Warning: Permanently added '[localhost]:64538' (ECDSA) to the list of known hosts. 2025/01/19 16:45:02 fuzzer started 2025/01/19 16:45:03 dialing manager at localhost:44245 syzkaller login: [ 65.986942] cgroup: Unknown subsys name 'net' [ 66.113584] cgroup: Unknown subsys name 'cpuset' [ 66.144367] cgroup: Unknown subsys name 'rlimit' [ 72.802373] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 83.425636] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 16:45:21 syscalls: 211 2025/01/19 16:45:21 code coverage: enabled 2025/01/19 16:45:21 comparison tracing: enabled 2025/01/19 16:45:21 extra coverage: enabled 2025/01/19 16:45:21 setuid sandbox: enabled 2025/01/19 16:45:21 namespace sandbox: enabled 2025/01/19 16:45:21 Android sandbox: enabled 2025/01/19 16:45:21 fault injection: enabled 2025/01/19 16:45:21 leak checking: enabled 2025/01/19 16:45:21 net packet injection: enabled 2025/01/19 16:45:21 net device setup: enabled 2025/01/19 16:45:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 16:45:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 16:45:21 USB emulation: enabled 2025/01/19 16:45:21 hci packet injection: enabled 2025/01/19 16:45:21 wifi device emulation: enabled 2025/01/19 16:45:21 802.15.4 emulation: enabled 2025/01/19 16:45:21 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 16:45:23 starting 8 fuzzer processes 16:45:23 executing program 0: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="4e9f7374a180d9b328f7a85ff98524a1cd93cd00b5e52636b63739a9f4424c453c8f74ac94ea3c3c80efa16556c8bd7abdf29bc479cebfce4e36753391fc3b1eaba057fd4b465e3c5a5a395fbf4d77ccc8dae44b9a1b7a7ee1fd3c4813443780c8b8e05276958f3698e18a1464dea24d2f7edd1644be", 0x76}, {&(0x7f0000000080)="0e78635135858518218d5b615a54d6de7ea9ec694c03c257c287ce70d74e8acb9b5bfcc670b0440ff044c6086689488a3d70691fb33578904e8cf8b5d258c71cdaa2463d1b99ca31be3a1cddf53e58775cbaaa57b0317c", 0x57}, {&(0x7f0000000100)="0f30e72dcd77497790", 0x9}, {&(0x7f0000000140)="860830325375e6617f0f821100dbbc809530868807ecc31192d5c3d7023513168762314bf75bf4d8d8c65c16e2fff74929ff", 0x32}], 0x4, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x753}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x67, 0xf, '\x00', [@generic={0x81, 0x40, "ce6b149dea94ceda29c68e4189a7bebc684d1a6ece84ff842622d3393a03280797eed18b39563ce45dc5b2736b7400c9301b4ec6d38bd1e5dec636c35a6e6e0d"}, @generic={0x81, 0x35, "39e6f9aafae77ae2099120854f63871a9fe830158e0f20fd06fdf0f37227ed241f23cd3165bc7e7b49bfcf9aa7e5afb60f0126a4e0"}]}}}], 0xb0}, 0xd0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f00000002c0)=""/242, 0xf2, 0x2000, &(0x7f00000003c0)={0x2, 0x4e22, @local}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000440)={'\x00', 0x2, 0x3, 0x9f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x81) r4 = syz_open_dev$vcsa(&(0x7f0000000580), 0x4, 0x10000) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr=0x64010101, @private=0xa010100}, 0xc) syz_open_dev$vcsa(&(0x7f0000000600), 0x8, 0x1fc02bfa47de7f88) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000640)='\x00', &(0x7f0000000680)='./file0\x00', r4) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000006c0)={'\x00', 0xd022, 0x1, 0x3e}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x220000, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040011) r6 = syz_open_dev$loop(&(0x7f00000008c0), 0x7, 0x12100) ioctl$LOOP_SET_FD(r6, 0x4c00, r3) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 16:45:23 executing program 1: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x25}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x40c5) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, r1, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x40) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x3, 0x9, "37f8c06d003d812ba1a8f3eab606a3babf13db0267eebec73ad092f7ae20e4c7dc470890467cef0b6dd77c41d86a3f77198bc887ddcceb5a8a3a12921686861f", "3cfe42465f439091ea1e21a52cbddf61346a4a27f2690b5ebf17e0bc7e2d3860", [0x3fffffffc]}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x7ff}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)}, {&(0x7f0000001680)="0ebcb3e3f3fb68fc64e9c467fe333b66136d27801bca02e4b2b3e13bf078655304efc6e9d645a4829ca703e85012cffe521f6b26d8a2d88960693529acbce421fb4ed1453538c99934ce2d5e6a567e5bf04dbc279e514d40b5de1a89f3be760a434df9057f577fefc78fb6", 0x6b}, {&(0x7f0000001700)="296e1863b6425599ba129be26348a39ea2129fcd894cdc34ae3bc7a8b07048c97daaba4b78264e044053faaf49a1d24debef1a7a80066ec23bcfb4ecc9f2b9fa002a9b7fc6ca588beea1d539f2801375fe75c40d57f3eaae17f0843d7b04be4483c1fef61d8b68972cbcb2dbb6de610683d0460e28e063b51dc0acd572a7eb302eb114742be597e189c53c90911c2bba4c0ec2820cc41f310a77a4f8cd6e0a513a528723bd64f6ca0886063e", 0xac}, {&(0x7f00000017c0)="0e63989cd2900bd8c194fc3df1d87546e6adb548de5df909adc1a466f0d5dd03beedc05e123e4d3bee0054c687cf744f22e7fd1639d108005699bd11479df1122ae282677fcd1220c0acac9e4af982ac9a0a0c8d9bf22ea1efb51dfa1868d9b360b49125745061dc92fa875c60d19b5f3e88b78142ffefad0dc6a97edc", 0x7d}], 0x5, &(0x7f00000018c0)=[@tclass={{0x14, 0x29, 0x43, 0x4c54}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9d4}}], 0x30}, 0x8004) getsockname$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001980)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001a40)={'syztnl2\x00', &(0x7f00000019c0)={'sit0\x00', r2, 0x29, 0x2, 0xfc, 0x3, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x40, 0x9, 0x3}}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r0, 