Warning: Permanently added '[localhost]:49204' (ECDSA) to the list of known hosts. 2024/11/08 17:52:26 fuzzer started 2024/11/08 17:52:27 dialing manager at localhost:46317 syzkaller login: [ 71.137131] cgroup: Unknown subsys name 'net' [ 71.247562] cgroup: Unknown subsys name 'cpuset' [ 71.310914] cgroup: Unknown subsys name 'rlimit' 2024/11/08 17:52:44 syscalls: 202 2024/11/08 17:52:44 code coverage: enabled 2024/11/08 17:52:44 comparison tracing: enabled 2024/11/08 17:52:44 extra coverage: enabled 2024/11/08 17:52:44 setuid sandbox: enabled 2024/11/08 17:52:44 namespace sandbox: enabled 2024/11/08 17:52:44 Android sandbox: enabled 2024/11/08 17:52:44 fault injection: enabled 2024/11/08 17:52:44 leak checking: enabled 2024/11/08 17:52:44 net packet injection: enabled 2024/11/08 17:52:44 net device setup: enabled 2024/11/08 17:52:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/08 17:52:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/08 17:52:44 USB emulation: enabled 2024/11/08 17:52:44 hci packet injection: enabled 2024/11/08 17:52:44 wifi device emulation: enabled 2024/11/08 17:52:44 802.15.4 emulation: enabled 2024/11/08 17:52:44 fetching corpus: 0, signal 0/0 (executing program) 2024/11/08 17:52:45 starting 8 fuzzer processes 17:52:45 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x80, 0x2}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000180)=[{{0x77359400}, 0x0, 0x3f, 0x5}, {{r2, r3/1000+60000}, 0x0, 0xffe0}, {{r4, r5/1000+60000}, 0x4, 0x1000, 0x80}, {{}, 0x5, 0x42, 0x1}, {{0x0, 0xea60}, 0x17, 0x9, 0x7fffffff}], 0x78) syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004850}, 0x4040000) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000380)) r7 = socket(0x6, 0x800, 0xe09) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r7, 0xb3f87000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x4, 0x8, 0x0, 0x13, 0x5, 0x1}, 0x7fff) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000400)=""/36) r8 = syz_open_dev$evdev(&(0x7f0000000440), 0x4c45, 0x80000) ioctl$EVIOCRMFF(r8, 0x40044581, &(0x7f0000000480)=0xb2ff) io_uring_setup(0x7472, &(0x7f00000004c0)={0x0, 0xd82c, 0x8, 0x3, 0x32a, 0x0, r0}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000540)={0x2, 0x0, 0x4, 0x8, 0x18, "21ca89ae6254b66a"}) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r7) keyctl$get_persistent(0x16, 0x0, 0x0) 17:52:45 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0xfef, 0x20000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/225, 0xe1, 0x0, &(0x7f0000000140)=""/94, 0x5e}, &(0x7f0000000200)=0x40) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x10000, 0x101000) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000280), 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000300)) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000340)={0x5, 0x3ff, 0x3, 0x497117b4, 0x80000001}) ioctl$TCSBRKP(r1, 0x5425, 0xd504) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x949}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000094) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000500)=[{{0x77359400}, 0x0, 0x0, 0x3736}, {{0x0, 0x2710}, 0x2, 0x678, 0x3}, {{r2, r3/1000+60000}, 0x5, 0x8, 0x7f}], 0x48) ioctl$TCSBRKP(r1, 0x5425, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r5, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014) io_uring_setup(0x73bd, &(0x7f0000000740)={0x0, 0x5982, 0x10, 0x3, 0x65, 0x0, r1}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000007c0)=""/174) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000880)=""/95) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000900)=""/4) 17:52:45 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0xee01, r0) keyctl$get_persistent(0x16, 0xee00, r0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)=0x9) r1 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\x00', r0) keyctl$link(0x8, r1, r0) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x7, 0x42341) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000001c0)=""/4096) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000011c0)=0xd7f) keyctl$reject(0x13, r1, 0x7ff, 0x7fff, r0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000001200)={'\x00', 0x2, 0x1, 0x35}) keyctl$negate(0xd, r0, 0x7, r1) keyctl$search(0xa, r0, &(0x7f0000001280)='syzkaller\x00', &(0x7f00000012c0)={'syz', 0x1}, r0) add_key$keyring(&(0x7f0000001300), &(0x7f0000001340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x1}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000001400), &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000001500)) 17:52:45 executing program 3: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/2, 0x2, 0x0, &(0x7f0000000040)=""/147, 0x93}, &(0x7f0000000140)=0x40) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000180)=@phonet, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/182, 0xb6}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/31, 0x1f}], 0x3, &(0x7f0000000440)=""/93, 0x5d}, 0x62) shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x7000) r2 = syz_open_pts(r0, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000500)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x100, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000580)={0x120000, 