, 0x660e, 0x43, @mcast1, @remote, 0x1, 0x40, 0x5a}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000680)={0x0, @aes128, 0x0, @desc1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000006c0)) fgetxattr(r0, &(0x7f00000008c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000900)=""/141, 0x8d) r4 = socket(0x6, 0x2, 0x7fff) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000a00)=@add_del={0x2, &(0x7f00000009c0)='ip6tnl0\x00'}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) 06:10:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x501c82, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7e4e}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8894}, 0x10885) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x4, 0x200, 0x2, 0x5f, 0x5, [{0x5, 0x6e4, 0xffffffffffffff17, '\x00', 0x1402}, {0x8, 0x6d6a0000, 0x1, '\x00', 0x99603c341d2e98b5}, {0xd2, 0xffffffff, 0x2}, {0x3, 0x0, 0x9, '\x00', 0x80}, {0xa4d, 0xffff, 0x84, '\x00', 0x2000}]}) r1 = socket$netlink(0x10, 0x3, 0x5) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) tee(r1, 0xffffffffffffffff, 0x80000000, 0xa) faccessat2(r0, &(0x7f00000003c0)='./file0\x00', 0x2, 0x1100) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000480)={0x8, 0x7, 0x1, 'queue1\x00', 0xab44}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xbed}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x1, 0x7, 0x102, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffbd}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0xc880) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000007c0)={0x0, r4, 0x100000001, 0x5, 0x4}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000800)={0x0, 0x4, 0x6, 0x7}) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f0000000840), 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000880)=0x8, &(0x7f00000008c0)=0x4) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000900), &(0x7f0000000940)=0x40) 06:10:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x6, 0x2, 0x71, 0x9c}, {0xce, 0x2, 0x4, 0x5c}, {0x0, 0x20, 0x4, 0xe8}, {0x4, 0xc9, 0x0, 0x4}]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x810) r2 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r2, &(0x7f0000000200)=""/181, 0xb5, 0x1, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10410800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1ff, 0x4e23, 0x4, 0xa, 0x0, 0x20, 0x3a}, {0x1, 0x3, 0xffffffffffffff01, 0x28b1, 0x4, 0x81, 0x0, 0x5}, {0x8, 0x80000000, 0x20, 0x7ff}, 0x6, 0x6e6bb4, 0x0, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x4d4, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x3, 0x3, 0x0, 0x4, 0x3, 0x8}}, 0xe8) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000680)=[r4, r5], 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}, 0x3}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)="bb0b00f30d3b861093c380de22c7b274e797de3f55e235d58bc235", 0x1b}], 0x1}, 0x850) bind$802154_dgram(r0, &(0x7f0000000800)={0x24, @none={0x0, 0x2}}, 0x14) fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000880), 0x2, 0x200) ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000008c0)={0x40, 0x7, 0x1}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x20040010) 06:10:20 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x81, 0x3, 0x9, @empty, @mcast2, 0x8000, 0x7800}}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x48001) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x20000050) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f0000000340)={@local, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth0_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x2a8, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) r6 = syz_open_dev$vcsa(&(0x7f0000000840), 0xfffffffffffffff7, 0x111302) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r1) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r7, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaed}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x20) sendto(0xffffffffffffffff, &(0x7f0000000ac0)="037e2aeddb25271430a6290e506b10d1a9686d947eb55dd6e1a24d23f34c8c8052", 0x21, 0x0, &(0x7f0000000b00)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80) r8 = dup3(r6, 0xffffffffffffffff, 0x80000) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44050) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff, 0x2}) 06:10:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x2a, 0x5, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f00000000c0)={0x6, 'vlan1\x00', {0x800}, 0x2}) r3 = epoll_create(0xa5c) epoll_pwait2(r3, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0xfff]}, 0x8) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000300)={0x30000000, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @local}}}, 0x108) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000440)={0x7, 0x4b, 0x1}, 0x7) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000480)=""/212, &(0x7f0000000580)=0xd4) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000000) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x701, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x2f, 0x0, 0x3, 0x5, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x9}}) bind$packet(r0, &(0x7f0000000880)={0x11, 0x0, r4, 0x1, 0x7f, 0x6, @multicast}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40450}, 0x810) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2, {0x3, 0xd60b}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000f00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x128, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8005}, 0x0) [ 123.207902] audit: type=1400 audit(1748153421.018:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:10:21 executing program 5: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000240), 0x4) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000680)={0x3, 0x1, 0x16, 0x6, 0xdd, &(0x7f0000000280)}) r0 = syz_open_dev$vcsa(&(0x7f00000006c0), 0xe24, 0x240) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000700)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000740)={0x3, 0x101, 0x1000, 0x100, 0x1, "5f38ddae67e82ed6"}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x9, 0x400, 0x99e}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x4000) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000880)) r1 = pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000008c0)={0x80000001, {0x8, 0x0, 0x1, 0x3, 0xfff}}) signalfd(r1, &(0x7f0000000900)={[0x6]}, 