0x118, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x7c}}, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x80) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x2c, 0x0, 0x5, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x20040001) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), r5) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000030c0), 0x2, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000003140), r4) sendmsg$FOU_CMD_GET(r6, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x18, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c800}, 0x4800) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084080}, 0x20044000) 16:45:23 executing program 6: clock_getres(0x4, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x6, 0x1, 0x1}, 0xfffffffe) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)="a3cda40c1ab41549cc3dca3243ea3a75e3f5b05b9dda65a290cdd6c8e69f0edf71b3a702ed31e5e48a1e83e5420208878b2ff120698e28b233fae1b942b2bb1e275b326a7912dba917854e5b390cca5e665725a35a6d22416743cb67378d7246e972763627429a3589520ac9c6eb9fdabb76aa37377e4191b7248f4c0497d93f9ada0d7ed60597a63cfae308820f1e9fcc31872d9d291ce0781d94d259593400813d5c59ee7f68", 0xa7) rt_sigtimedwait(&(0x7f0000000140)={[0x2]}, &(0x7f0000000180), &(0x7f0000000200), 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{0x0, 0x1, 0xdd8a, 0x3, 0xffffffffbc8ed63c, 0xfff, 0xfffffffffffffff7, 0x1, 0x5, 0xf90, 0x3, 0x9, 0x40, 0xfffffffffffffff9, 0x792}, 0x10, [0x0, 0x0]}) accept$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendto$packet(r0, &(0x7f0000000380)="5e9a8ccfc9802e29347e7ceccaf31687a09ec7ce69c2c90506d4b5fa41477fee85e9bc2c149af6bb1db20ce39ee4ee04e2f23a891c18d3832434f6cded3a65f2bc61cbe1871c548470a0a2f6b20d1f919e602a500719da20d7ba912d7507ef36975af487d8d3f8ed8b819c0e89dce05d93", 0x71, 0x20000000, &(0x7f0000000400)={0x11, 0xf7, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000440)={{0x0, 0xfffffffffffffc00, 0x4, 0x100000001, 0x3, 0x7, 0x101, 0x1ff, 0x40, 0x0, 0x7fffffff, 0x4, 0x2, 0x3ff, 0x1}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getpeername$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r3 = epoll_create(0x9) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) epoll_pwait2(r3, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000680)={r4, r5+10000000}, &(0x7f00000006c0)={[0xffffffff]}, 0x8) clock_getres(0x2, &(0x7f0000000700)) clock_gettime(0x1, &(0x7f0000000740)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r3, &(0x7f0000000780)={0x30000000}, r6}, 0x3) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x80010, r1, 0x8000000) 16:45:23 executing program 2: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'rlimit'}, {0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'net'}]}, 0x1b) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x3f, 0x82000) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'blkio'}, {0xf6de4c8323886e7, 'devices'}, {0x2b, 'net'}, {0x2d, 'hugetlb'}, {0x2d, 'cpuset'}, {0x2b, 'memory'}, {0x2d, 'blkio'}]}, 0x35) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x2, 0xe9, {{0x1d, 0x4, 0x2, 0x6, 0x74, 0x65, 0x0, 0xc1, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@lsrr={0x83, 0x7, 0xf9, [@remote]}, @timestamp={0x44, 0x28, 0x7c, 0x0, 0xe, [0x2, 0x1, 0x5, 0x5, 0x5, 0x7, 0x0, 0x8, 0xfffffffa]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x28, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x22}}, {@remote, 0x3}, {@rand_addr=0x64010101, 0x5}, {@private=0xa010100, 0xfff}, {@empty, 0x5}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x1f, 0x5, 0x46, @dev={0xfe, 0x80, '\x00', 0x41}, @local, 0x40, 0x8080, 0x2, 0x6}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x400c5}, 0x4020000) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f0000000880)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000008c0)="57b88c7d251bf341ac6d5269df6e20b696ad17dbd9bd279747dc3dcfc6c2c5fdc968af1762d84896ff4792229769e7fd777e0f0ecea7e2ccfe14dbe25dd9dcaf3eda1cec54b9b06c380a088d6ddaccb5c6ac42abbac96ecd0632efbcbf06", 0x5e}, {&(0x7f0000000940)="1afefa9afc7f188ccf52dc8912ce2c4698ec", 0x12}, {&(0x7f0000000980)="9e42e0fdba45770135b4994fe16f641bad5a53e40a625b1a8b8e7428d83fac8e8185de7268a4d03eabcf9128a5e6549054a4cca67972d94b01f22a1c1e4118813848b1a83666aa7e4eb2000f48a3e14cefb23219", 0x54}], 0x3, &(0x7f0000000a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff6697}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x60}, 0x4000000) r6 = syz_open_dev$vcsa(&(0x7f0000000bc0), 0x1, 0x408440) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r7, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x44814) epoll_create1(0x0) pipe(&(0x7f0000000d80)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x300, 0x70bd26, 0x8, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x910}, 0x4814) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ec0), 0x311002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r9, 0xc08c5334, &(0x7f0000000f00)={0xfffffffb, 0x1, 0x1, 'queue1\x00', 0x1}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r6) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x124, r10, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 16:45:23 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x800, 0x50}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000040)={{0xb1, 0xff}, 'port1\x00', 0x20, 0x40800, 0xfffff8e8, 0xd, 0x5, 0x9, 0x9e9e, 0x0, 0x2, 