Warning: Permanently added '[localhost]:20067' (ECDSA) to the list of known hosts. 2024/11/07 13:26:38 fuzzer started 2024/11/07 13:26:38 dialing manager at localhost:46317 syzkaller login: [ 72.150195] cgroup: Unknown subsys name 'net' [ 72.236255] cgroup: Unknown subsys name 'cpuset' [ 72.270019] cgroup: Unknown subsys name 'rlimit' 2024/11/07 13:26:55 syscalls: 207 2024/11/07 13:26:55 code coverage: enabled 2024/11/07 13:26:55 comparison tracing: enabled 2024/11/07 13:26:55 extra coverage: enabled 2024/11/07 13:26:55 setuid sandbox: enabled 2024/11/07 13:26:55 namespace sandbox: enabled 2024/11/07 13:26:55 Android sandbox: enabled 2024/11/07 13:26:55 fault injection: enabled 2024/11/07 13:26:55 leak checking: enabled 2024/11/07 13:26:55 net packet injection: enabled 2024/11/07 13:26:55 net device setup: enabled 2024/11/07 13:26:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/07 13:26:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/07 13:26:55 USB emulation: enabled 2024/11/07 13:26:55 hci packet injection: enabled 2024/11/07 13:26:55 wifi device emulation: enabled 2024/11/07 13:26:55 802.15.4 emulation: enabled 2024/11/07 13:26:55 fetching corpus: 0, signal 0/0 (executing program) 2024/11/07 13:26:57 starting 8 fuzzer processes 13:26:57 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) write$P9_RGETATTR(r0, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x1406, {0x40, 0x3}, 0x83, 0xee00, 0xee00, 0x8000, 0xd4, 0x3, 0x90, 0xffffffff00000001, 0x23, 0x2, 0x8, 0x5, 0x8, 0x1, 0x5, 0x8, 0x7, 0x4}}, 0xa0) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x100000001, 0x49500) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x2, {0x37, 0x3a, 0x3, 0x1e, 0x4, 0x800, 0x5, 0xfd, 0x1}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x400082, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x0, 0x0, 0x2}}, 0x14) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x4049111, r1, 0xfffffffffffffff9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) r5 = getpgrp(0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x20040058) socket$packet(0x11, 0x2, 0x300) getpgrp(0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000380)=0x0) write$P9_RGETATTR(r1, &(0x7f00000003c0)={0xa0, 0x19, 0x1, {0x820, {0x0, 0x2, 0x5}, 0x4, r7, 0x0, 0x1, 0x3, 0x100000000, 0x3, 0x6, 0x100000000, 0x464, 0x7, 0x7f, 0x1, 0x8000, 0x8001, 0x68, 0x7}}, 0xa0) r8 = syz_open_dev$mouse(&(0x7f0000000480), 0xfffffffffffffffb, 0x80400) accept$packet(r8, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) 13:26:57 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7e}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c084}, 0x20000000) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x950}, 0x20000011) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xf7e0ba3410605079}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000800) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4800) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000840)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000008}, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r9, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r10, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000015}, 0x11) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 13:26:57 executing program 2: setns(0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x440c0}, 0x40) r6 = syz_open_dev$mouse(&(0x7f0000000480), 0x7, 0x8000) ioctl$RTC_VL_READ(r6, 0x80047013, &(0x7f00000004c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r8, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) ioctl$RTC_VL_READ(r6, 0x80047013, &(0x7f0000000680)) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000006c0)={0x7, 0x1b, 0x2}, 0x7) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan4\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x0, 0x712, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000) 13:26:57 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) syz_io_uring_setup(0x275a, &(0x7f0000000080)={0x0, 0x41ae, 0x1, 0x2, 0x29, 0x0, r0}, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x20, 0x7, 0x8, 0x44, @mcast1, @loopback, 0x7840, 0x20, 0xf06, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7, 0x1, 0x1f, 0x2, {{0x2c, 0x4, 0x3, 0x8, 0xb0, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x17, 0x92, [@dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010101, @loopback, @loopback]}, @ra={0x94, 0x4}, @cipso={0x86, 0x67, 0x0, [{0x6, 0x6, '*Z~\t'}, {0x6, 0x5, "78e760"}, {0x0, 0x12, "9489655900c43194b5ed4cab7cca3716"}, {0x2, 0x8, "b22a40eba065"}, {0x5, 0x11, "79b64fda46db8ceaf68be1094e6011"}, {0x5, 0xb, "438990e80fd38b4310"}, {0x5, 0xb, "ea35c91bfd463c1125"}, {0x5, 0xb, "8648da2ddca7bb428b"}, {0x0, 0xa, "a69dec90138eab23"}]}, @generic={0x82, 0xa, "b5d0a94c4dba6dcc"}, @timestamp={0x44, 0x4, 0x17, 0x0, 0x7}, @end, @generic={0x83, 0x4, "c172"}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) accept$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000180), 0xc, &(0x7f00000009c0)={&(0x7f00000004c0)={0x4cc, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffe00000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5974}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf43}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r5}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x381f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x85}, 