syzkaller login: [ 54.995515] sshd (236) used greatest stack depth: 24032 bytes left [ 63.197904] sshd (241) used greatest stack depth: 23896 bytes left Warning: Permanently added '[localhost]:6305' (ECDSA) to the list of known hosts. 2024/11/09 12:58:56 fuzzer started 2024/11/09 12:58:56 dialing manager at localhost:46317 [ 65.069021] cgroup: Unknown subsys name 'net' [ 65.171901] cgroup: Unknown subsys name 'cpuset' [ 65.185800] cgroup: Unknown subsys name 'rlimit' 2024/11/09 12:59:14 syscalls: 209 2024/11/09 12:59:14 code coverage: enabled 2024/11/09 12:59:14 comparison tracing: enabled 2024/11/09 12:59:14 extra coverage: enabled 2024/11/09 12:59:14 setuid sandbox: enabled 2024/11/09 12:59:14 namespace sandbox: enabled 2024/11/09 12:59:14 Android sandbox: enabled 2024/11/09 12:59:14 fault injection: enabled 2024/11/09 12:59:14 leak checking: enabled 2024/11/09 12:59:14 net packet injection: enabled 2024/11/09 12:59:14 net device setup: enabled 2024/11/09 12:59:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/09 12:59:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/09 12:59:14 USB emulation: enabled 2024/11/09 12:59:14 hci packet injection: enabled 2024/11/09 12:59:14 wifi device emulation: enabled 2024/11/09 12:59:14 802.15.4 emulation: enabled 2024/11/09 12:59:14 fetching corpus: 0, signal 0/0 (executing program) 2024/11/09 12:59:15 starting 8 fuzzer processes 12:59:15 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x6b, 0xe1, 0x5, 0x11, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7, 0xfffffff8, 0x81}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x9, 0x7, 0x42, @empty, @private1, 0x40, 0x700, 0xfffffff8, 0x84c4}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000340)={0x58c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xcc1e}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x154, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x523}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x898}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}]}}]}, 0x58c}, 0x1, 0x0, 0x0, 0x4000891}, 0x4014000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'ip6_vti0\x00', r2, 0x2f, 0x80, 0x65, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8000, 0x1f, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl2\x00', r7, 0x4, 0x3, 0xf9, 0x1, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x40, 0x8, 0x66}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000c40)={0x420, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2d}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0xfa, 0x0, 0x10000}]}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r6}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}]}, 0x420}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20004000) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000001100)) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000001140)={0x1f, 0x5, 0x7}) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001180)={0x0, "c61a61"}, 0x6) 12:59:15 executing program 2: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) r0 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x1, 0x5, 0x4, 0xfffffffe, 0x1f, "28262a754915d04837cba83ce71c9eac6bc288", 0x5, 0x1}) ioctl$TIOCSCTTY(r0, 0x540e, 0xd81) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000100)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000140)) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x800, &(0x7f00000001c0)=0x2) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000240)=0x81, &(0x7f0000000280)=0x4) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000002c0)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, @any, 0x3}, 0xe) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000340)="4883d2794b9c9fecb0c592618df0f2307d108f5e9239826e9e9ed78dd7b228a88e6766ce3971c584ac51658803f0c5793cdeda79c90f2c4b969181a468c68ee4e0032393") ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f00000003c0)) 12:59:15 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe4010000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@delsa={0x94, 0x11, 0x1, 0x70bd2a, 0x25dfdbff, {@in=@rand_addr=0x64010101, 0x4d5, 0xa, 0x32}, [@algo_aead={0x62, 0x12, {{'ccm_base(lrw-twofish-3way,blake2s-224-x86)\x00'}, 0xb0, 0xc0, "34c0dc65b548f4631a90d26077f8a9a203f6c295be9c"}}, @tfcpad={0x8, 0x16, 0x80}]}, 0x94}, 0x1, 0x0, 0x0, 0x44044}, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x130, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x114, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x800}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70221239}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18f84cf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a7490cb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x480c3bd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c67a554}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1db7014c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3912437c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeac92f9}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3242def4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11e51f9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42dfdb66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e13aed6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d82e476}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26d8c6a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f61f60c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d6d4a5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x679ae068}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x24000001) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', r1, 0x2f, 0x5, 0x6, 0x9e, 0x5, @empty, @local, 0x700, 0x1, 0x6b9, 0x7ff}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x40801) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x8081) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f00000007c0)={0x5, 0xa3, 0xa76, 0x10000, 0x10000}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000800)=0xc6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000840)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r3) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040020) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r6, &(0x7f0000000a00)={0x1, 0x20, 0x1ff, 0x20, 0x1e8d}, 0x48) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f0000000a80)={0x9, 0x400, 0x9}) 12:59:15 executing program 