Warning: Permanently added '[localhost]:37366' (ECDSA) to the list of known hosts. 2025/06/27 14:47:15 fuzzer started 2025/06/27 14:47:16 dialing manager at localhost:45637 syzkaller login: [ 114.657352] cgroup: Unknown subsys name 'net' [ 114.785525] cgroup: Unknown subsys name 'cpuset' [ 114.858233] cgroup: Unknown subsys name 'rlimit' 2025/06/27 14:47:32 syscalls: 209 2025/06/27 14:47:32 code coverage: enabled 2025/06/27 14:47:32 comparison tracing: enabled 2025/06/27 14:47:32 extra coverage: enabled 2025/06/27 14:47:32 setuid sandbox: enabled 2025/06/27 14:47:32 namespace sandbox: enabled 2025/06/27 14:47:32 Android sandbox: enabled 2025/06/27 14:47:32 fault injection: enabled 2025/06/27 14:47:32 leak checking: enabled 2025/06/27 14:47:32 net packet injection: enabled 2025/06/27 14:47:32 net device setup: enabled 2025/06/27 14:47:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/27 14:47:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/27 14:47:32 USB emulation: enabled 2025/06/27 14:47:32 hci packet injection: enabled 2025/06/27 14:47:32 wifi device emulation: enabled 2025/06/27 14:47:32 802.15.4 emulation: enabled 2025/06/27 14:47:32 fetching corpus: 0, signal 0/0 (executing program) 2025/06/27 14:47:34 starting 8 fuzzer processes 14:47:34 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffeffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7c}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x200008c0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x641, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2044100}, 0x4000001) getpeername(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000440)=0x80) socketpair(0x22, 0xa, 0x6, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000040) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x34000051) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r7, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42}, 0xc800) openat$cgroup_procs(r0, &(0x7f0000000900)='cgroup.threads\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x15c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xbb9, 0xb}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x44}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c0}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xe3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7fff, 0x8000, 0x80, 0x6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2cb}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xee}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xd61a, 0x1000, 0x1, 0x8, 0x100, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x401}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4c004}, 0x8000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000cc0)={&(0x7f0000000b80), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x80, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x800) 14:47:34 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4}}, &(0x7f0000000100)=0xe8) keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) socket$inet6(0xa, 0x2, 0xff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r1) keyctl$unlink(0x9, r1, r1) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$clear(0x7, r2) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$clear(0x7, r3) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000002c0)='rxrpc_s\x00', &(0x7f0000000300)='!)-{\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x102, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000480)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000580)=0xe8) getgroups(0x2, &(0x7f00000005c0)=[0xee01, 0x0]) fchownat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', r5, r6, 0x100) execveat(0xffffffffffffffff, &(0x7f0000000600)='./file1\x00', &(0x7f00000006c0)=[&(0x7f0000000640)=',:(+\x00', &(0x7f0000000680)='\x00'], &(0x7f0000000880)=[&(0x7f0000000700)='!%(\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='{/@\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='/dev/loop-control\x00', &(0x7f0000000840)='\x00'], 0x100) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000009c0)='syzkaller\x00', &(0x7f0000000a00)=':\x00') [ 132.913289] audit: type=1400 audit(1751035654.592:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:47:34 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x40, 0x3, 0x88, 0xe0, 0x0, 0x9, 0x12, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xe3, 0x0, @perf_config_ext={0x8000, 0x1}, 0x8420, 0x1, 0x7fffffff, 0x3, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x3, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000080)="e58b31fdbad1474c7dac5a0570a2e0c6277914a1f652f977f2d170d05b060bce3c48ffd392a3e1a61e82eaf47f812d25cf961bef55298bb0f26865c1") bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, 0x3}, 0x6) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x5, 0x4) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x4, 0x7, "ffe852", 0xe7, 0x2}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x7) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0x101}}}, 0x8) write$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1, @link_key_neg_reply={{0x40c, 0x6}}}, 0xa) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x6a0001, 0x2) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000280)=0x2, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c0703, 0x0) 14:47:34 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xf7, 0x1, 0x20, 0x2c, @dev={0xfe, 0x80, '\x00', 0x38}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x40, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x1, 0x5, 0x0, @private1, @private0, 0x87df, 0x7800, 0x8, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x4, 0x1431, 0x1, @loopback, @mcast2, 0x80, 0x7800, 