Warning: Permanently added '[localhost]:38961' (ECDSA) to the list of known hosts. 2024/11/19 15:25:50 fuzzer started 2024/11/19 15:25:50 dialing manager at localhost:42621 syzkaller login: [ 144.223375] cgroup: Unknown subsys name 'net' [ 144.295790] cgroup: Unknown subsys name 'cpuset' [ 144.329428] cgroup: Unknown subsys name 'rlimit' 2024/11/19 15:26:07 syscalls: 205 2024/11/19 15:26:07 code coverage: enabled 2024/11/19 15:26:07 comparison tracing: enabled 2024/11/19 15:26:07 extra coverage: enabled 2024/11/19 15:26:07 setuid sandbox: enabled 2024/11/19 15:26:07 namespace sandbox: enabled 2024/11/19 15:26:07 Android sandbox: enabled 2024/11/19 15:26:07 fault injection: enabled 2024/11/19 15:26:07 leak checking: enabled 2024/11/19 15:26:07 net packet injection: enabled 2024/11/19 15:26:07 net device setup: enabled 2024/11/19 15:26:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/19 15:26:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/19 15:26:07 USB emulation: enabled 2024/11/19 15:26:07 hci packet injection: enabled 2024/11/19 15:26:07 wifi device emulation: enabled 2024/11/19 15:26:07 802.15.4 emulation: enabled 2024/11/19 15:26:07 fetching corpus: 0, signal 0/0 (executing program) 2024/11/19 15:26:09 starting 8 fuzzer processes 15:26:09 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0x555d}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="37fec04d7043f5db3a1e5f3a52185be01e541fc681702d6a2b42d4b35c6e5355fda381ad96858441cdf75e6aa4d2933eb5f2ef7113af56899dbfadb1605479e013eeb7", 0x43}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000084) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000140), 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x88602, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000240)=""/192) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000440)={&(0x7f0000000340)="6d035bd30423e163e9c3ca37a08fc4cdd565d3c4c81cd0c0d33fc6bf8cfd04c3c499c2aee28dc675f181a9af087ed16d517ef97e12964c9ad4872e927fe158ff4caa456784952e0009681fb0cd94be678fbce43bef1d721e0919fcde2cd24020738a9ff93bbece8e66c23b696701ec8ff8a08eb6dd8838e5fa89d2b98a55a37239f06ab1bc5167b222b700aff4fcd00412eb660a25f12a8370f1212ba774d7333612272af1b0d81a1802f363f7e9c64caa0c40c7e8b59800ed43e7c8c17a7a36fca8d16d94e1fdf8339f34e900c350cf706d5fae2dab32d6912737c0d0e37b8fa98c24ee0ff3a57003", 0xe9}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000540)) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000580)=0x1, 0x4) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000005c0), 0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x42, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000640)={0x548a}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb0, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000900)="68c5a07e54623443efd4f8202317e31f3772321734165bebba22ac5591a64572ee32b499cdae44c1db61761aa724ee5d85d2ab74f652cfc2a2d54f6ab822864d521d3aa3fdb12e6a73a2acda16d17eb248da5e5aaf3178") 15:26:09 executing program 1: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000100)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4}, 0x6) read$eventfd(r0, &(0x7f0000000180), 0x8) add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)={0x0, 0x0, @a}, 0x48, 0xfffffffffffffffa) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000002c0)={{0x0, 0xa4f, 0xfffffffffffffff6, 0x1, 0x400, 0x8c9, 0x4, 0x5, 0x9a, 0x6, 0x8, 0x3, 0x8, 0x8000, 0x10000}}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000012c0), 0x501000, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000001300), 0x4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001340), 0x111100, 0x0) sendmsg$802154_raw(r4, &(0x7f0000001480)={&(0x7f0000001380)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14, &(0x7f0000001440)={&(0x7f00000013c0)="fde6a806e4b3e1bf36c1651b6a96837f178e7eb08a8e910d30fe6faa08fcb7f0fbf82761ba91a344b39c689cd5ca5d47bbe28528c05b77d47b7282a3a47edb89c24727874c1096a981e7a19e5db0f52ed581b6b24713d16dd4a6cfedb78964b815ba78397178", 0x66}, 0x1, 0x0, 0x0, 0x40041}, 0x4004018) sendmsg$802154_dgram(r2, &(0x7f0000001580)={&(0x7f00000014c0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000001540)={&(0x7f0000001500)="0888ba33111d4e12bff01afdb138", 0xe}}, 0x20008880) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f00000015c0), &(0x7f0000001600)=0x4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001640), 0x188000, 0x0) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000001680)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000001800)={'ip6_vti0\x00', &(0x7f0000001780)={'sit0\x00', 0x0, 0x4, 0x8, 0x1, 0x3, 0x2, @private0, @empty, 0x80, 0x40, 0x1, 0x8}}) 15:26:09 executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)={{0x0, 0x0, 0x8, 0x7, 0xbc0a, 0x80, 0x1, 0x101, 0x1, 0x7, 0x5, 0x100, 0x3ff, 0xba, 0xf67d}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000001c0)={{r3, 0x800, 0xbae1, 0x36e, 0x4, 0x9, 0x7fff, 0x7, 0x0, 0x10000, 0x5, 0xe6ff, 0x3e140cdf, 0x2, 0x7}}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000011c0), 0x650041, 0x0) openat$cgroup_devices(r4, &(0x7f0000001200)='devices.allow\x00', 0x2, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000026c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r4, 0x0, &(0x7f0000002680)={&(0x7f0000001240)=@in6={0xa, 0x4e21, 0xf93b, @loopback, 0x8}, 0x80, &(0x7f0000002400)=[{&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="52ba81dcdb94bb0235628fdaabb3b4d5e0674b79dac053872b0716e61b9d56a1ead0914b7f00d1c524787cbd7c59555b79657a7a152967fda4b0314bcdcacd8847177908c491bafb6886b7ff43c289c776d5bb4441", 