Warning: Permanently added '[localhost]:40259' (ECDSA) to the list of known hosts. 2025/06/18 05:40:47 fuzzer started 2025/06/18 05:40:47 dialing manager at localhost:34087 syzkaller login: [ 93.970332] cgroup: Unknown subsys name 'net' [ 94.116560] cgroup: Unknown subsys name 'cpuset' [ 94.163693] cgroup: Unknown subsys name 'rlimit' 2025/06/18 05:41:04 syscalls: 2214 2025/06/18 05:41:04 code coverage: enabled 2025/06/18 05:41:04 comparison tracing: enabled 2025/06/18 05:41:04 extra coverage: enabled 2025/06/18 05:41:04 setuid sandbox: enabled 2025/06/18 05:41:04 namespace sandbox: enabled 2025/06/18 05:41:04 Android sandbox: enabled 2025/06/18 05:41:04 fault injection: enabled 2025/06/18 05:41:04 leak checking: enabled 2025/06/18 05:41:04 net packet injection: enabled 2025/06/18 05:41:04 net device setup: enabled 2025/06/18 05:41:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/18 05:41:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/18 05:41:04 USB emulation: enabled 2025/06/18 05:41:04 hci packet injection: enabled 2025/06/18 05:41:04 wifi device emulation: enabled 2025/06/18 05:41:04 802.15.4 emulation: enabled 2025/06/18 05:41:04 fetching corpus: 0, signal 0/0 (executing program) 2025/06/18 05:41:06 starting 8 fuzzer processes 05:41:06 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc200, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x290, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x296de8a1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e9d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc79}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2d2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9aa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe4a}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x63b4d54f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000040}, 0xc0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)=0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={r1, 0x1, 0x8}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x100, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "bdb826af8160f706d0daae3eb8af32bb349fffa702"}}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "00b7c1ce1b61305d9fcf77d4b1d354c9c72645fdce44742424911404c701cc0506"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4476}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = accept$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000680), &(0x7f00000006c0)=0x10) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000740)=@add_del={0x2, &(0x7f0000000700)='vxcan1\x00'}) r4 = accept4$inet6(r0, 0x0, &(0x7f0000000780), 0x40000) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@empty, @in6=@remote, 0x4e22, 0x7, 0x4e20, 0x0, 0x2, 0x0, 0x90, 0x29, r3}, {0x0, 0x2, 0x800, 0x3, 0xf4, 0x4, 0x7, 0x9}, {0x7, 0x8, 0x19, 0x5}, 0x2, 0x6e6bb3, 0x2, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x8, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2, 0x2, 0x3, 0x63a, 0x3, 0x8000}}, 0xe8) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000008c0)) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000980), 0x90200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) io_submit(0x0, 0x2, &(0x7f0000000b40)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0xc, r2, &(0x7f0000000900)="20748ad5d6a209416ff98d07a910a01ec95336", 0x13, 0x3, 0x0, 0x2, r0}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x80, r5, &(0x7f00000009c0)="d3e0461184ea56e62318e62ce23634f072621c64a5140787964976606a94dc457a1b5f5eee2ee314c60029e61ae155eea72a4f3b73c0fd4143a48ccea120c5cd3e74303a8710068252a9b33824a071fbef5afe73f3ba617deba30c7c3fdcbe45f0fff16e2c24368e24d1a4811824b61971180aaee28d1c2ef5bbd894af819b63511b07dee6664d91e4e81a516827303535dede3e865cba82dd858c6d58ac750560ae1163cf75a9702a3e441037766abdb24b94c1588affe3e723da56687cd190fec2fa", 0xc3, 0x17f8, 0x0, 0x0, r6}]) r7 = openat$incfs(r6, &(0x7f0000000b80)='.pending_reads\x00', 0x141900, 0x2) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) pivot_root(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0\x00') r8 = pidfd_getfd(r7, r5, 0x0) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000c40)={{0xffffffff, 0x50c}, {0x8, 0x3}, 0x14}) 05:41:06 executing program 1: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x5) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000000040)="3c41ab44ab87423c98b15cdac757ae181ca8f7810028c97669cc12e3b2111ff0d249cea3ecc4d5bc", 0x28, 0x40}]) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x401) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x60, 0x1, 0x48, @dev={0xfe, 0x80, '\x00', 0x26}, @empty, 0x40, 0x8, 0x6, 0x9}}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)={0x1569, 0x4ee175dc, 0x6, 0x293, 0x4, [{0x1ff, 0x3, 0x31d2, '\x00', 0x400}, {0x4, 0x4, 0x9, '\x00', 0x2400}, {0x9, 0x10000, 0x1, '\x00', 0x400}, {0x0, 0x9e5f, 0x6a, '\x00', 0x228e}]}) r3 = fsmount(r0, 0x0, 0x7d) accept$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000440)={0x800, 0x6, 0x9}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000480)=0xfffffffffffffffa) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x10001}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000580)={0xb0002008}) openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x101800, 0x0) 