0x1000, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x4, 0x9, 0x7, 0x9, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x8, 0x708, 0x6, 0xc9}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000500)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x4, 0xe0, 0x4, 0xff, 0x18, @mcast1, @empty, 0x7, 0x20, 0x1, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000640)={0x320, r0, 0x20, 0xcb, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socketpair(0x1d, 0x4, 0x1, &(0x7f0000000bc0)={0xffffffffffffffff}) getpeername(r10, &(0x7f0000000c00)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000c80)=0x80) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000e00)=""/144) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r12, 0x0, &(0x7f00000012c0)={&(0x7f0000000ec0)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f40)="a5a9caf84882d57c8ba29840adae6885d776b72c80cc284c462b627c033d76e0f2829814438d7787944c606183a587812e49e05d78a35f39b9b0b11ce5408e81273aa0a5696b93a39c888f67b068809429c1bd19bb4e11b8a05bb0a65726b1446e4e5d6b54de42fbbb266f973d92ff3a45bb233692f42e5d5d4daa3bd6152f1a49b059d062cd0454d8b3a254ccf173223ef47f52309f5b67f672524b54b87ef9d6a0cfd0781eb88cb7b6139144b554040d58b21cf7ff61dfe9766489a509da6abae6a1ba2b9f7bc6926f15b829ad5ac8e545a42cfef2971e3d2f3d6490206b3f18a6b02f436fe4b2", 0xe8}, {&(0x7f0000001040)="7d09286b908b77be721d068ff47c73a7053715fe4dc2b043e7532bd0212c3610d7562557", 0x24}, {&(0x7f0000001080)="b7aedc61edbf860436f9f64c0a1debbfc26eb1051a82167e0ef5b18c2fd25a4b58b238e4f61adb73b207d291df7f513a8817a02fa283527f88549b85ba17423fba705627ae43a875bb3b3ac8066e3fa4e3db2ceb04e9efee976b0cde673e8862", 0x60}], 0x3, &(0x7f0000001140)=[{0xf0, 0x113, 0x0, "cae23b734ca356e50b7ab4c30f5467a17b6957924a9ba3f118ac7b636bf44516c168aa02109ad9c0ff45cb2728ed8afbc2bb74963b1a0499e628d77a97ea24c5c122a70226f9854b51196287c3affd9e04693753312b43cef06380eac550d465b15cf87f5bcff87fbad4d8ff78d01c273151ea2caf0cfa8f151e251eebf26d1d43da27fe64db2941bd3727a41e8edd131999d8523596141fffda3d91043cfffa304f7dd77085455dcb83da9d7b8b9a589deabec3e65a466495145fc9cc638a00f333e94091e3d77359a47cd19bca7570294d5c880dade684376af2"}, {0x40, 0x113, 0x7, "a33ae540b568e9a34edde4f6d064a755374a15526b9ba983bf59c02076eb025b9f5dd037d6b0cca3baa0b7"}, {0x38, 0x114, 0x0, "5ff552917ba14120d3c226ed372b807f5de4e3ff1e07d4db23f813c83b3570a69df1d96d5bd858"}], 0x168}, 0x0, 0x4000080, 0x1}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001400)={'sit0\x00', &(0x7f0000001380)={'syztnl2\x00', 0x0, 0x2f, 0x15, 0x3, 0xfffffff9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x43}, 0x700, 0x80, 0x3, 0x4}}) 14:47:34 executing program 4: mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x810, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x13, 0xffffffffffffffff, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) socketpair(0x6, 0x6, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair(0x38, 0x6, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, 0x0, 0x300, 0x70bd2a, 0x5, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8fa1}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8040000}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000440)='.pending_reads\x00', 0x41, 0xc0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe0d, 0x37}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x88, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x8}, @NL80211_MESH_SETUP_IE={0x6f, 0x3, "c02f65d00eac9ac86d3b9865b126432c54a73c76182fad264b7e30abdf9e37b83d63bdf0861237acf3b83c75837a8644618a3f7a4e5c8a874cc74a0d2644cb7d1bdfae2787103b29abb796aed7b1e1585711ed564ee3ac4c99321fd6ef45262867e6b0e7c8bc385fcd03f4"}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0xffffffffffff7fff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000740)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/key-users\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f00000007c0)='./file0\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5) 14:47:34 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x99}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000010) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000200)='io.max\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x10) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x0, 0x8, 0x56, {0x56, 0x22, "916fe1514d649aefba2bab6e1ff7205da173ef917d86f302055d16d78154938a1aa966f264793dc76ef8bbee46d36b97c7a3187a4580699c1c583d378539001abfee624cf61e91c6275039b45ef450a483c6767a"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000680)={0x0, 0x17, 0x26, "61e64586e98cc839bc9a9be45a82247236caca90039a7ec679d6dd9e0d7493bd4a8653851259"}, &(0x7f00000006c0)={0x0, 0xa, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x44}}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000780)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x38}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000900), 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x94493f2901a082be}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) openat$cgroup_type(r0, &(0x7f0000000a80), 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x15000}, 0x4004000) 14:47:34 executing program 6: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5cc027f24cd8bad996ab3f4cb60acd6f46c69f1889fbbe1e6d497916c858bccd91e21c1789d87e3ec484b110f017c50f66f282c4bbcdda01fb4def8283dbc88e", 0x1c}, 0x48, 0xfffffffffffffffb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x28, 0x5, 0x1) socket(0x1f, 0x6, 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480e0}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000002c0), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000300)=""/171) syz_io_uring_setup(0x7928, &(0x7f00000003c0)={0x0, 0xe1e1, 0x0, 0x0, 