3: ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) r0 = socket(0x27, 0x5, 0x21f) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x40, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18c, 0x0, 0x306, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x7, 0x0, 0x401}, {0x0, 0x0, 0xa9, 0xc57}, {0x9, 0x6, 0x0, 0x4}, {0x1, 0xd5, 0x1, 0x3ff}, {0x313, 0x9, 0x6, 0xff}]}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x0, 0xf9, 0x6}, {0x8, 0x7, 0x0, 0x40}, {0x5, 0x85, 0x81, 0x200}, {0x7ff, 0x7, 0x0, 0x2b}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xab}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20008884}, 0x20040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r1) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x3c}}, 0x850) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x481) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1c80d}, 0x20000800) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r2) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r5, 0x141f, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8}}, ["", ""]}, 0x24}}, 0x4000044) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000a80)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) [ 83.302943] audit: type=1400 audit(1731157155.831:7): avc: denied { execmem } for pid=278 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:59:15 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x1, 0x3f, 0x48, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8, 0x700, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x81, 0x1, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x700, 0x9, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000280)={0x490, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r0}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfa83}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9a}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x1, 0x7, 0x7fe}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8f6b}}}]}}]}, 0x490}}, 0x20000040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000800)=@newae={0x2c0, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in=@private=0xa010100, 0x4d3, 0xa, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3505}, [@sec_ctx={0x7e, 0x8, {0x7a, 0x8, 0x1, 0x40, 0x72, "301cd81e1ae3301b24ba818499b537441cff9b3fa0a0dd541df126ab75bffd22b340c662a4957b89ad441aa4ed82fd346aff8734b7571593581f828b52dd3e855a2590709f56c85663a02387dd66c716b7879e99699f0c437b108e8f937aa7bb5619ef678fca9cf57155bc4a53d56b7e9a28"}}, @tmpl={0x144, 0x5, [{{@in=@multicast2, 0x4d4, 0x6c}, 0x2, @in=@rand_addr=0x64010100, 0x3500, 0x2, 0x2, 0x8, 0xc6c, 0xfffffff9, 0x6}, {{@in=@local, 0x4d3, 0x33}, 0x2, @in=@broadcast, 0x3506, 0x4, 0x4, 0x3, 0x400, 0x8001, 0x5}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in=@loopback, 0x3507, 0x2, 0x1, 0x2, 0xfffff4b9, 0x2, 0x5}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0xff}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2, 0x2, 0x9, 0x2d, 0x10001, 0x8}, {{@in=@broadcast, 0x4d4}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x1, 0x2, 0x1, 0x0, 0x6, 0x40}]}, @algo_comp={0xba, 0x3, {{'lzjh\x00'}, 0x390, "681d3433f4a8a72b9725d512df01163e8823e219b0a5eed493d5e9e3f49c1ece2ae8ac531df4fbb2e4cf919cddbf3c4d49773bc47e361133edd56d584303a042e43ebfb09858beb2a678e03ac63fc8245e6aeafe4b39dbaad0d4a0c741eb33f8fd0a4ac466ec966148e6c4c5fda1e974a05a"}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40011}, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000b40)={0x1, 0x9}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl2\x00', r0, 0x2f, 0x5, 0x0, 0x2, 0x3, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7800, 0x4, 0x4}}) r5 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r5, &(0x7f0000000c40)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000c80)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d00)='io.stat\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x38}}, 0x40818) r9 = openat$cgroup_ro(r8, &(0x7f0000000e00)='cpuacct.usage_user\x00', 0x0, 0x0) syz_open_pts(r9, 0x40000) r10 = accept4$bt_l2cap(r8, &(0x7f0000000e40)={0x1f, 0x0, @fixed}, &(0x7f0000000e80)=0xe, 0x180000) setsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000000ec0)=0x5, 0x4) 12:59:15 executing program 4: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4, 0x4, 0x2, &(0x7f0000000080)={r0, r1+60000000}) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/126, 0x7e, 0x668, &(0x7f00000001c0)={r2, r3+60000000}) pselect6(0x40, &(0x7f0000000200)={0xffffffffffffffff, 0x1c8, 0x5, 0x2, 0xfffffffffffeffff, 0x17a, 0x185, 0x3}, &(0x7f0000000240)={0xfffffffffffffc01, 0x80000000, 0xffffffffffff7fff, 0x2, 0x100, 0x57278d82, 0x101, 0x3}, &(0x7f0000000280)={0x3, 0x748, 0x8, 0x2c, 0x3ff, 0x84, 0x8001, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x7ff]}, 0x8}) r4 = mq_open(&(0x7f0000000380)='}!]\x00', 0x80, 0x40, &(0x7f00000003c0)={0xff, 0x9, 0x3, 0x7}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44094}, 0x800) clock_gettime(0x4, &(0x7f0000000500)) clock_gettime(0x6, &(0x7f0000000540)) clock_getres(0x7, &(0x7f0000000580)) mq_timedreceive(r4, &(0x7f00000005c0)=""/4096, 0x1000, 0x600000000000, &(0x7f00000015c0)={0x0, 0x989680}) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000001600)={0x8000, 0x0, 0xa7, 0x61eb, 0x0, 0x1, 0x2, 0x7fffffff}, &(0x7f0000001640)={0x2, 0x0, 0xfff, 0x8, 0x5102, 0x9, 0x3, 0xaca9}, &(0x7f0000001680)={0x7, 0x1, 0x4387, 0x7, 0x40, 0x7fffffff, 0x5, 0xec}, &(0x7f0000001700)={r5, r6+60000000}, &(0x7f0000001780)={&(0x7f0000001740)={[0x935e]}, 0x8}) clock_gettime(0x2, &(0x7f00000017c0)) r7 = perf_event_open$cgroup(&(0x7f0000001800)={0x2, 0x80, 0xff, 0x6, 0x1f, 0x5, 0x0, 0x8001, 0x1010, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6841}, 0x400, 0x5, 0x6, 0x3, 0x0, 0x3f, 0x4, 0x0, 0x80, 0x0, 0x4c3d}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, 0xffffffffffffffff) clock_gettime(0x7, &(0x7f0000001880)) clock_getres(0x4, &(0x7f00000018c0)) pselect6(0x40, &(0x7f0000001900)={0xffffffffffffff14, 0xffffffffffffa503, 0x7, 0x2, 0x9, 0x6, 0x3ff, 0x72}, &(0x7f0000001940)={0x6, 0x81, 0x0, 0x40000000000, 0x6, 0x80000001, 0x0, 0x2}, &(0x7f0000001980)={0x4, 0x20, 0x81, 0x9, 0xec, 0x8, 0x7fff, 0x1000000000000}, &(0x7f00000019c0), &(0x7f0000001a40)={&(0x7f0000001a00)={[0x1f]}, 0x8}) 12:59:15 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffffffe, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x801) r2 = socket(0x37, 0xa, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x0, 0xe00, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xae49}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040c7}, 0x4000000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) r4 = socket(0x23, 0x6, 0xc38) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x8, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), r4) r6 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f00000005c0)) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000600)) ioctl$KIOCSOUND(r6, 0x4b2f, 0x203ef7b5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x5, 0xffffffff, 0x3}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000041) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x8800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4058804) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000940), 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xda}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 12:59:15 executing program 7: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x75f1, @none, 0x4353}, 0xe) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0xc79) ioctl$TIOCCBRK(r0, 0x5428) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x81}) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000100)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x6ac, 0x0, 0x1, 0x5, 0xff, "db611668d12868686b730078f4454857469cc1", 0x3, 0x400}) select(0x40, &(0x7f0000000180)={0x9, 0x100, 0x7f, 0xffffffffffff8a77, 0xffffffffffffffff, 0x7, 0x7}, &(0x7f00000001c0)={0x100000000, 0x6, 0x6, 0x933b, 0x7fffffff, 0x100000000, 0x5, 0x80}, &(0x7f0000000200)={0x1, 0x2, 0x4, 0x9, 0xffffffffffffcba0, 0xfffffffffffffff8, 0x100000001, 0x50700de1}, &(0x7f0000000240)) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.kill\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x82000) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = openat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000380)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000003c0)={0x7f, 0x6, 0x7}) [ 84.747774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.748919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.752454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.754582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.757294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.757728] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.762055] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.764649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.765398] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.774552] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.775457] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.780430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.831404] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.833880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.837681] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.838893] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.841261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.842538] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.842703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.846520] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.847905] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.849324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.850819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.854003] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.854759] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.856967] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.857833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.858950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.860098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.861017] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.861959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.862796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.864011] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.864879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.865485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.869114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.876386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.878480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.878781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.880092] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.880991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.882624] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.883738] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.884703] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.885970] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.887505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.894542] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.900928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.834562] Bluetooth: hci1: command tx timeout [ 86.835415] Bluetooth: hci0: command tx timeout [ 86.962399] Bluetooth: hci5: command tx timeout [ 86.962434] Bluetooth: hci7: command tx timeout [ 86.962747] Bluetooth: hci4: command tx timeout [ 86.964054] Bluetooth: hci2: command tx timeout [ 86.964422] Bluetooth: hci6: command tx timeout [ 87.027759] Bluetooth: hci3: command tx timeout [ 88.883271] Bluetooth: hci0: command tx timeout [ 88.883296] Bluetooth: hci1: command tx timeout [ 89.010375] Bluetooth: hci6: command tx timeout [ 89.010870] Bluetooth: hci2: command tx timeout [ 89.011571] Bluetooth: hci4: command tx timeout [ 89.012022] Bluetooth: hci5: command tx timeout [ 89.012227] Bluetooth: hci7: command tx timeout [ 89.074263] Bluetooth: hci3: command tx timeout [ 90.930339] Bluetooth: hci0: command tx timeout [ 90.930359] Bluetooth: hci1: command tx timeout [ 91.059262] Bluetooth: hci5: command tx timeout [ 91.059331] Bluetooth: hci4: command tx timeout [ 91.059751] Bluetooth: hci2: command tx timeout [ 91.061019] Bluetooth: hci6: command tx timeout [ 91.061870] Bluetooth: hci7: command tx timeout [ 91.122245] Bluetooth: hci3: command tx timeout [ 92.978292] Bluetooth: hci1: command tx timeout [ 92.978841] Bluetooth: hci0: command tx timeout [ 93.106385] Bluetooth: hci4: command tx timeout [ 93.106920] Bluetooth: hci6: command tx timeout [ 93.107527] Bluetooth: hci7: command tx timeout [ 93.107981] Bluetooth: hci5: command