Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:40017' (ECDSA) to the list of known hosts. 2025/05/25 16:53:25 fuzzer started 2025/05/25 16:53:25 dialing manager at localhost:46087 syzkaller login: [ 93.424043] cgroup: Unknown subsys name 'net' [ 93.596345] cgroup: Unknown subsys name 'cpuset' [ 93.651258] cgroup: Unknown subsys name 'rlimit' 2025/05/25 16:53:39 syscalls: 2214 2025/05/25 16:53:39 code coverage: enabled 2025/05/25 16:53:39 comparison tracing: enabled 2025/05/25 16:53:39 extra coverage: enabled 2025/05/25 16:53:39 setuid sandbox: enabled 2025/05/25 16:53:39 namespace sandbox: enabled 2025/05/25 16:53:39 Android sandbox: enabled 2025/05/25 16:53:39 fault injection: enabled 2025/05/25 16:53:39 leak checking: enabled 2025/05/25 16:53:39 net packet injection: enabled 2025/05/25 16:53:39 net device setup: enabled 2025/05/25 16:53:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/25 16:53:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/25 16:53:39 USB emulation: enabled 2025/05/25 16:53:39 hci packet injection: enabled 2025/05/25 16:53:39 wifi device emulation: enabled 2025/05/25 16:53:39 802.15.4 emulation: enabled 2025/05/25 16:53:39 fetching corpus: 0, signal 0/0 (executing program) 2025/05/25 16:53:41 starting 8 fuzzer processes 16:53:42 executing program 0: ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000000)=""/254) fcntl$getflags(0xffffffffffffffff, 0xb) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000180)=0x80) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x14, 0x1f, 0xcfbf}], 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x800, 0x200200) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000300)='/dev/vcsu#\x00', &(0x7f0000000340)='-\x00', &(0x7f0000000380)='/dev/vcsu#\x00', &(0x7f00000003c0)='/dev/vcsu#\x00'], &(0x7f0000000600)=[&(0x7f0000000440)='/dev/vcsu#\x00', &(0x7f0000000480)='W\x00', &(0x7f00000004c0)='@\x00', &(0x7f0000000500)='/dev/vcsu#\x00', &(0x7f0000000540)='\'^+*:&[,-.\x00', &(0x7f0000000580)='\f[\x00', &(0x7f00000005c0)='.(:\x00']) r2 = syz_open_dev$loop(&(0x7f0000000640), 0x7fffffff, 0x11a89b26e17f9e06) sendfile(r0, r2, &(0x7f0000000680)=0x1, 0x7fff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000006c0)=0x0) fcntl$lock(r0, 0x26, &(0x7f0000000700)={0x0, 0x0, 0x8, 0x8, r3}) openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000780), 0x28001, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000007c0)) lsetxattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=@random={'btrfs.', '/dev/vcsu#\x00'}, &(0x7f0000000880)='\'^+*:&[,-.\x00', 0xb, 0x5) r5 = syz_open_dev$mouse(&(0x7f00000008c0), 0x6, 0x178d42a64cb47bcc) openat$incfs(r0, &(0x7f0000000900)='.pending_reads\x00', 0x341000, 0x40) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000940)={'team_slave_0\x00', {0x2, 0x0, @multicast2}}) chdir(&(0x7f0000000980)='./file0\x00') 16:53:42 executing program 1: semctl$GETVAL(0x0, 0x4, 0xc, &(0x7f0000000000)=""/243) r0 = semget(0x3, 0x1, 0x140) r1 = getegid() stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3}, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xccb8}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x20}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40040) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x44000) mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x21, &(0x7f0000000600)={[{@size={'size', 0x3d, [0x70, 0x38, 0x78]}}, {@mode={'mode', 0x3d, 0x78fa}}, {@huge_within_size}], [{@subj_type={'subj_type', 0x3d, '{!}[]({!\xe8}/&[/N*\xdbs*}(&\\&,'}}]}) chown(&(0x7f0000000680)='./file1\x00', r2, r1) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000006c0)={0x4, @broadcast, 0x4e23, 0x1, 'lblc\x00', 0x12, 0xffff, 0x6d}, 0x2c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x80, 0x1, 0x0, 0x0, 0x6, 0x6, 0x3d9, 0x40, 0x1e5, 0x92b842, 0x8, 0x38, 0x2, 0x5, 0x8001}, [{0x1, 0x6, 0x112, 0x1, 0x100, 0x7fff, 0x9, 0x100000001}, {0x1, 0x4, 0x1, 0x10000, 0xfffffffffffff150, 0x80000000, 0x1f, 0x9}], "67404a95fa8636b5159197fa09fa62bcaf31dcc6da09245d113d082b6e217b2ed09f8c08787fce2af6238cd305736d3ccf72387e5ace086192447294aa1b7fe022faad1326cd717bd9d91540de5f69f27f87c7e4b143f71ae072"}, 0x10a) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840), 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000900)={&(0x7f0000000880)=""/121, 0x79}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x4, 0x2, 0x1, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x1, 0x2, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x4, 0xff, 0x0, 0x5, 0x7c, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8000, 0x7c5d, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x3f, 0x2a, 0x30, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x80, 0x7, 0x40, 0xd09}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c40)={'syztnl1\x00', &(0x7f0000000bc0)={'ip_vti0\x00', 0x0, 0x8, 0x700, 0x78d, 0x8000, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x65, 0x0, 0x98, 0x4, 0x0, @local, @local, {[@generic={0x86, 0xa, "af95abf4a045cda6"}, @lsrr={0x83, 0x7, 0xaa, [@broadcast]}, @timestamp={0x44, 0x8, 0x9e, 0x0, 0xe, [0x4b]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x154, 