0x17c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = epoll_create(0xf) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[r4, r5], 0x2, 0x0, 0x1}, 0x41) io_uring_setup(0x550d, &(0x7f0000000540)={0x0, 0x769e, 0x20, 0x3, 0x18d}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000600)={{0xd4b6, 0x4}, {0x2, 0x10001}, 0x7, 0x1}) write$selinux_attr(r0, &(0x7f0000000640)='system_u:object_r:utempter_exec_t:s0\x00', 0x25) epoll_pwait(r5, &(0x7f0000000680)=[{}, {}, {}, {}, {}], 0x5, 0x6869c0da, &(0x7f00000006c0)={[0x333d6ea7]}, 0x8) 14:47:34 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x0, 0x4) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/zoneinfo\x00', 0x0, 0x0) r5 = socket(0x1e, 0x800, 0x5) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) r7 = socket(0x18, 0xa, 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000000500)='.pending_reads\x00', 0x10000, 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r6, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200208d5}, 0x4008001) r9 = perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x4, 0x3, 0x1, 0x0, 0x0, 0x9, 0x21460, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3374, 0x0, @perf_bp={&(0x7f0000000640)}, 0x200, 0xe8b, 0x101, 0x8, 0x2, 0x5, 0x400, 0x0, 0x7, 0x0, 0x1}, 0x0, 0x7, r3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000700)=0x2) write$bt_hci(r7, &(0x7f0000000740)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x0, "e6becaa342421127c8e2f3341526b7cf7ec1f89b8edb115c0263d3b35e70b4"}}}, 0x24) write$selinux_attr(r8, &(0x7f0000000780)='system_u:object_r:crond_unit_file_t:s0\x00', 0x27) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00'}) [ 134.298528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.305421] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.323891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.336953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.350921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.352597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.354159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.359971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.362249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.375939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.434696] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.439365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.447550] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.449654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.455573] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.459906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.472239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.477403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.489961] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.494336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.495946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.498380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.500486] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.505721] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.512357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.515609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.517900] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.523467] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.531619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.549542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.555368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.573348] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.594848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.596844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.597584] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 134.611709] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 134.621227] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 134.623904] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 134.663582] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 134.742815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 136.445480] Bluetooth: hci0: command tx timeout [ 136.446208] Bluetooth: hci1: command tx timeout [ 136.575195] Bluetooth: hci3: command tx timeout [ 136.637383] Bluetooth: hci2: command tx timeout [ 136.701567] Bluetooth: hci6: command tx timeout [ 136.702984] Bluetooth: hci4: command tx timeout [ 136.830143] Bluetooth: hci7: command tx timeout [ 136.830878] Bluetooth: hci5: command tx timeout [ 138.493212] Bluetooth: hci0: command tx timeout [ 138.493733] Bluetooth: hci1: command tx timeout [ 138.621201] Bluetooth: hci3: command tx timeout [ 138.685245] Bluetooth: hci2: command tx timeout [ 138.749249] Bluetooth: hci4: command tx timeout [ 138.749729] Bluetooth: hci6: command tx timeout [ 138.878091] Bluetooth: hci7: command tx timeout [ 138.878584] Bluetooth: hci5: command tx timeout [ 140.541372] Bluetooth: hci1: command tx timeout [ 140.541941] Bluetooth: hci0: command tx timeout [ 140.671116] Bluetooth: hci3: command tx timeout [ 140.733223] Bluetooth: hci2: command tx timeout [ 140.797573] Bluetooth: hci6: command tx timeout [ 140.799185] Bluetooth: hci4: command tx timeout [ 140.925445] Bluetooth: hci5: command tx timeout [ 140.925944] Bluetooth: hci7: command tx timeout [ 142.589284] Bluetooth: hci0: command tx timeout [ 142.589821] Bluetooth: hci1: command tx timeout [ 142.718548] Bluetooth: hci3: command tx timeout [ 142.782611] Bluetooth: hci2: command tx timeout [ 142.845158] Bluetooth: hci6: command tx timeout [ 142.845636] Bluetooth: hci4: command tx timeout [ 142.974090] Bluetooth: hci7: command tx timeout [ 142.974584] Bluetooth: hci5: command tx timeout [ 195.083521] syz-executor.6 (288) used greatest stack depth: 24544 bytes left [ 