05:41:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x13}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x2010) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x20, 0x81, 0x5e, 0x81, 0x0, 0xfffffffffffffbd4, 0x6991, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x305e}, 0x8, 0x8f9, 0x24ec, 0x1, 0x1, 0xf0, 0x3, 0x0, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) fcntl$setlease(r2, 0x400, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x42002, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x64) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000300)) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000340)={0x2, 0xfffffefd, 0x1, 0x1, 0xfff, 0x4, 0xffd, 0x8, 0x4, 0x7, 0x1502, 0x4, 0x85, 0x9}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x324, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x40080) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0xb, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x7, 0x1, '!%\x00'}, @NFTA_COMPAT_NAME={0x9, 0x1, '&\\]/\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xe, 0x1, '-#.\\^\'##(\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000007c0)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x8, 0x10, 0x1ff, 0x0, {{0x1c, 0x4, 0x3, 0x4, 0x70, 0x64, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x14}, {[@generic={0x88, 0x7, "93b4467273"}, @generic={0x89, 0x10, "87648cb78c7314e8a40e0442f240"}, @generic={0x83, 0x4, '>Y'}, @generic={0x44, 0xa, "c28474de0e86d9ac"}, @generic={0x44, 0x3, "9c"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xe7, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x2}]}, @ssrr={0x89, 0x1b, 0x94, [@dev={0xac, 0x14, 0x14, 0x29}, @empty, @empty, @broadcast, @multicast1, @broadcast]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl2\x00', r6, 0x29, 0x3, 0x1, 0x9, 0x66, @loopback, @mcast1, 0x1, 0x8000, 0x9, 0x8001}}) getsockname$inet6(r3, &(0x7f00000008c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000900)=0x1c) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x8, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, @loopback, 0x40, 0x8, 0x5, 0x3f}}) r7 = dup3(r5, r4, 0x80000) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f0000000a00)=0x4) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000a40)={{r2}, {@val, @max}}) 05:41:06 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="bce6e15be394384b8a62d00834b30a512d77ba62220a1501514b825c8d3f8dc6105205dbde876e5eb8d661a818b35e296c53eadbf3c36625f564710f6ca0c89f1ea235ab72ded335b0cd591debe7f944067513db24afd1f99de920e70aab3021b2f5ba5096ddf107afa7dee20f97558ad0bf95") ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000140)=0x401) r2 = open(&(0x7f0000000180)='./file0\x00', 0x400802, 0x110) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@empty, @local, @mcast2, 0xc251, 0x9, 0x2, 0x0, 0x9, 0xc8}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000240)={0x69d7, 0x3f, 0x1, 0x200}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r4, &(0x7f0000000280)=@ethernet={0x0, @remote}, &(0x7f0000000300)=0x80) write$binfmt_aout(r3, &(0x7f0000000340)={{0x108, 0x6, 0x1f, 0xb1, 0x6, 0x2, 0x286, 0x80000001}, "432e3f464a8a4a2cbc026a7e6cca6e9162f33c115010d32d8693014f53bd63649ec1fb01b4513d220b3016755b75c157dee134e63fc64df5d59f723e407cd0e04fda704cda5d7177c7ce5f3d5943d41322f432511e84277893a6c6faaa7c07dbcad9481a170201c935dc03bc66577dc74417dc3cb425", ['\x00']}, 0x196) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000600)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000640)={r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) getpeername$unix(r0, &(0x7f0000000680)=@abs, &(0x7f0000000700)=0x6e) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000800)=0x5) [ 112.903481] audit: type=1400 audit(1750225266.998:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:41:07 executing program 5: ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000040)={0x1ff}) splice(0xffffffffffffffff, &(0x7f0000000080)=0x4, 0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x100, 0x3) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000100)=""/213) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'sit0\x00', @broadcast}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x3, 0x2}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000002c0)=0x322) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/hid_cypress', 0x80080, 0x30) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000340)=[0x7fffffff, 0x9]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000400)='net/fib_trie\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e6a1aa8e57f259282b1eca90a363fef7"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x24004014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x220408d0) openat$random(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10100200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x800, 0x3, 0x5}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4801) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xd02e43728b44d1a4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa8, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40080}, 0x10) 05:41:07 executing program 4: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x318, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x7f, 