0xef, 0x3f, 0xfffffffe, 0xf, "bfc2212c91b5f663e3b9c25bcaca257463758e"}) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2c) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000005c0)) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r5 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$search(0xa, r5, &(0x7f0000000680)='user\x00', &(0x7f00000006c0)={'syz', 0x3}, 0xfffffffffffffffe) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000700)=0x7) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) syz_open_pts(r3, 0x1) [ 89.209013] audit: type=1400 audit(1731088365.905:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:52:45 executing program 4: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6, 0xcbd2, 0x80, 0x1, 0x4}}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0xfff, 0x400, 0x10001, 0x6, 0x80, "ea408e34f64a9f269c615e9c4627171952eb1c", 0x5, 0x400}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x3, 0xffff, 0x100, 0x7fff, 0xf}}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x5, 0x9}, {0x0, 0x5778}, {0x6, 0xf990}, {0x323, 0x66c4}, {0x3ff, 0xad}, {0x6, 0x1}]}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r2, 0x4b35, 0x3) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x1d) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x2) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x7f, 0x8001, 0x20, 0x4, 0x2}}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000200)) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000240)=""/111) syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x200, 0x70bd2c, 0x1, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000003c0)={0x8001, 0xe73, 0x3e7b, 0xff, 0x80, "9f03548e0dc51d4e6d2203863397c8af91b985", 0xc3be}) 17:52:45 executing program 5: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000075b000/0x3000)=nil, &(0x7f0000e1c000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00006ff000/0x3000)=nil, &(0x7f0000e3a000/0x3000)=nil, &(0x7f0000d92000/0x1000)=nil, &(0x7f0000828000/0x2000)=nil, &(0x7f0000a45000/0x4000)=nil, &(0x7f0000000000)="78422fb40ecb36eaf856796bbdb16a1bd04a929afbb1499722757bed013e089ab9463fa761ed5f2fff290f89b517089c7d302aae5b2ebce74799984ae481ca4134c4ac8fa36a3073df1270e87448b469a5a4081c962cadc7bf46c1be645ab369bdf1675a050e17aaee8494d03a923f9b2a42c1a6275ec4482d91", 0x7a, r0}, 0x68) r1 = syz_io_uring_setup(0x4ce, &(0x7f0000000180)={0x0, 0x94d5, 0x0, 0x1, 0x141}, &(0x7f00005ab000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000d10000/0x3000)=nil, 0x3000, 0x4, 0x110, r1, 0x10000000) r3 = accept$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000300)=0x7ff, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1081400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x4) r7 = syz_io_uring_setup(0x50f6, &(0x7f0000000580)={0x0, 0x937f, 0x2, 0x0, 0x168, 0x0, r1}, &(0x7f0000ec7000/0x2000)=nil, &(0x7f00009a2000/0x1000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000640)) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000680)=0xfffffffd) r9 = io_uring_setup(0x859, &(0x7f0000001800)={0x0, 0xd951, 0x4, 0x2, 0x33c, 0x0, r7}) syz_io_uring_submit(r8, r2, &(0x7f0000001880)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, r9}, 0xffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r10 = socket$packet(0x11, 0x3, 0x300) accept$packet(r10, 0x0, &(0x7f00000019c0)) getresgid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001d00)={0x9c, 0x0, &(0x7f0000001b80)=[@request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001ac0)={@fda={0x66646185, 0x8, 0x1, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x26}, @fda={0x66646185, 0x8, 0x1, 0xa}}, &(0x7f0000001b40)={0x0, 0x20, 0x40}}, 0x40}, @exit_looper, @acquire_done, @acquire={0x40046305, 0x1}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0xa4, 0x0, &(0x7f0000001c40)="fe5207c64b62e81bdd2b600ee33772020a66de1606d369d1bb98b648faa7a0d2fa7fada77f3acb94f490c6fc37b610dc7e3c717c79db4ec7ed9b8b4c93e6b19167bcda23b6dfd024f594e23b4f8c3a4026c201eb897f4aed78f6263506febf22821a06ffdad6bd1163821a8e899ce9ca21469be8694628fc738411777408c5c6a5201fec953bd410a5aebb914e29507e096201cd7d58f5efbba8221f3cca69cca52797e0"}) 17:52:46 executing program 6: r0 = socket(0x1d, 0x6, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x20, 0x40, 0x920, 0x71a601d0, {{0x2a, 0x4, 0x2, 0x22, 0xa8, 0x67, 0x0, 0x81, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @timestamp_addr={0x44, 0x3c, 0xe8, 0x1, 0x1, [{@rand_addr=0x64010101, 0x8}, {@local, 0xfffffffe}, {@multicast1, 0x53b3}, {@multicast2, 0xfffffff8}, {@private=0xa010101, 0x2}, {@broadcast, 0x5}, {@multicast2, 0x6}]}, @ssrr={0x89, 0x13, 0x7d, [@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_prespec={0x44, 0x34, 0xcd, 0x3, 0xf, [{@empty, 0x5}, {@multicast1, 0x9}, {@loopback, 0x2f000000}, {@empty, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x8}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0x1f, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x5}]}, @noop]}}}}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x846c200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_FLOW={0x6, 0x6, 