0x4004040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ac0)={'erspan0\x00', &(0x7f0000000a40)={'syztnl1\x00', r5, 0x7800, 0x1, 0x1, 0x9, {{0xf, 0x4, 0x3, 0x5, 0x3c, 0x68, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3e}, {[@rr={0x7, 0x27, 0x68, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010102, @empty, @broadcast, @local, @local]}]}}}}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '^*-+*\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x44}}, 0x4000001) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x7f}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x20040000) r9 = syz_open_dev$mouse(&(0x7f0000000e80), 0x1, 0x200802) pipe2$9p(&(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6800) write$P9_RRENAME(r10, &(0x7f0000000f00)={0x7, 0x15, 0x1}, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r9) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000001240)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x148, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3f, 0x9, 0x0, 0xffffffff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb6fd}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x8080) 13:26:57 executing program 4: r0 = getpgrp(0xffffffffffffffff) getpgrp(r0) r1 = socket(0xf, 0x1, 0x1) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) r3 = fork() migrate_pages(r3, 0xffff, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x80000000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x310) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x14000200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000011}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) r4 = fork() migrate_pages(r4, 0xf15, &(0x7f0000000340)=0x5, &(0x7f0000000380)=0x5) r5 = fork() sched_rr_get_interval(r5, &(0x7f00000003c0)) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x8, 0x2880) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000440)) r7 = fsmount(r6, 0x1, 0x2) r8 = fork() write$P9_RGETLOCK(r7, &(0x7f0000000480)={0x28, 0x37, 0x1, {0x0, 0x9, 0x1, r8, 0xa, 'netdevsim\x00'}}, 0x28) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r2, 0xba52c000) 13:26:57 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x6, 0x4, 0x8, 0x0, 0x0, 0x100000000, 0x831, 0x400}, &(0x7f0000000040)={0x2, 0x3, 0xda, 0x9, 0x8, 0x1, 0x2, 0xfffffffffffffff9}, &(0x7f0000000080)={0x3fd3, 0x8, 0x8, 0x0, 0x0, 0x3, 0x0, 0x3a}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/2, 0x2}], 0x4, &(0x7f0000000440)=""/56, 0x38}, 0x0, 0x10000, 0x0, {0x2}}, 0xffffffff) sched_rr_get_interval(0x0, &(0x7f0000000500)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x2080, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x0, 0x24, 0x67, 0x0, 0x6b, 0x29, 0x0, @loopback, @local, {[@ssrr={0x89, 0xf, 0x63, [@multicast2, @empty, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000640)={'ip_vti0\x00', r3, 0x7800, 0x7, 0x6, 0x2, {{0x5a, 0x4, 0x3, 0x15, 0x168, 0x65, 0x0, 0xb4, 0x2f, 0x0, @local, @remote, {[@noop, @ssrr={0x89, 0x13, 0x13, [@rand_addr=0x64010101, @loopback, @broadcast, @broadcast]}, @cipso={0x86, 0x21, 0x0, [{0x2, 0x6, "24d413b3"}, {0x1, 0xe, "1dc18ac5bd043f409dc9c223"}, {0xf8bb2f8ab45c8393, 0x7, "09cd2fd825"}]}, @cipso={0x86, 0x56, 0x1, [{0x7, 0x3, 'U'}, {0x6, 0x5, "aa5818"}, {0x2, 0x10, "306aedbe113984777740c97ffc4d"}, {0x5, 0xe, "7ad632960fffd875b242f38d"}, {0x5, 0x2}, {0x0, 0x7, "181db98389"}, {0x5, 0xa, "ee94ab72d53a0ee4"}, {0x2, 0x11, "f27731fb1e73d62b5bc6c324186be4"}, {0x7, 0x6, "9be40c78"}]}, @lsrr={0x83, 0x27, 0x2c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @broadcast, @local, @broadcast, @remote, @remote]}, @cipso={0x86, 0x70, 0x1, [{0x0, 0xc, "3960e504e46b7196affa"}, {0x0, 0xa, "ae050ea6c0ef7df6"}, {0x7, 0xa, "e6d96fb623101bdf"}, {0x5, 0x4, "183d"}, {0x5, 0x10, "d75274456c808dfcbe8b6732b404"}, {0x1, 0xf, "b33ba52abb818a90c31aae56d9"}, {0x6, 0x7, "a8c1dc03de"}, {0x5, 0x6, "865a6075"}, {0x1, 0xc, "0933cbf04646565bb09b"}, {0x44ba772f434b5fe6, 0xe, "1f1b5ea3edc749356c864373"}]}, @rr={0x7, 0x17, 0x81, [@rand_addr=0x64010101, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @empty]}, @ssrr={0x89, 0x7, 0x3d, [@dev={0xac, 0x14, 0x14, 0x34}]}, @timestamp={0x44, 0x14, 0x7e, 0x0, 0x8, [0x33, 0x8, 0x8, 0x20]}]}}}}}) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0xe398ffb3849e72f8, r2, 0x6) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x258200, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x78, r6, 0x106, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5f}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x25}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x5c}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x78}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000811) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000d00)=0x2, 0x4) r8 = socket(0x1, 0xf040f7f38ae4c26f, 0xfffffffa) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6gre0\x00', r4, 0x2f, 0x17, 0x3, 0x4, 0x12, @mcast1, @private0, 0x8000, 0x80, 0x2bd7, 0x7}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3c4494f73b6acecf}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000) fspick(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0x0) [ 90.101874] audit: type=1400 audit(1730986017.605:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:26:57 executing program 6: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x20, 0x0, 0x8}}, 0x14) r0 = fsmount(0xffffffffffffffff, 0x1, 0x2) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x4, 0x3, 0x2}}, 0x14) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='nolazytime\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r1 = geteuid() r2 = geteuid() write$P9_RSTATu(r0, &(0x7f0000000180)={0x5c, 0x7d, 0x1, {{0x0, 0x47, 0xc206, 0x8a, {0x2, 0x1, 0x5}, 0x1000000, 0x6, 0x5, 0x7ff, 0x1, '[', 0x6, '\\%\'!