0x45, "38c0c005349a9a53dc88da1aaa577f5a48d6d54a936665df5ceedc74821023fd40d8f1e817d2bea314806f32b12de9d793a6aa9a86aec69faf6ec640575b52992fb2c92b1a4676a6e73fc621fe8177c2f06e05d6eb081a1338fdada547a7056514058f8de64eb6a74e0184048c80a05dd6fddb1d1751d21ce52946"}, @NL80211_ATTR_TESTDATA={0xf5, 0x45, "58ab6afd8de6a5e5f7dcba2a947f926ada07870c2c6523f08552ea4e99250886fd985af3c347dbd813b4b703f48110874066b6b279d7cda32fe9ffdb425eb54128e2afda190a99045c73f468b26719a24a886c868c2edb06cf0b0a780c5de5ed6820313fc697c2dc1331dbda214002e0008763311a228d925e975fd14601196474fbf780d6f643ebd270760760ece4c5885f3c22ec86938ffbe0986ba8e435c67782b81056a06422eb45fbf14de310def1fa30dfc57807cfc13ce9393723969eeaaabe629daa56a1a9f2969f732611a07773add14e8a16933416bf7402caf4f840398de61a6d744d0e436b3421911a0461"}, @NL80211_ATTR_TESTDATA={0x101, 0x45, "963c05112a8486ae7244f504b9a38f77a69ad6620ebe886423860671ae095c91935b9b3c20945a47e70286f038feb3979459f5130c36919938a86a78c0904336b7fca79fac9c3a057a0bf2327144a9d97195d6d109fd50787607892891341b186fe5edc781dad0d88ffaf41e8674b4a7c406cd8686c71a5b56988b65d4fe8a7de2ab2e63f1f5d7839a202f609a49758910156ec1625db8efc3234c916ec90609f6c8994e2b230af526be536776ed4b0bd4ef74ce1135e2d2262a43cb7dde8600b701e5071980a21d813490252f90116e0fb48ed592427c06a52f8bf411febf5f60e7c396dd7bef5fd1617ca8476ba1669e6e4ec016f45c13cbcd8acdf3"}, @NL80211_ATTR_TESTDATA={0x86, 0x45, "c67b581ed2f2f64a9564ec73517e066eb63e135b19551cde7bb380433fe66cdb2dbe6157b717ecb121b824b043d1597c99be97574bb5ecd971f95211eb9441fe3dba119ca69ec73651c7773892373b0133204cfa100256290a8343608e02b8b5a42f42b742d0217287b678d901104b9f185c016d3ab39682014aeb98a52d16f01c1f"}]}, 0x318}, 0x1, 0x0, 0x0, 0x8000040}, 0x4048086) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x9]}, 0x8) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffc5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x57}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd18}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040094}, 0x20008000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0xa8a5a3ee4957f378, 0x0) bind$unix(r1, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x8041) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88d1}, 0x8010) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) vmsplice(r0, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="aa191a0ba751fb5bd999773a9af3c91751a8d81117ab0a00ab15464be3f0509cc0f58282f007297765aa56462b75f74ac6afed430c5ab880102b101c28a5a3b1df01bda2e5d3adf1b487f47ae20abd7c0e", 0x51}], 0x1, 0x5) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b00), 0x58a01, 0x0) r4 = dup(r3) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x6, 0x10000) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000001000)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x338, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28ec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2fd2bb95}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x144bbaf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1d4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x100000, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9b54}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48c7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x20004000}, 0x40008) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x6c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:udev_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4c895) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000001580)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000011c0)={0x364, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x11}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x34}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3f}, @NL80211_ATTR_IE={0x11a, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0xc5, 0x9, @device_a, 0xfff, "", 0x4, 0x4, @broadcast, 0xfff}}, @supported_rates={0x1, 0x2, [{0xb, 0x1}, {0x6c}]}, @random={0x81, 0xa7, "b4d7639470a44328cc5abe7883aef90c2ea1a999906678cace3636d294687364f7fdc64015879095179cdf2f72d334f6c697af21599dbdf01cc2f844005a64ec37efac5224516245e8148cd7f691492765f18b24b2c49dc6d04c516a06697928d70d7f98c7982163563dacc6b86f1b0cb0b736a2c3cd69e946c85eaa4f4cb553b5aa8278e1e9edd4aa7f770fcdcd983b0956bffe972b52c433fb3eefb80a9ff1d40c4ef78239b6"}, @random={0x9, 0x2f, "2c4139c554a63f33d7eeb1a9bf464acef5316ad7565f2266c6c71de89b00eed8bd70737361c0862bc20fb3f2f51d2e"}, @rann={0x7e, 0x15, {{0x1, 0x55}, 0x20, 0x40, @broadcast, 0xffff, 0x7fe00000, 0xa7d0}}]}, @NL80211_ATTR_IE={0x13c, 0x2a, [@fast_bss_trans={0x37, 0xff, {0x8, 0x8, "55d9e10abc6658677088c821754a3c6a", "6641f2cc0ddaaad69420cfbe4992c4147a06c52517db4c561ccda10bbedfcb1b", "34a931498baaa6f6fd592834b4955d5bdfaf48cf17d84ead198773f97985b9de", [{0x4, 0x19, "126955cb68eca76f72454594fb82eb93fb7a202355351b5aa7"}, {0x1, 0x26, "e784bd4ab0d5ba79429893aa99b51e59f97e4a5d7e91fe4a9b21d9884a048907573074d2c9c1"}, {0x3, 0x20, "54b718efb9b18ace6bb0f91e15ae7481353cd5bac7b7021320b8c6cf3d107e96"}, {0x1}, {0x2, 0x4, "d6f5a77c"}, {0x1, 0x16, "28e0ab37b249f7c641e6bd22cf90f37141d3f30efa9e"}, {0x3, 0x15, "0fb0a3b1fd9c257056bfd8436758c97458b74a6417"}, {0x4, 0xf, "6b61b5353740a51cd7beaff75441df"}]}}, @supported_rates={0x1, 0x1, [{0x6}]}, @mesh_chsw={0x76, 0x6, {0x3f, 0x9, 0x3b, 0xf001}}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}, @prep={0x83, 0x1f, @not_ext={{}, 0xff, 0x9, @device_b, 0x7fff, "", 0x8, 