0x81}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4008801) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'gre0\x00', &(0x7f00000006c0)={'syztnl2\x00', r4, 0x40, 0x8000, 0x1, 0x7ff, {{0x19, 0x4, 0x0, 0x5, 0x64, 0x66, 0x0, 0x73, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x10, 0x3, [{0x3, 0xa, "4ab90edd9787c587"}]}, @lsrr={0x83, 0x7, 0xc9, [@multicast1]}, @cipso={0x86, 0x38, 0x1, [{0x6, 0x11, "0dd60cb8b7d72a567f821f25bab221"}, {0x1, 0x5, "1fe282"}, {0x1, 0x4, "320e"}, {0x6, 0xf, "b73a94a648fb63394cbd6cd110"}, {0x0, 0x9, "19a67365ebef77"}]}]}}}}}) r7 = accept$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000ac0)={'erspan0\x00', r4, 0x7800, 0x20, 0x9, 0x7fff, {{0x4b, 0x4, 0x1, 0x4, 0x12c, 0x66, 0x0, 0x81, 0x2f, 0x0, @broadcast, @empty, {[@generic={0x89, 0x11, "0d99c874dce41e37538f5de0c182c8"}, @end, @rr={0x7, 0x13, 0x34, [@loopback, @loopback, @remote, @local]}, @lsrr={0x83, 0x3, 0xa4}, @timestamp={0x44, 0x1c, 0xe7, 0x0, 0x2, [0x10001, 0x2, 0xbd0, 0x6, 0x7, 0x6]}, @ssrr={0x89, 0x13, 0x62, [@remote, @private=0xa010100, @broadcast, @multicast1]}, @cipso={0x86, 0x5f, 0x1, [{0x0, 0xd, "09450939b09c253b1a39c4"}, {0x6, 0x7, "e1651b161d"}, {0x2, 0x11, "0835ac94450fb83ea3c801d3f1e2b6"}, {0x0, 0x11, "aadb882acc8b5f0b18ca414ad42a47"}, {0x0, 0x4, "6b1f"}, {0x5, 0x11, "ed95ddd5cc135e1cda5c7179b45eea"}, {0x0, 0xe, "d02b628adf5f43f28e5b87e5"}]}, @cipso={0x86, 0x2e, 0x3, [{0x0, 0xb, "74043f2261dcfafcbb"}, {0x5, 0x5, "198d99"}, {0x7, 0x10, "688c28454a17b0a44c39bf859410"}, {0x2, 0x8, "0b26d43b5ea8"}]}, @timestamp={0x44, 0x18, 0xad, 0x0, 0xe, [0xdf, 0x4, 0x37e2, 0x5, 0x4]}, @lsrr={0x83, 0x1b, 0xba, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @rand_addr=0x64010100, @multicast2, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'ip6gre0\x00', r2, 0x2f, 0x7, 0x4, 0x9, 0x2, @loopback, @remote, 0x80, 0x40, 0x4, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d40)={'tunl0\x00', r1, 0x7800, 0x10, 0xb004, 0x101, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x66, 0x0, 0x82, 0x29, 0x0, @broadcast, @remote, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0x5, [{@loopback, 0x9b02}]}, @generic={0x44, 0xb, "395479be7fb8ac3dd1"}, @lsrr={0x83, 0x7, 0x4b, [@empty]}, @timestamp_prespec={0x44, 0x24, 0xa7, 0x3, 0x1, [{@loopback, 0x4}, {@local, 0x3}, {@remote, 0xffffffff}, {@broadcast, 0x7}]}, @cipso={0x86, 0x26, 0x3, [{0x2, 0xf, "9037b122ecfe2a77450f6a331e"}, {0xe8e9243a248dec9e, 0x11, "2f423c5a5804f5e768ca2783aa9f85"}]}, @generic={0x89, 0x5, "4f5e82"}, @generic={0x94, 0xd, "6bfed58fb5266c86b26fcc"}]}}}}}) r12 = accept$packet(r0, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e80)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000f80)={'syztnl2\x00', &(0x7f0000000ec0)={'gre0\x00', r1, 0x40, 0x10, 0xb56ac000, 0xdb, {{0x21, 0x4, 0x1, 0x22, 0x84, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast1, @loopback, {[@end, @timestamp={0x44, 0x2c, 0x34, 0x0, 0xb, [0x4, 0x20, 0x1, 0x1, 0x5, 0x20, 0x9, 0x200, 0x400, 0xfffffff7]}, @cipso={0x86, 0x40, 0x2, [{0x1, 0x4, "19d8"}, {0x7, 0xf, "a0f632dab8cbae1d4a23bbd3f6"}, {0x0, 0xa, "114ab3061000b963"}, {0x0, 0x11, "a939e38df0737891420f6417e8ee4b"}, {0x1, 0x6, "4bbec9a2"}, {0x7, 0x2}, {0x6, 0x4, "f7f7"}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000000fc0)={0x7ec, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4a}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xffa4, 0x67, 0x9a, 0x200}, {0x5, 0x83, 0x8, 0x383b}]}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2000}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r1}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x6, 0x1, 0x5e0f}, {0x7, 0x2, 0x4, 0x8000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3c7, 0x3, 0x7, 0xfffffffa}]}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r1}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x152}}, {0x8, 0x6, r14}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x2, 0x2, 0x9, 0x6}, {0xfff8, 0x5, 0x6, 0x7}, {0x94d, 0xfb, 0x6}, {0x800, 0x4, 0x5}, {0x9, 0x3, 0x2, 0x9}, {0x2, 0xfd, 0x7, 0x101}, {0x3, 0x81, 0x1, 0x770}, {0x6, 0x6, 0x9, 0x1000}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x7ec}, 0x1, 0x0, 0x0, 0x240048d1}, 0x200400d4) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x40) recvmsg(r0, &(0x7f0000001c00)={&(0x7f0000001940)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000019c0)=""/107, 0x6b}, {&(0x7f0000001a40)=""/250, 0xfa}, {&(0x7f0000001b40)=""/72, 0x48}], 0x3}, 0x2043) accept$packet(r12, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001cc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000025c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000026c0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x438}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4004804) 17:52:46 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50e85d7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x814e62d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ee22431}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ba4771e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e0fbf26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c2633af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x664a40a8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xab8243a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x80000001}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e7a6ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3857ace8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39efa98c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b2cbe7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}]}]}, 