0x0, 0x28, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8004}, 0x2000010) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x128, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x29}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "a0b8f944aaacc3d2"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6d52a02bb3"}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}], @key_params=[@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "806d69141f4e24f5f99252f484388b"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a800d38bdbfe7f8944f556b11a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_SSID={0x10, 0x34, @random="1938174f755c21db23951109"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_SSID={0x19, 0x34, @random="c06ca6db476cb13aba7c0dbc31fb61a95661801376"}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_SEQ={0xa, 0x4, "5775ef41499f"}]}]]}, 0x128}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004040) 16:53:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x464802, 0x80) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fstat(r0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) accept4$inet(r3, 0x0, &(0x7f00000001c0), 0x80000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x418080, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000240)="2f688d93fb46df39a89d16af3c4418c71fb4917138128a0d3f3195904cef91548a9cb9178a8d716c24960c8e22abcdd698af6a1429771100d25df095084063693e5c14afc668a12a10d96a5764f318f8b32ae2fde25a847d4330b8ef45693ba26dd1f27443495cb0", 0x68}, {&(0x7f00000002c0)="d7627ebf99cc96e37e61123d1cc49372a2f8d349d37501e68d3b8399b350648433031032552cad0e8ea83d800fd9b8bd0a912f191b7693786589625541047a5c48c8070e4748b2ba99e1e2e77f68b2bdece850c2", 0x54}], 0x2) fgetxattr(r1, &(0x7f0000000380)=@random={'trusted.', '\x00'}, &(0x7f00000003c0)=""/163, 0xa3) r5 = fsmount(0xffffffffffffffff, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000480)) fremovexattr(r5, &(0x7f00000004c0)=@known='trusted.overlay.nlink\x00') r6 = socket$inet6(0xa, 0x6, 0xdbe) finit_module(r6, &(0x7f0000000500)='\x00', 0x2) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000540)) r7 = creat(&(0x7f0000000580)='./file0\x00', 0x40) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x430, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="29bb9ea1d98e"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40841) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r7, 0x8982, &(0x7f0000000740)) 16:53:42 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$TCSBRK(r0, 0x5409, 0xcc8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes128, 0x1, @desc3}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x71e) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) openat2(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x28040, 0x28, 0x1}, 0x18) r2 = signalfd4(r0, &(0x7f00000001c0), 0x8, 0x80000) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000240)=0x100, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000280)=0xf568, 0x4) accept4(r1, &(0x7f00000002c0)=@caif=@rfm, &(0x7f0000000340)=0x80, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/oops_count', 0x210100, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000003c0)={0x8000, 0xfffffff7, 0x3ff, 0x80000001, 0x4}, 0x14) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40801) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x808) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{0x0, 0x1, 0x800, 0x100000000, 0x13, 0x20, 0x10001, 0x7f, 0x0, 0x3e, 0x3, 0x2000000000000, 0x5, 0x8, 0xfffffffffffffffb}}) 16:53:42 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000280)) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x182) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000300)={{r2}, 0x0, 0xe, @unused=[0x100000000000000, 0x67, 0x587, 0x3c33], @subvolid=0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000001300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x7c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffeff, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}}, 0x8080) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000001600)={@private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x15d, 0xfffd, 0x400, 0x81, 0x400008}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r3) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x68, r7, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x200}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000811) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x60002}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r8, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4880}, 0x4008011) [ 109.580557] audit: type=1400 audit(1748192022.069:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:53:42 executing program 5: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000000c0)={0x2, 0x7, @status={[0x4, 0x9504, 0x1efc, 0x7, 0x7, 0x9]}, [0x2, 0x4, 0xd8, 0x2, 0x5, 0x8, 0x9, 0x8, 0x7, 0x6, 0x0, 0x8001, 0x80000000, 0x8000, 0x3, 0xfffffffffffffffe, 0x1, 0x3, 0x2, 0x8, 0x1700000000, 0x8, 0xff, 0x9, 0x6, 0x8e, 0x7ff, 0x813, 0x3, 0x0, 0x100000000, 0x7, 0x20, 0x785d945c, 0xb, 0x200, 0x3, 0x6f8a, 