0x5, @broadcast}}, @chsw_timing={0x68, 0x4, {0xcd, 0x435}}]}, @NL80211_ATTR_IE={0xb6, 0x2a, [@cf={0x4, 0x6, {0x4, 0x2e, 0x10, 0xa259}}, @preq={0x82, 0x7d, @not_ext={{0x0, 0x1}, 0x3, 0xcf, 0x0, @device_b, 0x1, "", 0xffffffff, 0x7fffffff, 0x9, [{{}, @device_a, 0x5813}, {{}, @broadcast, 0x8001}, {{0x0, 0x0, 0x1}, @device_a, 0xdbea}, {{0x1}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1}, @device_b, 0x1}, {{}, @device_a, 0xc5}, {{0x1}, @device_b, 0x40}]}}, @ht={0x2d, 0x1a, {0x80, 0x1, 0x3, 0x0, {0x6, 0x134c, 0x0, 0x367, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0x8}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ibss={0x6, 0x2, 0x7}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}]}, 0x364}, 0x1, 0x0, 0x0, 0x54}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x30, 0x0, 0x1, 0x70bd2c, 0x97d, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008001) 05:41:07 executing program 6: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, {0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x8, [0x81, 0x7, 0x9d88, 0xfffffff8, 0x10001, 0x8ca7, 0x40, 0x1]}, 0x5c) r0 = request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={r0, 0x0, 0xca}, &(0x7f0000000180)={'enc=', 'oaep', ' hash=', {'blake2s-224-arm\x00'}}, &(0x7f0000000200), &(0x7f0000000240)=""/202) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000340)='oaep', &(0x7f0000000380)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008024}, 0x8002) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6}}, &(0x7f0000000680)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x1, 0x9aa, 0xec, @local, @dev={0xfe, 0x80, '\x00', 0x16}, 0x80, 0x10, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x1f, 0xffffffff, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x7, 0x1, 0x2}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x82}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x48001}, 0x20040051) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000940)=[@mss={0x2, 0x2}, @sack_perm], 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40) socketpair(0x1e, 0xa, 0xf280, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000b00)={'icmp\x00'}, &(0x7f0000000b40)=0x1e) r8 = request_key(&(0x7f0000000b80)='syzkaller\x00', &(0x7f0000000bc0)={'syz', 0x2}, &(0x7f0000000c00)='\x00', r0) keyctl$KEYCTL_MOVE(0x1e, r8, 0x0, 0x0, 0x1) 05:41:07 executing program 7: write$snapshot(0xffffffffffffffff, &(0x7f0000000000)="e0e8c7df9d8d5f90d854a640cd8f9be5b1b874b7b09ceaccbeba8e619e5929e086bb8ba6578b63203a6f2284cfac9ba2d60ed4921beb5ce92251861e2e1ecf632a70f025129c78b89f6fb7267c08548e9816c1f68d69abeefd38daf475898556c18b20fca604df10789606c0c8dcf67d0f28cd494bca7116d9b0a4e16200f1369ebe7c58f97ca46c244e67b6f6911c14fff908c7a5f6367a278edb6df00c18056abd7f1090ea3c86ac23dc61abc5519e0bb840b756750b3423318af6795d86d06414861ea1065377ab4063394524ce4ecfff8f53bfee06225ee0c781be24e44f", 0xe0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000140)=@random="bb0c918d01cf8c776f226c8efb2daca0e35e369262ff6b915b", 0x19, 0x2) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x6, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x20008000) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="5a99fca0f1ab199202359950be2a540f02809bf308c707673c23e71d6558e51bd0193da5b9ae5c16c514efd9b9afb0836863a5d9209cd4589628d2936c98ac729277fc3eaff697ec78befd8e5eab40fa8c2291f65522acc01e1ba2192f65f7765bd0a1fae678fd7c0b1674274fe255b752b50543d2f088c5506d85b1194706c55528cd1555026fe447293dd95c695fc92a308bd6c8e60512d75352a5c08695b84d431af772caa224252bb6f5a14e2382ef71f8efb92182d96488161cf0b850f79311851bd13a47e36f12f89a58681415c88384e8b01297256695", 0xda, 0x8) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000440)=0x1c, 0x800) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x7b}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "77ee744eb51344723ba1fa82faa7b083"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c312d99457f4d3e44cddb90050367d8c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a9c87da7e390e63c7991bbce8553e5b9"}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008851}, 0x4041) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f00000007c0)=0xe8) accept4$packet(r3, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, &(0x7f0000000980)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'sit0\x00', 0x0, 0x29, 0xa, 0x2, 0x100020, 0x7c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x20, 0xfffffff7, 0x5}}) getsockname$packet(r3, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000c00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d00)={'ipvlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000d40)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x5, 0x4, 0x3, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x700, 0x8, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001800)={&(0x7f0000000f40)={0x888, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x95}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8db}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3dc, 0x9, 0x40, 0x2}, {0x1, 0x4b, 0x80, 0x1ff}, {0xa5a, 0x8, 0x3, 0x5}, {0x2, 0x40, 0x0, 0x400}, {0x101, 0x4, 0x6, 0x3}, {0x7fff, 0x9, 0x7f, 0x8000}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6ef}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20004000}, 0x400c010) [ 