&\\', 0xb, 'nolazytime\x00', 0x2, '%)'}, 0x0, '', r1, 0xffffffffffffffff, r2}}, 0x5c) write$P9_RUNLINKAT(r0, &(0x7f0000000200)={0x7, 0x4d, 0x2}, 0x7) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='posixacl\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='nolazytime\x00', 0x0, r0) r3 = getegid() ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000002c0)=0x0) write$P9_RSTATu(r0, &(0x7f0000000300)={0x62, 0x7d, 0x1, {{0x0, 0x42, 0x2, 0x7ff, {0x2, 0x0, 0x6}, 0x40000, 0x6, 0x5, 0xf926, 0x2, '@.', 0x2, '&}', 0x9, 'posixacl\x00', 0x2, '%)'}, 0xb, 'nolazytime\x00', r2, r3, r4}}, 0x62) write$P9_RGETATTR(r0, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x100, {0x20, 0x2, 0x7}, 0x111, r4, 0x0, 0x401, 0xfffffffffffffffc, 0x2, 0x3, 0xfffffffffffffff9, 0x433e, 0x2c, 0x2, 0x112, 0x8, 0xff, 0x76, 0x3, 0x7ff, 0x8}}, 0xa0) write$P9_RATTACH(r0, &(0x7f0000000440)={0x14, 0x69, 0x1, {0x20, 0x3, 0x5}}, 0x14) socketpair(0x22, 0x3, 0x3, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001140)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000081}, 0xc, &(0x7f0000001100)={&(0x7f0000000940)={0x7c0, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc2d9, 0x8, 0x7f, 0x200}, {0x5, 0x7, 0x6, 0x4}, {0x0, 0x2, 0x8, 0x7}, {0x1, 0x3, 0x6, 0xfad00}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x53}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4f}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x2, 0x5, 0x5}, {0x3f, 0x40, 0x9, 0x5}, {0x8, 0x9b, 0x5, 0xf12}, {0x7, 0x1, 0x7, 0xac9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c0000}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfe29, 0x3, 0x3, 0x7}, {0xfffa, 0x7, 0x2, 0xd221}, {0x8, 0xbb, 0xfd, 0x1}, {0xffff, 0x20, 0x1, 0x81}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xad}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff904}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x890}, 0x80) 13:26:57 executing program 7: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x34, 0xd, 0x16, 0x11, 0x9, 0x0, 0x5, 0x7f, 0xffffffffffffffff}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000080)={0x2e, 0x18, 0xa, 0x9, 0x9, 0xfffffffb, 0x5, 0xe9, 0xffffffffffffffff}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1207) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42400, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000180)) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000240)=0x1, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000280), 0x3, 0x241) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') mount_setattr(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8800, &(0x7f0000000340)={0x80, 0x5, 0x0, {r4}}, 0x20) epoll_create1(0x80000) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r3, 0x4) r5 = syz_open_dev$rtc(&(0x7f0000000380), 0xabf1, 0x100) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0xa1d) [ 91.460814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.465728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.467445] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.468835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.469858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.471192] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.475992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.480524] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.480758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.482654] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.484665] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.485936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.541072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.546660] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.554036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.554905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.557575] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.560517] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.562597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.564200] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.567595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.571659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.582419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.584681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.585960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.586780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.589018] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.590463] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.592516] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.593650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.594508] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.595597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.596664] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.612688] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.614183