197.171238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.172851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.174127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.177217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.179528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.267385] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.274030] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.278353] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.280831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.285881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.288486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.295458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.301019] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.327580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.334145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.426805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.445884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.454200] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.461563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.465100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.467016] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.468767] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.473667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.474985] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.498491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.503518] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.506559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.506714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.517225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.522538] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.523808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.527247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.530153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.548516] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.584373] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.108598] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 198.134402] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 198.144352] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 198.196552] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 198.217266] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.229610] Bluetooth: hci0: command tx timeout [ 199.357138] Bluetooth: hci1: command tx timeout [ 199.421403] Bluetooth: hci2: command tx timeout [ 199.485740] Bluetooth: hci3: command tx timeout [ 199.613216] Bluetooth: hci4: command tx timeout [ 199.678122] Bluetooth: hci6: command tx timeout [ 199.678147] Bluetooth: hci5: command tx timeout [ 200.318576] Bluetooth: hci7: command tx timeout [ 201.277168] Bluetooth: hci0: command tx timeout [ 201.405403] Bluetooth: hci1: command tx timeout [ 201.470186] Bluetooth: hci2: command tx timeout [ 201.533125] Bluetooth: hci3: command tx timeout [ 201.663078] Bluetooth: hci4: command tx timeout [ 201.725208] Bluetooth: hci6: command tx timeout [ 201.725674] Bluetooth: hci5: command tx timeout [ 202.366126] Bluetooth: hci7: command tx timeout [ 203.325490] Bluetooth: hci0: command tx timeout [ 203.453396] Bluetooth: hci1: command tx timeout [ 203.517130] Bluetooth: hci2: command tx timeout [ 203.581206] Bluetooth: hci3: command tx timeout [ 203.709477] Bluetooth: hci4: command tx timeout [ 203.773285] Bluetooth: hci5: command tx timeout [ 203.773335] Bluetooth: hci6: command tx timeout [ 204.414125] Bluetooth: hci7: command tx timeout [ 205.375771] Bluetooth: hci0: command tx timeout [ 205.503469] Bluetooth: hci1: command tx timeout [ 205.566462] Bluetooth: hci2: command tx timeout [ 205.629154] Bluetooth: hci3: command tx timeout [ 205.758400] Bluetooth: hci4: command tx timeout [ 205.822096] Bluetooth: hci6: command tx timeout [ 205.822272] Bluetooth: hci5: command tx timeout [ 206.461394] Bluetooth: hci7: command tx timeout [ 259.534462] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.543424] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.550947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.562344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.565572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.880850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.885736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.889690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.891318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.892766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.897478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.901738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.904503] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.908619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.912350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.923655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.934241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.935262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.936811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.939019] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.944373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.947435] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.952209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.999284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.009654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.015646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.018819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.021107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.022535] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.027417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.031453] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.034665] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.062096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.086367] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.088720] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.109655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.111891] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.129159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 