0xf8}}, 0xc810) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000200)={0x7, 0x401, 0xffff67c5, 0x7, 0xe, "42f3985a0f43b3909e644e0ec3a056b7d23778", 0x400, 0x6}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x29}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$TIOCNXCL(r2, 0x540d) r5 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@sco={0x1f, @fixed}, &(0x7f0000000480)=0x80, 0x80000) recvmsg(r2, &(0x7f00000017c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)=""/150, 0x96}, {&(0x7f0000000640)=""/90, 0x5a}, {&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x4}, 0x2022) accept$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001900)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000002100)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001980)={0x72c, 0x0, 0x10, 0x2, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff82c7}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x92}}}]}}, {{0x8, 0x1, r7}, {0x15c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xffff, 0x40, 0x80, 0x400}, {0x4, 0x0, 0x5, 0x401}, {0x3, 0x3, 0x1f, 0x80000001}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5a}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x7f, 0x5, 0x6}, {0x9, 0x4, 0x7, 0x6}, {0x1, 0xff, 0xfd, 0x800}, {0x7fff, 0x7, 0x40, 0xe15}, {0x7, 0x69, 0x3, 0x6}, {0x0, 0x9, 0x7, 0x1f}, {0x7f9, 0x6, 0x2, 0x3}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x80, 0xfa, 0x6}, {0x81, 0x99, 0x80, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x17d8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4e}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x72c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x8000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) r9 = add_key$keyring(&(0x7f0000002140), &(0x7f0000002180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, 0x0, 0xfffffffffffffff8, r9) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f00000021c0)={0x8, 0x1}, 0x2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000002240)={{0xffffffff, 0x4}, {0x3ff, 0x8001}, 0x63, 0x1}) [ 90.589988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.595191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.596623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.604627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.608883] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.609992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.634772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.636140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.637245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.640693] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.644073] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.649552] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.710951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.713228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.716505] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.717695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.718847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.730484] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.731548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.733070] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.745702] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.747946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.752370] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.756616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.758871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.767710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.778403] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.804785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.821785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.835027] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.837692] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.839176] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.852686] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.863742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.868615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.874326] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.876423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.877258] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.881079] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.883858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.885639] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.886801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.887546] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.889213] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.894756] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.896485] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.897533] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.930520] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.667931] Bluetooth: hci0: command tx timeout [ 92.731535] Bluetooth: hci1: command tx timeout [ 92.797492] Bluetooth: hci2: command tx timeout [ 92.860363] Bluetooth: hci3: command tx timeout [ 92.923351] Bluetooth: hci6: command tx timeout [ 92.923976] Bluetooth: hci4: command tx timeout [ 92.987360] Bluetooth: hci5: command tx timeout [ 93.051738] Bluetooth: hci7: command tx timeout [ 94.716458] Bluetooth: hci0: command tx timeout [ 94.780348] Bluetooth: hci1: command tx timeout [ 94.843484] Bluetooth: hci2: command tx timeout [ 94.907672] Bluetooth: hci3: command tx timeout [ 94.972586] Bluetooth: hci4: command tx timeout [ 94.973066] Bluetooth: hci6: command tx timeout [ 95.035846] Bluetooth: hci5: command tx timeout [ 95.100764] Bluetooth: hci7: command tx timeout [ 96.765407] Bluetooth: hci0: command tx timeout [ 96.827371] Bluetooth: hci1: command tx timeout [ 96.891362] Bluetooth: hci2: command tx timeout [ 96.955507] Bluetooth: hci3: command tx timeout [ 97.020527] Bluetooth: hci4: command tx timeout [ 97.021009] Bluetooth: hci6: command tx timeout [ 97.084225] Bluetooth: hci5: command tx timeout [ 97.148556] Bluetooth: hci7: command tx timeout [ 98.811621] Bluetooth: hci0: command tx timeout [ 98.877108] Bluetooth: hci1: command tx timeout [ 98.940350] Bluetooth: hci2: command tx timeout [ 99.004393] Bluetooth: hci3: command tx timeout [ 99.067395] Bluetooth: hci6: command tx timeout [ 99.067879] Bluetooth: hci4: command tx timeout [ 99.132357] Bluetooth: hci5: command tx timeout [ 99.197356] Bluetooth: hci7: command tx timeout [ 153.419809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.426681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.430499] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.439474] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.443185] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.445716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.489890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.492929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.495343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.503303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.511962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.516652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.520409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.525077] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.527519] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.547561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.550804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.553470] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.584809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.594988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.597623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.603240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.611099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.614036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.617071] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.620163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.621807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.626363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.626388] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.628358] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.630633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.632768] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.634813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.636243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.637890] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.640548] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.642134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.644573] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.647201] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.647469] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.649954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.653415] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.654710] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.656442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.656539] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.693850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.709573] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.711980] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.515423] Bluetooth: hci0: command tx timeout [ 155.579388] Bluetooth: hci1: command tx timeout [ 155.655146] Bluetooth: hci2: command tx timeout [ 155.707702] Bluetooth: hci5: command tx timeout [ 155.708991] Bluetooth: hci4: command tx timeout [ 155.709672] Bluetooth: hci3: command tx timeout [ 155.773624] Bluetooth: hci6: command tx timeout [ 155.775320] Bluetooth: hci7: command tx timeout [ 157.563364] Bluetooth: hci0: command tx timeout [ 157.627492] Bluetooth: hci1: command tx timeout [ 157.691564] Bluetooth: hci2: command tx timeout [ 