114.195644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.199929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.202744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.208042] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.211690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.364905] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.368618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.371811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.375745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.380439] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.505626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.519679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.532884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.535398] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.544504] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.546002] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.548403] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.550139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.555664] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.560122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.565631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.567445] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.568852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.570272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.574620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.575932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.588475] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.591820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.593615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.599478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.604557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.605915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.608368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.622296] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.624814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.626744] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.628603] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.635176] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.652549] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.660008] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.270820] Bluetooth: hci0: command tx timeout [ 116.462578] Bluetooth: hci1: command tx timeout [ 116.718300] Bluetooth: hci4: command tx timeout [ 116.718328] Bluetooth: hci6: command tx timeout [ 116.720207] Bluetooth: hci3: command tx timeout [ 116.720411] Bluetooth: hci7: command tx timeout [ 116.782230] Bluetooth: hci5: command tx timeout [ 116.782793] Bluetooth: hci2: command tx timeout [ 118.318392] Bluetooth: hci0: command tx timeout [ 118.510314] Bluetooth: hci1: command tx timeout [ 118.766213] Bluetooth: hci3: command tx timeout [ 118.766705] Bluetooth: hci4: command tx timeout [ 118.767236] Bluetooth: hci6: command tx timeout [ 118.767651] Bluetooth: hci7: command tx timeout [ 118.831522] Bluetooth: hci2: command tx timeout [ 118.832008] Bluetooth: hci5: command tx timeout [ 120.367454] Bluetooth: hci0: command tx timeout [ 120.560274] Bluetooth: hci1: command tx timeout [ 120.814240] Bluetooth: hci7: command tx timeout [ 120.814731] Bluetooth: hci3: command tx timeout [ 120.814775] Bluetooth: hci6: command tx timeout [ 120.815780] Bluetooth: hci4: command tx timeout [ 120.879139] Bluetooth: hci5: command tx timeout [ 120.879592] Bluetooth: hci2: command tx timeout [ 122.414401] Bluetooth: hci0: command tx timeout [ 122.608375] Bluetooth: hci1: command tx timeout [ 122.862226] Bluetooth: hci3: command tx timeout [ 122.862700] Bluetooth: hci7: command tx timeout [ 122.863190] Bluetooth: hci4: command tx timeout [ 122.863613] Bluetooth: hci6: command tx timeout [ 122.926196] Bluetooth: hci2: command tx timeout [ 122.926649] Bluetooth: hci5: command tx timeout [ 174.347798] syz-executor.0 (279) used greatest stack depth: 24864 bytes left [ 176.981959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.984788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.986078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.990863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.991849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.993556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.001365] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.003462] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.018996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.023963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.154780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.163610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.178695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.198280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.199547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.225035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.231863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.234745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.258805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.258991] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.264865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