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.616464] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.621565] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.622878] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.625361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.627492] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.628693] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.637455] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.643862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.646467] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.647685] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.699713] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.701344] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.704972] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.549876] Bluetooth: hci0: command tx timeout [ 93.550665] Bluetooth: hci1: command tx timeout [ 93.613754] Bluetooth: hci5: command tx timeout [ 93.677374] Bluetooth: hci3: command tx timeout [ 93.678165] Bluetooth: hci2: command tx timeout [ 93.741370] Bluetooth: hci4: command tx timeout [ 93.742419] Bluetooth: hci7: command tx timeout [ 93.935469] Bluetooth: hci6: command tx timeout [ 95.597468] Bluetooth: hci0: command tx timeout [ 95.598005] Bluetooth: hci1: command tx timeout [ 95.662322] Bluetooth: hci5: command tx timeout [ 95.725378] Bluetooth: hci2: command tx timeout [ 95.725917] Bluetooth: hci3: command tx timeout [ 95.789482] Bluetooth: hci7: command tx timeout [ 95.790020] Bluetooth: hci4: command tx timeout [ 95.981334] Bluetooth: hci6: command tx timeout [ 97.645704] Bluetooth: hci1: command tx timeout [ 97.646372] Bluetooth: hci0: command tx timeout [ 97.709402] Bluetooth: hci5: command tx timeout [ 97.773393] Bluetooth: hci3: command tx timeout [ 97.773940] Bluetooth: hci2: command tx timeout [ 97.837416] Bluetooth: hci4: command tx timeout [ 97.838885] Bluetooth: hci7: command tx timeout [ 98.030477] Bluetooth: hci6: command tx timeout [ 99.693373] Bluetooth: hci0: command tx timeout [ 99.693891] Bluetooth: hci1: command tx timeout [ 99.757480] Bluetooth: hci5: command tx timeout [ 99.821484] Bluetooth: hci2: command tx timeout [ 99.821998] Bluetooth: hci3: command tx timeout [ 99.885366] Bluetooth: hci4: command tx timeout [ 99.885863] Bluetooth: hci7: command tx timeout [ 100.078416] Bluetooth: hci6: command tx timeout [ 154.404935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.409057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.419705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.424879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.426112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.427781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.428952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.432133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.434288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.436653] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.438654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.440647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.444152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.448708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.449522] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.455607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.456982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.459496] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.461501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.463721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.464496] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.466658] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.467573] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.468941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.468963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.470698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.473167] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.475799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.477005] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.483985] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.484586] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.491073] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.491164] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.495884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.501039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.508459] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.521839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.527601] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.535026] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.541053] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.551027] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.554279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.584683] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.591395] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.603631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.609519] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.614066] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.616772] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.525649] Bluetooth: hci3: command tx timeout [ 156.589565] Bluetooth: hci6: command