0x3}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x50, [0x1df, 0x0, 0x8, 0x3ff, 0x78, 0xfff], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000140)=""/80}, &(0x7f0000000240)=0x78) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x204c0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000002c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x3, 0x4, 0xa9, 0x7}, {0x0, 0x9, 0xf7, 0xdf67}, {0x8000, 0x3, 0xff, 0x200}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', r1, 0x4, 0x3, 0x1, 0x400, 0x0, @mcast2, @loopback, 0x0, 0x7800, 0x9, 0x6}}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000004c0)={0x8, {{0x2, 0x4e20, @remote}}, 0x1, 0x6, [{{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x390) r2 = syz_open_dev$loop(&(0x7f0000000880), 0x1, 0x244000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x9d7) openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x200800, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000900), &(0x7f0000000940)=0x4) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000980)) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f00000009c0)=""/4096, &(0x7f00000019c0)=0x1000) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001a00), 0xc600) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000001a40)={{0x0, 0x1}, 'port1\x00', 0x30, 0x110040, 0xfff, 0x8, 0x81, 0x0, 0x8, 0x0, 0x7, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000001b00)={0x6, 0x4, 0x1, 'queue1\x00', 0x308}) 16:45:23 executing program 4: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7888, 0x8, 0x6, 0x5a4, {{0x23, 0x4, 0x2, 0x7, 0x8c, 0x68, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x97, 0x3, 0x7, [{@loopback}, {@private=0xa010101, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @lsrr={0x83, 0x13, 0x38, [@private=0xa010100, @broadcast, @rand_addr=0x64010101, @loopback]}, @timestamp={0x44, 0x18, 0xa3, 0x0, 0x7, [0x8, 0x1, 0x9ca2, 0x9, 0x8]}, @timestamp_prespec={0x44, 0x1c, 0x1b, 0x3, 0x6, [{@loopback, 0x3}, {@empty, 0x2}, {@empty, 0x1}]}, @generic={0x0, 0x11, "4eb583629bd963df3a1c01b429798a"}]}}}}}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0xff, 0x7e6, 0x48, @private1, @mcast2, 0x1, 0x8, 0x398}}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000700), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000800)={0x2, 0x2}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x440, 0x0) sendto$packet(r3, &(0x7f00000008c0)="d7cc66bce84219d4d9d4586a21b10efeeb756c09026c50a6bf479386b322e80f60bde91cbc447654dc40f5aa06ec598a542211b34e4b84a8e61cdb0cd3ea84ef82ac254b8c72c74e0ae9f73478c1647a8342772211741e3fac4dde614a393cfaf1f24ba22167397540cccbec83be7d3f8dc7752fcfd617a6bdce3eda8ff6e6c0158f01c931310f27e9cf4610efa4da5d72ada78fb7b48fcff7fe402c830414c603ba6f285c95d9fdb17e801c1ed2da4486431a8428d259be1fc89a8bb997f9b79674e7cd445ffb1f05717e6aa15c2419fc389fe9448f110b565e7b941df1ded980735d7d559aeaceba3196394ff878c29425f9", 0xf3, 0x20000810, &(0x7f00000009c0)={0x11, 0x18, 0x0, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) r4 = syz_open_dev$vcsa(&(0x7f0000000a00), 0xfffffffffffffc00, 0x98000) r5 = openat$cgroup_procs(r4, &(0x7f0000000a40)='cgroup.threads\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) accept$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b40)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x74, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x40) socketpair(0x25, 0x80000, 0xa5, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000cc0)="a91dc6e6c6911cb5", 0x8) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000d00)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000000f00)={{r9, 0x5, 0x101, 0x8, 0x1, 0x0, 0x2, 0x3, 0x8, 0x3, 0x4, 0x8c, 0x3, 0x0, 0x8001}}) sendmsg$FOU_CMD_GET(r8, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x26}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000002040)='\x00', &(0x7f0000002080)="da73beae2546d30c456e5e0b4fabe89124c2d26ffae37d43f7fb8dbbd74b4c9771c8beb38418a2a6f939ffba7b4c360f5d8338540c5bff1cda3959eab4d10e03dd1c185f29092aab7e3d48390db049fbd2c612bd735c1347b51fa899a266dd58aad46badb0402574599b79086a5281bf6cfd2bdc0d7ad425a68b5811bd7909570d101a4aa317b60c2ef65df0e78308521619a0847ad180c13688de5858fb7d4d4af8f7e4bc2333952d5eaac819d142ca8c588db88317174a72e60862042d5fab9107a16d", 0xc4) 16:45:23 executing program 5: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x7539) write$char_usb(r0, &(0x7f0000000000)="f9968834a7b45649ebb17798525f121cd943e9f5e4d52bec9121e5b205e019aa0b9776e7919088a842ae9b94dc8eff896097416621eb03a7553262cdd63eec1473cab4cbafc8ea9ece247e3adb4bcecda4a23a4c6e8fce175369158745053017fe8500f4e409653e99a56292a8c0cb2578ff01dcc0bba6acf1a99a6626dbc9c94c6a0b64b919e0aa11a8b8dcf47ef290d3d9d726882861f66091be1287aa30ee9d2151ff186bc4b0e5d99937fb8be2c24cb231bfaa7b299d850825e7e9fea21e6d724d4a1cfb654b723f5fb6e776a9c0ce", 0xd1) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100), 0xf) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x5e, [0xffffffffffffff25, 0x6, 0x7, 0xd92, 0x74, 0x80], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180)=""/94}, &(0x7f0000000280)=0x78) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x204, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x47}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x200008c4) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000400)={0xffff0000, 0x40, 