tx timeout [ 93.108532] Bluetooth: hci2: command tx timeout [ 93.170313] Bluetooth: hci3: command tx timeout [ 147.394671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.398386] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.399521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.406451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.408074] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.409379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.472842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.475765] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.477704] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.481123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.483236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.485020] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.486355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.487907] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.489139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.491598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.493538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.495338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.498719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.500535] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.501439] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.502857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.505418] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.507433] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.541493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.547963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.553422] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.557866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.560751] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.563083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.624818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.657124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.659386] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.664361] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.665856] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.667257] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.976328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.981952] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.983634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.007008] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.013773] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.018518] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.038007] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.044726] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.061401] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.065799] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.069373] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.077927] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.427459] Bluetooth: hci0: command tx timeout [ 149.555340] Bluetooth: hci3: command tx timeout [ 149.556756] Bluetooth: hci2: command tx timeout [ 149.618276] Bluetooth: hci1: command tx timeout [ 149.620601] Bluetooth: hci4: command tx timeout [ 149.810272] Bluetooth: hci5: command tx timeout [ 150.131324] Bluetooth: hci6: command tx timeout [ 150.194263] Bluetooth: hci7: command tx timeout [ 151.476198] Bluetooth: hci0: command tx timeout [ 151.602351] Bluetooth: hci2: command tx timeout [ 151.603936] Bluetooth: hci3: command tx timeout [ 151.666293] Bluetooth: hci1: command tx timeout [ 151.668029] Bluetooth: hci4: command tx timeout [ 151.859230] Bluetooth: hci5: command tx timeout [ 152.179405] Bluetooth: hci6: command tx timeout [ 152.242348] Bluetooth: hci7: command tx timeout [ 153.522239] Bluetooth: hci0: command tx timeout [ 153.651205] Bluetooth: hci2: command tx timeout [ 153.651767] Bluetooth: hci3: command tx timeout [ 153.714302] Bluetooth: hci4: command tx timeout [ 153.714841] Bluetooth: hci1: command tx timeout [ 153.906510] Bluetooth: hci5: command tx timeout [ 154.227493] Bluetooth: hci6: command tx timeout [ 154.291310] Bluetooth: hci7: command tx timeout [ 155.571489] Bluetooth: hci0: command tx timeout [ 155.699413] Bluetooth: hci2: command tx timeout [ 155.699928] Bluetooth: hci3: command tx timeout [ 155.763264] Bluetooth: hci1: command tx timeout [ 155.763967] Bluetooth: hci4: command tx timeout [ 155.955233] Bluetooth: hci5: command tx timeout [ 156.274222] Bluetooth: hci6: command tx timeout [ 156.339208] Bluetooth: hci7: command tx timeout [ 209.675975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.675993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.678091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.679665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.681394] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.682616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.687507] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.688919] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.691101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.692438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.694988] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.699294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.789084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.795216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.796540] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.809598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.813409] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.816744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.861630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.881171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.883617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.894397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.906083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.914411] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.927283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.933744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.937463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.949736] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.952604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.010971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.012881