0x8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000940)={0x2, {0x2, 0x3, 0x1, 0x80, 0x0, 0x3}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000a80)=0xe8) write$P9_RGETATTR(r0, &(0x7f0000000ac0)={0xa0, 0x19, 0x1, {0x100, {0x8, 0x2, 0x1}, 0x10, r2, 0xffffffffffffffff, 0xf54, 0x7, 0x3, 0x4, 0x9, 0x956d, 0x9, 0x6ae72e10, 0x2, 0xb6c, 0x0, 0x957, 0x3, 0x5, 0x8000}}, 0xa0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b80), 0x200000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000bc0)) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000d80), 0x111800, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) 06:10:21 executing program 6: sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008081}, 0x40000) r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a8, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x18c, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc9ef}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1c}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xdd4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb2a5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3257}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1f}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3637}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x50}, 0x44000) truncate(&(0x7f0000000480)='./file0\x00', 0x401) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x4000050) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000700)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r1, 0x29, 0x1, 0x4, 0x1, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x7800, 0x8000, 0x6, 0x23}}) r3 = syz_open_dev$vcsa(&(0x7f0000000800), 0x5, 0x102) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000840)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'syztnl1\x00', r2, 0x2f, 0x5, 0x8, 0x2, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x0, 0x1, 0x3652, 0x9}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000940)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setxattr(&(0x7f0000000ac0)='./file0/file0\x00', &(0x7f0000000b00)=@known='system.sockprotoname\x00', &(0x7f0000000b40)='&\x00', 0x2, 0x3) getpeername$unix(r0, &(0x7f0000000b80), &(0x7f0000000c00)=0x6e) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000c80)={'vlan1\x00', @ifru_data=&(0x7f0000000c40)="017113a582657798f3709c299a7dfff19a600cfa93e7cc34fa2341edc304b8b6"}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000d00)={0x0, @can={0x1d, 0x0}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, @l2tp={0x2, 0x0, @broadcast}, 0x7, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000cc0)='netdevsim0\x00', 0x5, 0x7, 0x7}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6tnl0\x00', r5, 0x29, 0x8, 0xff, 0x1, 0x8, @remote, @loopback, 0x87, 0x7, 0xffffffe1, 0x81}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3, {0x3f}}, './file0\x00'}) ioctl$EVIOCSREP(r6, 0x40084503, &(0x7f0000000e80)=[0xfffffffc, 0x2]) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 06:10:21 executing program 7: sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x30}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040005}, 0x50) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0), 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000200)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000240)) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x18) write$P9_RSTATFS(r1, &(0x7f00000002c0)={0x43, 0x9, 0x1, {0x1, 0xe3a, 0x0, 0x9, 0x0, 0x101, 0x6, 0x2, 0x7}}, 0x43) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x18}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x9e, 0x8, 0x827, 0x1c, 0x701a, 0x1, 0x8, 0x440, 0x4a8, 0x1, 0x8000, 0x8001, 0x12c, 0xffff, 0x40, 0x2]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r3, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x4d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004840}, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000640), &(0x7f0000000680)=0xc) sendto$inet(r1, &(0x7f00000006c0)="0fb768f3ceb361c38cba526e6f63202b819d0fcdab41d142be7ecb5b55268ee22e9fe1a6b457a6537a482ab023418de7c48e2fad258af338b00766562c1ba351d67019b08a3d06bf5a53dbd38ccf37f9d1637dee29dc67c72e0ecc88aafdcbce92790b2be4b36d727e6545222cf7badba748d2e3c365bf223f9fe0ef5dc60beff2d0f5a90b03f8708d40e015c552ab", 0x8f, 0x1, &(0x7f0000000780)={0x2, 0x4e21, @multicast1}, 0x10) lseek(r0, 0x8001, 0x1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x21822008}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x98, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40891) [ 124.738114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.749134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.756273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.764246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.766475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.774760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.778161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.783957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.787474] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.793612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.797508] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.801034] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.801534] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.802743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.817405] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.822414] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.825626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.847837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.891182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.895543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.906336] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.908984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.914961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.918075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.920945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.924446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.938006] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.939568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.942321] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.955435] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.968114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.971432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.978972] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.987782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.990200] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.994974] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.997290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.012629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.024917] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 