260.146847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 260.158527] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 261.629255] Bluetooth: hci0: command tx timeout [ 262.013199] Bluetooth: hci1: command tx timeout [ 262.013888] Bluetooth: hci2: command tx timeout [ 262.077183] Bluetooth: hci5: command tx timeout [ 262.078690] Bluetooth: hci4: command tx timeout [ 262.141179] Bluetooth: hci3: command tx timeout [ 262.206110] Bluetooth: hci6: command tx timeout [ 262.269145] Bluetooth: hci7: command tx timeout [ 263.678363] Bluetooth: hci0: command tx timeout [ 264.061393] Bluetooth: hci2: command tx timeout [ 264.061412] Bluetooth: hci1: command tx timeout [ 264.125172] Bluetooth: hci5: command tx timeout [ 264.126652] Bluetooth: hci4: command tx timeout [ 264.189469] Bluetooth: hci3: command tx timeout [ 264.253406] Bluetooth: hci6: command tx timeout [ 264.317258] Bluetooth: hci7: command tx timeout [ 265.725235] Bluetooth: hci0: command tx timeout [ 266.109184] Bluetooth: hci2: command tx timeout [ 266.110433] Bluetooth: hci1: command tx timeout [ 266.174107] Bluetooth: hci5: command tx timeout [ 266.174124] Bluetooth: hci4: command tx timeout [ 266.237339] Bluetooth: hci3: command tx timeout [ 266.302381] Bluetooth: hci6: command tx timeout [ 266.365195] Bluetooth: hci7: command tx timeout [ 267.773150] Bluetooth: hci0: command tx timeout [ 268.157133] Bluetooth: hci2: command tx timeout [ 268.159151] Bluetooth: hci1: command tx timeout [ 268.221545] Bluetooth: hci4: command tx timeout [ 268.221879] Bluetooth: hci5: command tx timeout [ 268.285497] Bluetooth: hci3: command tx timeout [ 268.349173] Bluetooth: hci6: command tx timeout [ 268.413147] Bluetooth: hci7: command tx timeout [ 322.066267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.071294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.072772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.077084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.080494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.281705] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.283625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.285988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.305207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.307836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.451016] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.454198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.460596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.468954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.471020] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.474351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.477120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.478440] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.505297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.516012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.525415] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.533381] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.539365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.547366] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.555111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.737490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 322.743336] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 322.747215] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 322.748522] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 322.754108] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 322.754921] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 322.759722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 322.761879] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.774662] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.790923] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.804328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.825240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 322.835618] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 322.862202] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.922670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.157282] Bluetooth: hci0: command tx timeout [ 324.350176] Bluetooth: hci1: command tx timeout [ 324.541183] Bluetooth: hci3: command tx timeout [ 324.607163] Bluetooth: hci2: command tx timeout [ 324.669211] Bluetooth: hci4: command tx timeout [ 324.925191] Bluetooth: hci6: command tx timeout [ 324.925208] Bluetooth: hci7: command tx timeout [ 324.991053] Bluetooth: hci5: command tx timeout [ 326.205185] Bluetooth: hci0: command tx timeout [ 326.397316] Bluetooth: hci1: command tx timeout [ 326.589188] Bluetooth: hci3: command tx timeout [ 326.653191] Bluetooth: hci2: command tx timeout [ 326.717453] Bluetooth: hci4: command tx timeout [ 326.973165] Bluetooth: hci6: command tx timeout [ 326.974337] Bluetooth: hci7: command tx timeout [ 327.037339] Bluetooth: hci5: command tx timeout [ 328.253137] Bluetooth: hci0: command tx timeout [ 328.445274] Bluetooth: hci1: command tx timeout [ 328.637280] Bluetooth: hci3: command tx timeout [ 328.701172] Bluetooth: hci2: command tx timeout [ 