Warning: Permanently added '[localhost]:5551' (ECDSA) to the list of known hosts. 2025/01/25 04:40:16 fuzzer started 2025/01/25 04:40:16 dialing manager at localhost:40883 syzkaller login: [ 61.524766] cgroup: Unknown subsys name 'net' [ 61.597977] cgroup: Unknown subsys name 'cpuset' [ 61.649405] cgroup: Unknown subsys name 'rlimit' [ 66.584303] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 04:40:32 syscalls: 204 2025/01/25 04:40:32 code coverage: enabled 2025/01/25 04:40:32 comparison tracing: enabled 2025/01/25 04:40:32 extra coverage: enabled 2025/01/25 04:40:32 setuid sandbox: enabled 2025/01/25 04:40:32 namespace sandbox: enabled 2025/01/25 04:40:32 Android sandbox: enabled 2025/01/25 04:40:32 fault injection: enabled 2025/01/25 04:40:32 leak checking: enabled 2025/01/25 04:40:32 net packet injection: enabled 2025/01/25 04:40:32 net device setup: enabled 2025/01/25 04:40:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 04:40:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 04:40:32 USB emulation: enabled 2025/01/25 04:40:32 hci packet injection: enabled 2025/01/25 04:40:32 wifi device emulation: enabled 2025/01/25 04:40:32 802.15.4 emulation: enabled 2025/01/25 04:40:32 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 04:40:34 starting 8 fuzzer processes 04:40:34 executing program 0: getuid() syz_usb_connect$uac1(0x3, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xb2, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0xf9}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x205, 0x4, 0x1, 0x4, 0x3, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7f, 0x1, 0xa8, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc2, 0x2, 0x4, 0x40, "", "a8"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0x6b, 0x1d, "9d44eb"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x6, 0x1, "c5b8d71bd132ed"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0xff, 0x16, {0x7, 0x25, 0x1, 0x1, 0x20, 0x4}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0x0, 0x0, 0xff, 0x94}, 0x84, &(0x7f0000000100)={0x5, 0xf, 0x84, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "137e696e35900da38dec5ba564bcc490"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "55b3d8feccb18a227bd0461de26f5b01"}, @generic={0x57, 0x10, 0x3, "89ccba87dfeaa15ca0b4d6fd64151ce06d6d9d2dc05b575be20002a3bcec7d2b66a79ea80b956fd3369e3590c65d100a580e682f27db4726e77729175bd0c58603f08b0ecc70e8128cd49ab9be1ac53efad9fc4b"}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x408}}, {0xbd, &(0x7f0000000200)=@string={0xbd, 0x3, "8f53fe952d2533299d58ebc87e263be1b78b2b5606a1bd02c9be07999ba2d23838f4d77f9dca704b4a55db61e54fa5999a473a8798ef68bd2216db8431dedd2c01d8936c0a5f4e8c72f68f14b82b9ac80884dfc7acd3c3551093e6c03e8bf56d8393a02a5c3e0f222b84e3476d1cb6263dfae36eff9d07e562183d10b095fff50386571ce144e1f798a149f1c188cef21fec18000d1b8eafcc6c36f19439a95e40dddaada1bb184517e108a8ccf4167820cfa7b3b31bdb6df7c79d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x6}}, {0xe4, &(0x7f0000000300)=@string={0xe4, 0x3, "24d0bf7ba3debca4fbaa46b55c85a4d0f63accb4ffcb4d0b962a1d71030390db06274233b0c3ab58348d70eeaff9a02837b0fe1800a76c6431ddbfbac15013cebddb3c1c9d87e2d653459ac0fec6389199c404e2173faec1c66c9e8c0a9a94548ea5b87a437d2cf018d85dbd713fafd772526ce69e656084a30596ecd61620d63bc077d7ca45c3cf78fab637d85b7b07ccb0a17de4ba34c5e1728c9b71e1c6d40ca9b18d0a307d617254be637235b8ccaa2ccd52fa84105b9c81dd93789b1d3895d9ccb0eb245988d37aaa53d1461d8fe00579b41d6ac901f7d51ce616918e07a26a"}}]}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000004c0)=0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000500)=0x2, &(0x7f0000000540)=0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x2010, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@loopback, @in=@remote}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000740)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0xfffffeff}}, './file0\x00'}) accept4$inet6(r2, &(0x7f00000007c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000800)=0x1c, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) write$cgroup_devices(r3, &(0x7f0000000880)={'a', ' *:* ', 'rwm\x00'}, 0xa) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f00000008c0)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x85}, 0x20000810) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000a40)=0x5, &(0x7f0000000a80)=0x4) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000c40)) 04:40:34 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x400000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) sendto$inet6(r0, &(0x7f0000000100)="09532289ca320fc9de0bc2b350dfdfda99c2cf9bce89f0bda62abafc747a4580a6302e16595a6f77f0f323534d5aae82d4efe60ce8d39ac82556264b1e24d83e57b712b3dd25693c06abbdcbfec8baae96d7fc07b99c547616ffadcdce0317c1342dd0b75efb4c9f55bb680a3066e03a09cfa34391e42a56d431725d77f188a96e864f60a1921851ef973a2944c348071fa2417d4644fe2a4573068382718c67fc2e66801d37b4e42a77f2c2dd697d5cff3b", 0xb2, 0x4004000, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x62ce}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x7}}, './file1/file0\x00'}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) getuid() ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0x9}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x401}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r10, {0x200}}, './file1/file0\x00'}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0xffff609d}}, './file1\x00'}) 04:40:34 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2, 0x5, 0x3, 0x6, 0x8, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, 0x700, 0x700, 0x3c888d3d, 0x1}}) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0xd620) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000100)={0x0, {{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff8}}, {{0xa, 0x4e24, 0xa0, @remote, 0x3}}}, 0x108) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000280)=0x1e) socketpair(0xa, 0xa, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x80000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000380)={@remote, 0x36, r3}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)={0x29, 0xc, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xf9, 0x92, [0x101, 0x7, 0x5]}}, @padn={0x1, 0x1, [0x0]}, @generic={0x9, 0x37, "59e6c73082d8473e8abd2bd0d7724a87c75621d44cd0151c829eca4ab0b38ec718aacb767039a03b25ea0ab364eee20ab4fb480d07ca50"}, @jumbo={0xc2, 0x4, 0x9}]}, 0x70) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000480)={0x3}) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000004c0)=0xfe, &(0x7f0000000500)=0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0xa, 0x4e23, 0x8, @local, 0x5c}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="16b470195bce03824642999e81b3967a25a4edd07d119ca65e47d29eed7533ee4bded5fe136cfbbb6175b84ea517e928eff1aec2b969251b06ca38b9caf58c54331092a514e32dcfd17a55db40d38857e9e8b2f5706fe934f81710b642362ef0a23a3bfe5b6d1588cbcaff3454853e6c27ba21", 0x73}, {&(0x7f0000000600)="3e4631fd374034587114d9e6f6b488e1c1829a25d64b996a171ea3c753be4251d3cc34a8242613bac299af44a505e65fed1d9a8b6dd74c304a548f9148c69775e1a8592fedd060e19857082eaf7452c934657c314a5282489aabf43d86269027e223cfa06ab61000245885cba34f0e8f9e1b48b4955241ab1a01f583fca17eb68b570b6ecae2250aff678c9b3dfeba21a8a2018873b22b6716cd5f2bd5ebbf5f410a", 0xa2}], 0x2, &(0x7f0000000700)=[@hopopts={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0xb7}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x40}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800081}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x194, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x44011}, 0x24008004) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3152835}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000b80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000cc0)=0x7f, 0x2) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000000d00)=0x8) 04:40:34 executing program 3: r0 = msgget$private(0x0, 0x4) r1 = getegid() getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, 0xee01, r1, r2, 0x0, 0x1, 0x3}, 0x0, 0x0, 0xffff, 0x42, 0x1, 0x8000, 0x4, 0x2, 0x1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x0) r4 = getuid() getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x0, r4, r1, r6, r1, 0x1a1, 0xf001}, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x9000, 0x9, 0x9b, 0x6, 0x2, r7, 0xffffffffffffffff}) getuid() r8 = msgget(0x0, 0x101) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000300)={{0x0, r5, r1, r3, r1, 0x104, 0x6}, 0x0, 0x0, 0x401, 0x7ff, 0x3ff, 0x4be6a1e0, 0x9b, 0x200, 0x9, 0x9, r7}) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) r10 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) r12 = getgid() r13 = getpgid(r7) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000580)={{0x1, r9, r10, r11, r12}, 0x0, 0x0, 0xfff, 0x5, 0x8, 0x0, 0x0, 0x3, 0x8, 0xd704, r13, r7}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00'}) getuid() 04:40:34 executing program 4: r0 = getpgid(0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r0, 0x5, 0x7fffffff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x1}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000080)) r1 = msgget(0x1, 0x92) r2 = getgid() msgctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, r2, 0x80, 0x9}, 0x0, 0x0, 0x800, 0x6, 0x4d, 0x2, 0x1f, 0x6, 0x1f, 0x8e, r0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"5dbec2426832c9881533f881872a2bb4", 0x0, r3, {0x7ff, 0x7}, {0x8, 0x8001}, 0x8, [0x400, 0xfe1, 0x49, 0x5, 0x4, 0x6, 0x5, 0x23, 0x1, 0x7, 0x8, 0xffff, 0x5, 0x8, 0x96, 0x5]}) msgsnd(r1, &(0x7f0000000280)={0x0, "f9c3ec87bf1d390c3a03edd700f2a7a3d8411371dbd6049818bcc32d8dbac0537e9feb5bbec7794ec0a2b3dc3e068a2634e47e5fe000ce8879fd1e7cc03a7536418393e6bee904fef60a84828765b556b77c72ba27f17d3a7d72e909c20be5d381b728"}, 0x6b, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc2}}, './file0\x00'}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000340)={0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xa3) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x20, 0x0, &(0x7f0000000400)=[@register_looper, @acquire={0x40046305, 0x2}, @decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r8}], 0x58, 