0xf34b}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x250, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x7df}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xb5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xd436}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0xa3c9f0ae7dd5b0a2}, {0xc, 0x8f, 0x7fff}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffd}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x250}, 0x1, 0x0, 0x0, 0x15}, 0x40000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000008c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000900), 0x7, 0x281) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = fsmount(r2, 0x1, 0xa) sendmsg$nl_xfrm(r4, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)=@getsa={0xf4, 0x12, 0x200, 0x70bd27, 0x25dfdbfb, {@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4d4, 0xa, 0x33}, [@tmpl={0xc4, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x4d3, 0x6c}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x5db3da05a3af40bf, 0x0, 0x20, 0x3, 0x80, 0xffffff80}, {{@in6=@loopback, 0x4d3, 0x33}, 0x2, @in=@rand_addr=0x64010100, 0x3502, 0x1, 0x1, 0x3, 0x2b0, 0x1ff}, {{@in=@loopback, 0x4d5, 0x19}, 0xa, @in6=@remote, 0x0, 0x0, 0x1, 0x7, 0x8001, 0x7, 0x2776}]}, @etimer_thresh={0x8, 0xc, 0x7fff}]}, 0xf4}, 0x1, 0x0, 0x0, 0x480}, 0x880) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000dc0)={'broute\x00', 0x0, 0x3, 0xdf, [0xaeaf, 0x5, 0x1, 0xffffffffffffff7f, 0x1, 0x3], 0x6, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000cc0)=""/223}, &(0x7f0000000e40)=0x78) read$char_usb(r4, &(0x7f0000000e80)=""/195, 0xc3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x38, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000081}, 0x4020000) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000013c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x84, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 16:45:23 executing program 7: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x80000000}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0xffff, 0x480001) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r3, 0x1, r0, 0x6}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x1010c4, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r6) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x5}, 0x4) sendto$packet(r4, &(0x7f00000002c0)="1f549c977c8f0c95cc06acfc8818289ad02bc56c42ca22dd25de6545c0a6486a369ddd1ea9fdac0f08a9c4d0101516a2bc70997aac38fa7d66c541ebbb17dbf2afe413bf20e54f966a6a95f7da68663cc6e6c9e3ac4924857a8b6e19161ba6fc07b2b1ab5dc61fcad5f63ca8bf2de8cbe3af5a51d0f5ec190ced58893b7c9a2c8fca18a09d708738ebbd7938c42788edb9f2be44aad5d96a1baac4c366b4114555762a38d9fb6bf109d00fd042a13149e9d56325e9460110f53c6ddf9fc2d186524d1609e29bd7fd6daa8badf19113ad91b6a4e6d7ff04", 0xd7, 0x4000000, &(0x7f00000003c0)={0x11, 0x3, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0xc4600, 0x0) getpeername$packet(r7, &(0x7f0000000640), &(0x7f0000000680)=0x14) read$ptp(r6, &(0x7f00000006c0)=""/98, 0x62) epoll_wait(r4, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x5, 0x1) [ 86.174446] audit: type=1400 audit(1737305123.826:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 87.422005] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.426491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.430088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.435455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.438639] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.441299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.610006] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.613546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.618024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.623537] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.629703] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.632381] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.665002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.669264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.671141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.676280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.689547] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.694497] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.694970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.696618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.703037] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.708327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.711199] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.712634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.716009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.716399] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.730709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.734233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.738266] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.748173] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.751664] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.753614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.756062] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.756605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.759746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.763274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.769451] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.773143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.776025] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.781240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.782195] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.784078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.791843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.794182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.806982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.826149] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.871451] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.874062] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.513348] Bluetooth: hci0: command tx timeout [ 89.704990] Bluetooth: hci1: command tx timeout [ 89.831899] Bluetooth: hci5: command tx timeout [ 89.831932] Bluetooth: hci4: command tx timeout [ 89.895932] Bluetooth: hci3: command tx timeout [ 89.896865] Bluetooth: hci2: command tx timeout [ 89.960899] Bluetooth: hci7: command tx timeout [ 89.961862] Bluetooth: hci6: command tx timeout [ 91.559912] Bluetooth: hci0: command tx timeout [ 91.752046] Bluetooth: hci1: command tx timeout [ 91.879948] Bluetooth: hci4: command tx timeout [ 91.880015] Bluetooth: hci5: command tx timeout [ 91.946060] Bluetooth: hci3: command tx timeout [ 91.946354] Bluetooth: hci2: command tx timeout [ 92.008188] Bluetooth: hci6: command tx timeout [ 92.008221] Bluetooth: hci7: command tx timeout [ 93.609026] Bluetooth: hci0: command tx timeout [ 93.799892] Bluetooth: hci1: command tx timeout [ 93.927928] Bluetooth: hci5: command tx timeout [ 93.930870] Bluetooth: hci4: command tx timeout [ 93.991981] Bluetooth: hci2: command tx timeout [ 93.992046] Bluetooth: hci3: command tx timeout [ 94.056012] Bluetooth: hci7: command tx timeout [ 94.056108] Bluetooth: hci6: command tx timeout [ 95.658087] Bluetooth: hci0: command tx timeout [ 95.849260] Bluetooth: hci1: command tx timeout [ 95.975892] Bluetooth: hci4: command tx timeout [ 95.976563] Bluetooth: hci5: command tx timeout [ 96.040757] Bluetooth: hci3: command tx timeout [ 96.040869] Bluetooth: hci2: command tx timeout [ 96.103897] Bluetooth: hci6: command tx timeout [ 96.103926] Bluetooth: hci7: command tx timeout [ 147.383098] syz-executor.1 (284) used greatest stack depth: 24584 bytes left [ 147.424504] syz-executor.3 (280) used greatest stack depth: 24528 bytes left [ 147.508231] syz-executor.7 (287) used greatest stack depth: 24304 bytes left [ 149.817099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.818516] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.825214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.830998] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.839521] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.841329] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.875129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.878359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.879574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.881747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.883448] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.884490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.889361] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.892047] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.895602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.897149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.898448] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.899697] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.102090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.113908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.114338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.156544] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.158981] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.160873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.164620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.175116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.176560] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.177473] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.180614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.181060] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.182516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.183507] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.187357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.190080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.190984] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.196195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.196719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.197740] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.200158] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.206157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.207939] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.214316] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.231442] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.233555] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.235094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.238599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.271235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.293067] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.911863] Bluetooth: hci0: command tx timeout [ 151.976848] Bluetooth: hci2: command tx timeout [ 152.103895] Bluetooth: hci1: command tx timeout [ 