.273755] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.276894] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.280380] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.282065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.294887] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.310854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.314021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.355684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.362901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.367663] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.374989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.381990] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.398223] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.459046] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.510939] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.519635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.535482] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.612535] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.614819] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.054619] Bluetooth: hci0: command tx timeout [ 179.119223] Bluetooth: hci1: command tx timeout [ 179.310200] Bluetooth: hci2: command tx timeout [ 179.374207] Bluetooth: hci6: command tx timeout [ 179.438199] Bluetooth: hci4: command tx timeout [ 179.566211] Bluetooth: hci3: command tx timeout [ 179.630198] Bluetooth: hci7: command tx timeout [ 179.758203] Bluetooth: hci5: command tx timeout [ 181.103612] Bluetooth: hci0: command tx timeout [ 181.166180] Bluetooth: hci1: command tx timeout [ 181.359132] Bluetooth: hci2: command tx timeout [ 181.422237] Bluetooth: hci6: command tx timeout [ 181.486526] Bluetooth: hci4: command tx timeout [ 181.616149] Bluetooth: hci3: command tx timeout [ 181.678273] Bluetooth: hci7: command tx timeout [ 181.807158] Bluetooth: hci5: command tx timeout [ 183.150395] Bluetooth: hci0: command tx timeout [ 183.215251] Bluetooth: hci1: command tx timeout [ 183.406462] Bluetooth: hci2: command tx timeout [ 183.470839] Bluetooth: hci6: command tx timeout [ 183.534329] Bluetooth: hci4: command tx timeout [ 183.662304] Bluetooth: hci3: command tx timeout [ 183.726421] Bluetooth: hci7: command tx timeout [ 183.854303] Bluetooth: hci5: command tx timeout [ 185.198928] Bluetooth: hci0: command tx timeout [ 185.263341] Bluetooth: hci1: command tx timeout [ 185.456347] Bluetooth: hci2: command tx timeout [ 185.518362] Bluetooth: hci6: command tx timeout [ 185.582165] Bluetooth: hci4: command tx timeout [ 185.710398] Bluetooth: hci3: command tx timeout [ 185.774185] Bluetooth: hci7: command tx timeout [ 185.902396] Bluetooth: hci5: command tx timeout [ 237.071013] syz-executor.2 (2907) used greatest stack depth: 24544 bytes left [ 239.186183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.191789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.199398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.208986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.213400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.263954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.274788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.285653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.304618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.311496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.382377] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.386298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.390568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.395686] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.399028] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.465877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.469618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.474614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.482730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.498713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.517673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.528764] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.532797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.537633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.544261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.559985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.566566] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.570032] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.574861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.577427] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.598462] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.602151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.636663] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.688294] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.691670] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.693902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.700710] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.704664] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.714355] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.758645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.262198] Bluetooth: hci0: command tx timeout [ 241.391788] Bluetooth: hci1: command tx timeout [ 241.455158] Bluetooth: hci2: command tx timeout [ 241.647255] Bluetooth: hci4: command tx timeout [ 241.648010] Bluetooth: hci5: command tx timeout [ 241.774518] Bluetooth: hci3: command tx timeout [ 241.839406] Bluetooth: hci6: command tx timeout [ 241.840353] Bluetooth: hci7: command tx timeout [ 243.310443] Bluetooth: hci0: command tx timeout [ 243.438206] Bluetooth: hci1: command tx timeout [ 243.502188] Bluetooth: hci2: command tx timeout [ 243.694351] Bluetooth: hci5: command tx timeout [ 243.694859] Bluetooth: hci4: command tx timeout [ 243.822516] Bluetooth: hci3: command tx timeout [ 243.887949] Bluetooth: hci6: command tx timeout [ 243.889535] Bluetooth: hci7: command tx timeout [ 245.358435] Bluetooth: hci0: command tx timeout [ 245.487264] Bluetooth: hci1: command tx timeout [ 245.550199] Bluetooth: hci2: command tx timeout [ 245.742255] Bluetooth: hci5: command tx timeout [ 245.742732] Bluetooth: hci4: command tx timeout [ 245.871132] Bluetooth: hci3: command tx timeout [ 245.934327] Bluetooth: hci7: command tx timeout [ 245.934772] Bluetooth: hci6: command tx timeout [ 247.406191] Bluetooth: hci0: command tx timeout [ 247.535584] Bluetooth: hci1: command tx timeout [ 247.598167] Bluetooth: hci2: command tx timeout [ 247.790339] Bluetooth: hci4: command tx timeout [ 247.790812] Bluetooth: hci5: command tx timeout [ 247.919256] Bluetooth: hci3: command tx timeout [ 247.982450] Bluetooth: hci6: command tx timeout [ 247.982904] Bluetooth: hci7: command tx timeout [ 301.640456] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.646999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.653529] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.669812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.677369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.769595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.791064] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.803506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.819467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.832294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.872806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.878162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.896551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.916007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.942847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.036737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.040638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.040816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.051621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.054647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.057043] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.062684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.069606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.075955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.089604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.242223] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.248613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.253713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.285712] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.316673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.368725] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.373079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.375592] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.377930] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.383424] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.388606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.396652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.441702] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.490457] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.496890] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.727381] Bluetooth: hci0: command tx timeout [ 303.918303] Bluetooth: hci1: command tx timeout [ 304.048624] Bluetooth: hci2: command tx timeout [ 304.111438] Bluetooth: hci4: command tx timeout [ 304.174296] Bluetooth: hci3: command tx timeout [ 304.431222] Bluetooth: hci5: command tx timeout [ 304.495656] Bluetooth: hci7: command tx timeout [ 304.623838] Bluetooth: hci6: command tx timeout [ 305.774603] Bluetooth: hci0: command tx timeout [ 305.966281] Bluetooth: hci1: command tx timeout [ 306.094878] Bluetooth: hci2: command tx timeout [ 306.158623] Bluetooth: hci4: command tx timeout [ 306.225183] Bluetooth: hci3: command tx timeout [ 306.478292] Bluetooth: hci5: command tx timeout [ 306.543169] Bluetooth: hci7: command tx timeout [ 306.670704] Bluetooth: hci6: command tx timeout [ 307.822261] Bluetooth: hci0: command tx timeout [ 308.014496] Bluetooth: hci1: command tx timeout [ 308.142202] Bluetooth: hci2: command tx timeout [ 308.206268] Bluetooth: hci4: command tx timeout [ 308.270224] Bluetooth: hci3: command tx timeout [ 308.526372] Bluetooth: hci5: command tx timeout [ 308.591119] Bluetooth: hci7: command tx timeout [ 308.720138] Bluetooth: hci6: command tx timeout [ 309.870466] Bluetooth: hci0: command tx timeout [ 310.062162] Bluetooth: hci1: command tx timeout [ 310.190492] Bluetooth: hci2: command tx timeout [ 310.254345] Bluetooth: hci4: command tx