125.030552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.867266] Bluetooth: hci4: command tx timeout [ 126.930783] Bluetooth: hci0: command tx timeout [ 126.931379] Bluetooth: hci1: command tx timeout [ 127.059272] Bluetooth: hci2: command tx timeout [ 127.122966] Bluetooth: hci5: command tx timeout [ 127.123578] Bluetooth: hci6: command tx timeout [ 127.124142] Bluetooth: hci7: command tx timeout [ 127.186782] Bluetooth: hci3: command tx timeout [ 128.915300] Bluetooth: hci4: command tx timeout [ 128.978736] Bluetooth: hci1: command tx timeout [ 128.979184] Bluetooth: hci0: command tx timeout [ 129.106769] Bluetooth: hci2: command tx timeout [ 129.171050] Bluetooth: hci7: command tx timeout [ 129.171521] Bluetooth: hci6: command tx timeout [ 129.171614] Bluetooth: hci5: command tx timeout [ 129.236741] Bluetooth: hci3: command tx timeout [ 130.962926] Bluetooth: hci4: command tx timeout [ 131.027335] Bluetooth: hci0: command tx timeout [ 131.027372] Bluetooth: hci1: command tx timeout [ 131.155773] Bluetooth: hci2: command tx timeout [ 131.218761] Bluetooth: hci7: command tx timeout [ 131.218789] Bluetooth: hci5: command tx timeout [ 131.219205] Bluetooth: hci6: command tx timeout [ 131.282859] Bluetooth: hci3: command tx timeout [ 133.010858] Bluetooth: hci4: command tx timeout [ 133.075039] Bluetooth: hci0: command tx timeout [ 133.075474] Bluetooth: hci1: command tx timeout [ 133.203216] Bluetooth: hci2: command tx timeout [ 133.266718] Bluetooth: hci6: command tx timeout [ 133.268766] Bluetooth: hci5: command tx timeout [ 133.269191] Bluetooth: hci7: command tx timeout [ 133.330731] Bluetooth: hci3: command tx timeout [ 187.194812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.200376] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.201004] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.205328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.206251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.208044] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.208164] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.216385] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.217273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.223874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.225786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.243162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.244529] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.246166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.262159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.264222] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.267072] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.270951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.271573] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.272539] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.273449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.280000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.281132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.285816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.287176] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.287586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.291070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.291124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.291907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.293406] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.295946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.299832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.305854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.307594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.316252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.325312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.326899] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.332242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.355932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.360425] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.266877] Bluetooth: hci2: command tx timeout [ 189.330860] Bluetooth: hci0: command tx timeout [ 189.394853] Bluetooth: hci7: command tx timeout [ 189.396972] Bluetooth: hci6: command tx timeout [ 189.397020] Bluetooth: hci3: command tx timeout [ 189.398097] Bluetooth: hci5: command tx timeout [ 189.398824] Bluetooth: hci4: command tx timeout [ 189.459188] Bluetooth: hci1: command tx timeout [ 191.315110] Bluetooth: hci2: command tx timeout [ 191.379832] Bluetooth: hci0: command tx timeout [ 191.443255] Bluetooth: hci5: command tx timeout [ 191.444602] Bluetooth: hci7: command tx timeout [ 191.444716] Bluetooth: hci6: command tx timeout [ 191.445059] Bluetooth: hci3: command tx timeout [ 191.445463] Bluetooth: hci4: command tx timeout [ 191.506970] Bluetooth: hci1: command tx timeout [ 193.362900] Bluetooth: hci2: command tx timeout [ 193.426853] Bluetooth: hci0: command tx timeout [ 193.490862] Bluetooth: hci4: command tx timeout [ 193.490916] Bluetooth: hci6: command tx timeout [ 193.491541] Bluetooth: hci7: command tx timeout [ 193.492011] Bluetooth: hci5: command tx timeout [ 193.492185] Bluetooth: hci3: command tx timeout [ 193.555680] Bluetooth: hci1: command tx timeout [ 195.413239] Bluetooth: hci2: command tx timeout [ 195.475849] Bluetooth: hci0: command tx timeout [ 195.540726] Bluetooth: hci3: command tx timeout [ 195.540798] Bluetooth: hci5: command tx timeout [ 195.541703] Bluetooth: hci7: command tx timeout [ 195.542081] Bluetooth: hci6: command tx timeout [ 195.542888] Bluetooth: hci4: command tx timeout [ 195.603519] Bluetooth: hci1: command tx timeout [ 