0x5, 0x7f, 0x7b, 0x4, 0xc978, 0x46, 0x5, 0x4, 0x4, 0x8a2, 0xcc, 0x2, 0x7, 0x3, 0x7, 0x8, 0x6, 0xa2, 0xec, 0x5, 0x800, 0x5, 0xff, 0x1, 0x1ff]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000b00)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x84081, 0x0) bind$inet6(r0, &(0x7f0000000b80)={0xa, 0x4e22, 0x7, @loopback}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="38945613370154500ed8d0dd280114564724e2990af2c80380be8aa8e1066ac50fa8e08d63cc67c0fcb2ec9e6bc0afde0b0adbebce8e1f74eb5ac7aec9e79fa756e11048725672a3c6e03373939f726bbf55503b816cbad6c13ef4a835ab916a8d4d43f61166bc7d5be597e39276a535207eb6d71add092e810af83e1380c85dbcafb11658f0adf47081ad7f9c752481c23420c1fed81ae7c2026329b6e2111f1303813f8416b8918ed6aa326cec8b5951b03f400866093718563f3c679e0af883a4e0c7ad6db81d482a4e7f4549cda7ca658c7da847263ba2acdf9059dedefb", 0xe0}, {&(0x7f0000000cc0)="1931ab616c5ffc79ec135d4823b04d786041596a7979fc9e57c633e2833b28db65c6f77887abcf67cbd6244514c55f9ae402862b643c403ec37332b78243", 0x3e}, {&(0x7f0000000d00)="50dc348173f4585286d1e3dcb9f5683ea142e3416614f99a80343f0e7e0834664924c880e6f04eab88fa04435bd9aaab1235bf47310325b9299b89230a49e585bdcedc6ee3a1a0123f2d0f1a9791d0885517d73d3bd58e9c0928a6e80c19f0b50eb1fc8798054e591f1b5848f05757b269673fbe7880fc5d6da912d85c07b978a0d6be322dea9984cfbe486166d7c9496c49be342ad35c75a678d50da01edb91d5109ca1dedacea9b885252891316ab0d90f181285", 0xb5}, {&(0x7f0000000dc0)="66a344a9963e4cf1af507c83092c143aed6d4d6a9ee6fac31844135f14e8c7a50d16abed0c3b0f25487e95a4b7242dcc6873d79f04bc5ab937e83d34ec938498d20ee335b098ad222bd8b6b4cb28f313e2bea335a28d", 0x56}], 0x4, &(0x7f0000000e80)}, 0xc000) fdatasync(r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000f00)={'IDLETIMER\x00'}, &(0x7f0000000f40)=0x1e) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x5c, 0x453, 0x4, 0x70bd29, 0x25dfdbfe, "8218a9f31fc3771f3354bcd7d3ef2774f95db907b1f3e705be442e26e8e160b41741bec3af2900a0c909dc0b059eabf48ffcdf15d12eac423be55bac80702192cf306029d5aea9cedb", ["", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000010c0)=""/126) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001140)) add_key$keyring(&(0x7f0000001340), &(0x7f0000001380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) set_robust_list(&(0x7f00000014c0)={&(0x7f0000001400)={&(0x7f00000013c0)}, 0x7, &(0x7f0000001480)={&(0x7f0000001440)}}, 0x18) prctl$PR_SET_FPEXC(0xc, 0x2) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001500)={0x9}, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000001540)={0x8, {{0xa, 0x4e20, 0xf7, @mcast2, 0xffffff80}}, {{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1f}}}, 0x108) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000001680)=0x100) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000016c0), 0x101, 0x0) write$P9_RFSYNC(r1, &(0x7f0000001700)={0x7, 0x33, 0x2}, 0x7) 16:53:42 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/158, 0x9e}], 0x1, &(0x7f00000001c0)=""/95, 0x5f}, 0x40000022) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000280)={0x0, 0x4, 0x4, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000680)={r1, 0x800, 0x6}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x900) readv(r2, &(0x7f0000000e80)=[{&(0x7f0000000ac0)=""/175, 0xaf}, {&(0x7f0000000b80)=""/29, 0x1d}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/210, 0xd2}, {&(0x7f0000000d00)=""/72, 0x48}, {&(0x7f0000000d80)=""/46, 0x2e}, {&(0x7f0000000dc0)=""/141, 0x8d}], 0x7) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f00), 0x40, 0x0) mkdirat$cgroup(r3, &(0x7f0000000f40)='syz1\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r2, {0xf8}}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000f80), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40) readv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/218, 0xda}, {&(0x7f0000001300)=""/159, 0x9f}, {&(0x7f00000013c0)=""/229, 0xe5}, {&(0x7f00000014c0)=""/195, 0xc3}], 0x5) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000001640)) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000001680)=""/70) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001780)={'gre0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x80, 0x1000, {{0x16, 0x4, 0x3, 0x3a, 0x58, 0x66, 0x0, 0x7, 0x0, 0x0, @local, @empty, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x70, [@local, @dev={0xac, 0x14, 0x14, 0x2c}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x6, [{@remote, 0x719a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@multicast1, 0x7}, {@empty}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x2}]}]}}}}}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001800), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c890}, 0x10) pipe(&(0x7f0000001900)) syncfs(r3) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000001940)) 16:53:42 executing program 7: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x25, 0x800, 0x70bd27, 0x25dfdbfe, {0x1f}, [@generic="d702e6caa19abedb0fa17b7c7e777a98e77da90f4a6d1d01a730081bbaf541fed1548e909a2c8ea983719afb005012f0b7f432c81df6301d134479", @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x8c, 0x0, 