152.295921] Bluetooth: hci3: command tx timeout [ 152.296314] Bluetooth: hci7: command tx timeout [ 152.359971] Bluetooth: hci4: command tx timeout [ 152.360151] Bluetooth: hci5: command tx timeout [ 152.360653] Bluetooth: hci6: command tx timeout [ 153.960879] Bluetooth: hci0: command tx timeout [ 154.023859] Bluetooth: hci2: command tx timeout [ 154.152821] Bluetooth: hci1: command tx timeout [ 154.345333] Bluetooth: hci7: command tx timeout [ 154.345439] Bluetooth: hci3: command tx timeout [ 154.407910] Bluetooth: hci4: command tx timeout [ 154.408007] Bluetooth: hci5: command tx timeout [ 154.408064] Bluetooth: hci6: command tx timeout [ 156.008964] Bluetooth: hci0: command tx timeout [ 156.071832] Bluetooth: hci2: command tx timeout [ 156.199985] Bluetooth: hci1: command tx timeout [ 156.391911] Bluetooth: hci7: command tx timeout [ 156.392017] Bluetooth: hci3: command tx timeout [ 156.456834] Bluetooth: hci6: command tx timeout [ 156.456928] Bluetooth: hci5: command tx timeout [ 156.457010] Bluetooth: hci4: command tx timeout [ 158.056864] Bluetooth: hci0: command tx timeout [ 158.120019] Bluetooth: hci2: command tx timeout [ 158.247948] Bluetooth: hci1: command tx timeout [ 158.440001] Bluetooth: hci7: command tx timeout [ 158.440229] Bluetooth: hci3: command tx timeout [ 158.503944] Bluetooth: hci4: command tx timeout [ 158.504095] Bluetooth: hci5: command tx timeout [ 158.504186] Bluetooth: hci6: command tx timeout [ 209.847530] syz-executor.2 (3610) used greatest stack depth: 24240 bytes left [ 212.554704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.559337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.562291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.563005] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.567612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.569742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.575433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.584168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.586874] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.587658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.597566] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.598942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.606303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.609383] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.616022] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.628162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.635972] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.647529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.686151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.690680] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.693735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.716843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.722109] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.724257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.759910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.773391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.775330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.778988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.781121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.782194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.809698] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.824028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.830334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.842357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.858266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.861189] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.892467] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.898228] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.909516] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.922005] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.927358] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.927673] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.947255] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.950153] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.951103] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.007094] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.024069] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.043030] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.631959] Bluetooth: hci1: command tx timeout [ 214.695877] Bluetooth: hci2: command tx timeout [ 214.696329] Bluetooth: hci0: command tx timeout [ 214.827122] Bluetooth: hci4: command tx timeout [ 214.827328] Bluetooth: hci3: command tx timeout [ 214.951912] Bluetooth: hci5: command tx timeout [ 215.143874] Bluetooth: hci6: command tx timeout [ 215.144439] Bluetooth: hci7: command tx timeout [ 216.679892] Bluetooth: hci1: command tx timeout [ 216.744027] Bluetooth: hci2: command tx timeout [ 216.744699] Bluetooth: hci0: command tx timeout [ 216.872064] Bluetooth: hci3: command tx timeout [ 216.872255] Bluetooth: hci4: command tx timeout [ 216.999941] Bluetooth: hci5: command tx timeout [ 217.191991] Bluetooth: hci7: command tx timeout [ 217.192181] Bluetooth: hci6: command tx timeout [ 218.727926] Bluetooth: hci1: command tx timeout [ 218.791921] Bluetooth: hci0: command tx timeout [ 218.792118] Bluetooth: hci2: command tx timeout [ 218.920227] Bluetooth: hci4: command tx timeout [ 218.920346] Bluetooth: hci3: command tx timeout [ 219.048132] Bluetooth: hci5: command tx timeout [ 219.239912] Bluetooth: hci6: command tx timeout [ 219.240071] Bluetooth: hci7: command tx timeout [ 220.775954] Bluetooth: hci1: command tx timeout [ 220.839931] Bluetooth: hci0: command tx timeout [ 220.840127] Bluetooth: hci2: command tx timeout [ 220.968313] Bluetooth: hci3: command tx timeout [ 220.968499] Bluetooth: hci4: command tx timeout [ 221.096108] Bluetooth: hci5: command tx timeout [ 221.287944] Bluetooth: hci7: command tx timeout [ 221.288122] Bluetooth: hci6: command tx timeout [ 274.354426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.358014] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.359026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.369412] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.373937] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.374882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.500947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.502295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.503182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.506126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.507897] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.508683] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.548201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.559397] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.570160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.589429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.594152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.599443] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.618395] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.620720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.621822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.627523] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.632037] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.634657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.691973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.698261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.711153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.750528] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.781205] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.784544] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.816071] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.839183] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.863003] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.864223] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.881930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.896274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.897018] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.897717] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.899143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.906894] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.957457] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.962350] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.964338] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.971176] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.971552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.997278] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.004500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.019535] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.392843] Bluetooth: hci0: command tx timeout [ 276.584934] Bluetooth: hci1: command tx timeout [ 276.648810] Bluetooth: hci2: command tx timeout [ 276.713865] Bluetooth: hci3: command tx timeout [ 276.904988] Bluetooth: hci4: command tx timeout [ 277.032804] Bluetooth: hci7: command tx timeout [ 277.097841] Bluetooth: hci5: command tx timeout [ 277.160070] Bluetooth: hci6: command tx timeout [ 278.441033] Bluetooth: hci0: command tx timeout [ 278.632828] Bluetooth: hci1: command tx timeout [ 278.695844] Bluetooth: hci2: command tx timeout [ 278.760849] Bluetooth: hci3: command tx timeout [ 278.953838] Bluetooth: hci4: command tx timeout [ 279.080835] Bluetooth: hci7: command tx timeout [ 279.144273] Bluetooth: hci5: command tx timeout [ 279.208798] Bluetooth: hci6: command tx timeout [ 280.489378] Bluetooth: hci0: command tx timeout [ 280.680888] Bluetooth: hci1: command tx timeout [ 280.745134] Bluetooth: hci2: command tx timeout [ 280.808831] Bluetooth: hci3: command tx timeout [ 281.000824] Bluetooth: hci4: command tx timeout [ 281.129069] Bluetooth: hci7: command tx timeout [ 281.193942] Bluetooth: hci5: command tx timeout [ 281.255840] Bluetooth: hci6: command tx timeout [ 282.535792] Bluetooth: hci0: command tx timeout [ 282.727879] Bluetooth: hci1: command tx timeout [ 282.791817] Bluetooth: hci2: command tx timeout [ 282.856833] Bluetooth: hci3: command tx timeout [ 283.047822] Bluetooth: hci4: command tx timeout [ 283.175992] Bluetooth: hci7: command tx timeout [ 283.239842] Bluetooth: hci5: command tx timeout [ 283.304075] Bluetooth: hci6: command tx timeout [ 