0x0, &(0x7f0000000440)="08886c96ac88490e37402a8a1629420c60d223128fc1b3efa61293caac67a0705697cdcc37f3ac112f0bdf9f2e9f980046d697bf1292eb76f76a44ad9add81462a5613161d809e3ec058b14546de2dc4adcf80d9455b07e1"}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x800, 0x0) getgid() ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$SG_GET_REQUEST_TABLE(r10, 0x2286, &(0x7f0000000580)) [ 78.899032] audit: type=1400 audit(1737780034.238:7): avc: denied { execmem } for pid=276 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:40:34 executing program 6: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '],})),./\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4010) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40841}, 0x4000981) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000004c0)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000500)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000540)={@private2, 0x0}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000a00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)={0x380, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x800, 0x20, 0x8b, 0x57f05138}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8698}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x380}, 0x1, 0x0, 0x0, 0x20000011}, 0x4001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r9, {0x80000001}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r10, {0x80000000}}, './file0\x00'}) ioctl$SCSI_IOCTL_PROBE_HOST(r11, 0x5385, &(0x7f0000000b00)={0x43, ""/67}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000b80), r0) 04:40:34 executing program 5: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000084) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x2, 0x10000, 0x42, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0x478846c8684f5d65, 0x8000, 0x9, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xcf, 0x3ff, 0x5, @local, @local, 0x80, 0x20, 0x4, 0x1000}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000780)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={0x424, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa51}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x6e, 0x88, 0x8}, {0x7, 0xf2, 0x60, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}]}, 0x424}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d00), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, r9, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = syz_io_uring_setup(0x2e74, &(0x7f0000000e00)={0x0, 0x826a, 0x0, 0x0, 0x22e, 0x0, r0}, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000e80), &(0x7f0000000ec0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r10, {r0}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000fc0), 0x1) 04:40:34 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) getpeername$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14, 0x0) accept4$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14, 0x80800) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000003c0)={@private0, 0x0}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000500)={@loopback, 0x0}, &(0x7f0000000540)=0x14) accept4$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001040)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000640)={0x984, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x1f, 0x8, 0x3}, {0x9, 0xe0, 0x20, 0x7}, {0x8, 0x8, 0x6, 0x6}, {0x0, 0x6, 0x5, 0x5d}, {0x6, 0x7, 0x7f, 0xffff7ca7}, {0x81, 0x1, 0x4, 0x85dd}, {0x807, 0xfd, 0x81, 0x1ff}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa25}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x3, 0x9, 0x2}, {0x400, 0x1, 0x1, 0x5}, {0xa3a, 0x0, 0x81, 0x5}, {0x3, 0x0, 0x1, 0x3ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd4d}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xca}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbd}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40b}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x984}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r10 = accept$inet6(r0, &(0x7f0000001080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000010c0)=0x1c) r11 = socket$inet6(0xa, 0x80000, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001100)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001180), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x6c, r13, 0x304, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r14, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4c0d5) [ 