249.062329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.078431] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.082914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.090345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.103711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.122204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.126450] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.128908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.137805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.141578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.202447] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.213743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.218181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.231228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.240180] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.345295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.351431] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.367874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.425537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.439058] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.442453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.455160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.460162] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.462500] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.473551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.489115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.493410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.495368] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.513493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.528228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.530261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.571794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.578862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.636461] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.644874] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.672483] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.681494] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.732213] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.749287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.760203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.155889] Bluetooth: hci0: command tx timeout [ 251.221697] Bluetooth: hci1: command tx timeout [ 251.284257] Bluetooth: hci2: command tx timeout [ 251.539744] Bluetooth: hci3: command tx timeout [ 251.666769] Bluetooth: hci5: command tx timeout [ 251.667732] Bluetooth: hci4: command tx timeout [ 251.794953] Bluetooth: hci6: command tx timeout [ 251.858750] Bluetooth: hci7: command tx timeout [ 253.202738] Bluetooth: hci0: command tx timeout [ 253.267684] Bluetooth: hci1: command tx timeout [ 253.331126] Bluetooth: hci2: command tx timeout [ 253.588044] Bluetooth: hci3: command tx timeout [ 253.714768] Bluetooth: hci4: command tx timeout [ 253.715037] Bluetooth: hci5: command tx timeout [ 253.842768] Bluetooth: hci6: command tx timeout [ 253.906708] Bluetooth: hci7: command tx timeout [ 255.252798] Bluetooth: hci0: command tx timeout [ 255.314712] Bluetooth: hci1: command tx timeout [ 255.378835] Bluetooth: hci2: command tx timeout [ 255.634781] Bluetooth: hci3: command tx timeout [ 255.762836] Bluetooth: hci4: command tx timeout [ 255.764806] Bluetooth: hci5: command tx timeout [ 255.890753] Bluetooth: hci6: command tx timeout [ 255.954996] Bluetooth: hci7: command tx timeout [ 257.298870] Bluetooth: hci0: command tx timeout [ 257.363900] Bluetooth: hci1: command tx timeout [ 257.426866] Bluetooth: hci2: command tx timeout [ 257.685696] Bluetooth: hci3: command tx timeout [ 257.812117] Bluetooth: hci5: command tx timeout [ 257.812603] Bluetooth: hci4: command tx timeout [ 257.939913] Bluetooth: hci6: command tx timeout [ 258.004660] Bluetooth: hci7: command tx timeout [ 311.590028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.593301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.597143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.608044] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.613994] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.788176] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.792275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.795275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.806151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.811441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.914541] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.924396] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.927565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.944219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.955307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.992354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.011398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.029128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.043306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.049935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.055069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.073259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.077409] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.091037] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.108772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.113461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.150244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.152565] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.155486] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.157428] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.165044] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.168915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.172571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.180468] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.213141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.217131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.237602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.262212] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.263686] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.291525] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.683706] Bluetooth: hci0: command tx timeout [ 313.875675] Bluetooth: hci1: command tx timeout [ 314.131689] Bluetooth: hci2: command tx timeout [ 314.131715] Bluetooth: hci4: command tx timeout [ 314.132475] Bluetooth: hci3: command