328.766096] Bluetooth: hci4: command tx timeout [ 329.021231] Bluetooth: hci7: command tx timeout [ 329.021767] Bluetooth: hci6: command tx timeout [ 329.085168] Bluetooth: hci5: command tx timeout [ 330.302129] Bluetooth: hci0: command tx timeout [ 330.493293] Bluetooth: hci1: command tx timeout [ 330.685266] Bluetooth: hci3: command tx timeout [ 330.749132] Bluetooth: hci2: command tx timeout [ 330.814174] Bluetooth: hci4: command tx timeout [ 331.069127] Bluetooth: hci6: command tx timeout [ 331.069393] Bluetooth: hci7: command tx timeout [ 331.133456] Bluetooth: hci5: command tx timeout [ 384.916899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.920968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.923685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.929562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.940366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.220522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.223735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.230405] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.249785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.251440] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.254776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.255774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.257799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.263141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.266401] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.427016] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.438230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.444251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.463832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.466243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.472769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.492584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.493959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.507418] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.507875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.509103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.511322] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.514951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.518698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.520672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.528956] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.530573] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.532375] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 385.536940] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 385.539914] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 385.696019] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 385.715534] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 385.722475] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 385.740277] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 385.762467] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.006407] Bluetooth: hci0: command tx timeout [ 387.325190] Bluetooth: hci2: command tx timeout [ 387.325221] Bluetooth: hci1: command tx timeout [ 387.587518] Bluetooth: hci3: command tx timeout [ 387.645162] Bluetooth: hci5: command tx timeout [ 387.645171] Bluetooth: hci4: command tx timeout [ 388.030017] Bluetooth: hci6: command tx timeout [ 388.158094] Bluetooth: hci7: command tx timeout [ 389.053338] Bluetooth: hci0: command tx timeout [ 389.375090] Bluetooth: hci1: command tx timeout [ 389.375115] Bluetooth: hci2: command tx timeout [ 389.630263] Bluetooth: hci3: command tx timeout [ 389.693202] Bluetooth: hci5: command tx timeout [ 389.693224] Bluetooth: hci4: command tx timeout [ 390.078211] Bluetooth: hci6: command tx timeout [ 390.206504] Bluetooth: hci7: command tx timeout [ 391.101445] Bluetooth: hci0: command tx timeout [ 391.421136] Bluetooth: hci1: command tx timeout [ 391.421181] Bluetooth: hci2: command tx timeout [ 391.677758] Bluetooth: hci3: command tx timeout [ 391.741292] Bluetooth: hci4: command tx timeout [ 391.741324] Bluetooth: hci5: command tx timeout [ 392.126452] Bluetooth: hci6: command tx timeout [ 392.253123] Bluetooth: hci7: command tx timeout [ 393.149195] Bluetooth: hci0: command tx timeout [ 393.469361] Bluetooth: hci1: command tx timeout [ 393.469897] Bluetooth: hci2: command tx timeout [ 393.726098] Bluetooth: hci3: command tx timeout [ 393.789278] Bluetooth: hci5: command tx timeout [ 393.789359] Bluetooth: hci4: command tx timeout [ 394.173163] Bluetooth: hci6: command tx timeout [ 394.302139] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:52:45 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888036a2b700 RCX=0000000000000040 RDX=ffff888036a2b700 RSI=ffffffff8222e4e0 RDI=ffff88801803c000 RBP=ffff88801803c000 RSP=ffff88802dd07d90 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff86437a57 R11=1ffff1100d9c6e24 R12=ffff88801803c000 R13=0000000000000001 R14=ffff888036a2b700 R15=0000000000000001 RIP=ffffffff8225d581 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55f6000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1643590b70 CR3=000000002c42f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87a7a508 RBX=0000000000000200 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff888034c925d8 RDI=ffff888034c91b80 RBP=ffff888034c91b80 RSP=ffff88802bb67678 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=0000000000000009 R13=0000000000000000 R14=ffff888034c925d8 R15=0000000000000005 RIP=ffffffff815183f1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56f6000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2a2d64b1f0 CR3=00000000331a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000