tx timeout [ 156.589598] Bluetooth: hci1: command tx timeout [ 156.590197] Bluetooth: hci2: command tx timeout [ 156.590766] Bluetooth: hci0: command tx timeout [ 156.591132] Bluetooth: hci4: command tx timeout [ 156.654571] Bluetooth: hci7: command tx timeout [ 156.654592] Bluetooth: hci5: command tx timeout [ 158.574407] Bluetooth: hci3: command tx timeout [ 158.637496] Bluetooth: hci4: command tx timeout [ 158.638040] Bluetooth: hci1: command tx timeout [ 158.638264] Bluetooth: hci0: command tx timeout [ 158.638682] Bluetooth: hci2: command tx timeout [ 158.638926] Bluetooth: hci6: command tx timeout [ 158.702495] Bluetooth: hci5: command tx timeout [ 158.703097] Bluetooth: hci7: command tx timeout [ 160.621379] Bluetooth: hci3: command tx timeout [ 160.703427] Bluetooth: hci2: command tx timeout [ 160.703996] Bluetooth: hci1: command tx timeout [ 160.704653] Bluetooth: hci4: command tx timeout [ 160.705125] Bluetooth: hci0: command tx timeout [ 160.705834] Bluetooth: hci6: command tx timeout [ 160.749616] Bluetooth: hci5: command tx timeout [ 160.750183] Bluetooth: hci7: command tx timeout [ 162.669496] Bluetooth: hci3: command tx timeout [ 162.733595] Bluetooth: hci6: command tx timeout [ 162.734163] Bluetooth: hci0: command tx timeout [ 162.734768] Bluetooth: hci4: command tx timeout [ 162.735298] Bluetooth: hci1: command tx timeout [ 162.735800] Bluetooth: hci2: command tx timeout [ 162.797400] Bluetooth: hci7: command tx timeout [ 162.797967] Bluetooth: hci5: command tx timeout [ 216.396901] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.400988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.402932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.405442] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.405541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.407656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.413623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.415588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.419030] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.420616] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.420917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.423612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.564167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.571311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.581370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.582173] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.585539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.591846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.591940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.599440] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.611056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.611312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.613639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.620581] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.624969] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.626633] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.627446] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.636490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.655656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.658807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.673823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.677341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.679239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.680575] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.697295] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.700756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.710827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.731371] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.740751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.749882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.768073] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.772498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.775349] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.777673] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.786076] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.793636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.797304] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.799408] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.479350] Bluetooth: hci0: command tx timeout [ 218.479423] Bluetooth: hci1: command tx timeout [ 218.669393] Bluetooth: hci3: command tx timeout [ 218.733370] Bluetooth: hci2: command tx timeout [ 218.733393] Bluetooth: hci5: command tx timeout [ 218.798296] Bluetooth: hci4: command tx timeout [ 218.861535] Bluetooth: hci6: command tx timeout [ 218.862685] Bluetooth: hci7: command tx timeout [ 220.526434] Bluetooth: hci0: command tx timeout [ 220.526491] Bluetooth: hci1: command tx timeout [ 220.719241] Bluetooth: hci3: command tx timeout [ 220.781282] Bluetooth: hci5: command tx timeout [ 220.782267] Bluetooth: hci2: command tx timeout [ 220.846293] Bluetooth: hci4: command tx timeout [ 220.909339] Bluetooth: hci7: command tx timeout [ 220.909402] Bluetooth: hci6: command tx timeout [ 222.573356] Bluetooth: hci1: command tx timeout [ 222.574403] Bluetooth: hci0: command tx timeout [ 222.765355] Bluetooth: hci3: command tx timeout [ 222.830326] Bluetooth: hci2: command tx timeout [ 222.830383] Bluetooth: hci5: command tx timeout [ 222.893378] Bluetooth: hci4: command tx timeout [ 222.957297] Bluetooth: hci7: command tx timeout [ 222.959638] Bluetooth: hci6: command tx timeout [ 224.622330] Bluetooth: hci1: command tx timeout [ 224.622875] Bluetooth: hci0: command tx timeout [ 224.814258] Bluetooth: hci3: command tx timeout [ 224.877328] Bluetooth: hci5: command tx timeout [ 224.879408] Bluetooth: hci2: command tx timeout [ 224.941297] Bluetooth: hci4: command tx timeout [ 225.005318] Bluetooth: hci6: command tx timeout [ 225.005430] Bluetooth: hci7: command tx timeout [ 278.668912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.670757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.673407] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.678504] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.681528] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.682824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.842117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.845098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.847471] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.852253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.854011] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.855091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.971515] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.977423] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.989725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.994698] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.000717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.003277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.008733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.020305] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.024405] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.029618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.032122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.033799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.035584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.046725] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.050338] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.051515] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.054372] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.071741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.081008] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.083654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.088559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.119935] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.121571] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.126933] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.139943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.140841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.145563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.149531] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.150868] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.152110] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.156901] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.158634] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.159919] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.227980] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.231965] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.233110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.749536] Bluetooth: hci0: command tx timeout [ 280.877282] Bluetooth: hci1: command tx timeout [ 281.071352] Bluetooth: hci2: command tx timeout [ 281.133442] Bluetooth: hci3: command tx timeout [ 281.134320] Bluetooth: hci5: command tx timeout [ 281.262354] Bluetooth: hci4: command tx timeout [ 281.389323] Bluetooth: hci7: command tx timeout [ 281.645539] Bluetooth: hci6: command tx timeout [ 282.797253] Bluetooth: hci0: command tx timeout [ 282.925438] Bluetooth: hci1: command tx timeout [ 283.117306] Bluetooth: hci2: command tx timeout [ 283.181281] Bluetooth: hci5: command tx timeout [ 283.181807] Bluetooth: hci3: command tx timeout [ 283.310407] Bluetooth: hci4: command tx timeout [ 283.437378] Bluetooth: hci7: command tx timeout [ 283.693321] Bluetooth: hci6: command tx timeout [ 284.845346] Bluetooth: hci0: command tx timeout [ 284.973249] Bluetooth: hci1: command tx timeout [ 285.192327] Bluetooth: hci2: command tx timeout [ 285.235222] Bluetooth: hci5: command tx timeout [ 285.243384] Bluetooth: hci3: command tx timeout [ 285.357251] Bluetooth: hci4: command tx timeout [ 285.485425] Bluetooth: hci7: command tx timeout [ 285.741444] Bluetooth: hci6: command tx timeout [ 286.893318] Bluetooth: hci0: command tx timeout [ 287.026339] Bluetooth: hci1: command tx timeout [ 287.213408] Bluetooth: hci2: command tx timeout [ 287.277383] Bluetooth: hci5: command tx timeout [ 287.278768] Bluetooth: hci3: command tx timeout [ 287.405265] Bluetooth: hci4: command tx timeout [ 287.533987] Bluetooth: hci7: command tx timeout [ 287.789255] Bluetooth: hci6: command tx timeout [ 