157.756223] Bluetooth: hci4: command tx timeout [ 157.756287] Bluetooth: hci3: command tx timeout [ 157.756366] Bluetooth: hci5: command tx timeout [ 157.819416] Bluetooth: hci7: command tx timeout [ 157.819533] Bluetooth: hci6: command tx timeout [ 159.611362] Bluetooth: hci0: command tx timeout [ 159.676364] Bluetooth: hci1: command tx timeout [ 159.739384] Bluetooth: hci2: command tx timeout [ 159.803369] Bluetooth: hci5: command tx timeout [ 159.803920] Bluetooth: hci3: command tx timeout [ 159.805247] Bluetooth: hci4: command tx timeout [ 159.867466] Bluetooth: hci7: command tx timeout [ 159.868428] Bluetooth: hci6: command tx timeout [ 161.660568] Bluetooth: hci0: command tx timeout [ 161.725311] Bluetooth: hci1: command tx timeout [ 161.790325] Bluetooth: hci2: command tx timeout [ 161.851386] Bluetooth: hci4: command tx timeout [ 161.852900] Bluetooth: hci3: command tx timeout [ 161.853156] Bluetooth: hci5: command tx timeout [ 161.917312] Bluetooth: hci6: command tx timeout [ 161.917843] Bluetooth: hci7: command tx timeout [ 215.964225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.965838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.967094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.970039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.970144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.971735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.974408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.977021] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.977026] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.979145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.980648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.984807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.006872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.009596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.011873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.016348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.020915] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.024439] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.077240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.080905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.083189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.086497] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.088789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.094207] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.097742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.098902] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.101692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.110756] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.133109] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.135827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.142723] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.149676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.171648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.173220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.177706] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.179547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.188854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.192658] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.193974] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.198500] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.200132] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.201478] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.203073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.223514] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.225041] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.244189] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.249957] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.251536] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.043416] Bluetooth: hci1: command tx timeout [ 218.044458] Bluetooth: hci0: command tx timeout [ 218.107370] Bluetooth: hci2: command tx timeout [ 218.171802] Bluetooth: hci5: command tx timeout [ 218.235342] Bluetooth: hci7: command tx timeout [ 218.300125] Bluetooth: hci3: command tx timeout [ 218.301965] Bluetooth: hci6: command tx timeout [ 218.303163] Bluetooth: hci4: command tx timeout [ 220.091763] Bluetooth: hci0: command tx timeout [ 220.092442] Bluetooth: hci1: command tx timeout [ 220.155580] Bluetooth: hci2: command tx timeout [ 220.219674] Bluetooth: hci5: command tx timeout [ 220.283984] Bluetooth: hci7: command tx timeout [ 220.349293] Bluetooth: hci4: command tx timeout [ 220.349839] Bluetooth: hci3: command tx timeout [ 220.350491] Bluetooth: hci6: command tx timeout [ 222.139457] Bluetooth: hci0: command tx timeout [ 222.139988] Bluetooth: hci1: command tx timeout [ 222.203342] Bluetooth: hci2: command tx timeout [ 222.267369] Bluetooth: hci5: command tx timeout [ 222.333289] Bluetooth: hci7: command tx timeout [ 222.395505] Bluetooth: hci6: command tx timeout [ 222.395987] Bluetooth: hci3: command tx timeout [ 222.397407] Bluetooth: hci4: command tx timeout [ 224.187364] Bluetooth: hci1: command tx timeout [ 