timeout [ 310.319306] Bluetooth: hci3: command tx timeout [ 310.574380] Bluetooth: hci5: command tx timeout [ 310.638167] Bluetooth: hci7: command tx timeout [ 310.766601] Bluetooth: hci6: command tx timeout [ 364.098627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.103988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.107872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.116786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.124406] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.286397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.290615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.294758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.304836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.311812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.355533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.361658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.365703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.381565] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.389773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.450439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.455956] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.460374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.462734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.467623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.473643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.485400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.497703] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.504260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.507593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.509919] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.514674] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.518589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.521417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.523787] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.534587] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.537856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.544032] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.546910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.551014] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.559672] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.561677] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.571225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.577602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.608924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.191554] Bluetooth: hci0: command tx timeout [ 366.382194] Bluetooth: hci1: command tx timeout [ 366.447204] Bluetooth: hci2: command tx timeout [ 366.702227] Bluetooth: hci4: command tx timeout [ 366.702259] Bluetooth: hci5: command tx timeout [ 366.767289] Bluetooth: hci3: command tx timeout [ 366.830427] Bluetooth: hci7: command tx timeout [ 366.960155] Bluetooth: hci6: command tx timeout [ 368.241159] Bluetooth: hci0: command tx timeout [ 368.432213] Bluetooth: hci1: command tx timeout [ 368.494174] Bluetooth: hci2: command tx timeout [ 368.751500] Bluetooth: hci4: command tx timeout [ 368.751573] Bluetooth: hci5: command tx timeout [ 368.814172] Bluetooth: hci3: command tx timeout [ 368.878191] Bluetooth: hci7: command tx timeout [ 369.006318] Bluetooth: hci6: command tx timeout [ 370.286187] Bluetooth: hci0: command tx timeout [ 370.478487] Bluetooth: hci1: command tx timeout [ 370.542258] Bluetooth: hci2: command tx timeout [ 370.800499] Bluetooth: hci4: command tx timeout [ 370.800575] Bluetooth: hci5: command tx timeout [ 370.862445] Bluetooth: hci3: command tx timeout [ 370.926328] Bluetooth: hci7: command tx timeout [ 371.054317] Bluetooth: hci6: command tx timeout [ 372.335147] Bluetooth: hci0: command tx timeout [ 372.526312] Bluetooth: hci1: command tx timeout [ 372.592843] Bluetooth: hci2: command tx timeout [ 372.847481] Bluetooth: hci4: command tx timeout [ 372.847514] Bluetooth: hci5: command tx timeout [ 372.911263] Bluetooth: hci3: command tx timeout [ 372.974334] Bluetooth: hci7: command tx timeout [ 373.104933] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:46:16 Registers: info registers vcpu 0 RAX=ffffffff867b4dc6 RBX=0000000000000001 RCX=ffffffff867b4dc6 RDX=0000000000000000 RSI=ffffffff867b4dc6 RDI=ffffffff8646e8c4 RBP=ffff888026bb7650 RSP=ffff888026bb7538 R8 =ffffffff867b4dc6 R9 =0000000000000000 R10=000000000003b53d R11=0000000000006bd3 R12=ffff888026bb7658 R13=ffff888026bb7640 R14=ffff888026bb7639 R15=ffff888026bb75f8 RIP=ffffffff81353f5c RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007feabd6ab540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feabd73dc70 CR3=0000000025cac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=fed2a16c3ad48900 RBX=00000000000000e8 RCX=ffff88800f8f94a0 RDX=0000000000000000 RSI=ffffffff81b2315f RDI=ffff88806cf31850 RBP=ffff88802aac76f0 RSP=ffff88802aac7690 R8 =0000000027622243 R9 =ffff88806c628b10 R10=0000000000000000 R11=0000000000000000 R12=ffff888008c4b780 R13=0000000000092cc0 R14=ffff88800c1a55c8 R15=0000000000092cc0 RIP=ffffffff81a7cf83 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f30ecc8b260 CR3=000000000e555000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000