0x55}, {&(0x7f0000002340)="87aef9358f028a1d41efd5b9e8a66329d9e069ece30975b1e359c8e608b2e86ae35ab50e2095a982a50b874f9f6a37a5500d40a58511b0fcffab2381597a898a02ff5862414443b9dbdeed928724bc84370cde1826cc7c61607db3cef0cb3014a6cff66a292a8337eb96aa7427c07c3f50dfee5568f3f14752574585e8a1cb6248bc2ead591a56de7d75458bcd55896cd0686b1e2722c3a514abc654e3f1e4df6009", 0xa2}], 0x3, &(0x7f0000002440)=[{0xf8, 0x88, 0x6c, "ad5f0e7d3fb9acb0043c76ea061c9ae8dda51b3331ebc39bfdc47890c1e1869756e162e8146b16ded44b9355d180a2cc62c2a62dbfbec5da02c4d2b57ce64132ac54bfda221a0d8f09f065103b78ac84c8857b028bae19394ee30f791c838feea78eb83c4b18bebbf8644f7a234d3717bd6da5a3431bd2fd8c36f48b9f11ea97251d596a1d7b53b1a8d2f7722e9a44683cc3260227303ce0fc9730947af5e7a444f3ad639ae45d7986b3c2eb740e66ef525d42de58738604934318fd02678bd9930c4e7a4af1926e1619a7df51fa654c071d64d6cb63e432a19cdb08a7b3e40adfa269eb16"}, {0x80, 0x111, 0x8, "4e19632305e23e22b3f7b84d12840fa8803af6cceeff71565350c6033606eef0913364bdc623cb0949074fa8fc0a3521ec2db1965fefd1e11d6beb358ed1aecaf71e65e8b1ab6930deab41cbd4d988d7699dc5d20a152d0fd5faf28a5618c60e726b44a91195a3f7e924c5"}, {0x90, 0x0, 0x5, "5b5b6ad728f4f9a26a3a813369aa8bfe30a20cdc633dbbc92974f39f0ab47112c91f09be95e827f433983cd05cb761f2a5a1829684184363ce5ff9e69a872bc58b9dd7e3747d9bb739b743742b76a6ce10ef53709d451fe9dc9ccbddfa4af9c80f263721598eb77badfc58b775ac6f3c8ff486d24132d94ebff7ed91"}], 0x208}, 0x0, 0x20000000, 0x1}, 0x101) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002700)={'wg2\x00'}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000002740), 0x12201, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000002780), 0x2, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000002840)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000027c0)=@rc={0x1f, @any, 0xf9}, 0x0, 0x0, 0x1}, 0x1) openat$cgroup_subtree(r1, &(0x7f0000002880), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000028c0)='FROZEN\x00', 0x7) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x48, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'freezer.state\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002a40), 0x90480, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004}, 0x804) 15:26:09 executing program 3: sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8830}, 0x885) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000010) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x18}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0xd86b01b73c9264a4) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'tunl0\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ').\'\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\xff'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xe59290c4d73168a1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x78}, 0x1, 0x0, 0x0, 0x400}, 0x4000800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r1, 0x4, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000900) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000b80), 0x1) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xa0, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4018084}, 0x20008801) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\\!\x00'}]}, 0x3c}}, 0x40080) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x9c, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dbusd_etc_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x8050) [ 162.152183] audit: type=1400 audit(1732029969.395:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:26:09 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000001000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000002000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/4096) shmget(0x2, 0x1000, 0x800, &(0x7f0000001000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001000)=""/211) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001100)) r2 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000004000/0x3000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000001140)=""/20) r3 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000003000/0x3000)=nil) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000001180)=""/121) shmat(r1, &(0x7f0000002000/0x1000)=nil, 0x5000) shmctl$SHM_UNLOCK(r3, 0xc) r4 = shmget(0x1, 0x3000, 0x20, &(0x7f0000004000/0x3000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001200), &(0x7f0000001240)=0x4) shmget(0x3, 0x3000, 0x100, &(0x7f0000005000/0x3000)=nil) r5 = syz_io_uring_setup(0x4760, &(0x7f0000001280)={0x0, 0x13c8, 0x2, 0x2, 0x1e2}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000001300), &(0x7f0000001340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x10, 0x30, r5, 0x8000000) syz_extract_tcp_res$synack(&(0x7f0000001380), 0x1, 0x0) 15:26:09 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf1c046973410da81}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000}, 0x4) socketpair(0x22, 0xa, 0x1000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000180)=0x7, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1f0, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0xa457d551ef7cbddc}, 0x20008050) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x60080) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000680)) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x501000, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004844}, 0x4000000) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000840), &(0x7f0000000880)=0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r6) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r7, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x781ffdb4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcd}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0xa000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r6) socketpair(0x1, 