224.187903] Bluetooth: hci0: command tx timeout [ 224.251308] Bluetooth: hci2: command tx timeout [ 224.316525] Bluetooth: hci5: command tx timeout [ 224.380428] Bluetooth: hci7: command tx timeout [ 224.443369] Bluetooth: hci3: command tx timeout [ 224.443840] Bluetooth: hci4: command tx timeout [ 224.444340] Bluetooth: hci6: command tx timeout [ 278.187459] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.190706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.192672] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.197685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.231988] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.232999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.236483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.238290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.242452] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.256056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.258859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.259986] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.291882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.298726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.303563] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.315439] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.324538] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.333587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.350485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.351636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.356206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.357429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.360738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.377404] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.384876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.388374] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.391997] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.398836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.404505] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.406051] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.465705] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.467918] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.469782] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.472414] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.475112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.476977] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.478183] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.543920] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.546649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.550373] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.552614] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.553895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.568913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.570526] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.571669] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.574187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.577921] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.579008] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.316391] Bluetooth: hci1: command tx timeout [ 280.317386] Bluetooth: hci0: command tx timeout [ 280.380574] Bluetooth: hci2: command tx timeout [ 280.444370] Bluetooth: hci4: command tx timeout [ 280.507344] Bluetooth: hci6: command tx timeout [ 280.572378] Bluetooth: hci3: command tx timeout [ 280.635396] Bluetooth: hci7: command tx timeout [ 280.636594] Bluetooth: hci5: command tx timeout [ 282.365573] Bluetooth: hci0: command tx timeout [ 282.366118] Bluetooth: hci1: command tx timeout [ 282.428331] Bluetooth: hci2: command tx timeout [ 282.492309] Bluetooth: hci4: command tx timeout [ 282.556386] Bluetooth: hci6: command tx timeout [ 282.620884] Bluetooth: hci3: command tx timeout [ 282.684411] Bluetooth: hci7: command tx timeout [ 282.684919] Bluetooth: hci5: command tx timeout [ 284.411329] Bluetooth: hci1: command tx timeout [ 284.411902] Bluetooth: hci0: command tx timeout [ 284.476462] Bluetooth: hci2: command tx timeout [ 284.539328] Bluetooth: hci4: command tx timeout [ 284.604306] Bluetooth: hci6: command tx timeout [ 284.669271] Bluetooth: hci3: command tx timeout [ 284.731335] Bluetooth: hci5: command tx timeout [ 284.731906] Bluetooth: hci7: command tx timeout [ 286.460299] Bluetooth: hci0: command tx timeout [ 286.460859] Bluetooth: hci1: command tx timeout [ 286.524324] Bluetooth: hci2: command tx timeout [ 286.588380] Bluetooth: hci4: command tx timeout [ 286.652303] Bluetooth: hci6: command tx timeout [ 286.716363] Bluetooth: hci3: command tx timeout [ 286.779419] Bluetooth: hci5: command tx timeout [ 286.779984] Bluetooth: hci7: command tx timeout [ 