tx timeout [ 314.194986] Bluetooth: hci5: command tx timeout [ 314.386735] Bluetooth: hci6: command tx timeout [ 314.386808] Bluetooth: hci7: command tx timeout [ 315.732696] Bluetooth: hci0: command tx timeout [ 315.923742] Bluetooth: hci1: command tx timeout [ 316.178854] Bluetooth: hci4: command tx timeout [ 316.179299] Bluetooth: hci3: command tx timeout [ 316.179927] Bluetooth: hci2: command tx timeout [ 316.242931] Bluetooth: hci5: command tx timeout [ 316.434940] Bluetooth: hci6: command tx timeout [ 316.435882] Bluetooth: hci7: command tx timeout [ 317.780334] Bluetooth: hci0: command tx timeout [ 317.972687] Bluetooth: hci1: command tx timeout [ 318.227760] Bluetooth: hci2: command tx timeout [ 318.228262] Bluetooth: hci3: command tx timeout [ 318.228669] Bluetooth: hci4: command tx timeout [ 318.291356] Bluetooth: hci5: command tx timeout [ 318.483967] Bluetooth: hci7: command tx timeout [ 318.483991] Bluetooth: hci6: command tx timeout [ 319.829203] Bluetooth: hci0: command tx timeout [ 320.018858] Bluetooth: hci1: command tx timeout [ 320.274835] Bluetooth: hci4: command tx timeout [ 320.275038] Bluetooth: hci2: command tx timeout [ 320.275333] Bluetooth: hci3: command tx timeout [ 320.339094] Bluetooth: hci5: command tx timeout [ 320.530736] Bluetooth: hci7: command tx timeout [ 320.531820] Bluetooth: hci6: command tx timeout [ 373.925814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.929291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.942611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.957355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.965370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.076301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.080195] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.089009] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.103136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.108685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.130088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.152141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.159407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.169094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.176548] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.184401] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.192614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.209588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.229233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.242681] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.336119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.349250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.357148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.374038] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.380298] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.392268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.400151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.431146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.454354] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.520175] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.711219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.732450] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.746013] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.817002] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.841221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.863274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.967063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.972973] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.993178] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.998417] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.019889] Bluetooth: hci0: command tx timeout [ 376.213931] Bluetooth: hci1: command tx timeout [ 376.277034] Bluetooth: hci3: command tx timeout [ 376.340775] Bluetooth: hci2: command tx timeout [ 376.722786] Bluetooth: hci4: command tx timeout [ 377.170729] Bluetooth: hci5: command tx timeout [ 377.427741] Bluetooth: hci7: command tx timeout [ 377.555824] Bluetooth: hci6: command tx timeout [ 378.067110] Bluetooth: hci0: command tx timeout [ 378.259746] Bluetooth: hci1: command tx timeout [ 378.323796] Bluetooth: hci3: command tx timeout [ 378.386743] Bluetooth: hci2: command tx timeout [ 378.772093] Bluetooth: hci4: command tx timeout [ 379.219969] Bluetooth: hci5: command tx timeout [ 379.474790] Bluetooth: hci7: command tx timeout [ 379.603525] Bluetooth: hci6: command tx timeout [ 380.115055] Bluetooth: hci0: command tx timeout [ 380.306820] Bluetooth: hci1: command tx timeout [ 380.372699] Bluetooth: hci3: command tx timeout [ 380.435322] Bluetooth: hci2: command tx timeout [ 380.819780] Bluetooth: hci4: command tx timeout [ 381.267059] Bluetooth: hci5: command tx timeout [ 381.524686] Bluetooth: hci7: command tx timeout [ 381.650750] Bluetooth: hci6: command tx timeout [ 382.163953] Bluetooth: hci0: command tx timeout [ 382.354849] Bluetooth: hci1: command tx timeout [ 382.419987] Bluetooth: hci3: command tx timeout [ 382.483853] Bluetooth: hci2: command tx timeout [ 382.867661] Bluetooth: hci4: command tx timeout [ 383.314735] Bluetooth: hci5: command tx timeout [ 383.573705] Bluetooth: hci7: command tx timeout [ 383.699713] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 06:15:21 Registers: info registers vcpu 0 RAX=9212bd81a5f60c00 RBX=0000000000000001 RCX=ffff8880375778c4 RDX=0000000000000000 RSI=ffffffff85c1d1c0 RDI=ffff8880169c8a58 RBP=ffffffff85c1d1c0 RSP=ffff8880375778b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff81740846 R13=0000000000000202 R14=ffff8880169c8000 R15=0000000000000001 RIP=ffffffff8151ad12 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7913177008 CR3=00000000336de000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87a59e78 RBX=ffff88802a9fb700 RCX=0000000000000000 RDX=0000000000000063 RSI=0000000000000000 RDI=ffffffff85a112d8 RBP=ffff88802a9fc158 RSP=ffff8880152a7be0 R8 =0000000000080000 R9 =0000000000000063 R10=0000000000000001 R11=0000000000000000 R12=ffff88802a9fc158 R13=0000000000000002 R14=0000000000000001 R15=0000000000040000 RIP=ffffffff81518e13 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3b4680f540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3b46a70000 CR3=0000000027777000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000