0x0, @uid}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x24040001) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8ca053262b36ff7be6b4cfae98"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "80d4cd468c"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bf97eb06a5"}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2d0c52eb1facfc2a}, 0x20000000) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x144, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x11c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000804}, 0xc, &(0x7f0000000a40)={&(0x7f00000006c0)={0x34c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x325, 0x2a, [@perr={0x84, 0xf7, {0x9, 0x11, [@not_ext={{}, @broadcast, 0xfffff70b, "", 0x2a}, @not_ext={{}, @device_b, 0x400, "", 0x15}, @not_ext={{}, @device_a, 0x8, "", 0x1f}, @not_ext={{}, @broadcast, 0x8, "", 0x34}, @not_ext={{}, @device_a, 0x1, "", 0x2c}, @ext={{}, @device_a, 0xfffffffa, @device_a, 0x13}, @not_ext={{}, @device_b, 0x1, "", 0x2a}, @not_ext={{}, @device_b, 0x9, "", 0x16}, @ext={{}, @device_b, 0x7ff, @device_a, 0x1d}, @ext={{}, @device_a, 0xac4, @device_b, 0x35}, @not_ext={{}, @broadcast, 0x8000, "", 0x2c}, @not_ext={{}, @device_b, 0x6, "", 0x2c}, @not_ext={{}, @broadcast, 0x8c0, "", 0x39}, @not_ext={{}, @broadcast, 0x7fffffff, "", 0x10}, @not_ext={{}, @device_a, 0x9, "", 0x34}, @not_ext={{}, @broadcast, 0xffffffa0, "", 0x5}, @ext={{}, @device_a, 0x8000, @device_a, 0x24}]}}, @ibss={0x6, 0x2, 0x9}, @tim={0x5, 0xdb, {0x0, 0x7d, 0x9, "f30a7068e9941f28860d172bd0b0487e8e773078c2fa5ea53d7c761c49966d9c78ab34f36b5c2a4a32b82be64c132814dc4f1892556b31c3cd1645e22ce42e986010626a78782a6075eaf83d626ff229a86d3b47e0d7b234635f85fd149f143cfbb76c1c52a5aa32a7234969780a859e5390da5d38a97e32742e073ff7eb77870f9f45e02770ea86e02ea2c68c38bd966642184549d0da044aac588230598badeaddac441dcb90a1a2fb3a6a33e6f8bff091544e4d25e2e98542606c0d642ed3f05488f78ca24850287ce0f72881eb2ae3eefc85697c4f3e"}}, @random={0x9, 0x45, "2101981390c78de5a04101ca73589231625544f60b21792fbbcd1057ebc83d666b5265ac2a12b17b91091371210bb905992dcab229b1206d0f5842d5d01a44224647799b73"}, @ibss={0x6, 0x2, 0x9}, @supported_rates={0x1, 0x4, [{0xb, 0x1}, {0x1}, {0x18}, {0x9}]}, @tim={0x5, 0xf4, {0x7, 0x87, 0xc8, "c786fe7adbb3ed2b9307f7b53b371cf19e995dabf0649040549d1dba276871f5cae5a15fd81d30b904d66c1b787c40efa6a604f66252645ba243eb2b475ea18a8bb5261475b795e4582cfb0b771664e09ee737843e1f414d2bcee7a507c3ffe14d8f09a65d816565bac62f2db3bb6522514019f0eb57de043556ea06df2a1bab5427d7ddb39bdde4aa1e9ea6b2cbee1f604f90a4d1b837852b29d90016d2f9708e09f5c89fe7f48caed41f08d9c60404fda3e76647a34218ec33538ca1b615c966d4d80e219030f60848308666dd0af7d791260ee3761e98db3861eaae34ce5d5271ce3a980e0bf667546d242be54d2357"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8000}]}, 0x34c}, 0x1, 0x0, 0x0, 0x11}, 0x4000841) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400900, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000b00)={0xbc, 0x80000001, 0x3, 0xcdf}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x2000c844) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x10, 0x4, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x56}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff9, 0x10}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r1) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e00)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0x16, @dev={0xfe, 0x80, '\x00', 0x10}, @ipv4={'\x00', '\xff\xff', @empty}, 0x7800, 0x8, 0x7f, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000ec0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x42, 0x1, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x64, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @empty, {[@end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000001100)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x148, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4800}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000001180)={0x6, 0x93, 0xffffff00, 0x35ec, 0x81, "0c0d5c69786e6e652034650a2bfd00c96409ff", 0x0, 0x7}) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000001340)={&(0x7f00000011c0), 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xd8, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40800}, 0xc0) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x38, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x70000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) [ 111.077806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.080929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.086696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.090639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.092443] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.100487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.114554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.116200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.124102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.129786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.134852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.144774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.152601] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.156981