340.495565] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.495724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.498467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.499661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.502071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.502456] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.506898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.509308] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.510469] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.514950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.521812] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.527042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.555790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.561494] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.564929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.569932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.573195] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.582977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.633702] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.639408] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.645038] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.655444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.665511] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.669660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.712635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.720445] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.732998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.744623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.755514] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.757006] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.758279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.762977] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.764505] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.767971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.769630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.773664] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.777903] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.779833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.780921] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.812929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.813021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.818938] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.820183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.823551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.823676] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.834994] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.855445] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.858972] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.523409] Bluetooth: hci0: command tx timeout [ 342.588338] Bluetooth: hci1: command tx timeout [ 342.651316] Bluetooth: hci2: command tx timeout [ 342.779319] Bluetooth: hci3: command tx timeout [ 342.843422] Bluetooth: hci4: command tx timeout [ 342.907798] Bluetooth: hci5: command tx timeout [ 342.908545] Bluetooth: hci7: command tx timeout [ 342.972298] Bluetooth: hci6: command tx timeout [ 344.571340] Bluetooth: hci0: command tx timeout [ 344.636353] Bluetooth: hci1: command tx timeout [ 344.699350] Bluetooth: hci2: command tx timeout [ 344.827399] Bluetooth: hci3: command tx timeout [ 344.891339] Bluetooth: hci4: command tx timeout [ 344.957290] Bluetooth: hci7: command tx timeout [ 344.957323] Bluetooth: hci5: command tx timeout [ 345.019326] Bluetooth: hci6: command tx timeout [ 346.619303] Bluetooth: hci0: command tx timeout [ 346.684288] Bluetooth: hci1: command tx timeout [ 346.748282] Bluetooth: hci2: command tx timeout [ 346.877261] Bluetooth: hci3: command tx timeout [ 346.939322] Bluetooth: hci4: command tx timeout [ 347.003571] Bluetooth: hci5: command tx timeout [ 347.004501] Bluetooth: hci7: command tx timeout [ 347.067620] Bluetooth: hci6: command tx timeout [ 348.669266] Bluetooth: hci0: command tx timeout [ 348.731365] Bluetooth: hci1: command tx timeout [ 348.795284] Bluetooth: hci2: command tx timeout [ 348.923822] Bluetooth: hci3: command tx timeout [ 348.987283] Bluetooth: hci4: command tx timeout [ 349.051325] Bluetooth: hci7: command tx timeout [ 349.051462] Bluetooth: hci5: command tx timeout [ 349.116318] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 17:57:56 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff867a2eb2 RDX=1ffff110012c1f2a RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88800960f960 RSP=ffff88800960f898 R8 =ffffffff867a2eb6 R9 =ffff88800960f948 R10=000000000003c001 R11=000000000000abb7 R12=ffff88800960f968 R13=ffff88800960f950 R14=0000000000000005 R15=ffff88800960f908 RIP=ffffffff8114960a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ae24b2d4c8 CR3=0000000034314000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=000000000000002c RCX=ffffffff812f079e RDX=fffffbfff0fdc5e5 RSI=0000000000000008 RDI=ffffffff87ee2f20 RBP=ffff888035098000 RSP=ffff888034e4f8d0 R8 =0000000000000000 R9 =fffffbfff0fdc5e4 R10=ffffffff87ee2f27 R11=0000000000000001 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffff888035098b08 RIP=ffffffff812f07a6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f511c465540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f511c890ec3 CR3=0000000035a58000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000