0x80000, 0x3, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4000885) 15:26:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x20001040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) read$eventfd(r2, &(0x7f00000001c0), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x16000, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x500, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5e}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x4008015) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="bfdadfd1b4286bf48b4a6c352a34149ecda441014b3b3032c27638703c16550cf97832df9c5255b567ffaa69c3bd2bb1de1d805b433b8ea8b9ba70291e9a9c6671e42e37ef681a5d2798cc9bba7c0fb9627d6a4aa763c477a21fab2ccf536a7d9978af99256dc7b0f282d536116d7692cc4e799ca5e1c63819947c99627e48c8281d864d7c4f3674c557f8aa912072d2", 0x7fffffff, 0x0, 0x1, {0x1}}, 0xd786) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x891) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000006c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x2f, 0x5, 0x0, 0x8f, 0x24, @private1, @remote, 0x20, 0x80, 0xffffffff, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000800)={'erspan0\x00', r1, 0x8000, 0x80, 0x0, 0x4d8f, {{0x2d, 0x4, 0x2, 0x22, 0xb4, 0x66, 0x0, 0xff, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x4c, 0xd0, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x6}, {@broadcast, 0x66}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x511800}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @generic={0x7, 0x11, "777c08a280c4a691c571d5396b6bac"}, @timestamp={0x44, 0x8, 0x85, 0x0, 0xc, [0x3]}, @rr={0x7, 0xf, 0x9, [@rand_addr=0x64010101, @private=0xa010101, @loopback]}, @ssrr={0x89, 0x1b, 0x34, [@broadcast, @remote, @private=0xa010101, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x2e}]}, @lsrr={0x83, 0xb, 0x49, [@multicast2, @loopback]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'erspan0\x00', r1, 0x80, 0x80, 0x1ff, 0x0, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@timestamp_addr={0x44, 0x24, 0x86, 0x1, 0x2, [{@multicast1, 0xb86}, {@remote}, {@broadcast, 0x2}, {@remote, 0xc0}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ac0)={0x6e0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe23}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff3a7}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r10}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r12}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r3}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbc72}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x6e0}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 15:26:09 executing program 7: shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/220) r0 = shmget(0x1, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmget(0x3, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r1 = shmget(0x3, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/109) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000180)=""/222) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000280)) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000002c0)=""/125) syz_extract_tcp_res$synack(&(0x7f0000000340), 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000780)={{0x0, 0x3ff, 0x1, 0x7fffffff, 0x3ff, 0x3, 0x8000, 0x10000, 0x3, 0x3, 0x7f, 0xb86, 0xc5c, 0x9, 0x3f}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "f8964f95f4d1f6"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001c40)={{0x0, 0x400, 0xfffffffffffff801, 0x7f, 0x5, 0x7fffffff, 0x5, 0x8, 0x9, 0x7, 0x6, 0x1ff, 0x5, 0x5f5, 0x100000001}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001cc0)={0xde1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "6eea14d9a1b9e6"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058000)={0x8001, [{r2, r3}, {}, {r4, r5}, {0x0, r6}, {0x0, r7}, {r8, r9}, {0x0, r10}], 0x3, "db308e92a05751"}) [ 163.539281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.542777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.544770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.548053] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.550723] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.552073] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.583275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.588978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.595795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.601265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.602854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.605778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.611800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.615723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.618240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.619794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.620824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.625371] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.656465] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.662606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.664339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.667893] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.670171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.672948] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.674153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.676982] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.679186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.684356] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.687302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.689177] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.690072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.690386] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.698023] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.716311] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 