336.466916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.473008] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.478291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.478305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.482880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.485471] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.488354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.490372] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.498232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.514147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.520066] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.522298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.713551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.716556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.718860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.725363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.730077] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.732232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.826196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.835633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.841126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.844914] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.845633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.859453] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.859973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.867111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.870055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.894154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.898887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.902416] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.904597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.914003] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.919629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.932994] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.947171] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.971418] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.973209] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.981163] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.986806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.993195] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 336.994626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.012418] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.028644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.067582] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.086171] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.095251] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.133300] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.135581] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.536338] Bluetooth: hci0: command tx timeout [ 338.601226] Bluetooth: hci1: command tx timeout [ 338.793987] Bluetooth: hci2: command tx timeout [ 338.983857] Bluetooth: hci3: command tx timeout [ 338.985001] Bluetooth: hci4: command tx timeout [ 339.048928] Bluetooth: hci7: command tx timeout [ 339.239896] Bluetooth: hci5: command tx timeout [ 339.304035] Bluetooth: hci6: command tx timeout [ 340.584779] Bluetooth: hci0: command tx timeout [ 340.647994] Bluetooth: hci1: command tx timeout [ 340.839882] Bluetooth: hci2: command tx timeout [ 341.032775] Bluetooth: hci4: command tx timeout [ 341.032884] Bluetooth: hci3: command tx timeout [ 341.097134] Bluetooth: hci7: command tx timeout [ 341.287900] Bluetooth: hci5: command tx timeout [ 341.352973] Bluetooth: hci6: command tx timeout [ 342.632786] Bluetooth: hci0: command tx timeout [ 342.696183] Bluetooth: hci1: command tx timeout [ 342.888389] Bluetooth: hci2: command tx timeout [ 343.080139] Bluetooth: hci3: command tx timeout [ 343.080289] Bluetooth: hci4: command tx timeout [ 343.145133] Bluetooth: hci7: command tx timeout [ 343.335887] Bluetooth: hci5: command tx timeout [ 343.399811] Bluetooth: hci6: command tx timeout [ 344.679887] Bluetooth: hci0: command tx timeout [ 344.744881] Bluetooth: hci1: command tx timeout [ 344.936075] Bluetooth: hci2: command tx timeout [ 345.128140] Bluetooth: hci4: command tx timeout [ 345.128322] Bluetooth: hci3: command tx timeout [ 345.192020] Bluetooth: hci7: command tx timeout [ 345.383929] Bluetooth: hci5: command tx timeout [ 345.447907] Bluetooth: hci6: command tx timeout [ 386.150853] modprobe (16476) used greatest stack depth: 24216 bytes left VM DIAGNOSIS: 16:50:31 Registers: info registers vcpu 0 RAX=fffff9400002cfa0 RBX=fffff9400002cfa1 RCX=ffffffff818a22f7 RDX=0000000000000001 RSI=0000000000000008 RDI=ffffea0000167d00 RBP=fffff9400002cfa0 RSP=ffff88803558fb18 R8 =0000000000000000 R9 =fffff9400002cfa0 R10=ffffea0000167d07 R11=0000000000000000 R12=0000000000000160 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88803558fd98 RIP=ffffffff81aba918 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe02c7f6540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe02c97e8f0 CR3=000000002ad88000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007fffffffefe9 RCX=ffffffff819848a1 RDX=ffff8880154c9bc0 RSI=ffffffff819848bc RDI=0000000000000005 RBP=ffff88803390fd38 RSP=ffff88803390fcc0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff888034d73900 R14=0000000000050001 R15=0000000000000001 RIP=ffffffff8171a158 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005613e38ddfa8 CR3=0000000030f52000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ff00000000000000000000ff0000 XMM02=000000000000ff000000000000000000 XMM03=0000000000000000000000ff00000000 XMM04=0000000000000000ff00000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000