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.020544] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.023105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.040855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.040929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.052520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.053638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.057780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.065415] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.088667] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.089798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.090960] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.107555] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.114832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.119595] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.120430] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.120592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.128394] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.763317] Bluetooth: hci1: command tx timeout [ 211.764413] Bluetooth: hci0: command tx timeout [ 211.891473] Bluetooth: hci2: command tx timeout [ 211.955275] Bluetooth: hci3: command tx timeout [ 212.148221] Bluetooth: hci5: command tx timeout [ 212.210493] Bluetooth: hci4: command tx timeout [ 212.211580] Bluetooth: hci6: command tx timeout [ 212.212591] Bluetooth: hci7: command tx timeout [ 213.811252] Bluetooth: hci0: command tx timeout [ 213.811793] Bluetooth: hci1: command tx timeout [ 213.939172] Bluetooth: hci2: command tx timeout [ 214.003207] Bluetooth: hci3: command tx timeout [ 214.195272] Bluetooth: hci5: command tx timeout [ 214.259244] Bluetooth: hci4: command tx timeout [ 214.259799] Bluetooth: hci7: command tx timeout [ 214.260279] Bluetooth: hci6: command tx timeout [ 215.859270] Bluetooth: hci1: command tx timeout [ 215.859816] Bluetooth: hci0: command tx timeout [ 215.987244] Bluetooth: hci2: command tx timeout [ 216.052418] Bluetooth: hci3: command tx timeout [ 216.243221] Bluetooth: hci5: command tx timeout [ 216.307293] Bluetooth: hci6: command tx timeout [ 216.307836] Bluetooth: hci7: command tx timeout [ 216.308321] Bluetooth: hci4: command tx timeout [ 217.908180] Bluetooth: hci0: command tx timeout [ 217.908724] Bluetooth: hci1: command tx timeout [ 218.035307] Bluetooth: hci2: command tx timeout [ 218.099212] Bluetooth: hci3: command tx timeout [ 218.291264] Bluetooth: hci5: command tx timeout [ 218.355359] Bluetooth: hci4: command tx timeout [ 218.355878] Bluetooth: hci7: command tx timeout [ 218.356368] Bluetooth: hci6: command tx timeout [ 272.004859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.011061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.041198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.052097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.057373] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.059837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.214382] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.216157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.218642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.224480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.228426] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.232193] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.234850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.237225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.239760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.248104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.251015] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.253557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.343436] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.350827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.371524] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.388469] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.390627] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.391804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.393034] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.394442] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.398469] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.400430] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.402766] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.407808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.412404] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.414623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.433004] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.447781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.461022] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.463761] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.465727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.469427] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.484943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.491072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.496347] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.499021] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.501350] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.510344] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.512569] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.516362] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.518262] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.522524] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.100025] Bluetooth: hci0: command tx timeout [ 274.300231] Bluetooth: hci1: command tx timeout [ 274.301928] Bluetooth: hci2: command tx timeout [ 274.482365] Bluetooth: hci3: command tx timeout [ 274.483444] Bluetooth: hci5: command tx timeout [ 274.611555] Bluetooth: hci6: command tx timeout [ 274.675215] Bluetooth: hci7: command tx timeout [ 274.738325] Bluetooth: hci4: command tx timeout [ 276.147193] Bluetooth: hci0: command tx timeout [ 276.339245] Bluetooth: hci2: command tx timeout [ 276.339794] Bluetooth: hci1: command tx timeout [ 276.531228] Bluetooth: hci3: command tx timeout [ 276.531783] Bluetooth: hci5: command tx timeout [ 276.659215] Bluetooth: hci6: command tx timeout [ 276.722236] Bluetooth: hci7: command tx timeout [ 276.787195] Bluetooth: hci4: command tx timeout [ 278.194181] Bluetooth: hci0: command tx timeout [ 278.390272] Bluetooth: hci2: command tx timeout [ 278.391602] Bluetooth: hci1: command tx timeout [ 278.575267] hrtimer: interrupt took 2806839 ns [ 278.579365] Bluetooth: hci3: command tx timeout [ 278.579873] Bluetooth: hci5: command tx timeout [ 278.706238] Bluetooth: hci6: command tx timeout [ 278.771258] Bluetooth: hci7: command tx timeout [ 278.834396] Bluetooth: hci4: command tx timeout [ 280.242271] Bluetooth: hci0: command tx timeout [ 280.434258] Bluetooth: hci2: command tx timeout [ 280.435686] Bluetooth: hci1: command tx timeout [ 280.627908] Bluetooth: hci5: command tx timeout [ 280.629350] Bluetooth: hci3: command tx timeout [ 280.755304] Bluetooth: hci6: command tx timeout [ 280.819254] Bluetooth: hci7: command tx timeout [ 280.882210] Bluetooth: hci4: command tx timeout [ 334.598052] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.600679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.603858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.610033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.618342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.623464] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.651788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.653228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.654385] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.656925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.660386] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.661625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.738681] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.752649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.757985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.760072] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.761694] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.764447] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.766376] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.769161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.779614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.781386] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.786581] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.796459] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.799386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.801771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.810924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.820563] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.821570] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.824885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.824979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.829242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.830480] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.842729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.848986] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.881926] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.888969] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.900466] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.908341] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.910720] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.919361] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.944533] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.948682] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.953413] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.955074] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.966393] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.972426] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.975820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.691308] Bluetooth: hci1: command tx timeout [ 336.692657] Bluetooth: hci0: command tx timeout [ 336.884180] Bluetooth: hci3: command tx timeout [ 336.947379] Bluetooth: hci2: command tx timeout [ 336.947581] Bluetooth: hci4: command tx timeout [ 336.948075] Bluetooth: hci5: command tx timeout [ 337.011428] Bluetooth: hci6: command tx timeout [ 337.075202] Bluetooth: hci7: command tx timeout [ 338.738303] Bluetooth: hci0: command tx timeout [ 338.738336] Bluetooth: hci1: command tx timeout [ 338.931380] Bluetooth: hci3: command tx timeout [ 338.994276] Bluetooth: hci5: command tx timeout [ 338.994407] Bluetooth: hci4: command tx timeout [ 338.995770] Bluetooth: hci2: command tx timeout [ 339.059205] Bluetooth: hci6: command tx timeout [ 339.122317] Bluetooth: hci7: command tx timeout [ 340.786236] Bluetooth: hci1: command tx timeout [ 340.787213] Bluetooth: hci0: command tx timeout [ 340.978391] Bluetooth: hci3: command tx timeout [ 341.042307] Bluetooth: hci2: command tx timeout [ 341.042802] Bluetooth: hci5: command tx timeout [ 341.043461] Bluetooth: hci4: command tx timeout [ 341.107249] Bluetooth: hci6: command tx timeout [ 341.171274] Bluetooth: hci7: command tx timeout [ 342.835300] Bluetooth: hci0: command tx timeout [ 342.836014] Bluetooth: hci1: command tx timeout [ 343.026200] Bluetooth: hci3: command tx timeout [ 343.090352] Bluetooth: hci5: command tx timeout [ 343.090393] Bluetooth: hci4: command tx timeout [ 343.090821] Bluetooth: hci2: command tx timeout [ 343.154215] Bluetooth: hci6: command tx timeout [ 343.218223] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:04:26 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888031cef6a8 RCX=0000000000000001 RDX=1ffff1100639ded5 RSI=ffff888031cefab0 RDI=ffff888031cef6a8 RBP=ffff888031cefab0 RSP=ffff888031cef600 R8 =ffffffff8682c4a8 R9 =ffff888031cef6e8 R10=000000000003c001 R11=0000000000021a0a R12=0000000000000008 R13=ffff888031cef6f0 R14=ffff888031cefab8 R15=ffff888031cef6a8 RIP=ffffffff81148ed8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9210542540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f921072d620 CR3=000000002e134000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff110026ee930 RBX=ffff888022e17c58 RCX=ffffffff816a4091 RDX=ffff888022e25280 RSI=ffffffff816a409b RDI=0000000000000001 RBP=0000000000000013 RSP=ffff888022e17b38 R8 =0000000000000000 R9 =fffff940000a6d30 R10=0000000000000001 R11=0000000000000001 R12=ffffea0000536980 R13=dffffc0000000000 R14=0000000000000001 R15=ffff888022e17d98 RIP=ffffffff816a40a8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007efdf02fb540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c97feb79a0 CR3=0000000031a20000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000