163.721903] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.733991] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.736118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.737128] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.744859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 163.753035] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 163.768082] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 163.769419] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 163.852196] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 163.870985] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 163.874765] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 163.906807] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 163.951786] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 163.957991] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 165.622078] Bluetooth: hci0: command tx timeout [ 165.686905] Bluetooth: hci1: command tx timeout [ 165.687209] Bluetooth: hci2: command tx timeout [ 165.749769] Bluetooth: hci3: command tx timeout [ 165.751193] Bluetooth: hci4: command tx timeout [ 165.814704] Bluetooth: hci6: command tx timeout [ 165.815330] Bluetooth: hci5: command tx timeout [ 166.005640] Bluetooth: hci7: command tx timeout [ 167.669675] Bluetooth: hci0: command tx timeout [ 167.733843] Bluetooth: hci1: command tx timeout [ 167.734016] Bluetooth: hci2: command tx timeout [ 167.798557] Bluetooth: hci4: command tx timeout [ 167.798670] Bluetooth: hci3: command tx timeout [ 167.862620] Bluetooth: hci6: command tx timeout [ 167.863147] Bluetooth: hci5: command tx timeout [ 168.053598] Bluetooth: hci7: command tx timeout [ 169.717615] Bluetooth: hci0: command tx timeout [ 169.781614] Bluetooth: hci1: command tx timeout [ 169.782588] Bluetooth: hci2: command tx timeout [ 169.845678] Bluetooth: hci4: command tx timeout [ 169.846263] Bluetooth: hci3: command tx timeout [ 169.910702] Bluetooth: hci5: command tx timeout [ 169.910797] Bluetooth: hci6: command tx timeout [ 170.102602] Bluetooth: hci7: command tx timeout [ 171.765587] Bluetooth: hci0: command tx timeout [ 171.829708] Bluetooth: hci2: command tx timeout [ 171.829774] Bluetooth: hci1: command tx timeout [ 171.894531] Bluetooth: hci3: command tx timeout [ 171.894665] Bluetooth: hci4: command tx timeout [ 171.957586] Bluetooth: hci5: command tx timeout [ 171.958874] Bluetooth: hci6: command tx timeout [ 172.150677] Bluetooth: hci7: command tx timeout [ 223.606282] syz-executor.0 (287) used greatest stack depth: 24272 bytes left [ 223.633527] syz-executor.3 (292) used greatest stack depth: 24160 bytes left [ 223.881431] syz-executor.4 (291) used greatest stack depth: 24008 bytes left [ 225.935858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.938328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.942959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.951277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.953393] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.954430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.983206] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.986560] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.989080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.993080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.995764] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.998333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.119126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.125698] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.129891] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.138389] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.145084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.152748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.199796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.238635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.269787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.297614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.300270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 226.304905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.320404] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.328918] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.338728] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.379009] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.388014] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 226.391010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.455281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 226.470140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 226.474193] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 226.477215] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.494846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.499054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.503183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.507756] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 226.512062] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.525025] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.529813] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 