341.142898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.144844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.146464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.187859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.207104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.208951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.388987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.391439] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.392966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.396542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.398317] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.400500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.434958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.442002] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.444060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.447692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.451347] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.452580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.511964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.515565] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.526436] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.531472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.543557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.557400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.562796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.570575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.576432] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.577800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.584371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.603451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.605013] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.606397] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.620663] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.636566] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.646570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.650005] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.667506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.682739] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.686907] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.687673] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.690652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.690759] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.692803] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.715476] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.720618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.730990] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.777077] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.780077] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.277409] Bluetooth: hci0: command tx timeout [ 343.469451] Bluetooth: hci2: command tx timeout [ 343.470678] Bluetooth: hci1: command tx timeout [ 343.661422] Bluetooth: hci3: command tx timeout [ 343.662579] Bluetooth: hci4: command tx timeout [ 343.789620] Bluetooth: hci5: command tx timeout [ 343.853431] Bluetooth: hci6: command tx timeout [ 343.855041] Bluetooth: hci7: command tx timeout [ 345.325327] Bluetooth: hci0: command tx timeout [ 345.517362] Bluetooth: hci2: command tx timeout [ 345.518756] Bluetooth: hci1: command tx timeout [ 345.709271] Bluetooth: hci3: command tx timeout [ 345.710741] Bluetooth: hci4: command tx timeout [ 345.837392] Bluetooth: hci5: command tx timeout [ 345.901336] Bluetooth: hci7: command tx timeout [ 345.902677] Bluetooth: hci6: command tx timeout [ 347.373235] Bluetooth: hci0: command tx timeout [ 347.565277] Bluetooth: hci2: command tx timeout [ 347.566712] Bluetooth: hci1: command tx timeout [ 347.757380] Bluetooth: hci4: command tx timeout [ 347.758905] Bluetooth: hci3: command tx timeout [ 347.885265] Bluetooth: hci5: command tx timeout [ 347.949403] Bluetooth: hci7: command tx timeout [ 347.950759] Bluetooth: hci6: command tx timeout [ 349.421531] Bluetooth: hci0: command tx timeout [ 349.613299] Bluetooth: hci1: command tx timeout [ 349.614709] Bluetooth: hci2: command tx timeout [ 349.805456] Bluetooth: hci3: command tx timeout [ 349.806873] Bluetooth: hci4: command tx timeout [ 349.933288] Bluetooth: hci5: command tx timeout [ 349.997383] Bluetooth: hci6: command tx timeout [ 349.998740] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:31:58 Registers: info registers vcpu 0 RAX=ffffffff81846a99 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806ce40350 RBP=ffff88806ce40350 RSP=ffff888035f8f878 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff863f7797 R11=ffff88806ce40350 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffffffff81846a99 RIP=ffffffff812efbd0 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fac403f3368 CR3=0000000018d8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff888025847ad0 RCX=0000000000000000 RDX=1ffff110029c04b6 RSI=0000000000000141 RDI=ffffffff84d02700 RBP=0000000000140dca RSP=ffff888025847980 R8 =0000000000000001 R9 =ffff888014e025b8 R10=ffffffff863f7797 R11=0000000000000001 R12=ffff888025847aec R13=ffff888025847ad8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81254c3e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa1f9f59540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2700000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc71111b08 CR3=000000002be08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000000000000000ff00 XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000