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.187033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.232772] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.235677] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.237705] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.242243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.246822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.250882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.252584] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.256866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.264886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.266864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.267188] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.275258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.275335] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.275914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.281320] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.289937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.301953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.307024] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.337775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.339769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.344441] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.372119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.374553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.396786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.402010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.215853] Bluetooth: hci2: command tx timeout [ 113.215864] Bluetooth: hci1: command tx timeout [ 113.344383] Bluetooth: hci7: command tx timeout [ 113.344409] Bluetooth: hci0: command tx timeout [ 113.407632] Bluetooth: hci3: command tx timeout [ 113.409366] Bluetooth: hci6: command tx timeout [ 113.472325] Bluetooth: hci5: command tx timeout [ 113.472340] Bluetooth: hci4: command tx timeout [ 115.263540] Bluetooth: hci2: command tx timeout [ 115.263920] Bluetooth: hci1: command tx timeout [ 115.392402] Bluetooth: hci0: command tx timeout [ 115.392842] Bluetooth: hci7: command tx timeout [ 115.455392] Bluetooth: hci6: command tx timeout [ 115.455420] Bluetooth: hci3: command tx timeout [ 115.520152] Bluetooth: hci5: command tx timeout [ 115.520647] Bluetooth: hci4: command tx timeout [ 117.311346] Bluetooth: hci1: command tx timeout [ 117.311385] Bluetooth: hci2: command tx timeout [ 117.439634] Bluetooth: hci7: command tx timeout [ 117.439894] Bluetooth: hci0: command tx timeout [ 117.503374] Bluetooth: hci3: command tx timeout [ 117.503909] Bluetooth: hci6: command tx timeout [ 117.567706] Bluetooth: hci4: command tx timeout [ 117.567792] Bluetooth: hci5: command tx timeout [ 119.359390] Bluetooth: hci1: command tx timeout [ 119.359410] Bluetooth: hci2: command tx timeout [ 119.487615] Bluetooth: hci0: command tx timeout [ 119.488066] Bluetooth: hci7: command tx timeout [ 119.551525] Bluetooth: hci6: command tx timeout [ 119.551789] Bluetooth: hci3: command tx timeout [ 119.617328] Bluetooth: hci5: command tx timeout [ 119.617359] Bluetooth: hci4: command tx timeout [ 171.173171] syz-executor.1 (282) used greatest stack depth: 25232 bytes left [ 171.218495] syz-executor.2 (285) used greatest stack depth: 25136 bytes left [ 173.518916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.523862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.526660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.535163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.539957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.706895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.710175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.713694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.721298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.724233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.785797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.788881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.791184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.800809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.803647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.805579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.816127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.826734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.840113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.854696] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.925787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.936458] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.940086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.967622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.975547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.010345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.011358] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.025028] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.026803] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.035818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.038864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.039909] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.041549] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.056988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.059413] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.066695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.079559] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.091354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.095620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.108409] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.615424] Bluetooth: hci0: command tx timeout [ 175.807503] Bluetooth: hci1: command tx timeout [ 175.935603] Bluetooth: hci2: command tx timeout [ 176.000322] Bluetooth: hci5: command tx timeout [ 176.063461] Bluetooth: hci4: command tx timeout [ 176.255369] Bluetooth: hci6: command tx timeout [ 176.319675] Bluetooth: hci3: command tx timeout [ 176.705041] Bluetooth: hci7: command tx timeout [ 177.664365] Bluetooth: hci0: command tx timeout [ 177.855325] Bluetooth: hci1: command tx timeout [ 177.983376] Bluetooth: hci2: command tx timeout [ 178.048353] Bluetooth: hci5: command tx timeout [ 178.111329] Bluetooth: hci4: command tx timeout [ 178.303670] Bluetooth: hci6: command tx timeout [ 178.368339] Bluetooth: hci3: command tx timeout [ 178.752415] Bluetooth: hci7: command tx timeout [ 179.713302] Bluetooth: hci0: command tx timeout [ 179.904370] Bluetooth: hci1: command tx timeout [ 180.033624] Bluetooth: hci2: command tx timeout [ 180.096390] Bluetooth: hci5: command tx timeout [ 180.160837] Bluetooth: hci4: command tx timeout [ 180.352590] Bluetooth: hci6: command tx timeout [ 180.416578] Bluetooth: hci3: command tx timeout [ 180.800540] Bluetooth: hci7: command tx timeout [ 181.759569] Bluetooth: hci0: command tx timeout [ 181.951627] Bluetooth: hci1: command tx timeout [ 182.080497] Bluetooth: hci2: command tx timeout [ 182.144333] Bluetooth: hci5: command tx timeout [ 182.210638] Bluetooth: hci4: command tx timeout [ 182.399342] Bluetooth: hci6: command tx timeout [ 182.464455] Bluetooth: hci3: command tx timeout [ 182.847669] Bluetooth: hci7: command tx timeout [ 235.725505] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.729128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.733436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.739983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.745212] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.792385] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.797720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.801047] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.809412] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.812630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.859043] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.862563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.866480] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.868064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.870040] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.875245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.876726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.880472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.891714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.917967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.029568] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.062471] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.105747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.111715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.119553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.125652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.201571] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.206021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.217196] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.226700] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.237075] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.259990] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.261514] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.272173] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.272233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.278513] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.283531] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.286480] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.296000] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.298078] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.824368] Bluetooth: hci0: command tx timeout [ 237.888504] Bluetooth: hci1: command tx timeout [ 237.952484] Bluetooth: hci3: command tx timeout [ 238.017695] Bluetooth: hci2: command tx timeout [ 238.207374] Bluetooth: hci4: command tx timeout [ 238.335795] Bluetooth: hci5: command tx timeout [ 238.399415] Bluetooth: hci6: command tx timeout [ 238.463601] Bluetooth: hci7: command tx timeout [ 239.871362] Bluetooth: hci0: command tx timeout [ 239.936571] Bluetooth: hci1: command tx timeout [ 239.999449] Bluetooth: hci3: command tx timeout [ 240.063460] Bluetooth: hci2: command tx timeout [ 240.257395] Bluetooth: hci4: command tx timeout [ 240.383501] Bluetooth: hci5: command tx timeout [ 240.448318] Bluetooth: hci6: command tx timeout [ 240.511346] Bluetooth: hci7: command tx timeout [ 241.919368] Bluetooth: hci0: command tx timeout [ 241.984400] Bluetooth: hci1: command tx timeout [ 242.047356] Bluetooth: hci3: command tx timeout [ 242.111343] Bluetooth: hci2: command tx timeout [ 242.303332] Bluetooth: hci4: command tx timeout [ 242.431525] Bluetooth: hci5: command tx timeout [ 242.495542] Bluetooth: hci6: command tx timeout [ 242.559604] Bluetooth: hci7: command tx timeout [ 243.968313] Bluetooth: hci0: command tx timeout [ 244.031506] Bluetooth: hci1: command tx timeout [ 244.095411] Bluetooth: hci3: command tx timeout [ 244.159350] Bluetooth: hci2: command tx timeout [ 244.351346] Bluetooth: hci4: command tx timeout [ 244.479452] Bluetooth: hci5: command tx timeout [ 244.543340] Bluetooth: hci6: command tx timeout [ 244.607471] Bluetooth: hci7: command tx timeout [ 298.069836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.075064] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.078193] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.091065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.095457] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.254001] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.260040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.262431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.269662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.277312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.327130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.329998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.332761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.340025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.346816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.466634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.474915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.510114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.516642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.532872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.548875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.557614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.568462] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.577707] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.600838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.613677] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.618986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.623815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.661930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.667226] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.669437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.675371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.676908] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.679165] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.710681] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.710966] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.745981] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.770634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.774911] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.782887] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.159381] Bluetooth: hci0: command tx timeout [ 300.351500] Bluetooth: hci1: command tx timeout [ 300.415834] Bluetooth: hci2: command tx timeout [ 300.672337] Bluetooth: hci3: command tx timeout [ 300.799363] Bluetooth: hci4: command tx timeout [ 300.864356] Bluetooth: hci5: command tx timeout [ 300.927414] Bluetooth: hci6: command tx timeout [ 300.927435] Bluetooth: hci7: command tx timeout [ 302.207573] Bluetooth: hci0: command tx timeout [ 302.399886] Bluetooth: hci1: command tx timeout [ 302.463697] Bluetooth: hci2: command tx timeout [ 302.719633] Bluetooth: hci3: command tx timeout [ 302.847430] Bluetooth: hci4: command tx timeout [ 302.912430] Bluetooth: hci5: command tx timeout [ 302.976383] Bluetooth: hci6: command tx timeout [ 302.977180] Bluetooth: hci7: command tx timeout [ 304.255451] Bluetooth: hci0: command tx timeout [ 304.447582] Bluetooth: hci1: command tx timeout [ 304.511508] Bluetooth: hci2: command tx timeout [ 304.768422] Bluetooth: hci3: command tx timeout [ 304.897338] Bluetooth: hci4: command tx timeout [ 304.959440] Bluetooth: hci5: command tx timeout [ 305.023357] Bluetooth: hci6: command tx timeout [ 305.023403] Bluetooth: hci7: command tx timeout [ 306.303345] Bluetooth: hci0: command tx timeout [ 306.496244] Bluetooth: hci1: command tx timeout [ 306.559529] Bluetooth: hci2: command tx timeout [ 306.816620] Bluetooth: hci3: command tx timeout [ 306.943377] Bluetooth: hci4: command tx timeout [ 307.007333] Bluetooth: hci5: command tx timeout [ 307.071400] Bluetooth: hci7: command tx timeout [ 307.071875] Bluetooth: hci6: command tx timeout [ 