226.534064] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.536984] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 226.541983] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 226.544142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.572152] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.602079] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 226.642883] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.021689] Bluetooth: hci1: command tx timeout [ 228.021746] Bluetooth: hci0: command tx timeout [ 228.213590] Bluetooth: hci2: command tx timeout [ 228.471580] Bluetooth: hci5: command tx timeout [ 228.533571] Bluetooth: hci3: command tx timeout [ 228.597662] Bluetooth: hci4: command tx timeout [ 228.661834] Bluetooth: hci7: command tx timeout [ 228.728529] Bluetooth: hci6: command tx timeout [ 230.069650] Bluetooth: hci0: command tx timeout [ 230.070829] Bluetooth: hci1: command tx timeout [ 230.261565] Bluetooth: hci2: command tx timeout [ 230.517708] Bluetooth: hci5: command tx timeout [ 230.581682] Bluetooth: hci3: command tx timeout [ 230.645654] Bluetooth: hci4: command tx timeout [ 230.709571] Bluetooth: hci7: command tx timeout [ 230.773685] Bluetooth: hci6: command tx timeout [ 232.117928] Bluetooth: hci1: command tx timeout [ 232.118073] Bluetooth: hci0: command tx timeout [ 232.309762] Bluetooth: hci2: command tx timeout [ 232.565703] Bluetooth: hci5: command tx timeout [ 232.629847] Bluetooth: hci3: command tx timeout [ 232.693632] Bluetooth: hci4: command tx timeout [ 232.758517] Bluetooth: hci7: command tx timeout [ 232.822534] Bluetooth: hci6: command tx timeout [ 234.165907] Bluetooth: hci1: command tx timeout [ 234.167682] Bluetooth: hci0: command tx timeout [ 234.358590] Bluetooth: hci2: command tx timeout [ 234.614546] Bluetooth: hci5: command tx timeout [ 234.677525] Bluetooth: hci3: command tx timeout [ 234.742748] Bluetooth: hci4: command tx timeout [ 234.805582] Bluetooth: hci7: command tx timeout [ 234.869637] Bluetooth: hci6: command tx timeout [ 288.198341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.200415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.213341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.221879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.228163] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 288.230185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.262225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.264837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.274213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.278808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.284594] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.291658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.455412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.457826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.459205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.469890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.476018] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.479976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.536121] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.551175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.553179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.561896] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.563695] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 288.572325] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.576967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.578568] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.582670] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.593161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.608769] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.610637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.615667] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.634528] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 288.640598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.641777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.643207] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.645373] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.646575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.659649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.694659] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 288.699932] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 288.717108] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.721828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.726378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.732808] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 288.737000] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 288.739050] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 288.745786] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 288.747126] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 290.294248] Bluetooth: hci0: command tx timeout [ 290.357564] Bluetooth: hci1: command tx timeout [ 290.551089] Bluetooth: hci2: command tx timeout [ 290.677758] Bluetooth: hci3: command tx timeout [ 290.741814] Bluetooth: hci4: command tx timeout [ 290.807647] Bluetooth: hci7: command tx timeout [ 290.808356] Bluetooth: hci5: command tx timeout [ 290.809123] Bluetooth: hci6: command tx timeout [ 292.341666] Bluetooth: hci0: command tx timeout [ 292.406568] Bluetooth: hci1: command tx timeout [ 292.608258] Bluetooth: hci2: command tx timeout [ 292.725590] Bluetooth: hci3: command tx timeout [ 292.790563] Bluetooth: hci4: command tx timeout [ 292.860749] Bluetooth: hci7: command tx timeout [ 292.861239] Bluetooth: hci6: command tx timeout [ 292.861917] Bluetooth: hci5: command tx timeout [ 294.389619] Bluetooth: hci0: command tx timeout [ 294.453590] Bluetooth: hci1: command tx timeout [ 294.645542] Bluetooth: hci2: command tx timeout [ 294.773705] Bluetooth: hci3: command tx timeout [ 294.838604] Bluetooth: hci4: command tx timeout [ 294.901544] Bluetooth: hci5: command tx timeout [ 294.902075] Bluetooth: hci6: command tx timeout [ 294.902590] Bluetooth: hci7: command tx timeout [ 296.438576] Bluetooth: hci0: command tx timeout [ 296.502641] Bluetooth: hci1: command tx timeout [ 296.694694] Bluetooth: hci2: command tx timeout [ 296.821581] Bluetooth: hci3: command tx timeout [ 296.887770] Bluetooth: hci4: command tx timeout [ 296.974666] Bluetooth: hci5: command tx timeout [ 296.975223] Bluetooth: hci7: command tx timeout [ 296.975913] Bluetooth: hci6: command tx timeout [ 350.862209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.865805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.866884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.870722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.873215] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 350.874282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.980573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.983721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.985924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.990136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.991981] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 350.995979] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.997224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.002747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.015172] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.027841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.045309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.046174] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 351.047771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.048623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.051118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.060314] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.066131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 351.070723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.163383] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.172677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.173917] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.193152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.214372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.231564] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.236893] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 351.238742] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.243348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.279108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.285102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.288212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 351.292179] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.293896] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 351.300988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 351.303943] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 351.304952] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.305651] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 351.308143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.320093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.333594] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 351.348003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.363733] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 351.368997] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.949707] Bluetooth: hci0: command tx timeout [ 353.078560] Bluetooth: hci2: command tx timeout [ 353.142845] Bluetooth: hci1: command tx timeout [ 353.143557] Bluetooth: hci3: command tx timeout [ 353.333624] Bluetooth: hci5: command tx timeout [ 353.398491] Bluetooth: hci7: command tx timeout [ 353.461568] Bluetooth: hci4: command tx timeout [ 353.461603] Bluetooth: hci6: command tx timeout [ 354.997535] Bluetooth: hci0: command tx timeout [ 355.125603] Bluetooth: hci2: command tx timeout [ 355.189525] Bluetooth: hci1: command tx timeout [ 355.190472] Bluetooth: hci3: command tx timeout [ 355.382627] Bluetooth: hci5: command tx timeout [ 355.445590] Bluetooth: hci7: command tx timeout [ 355.509658] Bluetooth: hci4: command tx timeout [ 355.509697] Bluetooth: hci6: command tx timeout [ 357.045637] Bluetooth: hci0: command tx timeout [ 357.174189] Bluetooth: hci2: command tx timeout [ 357.239486] Bluetooth: hci1: command tx timeout [ 357.239530] Bluetooth: hci3: command tx timeout [ 357.429673] Bluetooth: hci5: command tx timeout [ 357.493613] Bluetooth: hci7: command tx timeout [ 357.557660] Bluetooth: hci4: command tx timeout [ 357.557717] Bluetooth: hci6: command tx timeout [ 359.094491] Bluetooth: hci0: command tx timeout [ 359.221524] Bluetooth: hci2: command tx timeout [ 359.285509] Bluetooth: hci1: command tx timeout [ 359.287486] Bluetooth: hci3: command tx timeout [ 359.478824] Bluetooth: hci5: command tx timeout [ 359.542723] Bluetooth: hci7: command tx timeout [ 359.605554] Bluetooth: hci6: command tx timeout [ 359.606564] Bluetooth: hci4: command tx timeout [ 413.125914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.127554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.129610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.130961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.132028] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.133181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.134810] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.136765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.136862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.147968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.151337] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 413.152691] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.190149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.198975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.200152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.205886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.210260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.213693] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.387277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.387799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.395684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.399014] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.401559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.405079] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.411675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.411750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.414289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 413.416283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.417395] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 413.425178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.454443] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.459815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 413.463232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.463737] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 413.470955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.474744] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.480590] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.484828] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 413.487611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.498291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.506137] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 413.507171] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.543277] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 413.548141] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 413.566030] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 413.602057] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 413.610696] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 413.618061] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 415.158097] Bluetooth: hci0: command tx timeout [ 415.221768] Bluetooth: hci1: command tx timeout [ 415.286827] Bluetooth: hci2: command tx timeout [ 415.477543] Bluetooth: hci3: command tx timeout [ 415.479554] Bluetooth: hci4: command tx timeout [ 415.541528] Bluetooth: hci6: command tx timeout [ 415.669540] Bluetooth: hci7: command tx timeout [ 415.670561] Bluetooth: hci5: command tx timeout [ 417.206494] Bluetooth: hci0: command tx timeout [ 417.269613] Bluetooth: hci1: command tx timeout [ 417.335445] Bluetooth: hci2: command tx timeout [ 417.525604] Bluetooth: hci3: command tx timeout [ 417.526215] Bluetooth: hci4: command tx timeout [ 417.590511] Bluetooth: hci6: command tx timeout [ 417.718549] Bluetooth: hci7: command tx timeout [ 417.719086] Bluetooth: hci5: command tx timeout [ 419.254706] Bluetooth: hci0: command tx timeout [ 419.318627] Bluetooth: hci1: command tx timeout [ 419.381494] Bluetooth: hci2: command tx timeout [ 419.573529] Bluetooth: hci4: command tx timeout [ 419.574082] Bluetooth: hci3: command tx timeout [ 419.638520] Bluetooth: hci6: command tx timeout [ 419.766552] Bluetooth: hci5: command tx timeout [ 419.767089] Bluetooth: hci7: command tx timeout [ 421.301617] Bluetooth: hci0: command tx timeout [ 421.366588] Bluetooth: hci1: command tx timeout [ 421.430493] Bluetooth: hci2: command tx timeout [ 421.622689] Bluetooth: hci3: command tx timeout [ 421.623238] Bluetooth: hci4: command tx timeout [ 421.687512] Bluetooth: hci6: command tx timeout [ 421.813551] Bluetooth: hci7: command tx timeout [ 421.814100] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 15:31:19 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880137f25c0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88806ce3b998 RDI=ffff8880137f25c0 RBP=ffff88806ce3b998 RSP=ffff888036adf730 R8 =00000000ffffffff R9 =0000000000000001 R10=0000000000000002 R11=ffff8880137f2028 R12=ffff8880137f1b80 R13=ffff8880137f25c0 R14=00000000ffffffff R15=ffff8880137f25c0 RIP=ffffffff84848e82 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff8e5ba4540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff8e6068010 CR3=0000000026d06000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806cf09a38 RCX=0000000000000002 RDX=1ffff1100d9e1347 RSI=ffff88806cf09fd8 RDI=ffff88806cf09a38 RBP=ffff88806cf09fd8 RSP=ffff88806cf09990 R8 =ffffffff86796336 R9 =ffff88806cf09a78 R10=000000000003c001 R11=0000000000007ff9 R12=0000000000000008 R13=ffff88806cf09a80 R14=ffff88806cf09fe0 R15=ffff88806cf09a38 RIP=ffffffff81149ee8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffedec09fa8 CR3=000000002be6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000