360.532623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.537839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.550046] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.564892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.569954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.662093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.666226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.678664] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.703858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.721120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.754906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.758152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.768777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.769028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.777825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.778107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.785864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.787750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.793207] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.796707] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.802513] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.822784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.846854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.850373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.868950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.916486] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.921747] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.924701] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.933760] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.937113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.949562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.972207] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.991884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.993460] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.997808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.999356] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.023880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.025815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.031526] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.032923] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.623375] Bluetooth: hci0: command tx timeout [ 362.815342] Bluetooth: hci1: command tx timeout [ 362.879696] Bluetooth: hci3: command tx timeout [ 362.943509] Bluetooth: hci4: command tx timeout [ 363.008357] Bluetooth: hci7: command tx timeout [ 363.009091] Bluetooth: hci2: command tx timeout [ 363.073345] Bluetooth: hci6: command tx timeout [ 363.135395] Bluetooth: hci5: command tx timeout [ 364.671914] Bluetooth: hci0: command tx timeout [ 364.866458] Bluetooth: hci1: command tx timeout [ 364.929615] Bluetooth: hci3: command tx timeout [ 364.992413] Bluetooth: hci4: command tx timeout [ 365.055964] Bluetooth: hci2: command tx timeout [ 365.057587] Bluetooth: hci7: command tx timeout [ 365.120468] Bluetooth: hci6: command tx timeout [ 365.183368] Bluetooth: hci5: command tx timeout [ 366.719408] Bluetooth: hci0: command tx timeout [ 366.912319] Bluetooth: hci1: command tx timeout [ 366.976328] Bluetooth: hci3: command tx timeout [ 367.040895] Bluetooth: hci4: command tx timeout [ 367.104443] Bluetooth: hci7: command tx timeout [ 367.104976] Bluetooth: hci2: command tx timeout [ 367.167347] Bluetooth: hci6: command tx timeout [ 367.231530] Bluetooth: hci5: command tx timeout [ 368.767666] Bluetooth: hci0: command tx timeout [ 368.959361] Bluetooth: hci1: command tx timeout [ 369.024329] Bluetooth: hci3: command tx timeout [ 369.089000] Bluetooth: hci4: command tx timeout [ 369.151551] Bluetooth: hci2: command tx timeout [ 369.152087] Bluetooth: hci7: command tx timeout [ 369.216822] Bluetooth: hci6: command tx timeout [ 369.280484] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 16:58:44 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=00007fb157505d82 RCX=1ffffffff0c83750 RDX=0000000000000000 RSI=ffffffff81209640 RDI=0000000000000007 RBP=00007fb157505d82 RSP=ffff88802991f3f0 R8 =ffffffff86799a1e R9 =0000000000000000 R10=00007fb157505000 R11=0000000000000003 R12=0000000000000000 R13=0000000000000000 R14=ffff888015873700 R15=0000000000000cc0 RIP=ffffffff8142f9fd RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb1574dd1f0 CR3=000000003569c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000010cf3168e78 RBX=0000000000000000 RCX=00000000000006e0 RDX=000000000000010c RSI=ffff88806cf238c0 RDI=000000000004b4d5 RBP=ffff88806cf238c0 RSP=ffff88806cf08ed8 R8 =0000000000000001 R9 =0000000000000000 R10=00000000000d78d9 R11=0000000000000001 R12=000000000004b4d5 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf28080 RIP=ffffffff813274e5 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7b23149028 CR3=00000000192af000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff0000000000ff00000000000000ff00 XMM02=000000000000000000ff000000000000 XMM03=000000000000000000ff0000000000ff XMM04=0000ff00000000000000ff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000