80.245417] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.251801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.254939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.259838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.262667] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.267701] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.437684] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.441673] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.444225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.447752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.450003] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.451930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.458753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.460167] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.465601] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.465832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.467499] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.471163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.514737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.526223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.538669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.554018] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.555732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.565583] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.569431] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.571938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.575311] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.576683] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.581617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.584522] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.587632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.597170] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.600178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.607698] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.610008] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.612251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.615215] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.617044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.619152] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.621838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.621941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.636638] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 80.638561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.646820] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.650697] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.705201] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.710630] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 80.712511] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.330315] Bluetooth: hci0: command tx timeout [ 82.521531] Bluetooth: hci2: command tx timeout [ 82.522517] Bluetooth: hci1: command tx timeout [ 82.713545] Bluetooth: hci3: command tx timeout [ 82.714209] Bluetooth: hci6: command tx timeout [ 82.715632] Bluetooth: hci4: command tx timeout [ 82.778450] Bluetooth: hci5: command tx timeout [ 82.779028] Bluetooth: hci7: command tx timeout [ 84.379382] Bluetooth: hci0: command tx timeout [ 84.570452] Bluetooth: hci2: command tx timeout [ 84.570938] Bluetooth: hci1: command tx timeout [ 84.762569] Bluetooth: hci3: command tx timeout [ 84.763046] Bluetooth: hci4: command tx timeout [ 84.764088] Bluetooth: hci6: command tx timeout [ 84.826566] Bluetooth: hci7: command tx timeout [ 84.827030] Bluetooth: hci5: command tx timeout [ 86.427386] Bluetooth: hci0: command tx timeout [ 86.618543] Bluetooth: hci1: command tx timeout [ 86.619063] Bluetooth: hci2: command tx timeout [ 86.810455] Bluetooth: hci6: command tx timeout [ 86.810964] Bluetooth: hci4: command tx timeout [ 86.811445] Bluetooth: hci3: command tx timeout [ 86.874645] Bluetooth: hci7: command tx timeout [ 86.875121] Bluetooth: hci5: command tx timeout [ 88.474545] Bluetooth: hci0: command tx timeout [ 88.666528] Bluetooth: hci2: command tx timeout [ 88.667022] Bluetooth: hci1: command tx timeout [ 88.858442] Bluetooth: hci3: command tx timeout [ 88.858928] Bluetooth: hci4: command tx timeout [ 88.859412] Bluetooth: hci6: command tx timeout [ 88.921559] Bluetooth: hci5: command tx timeout [ 88.922016] Bluetooth: hci7: command tx timeout [ 140.029290] syz-executor.0 (284) used greatest stack depth: 23392 bytes left [ 142.710748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.712055] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.714094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.717077] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.718642] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.720576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.841095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.849778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.852667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.861754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.865814] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.869602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.902305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.907101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.909237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.919269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.919241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.924857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.926852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.928587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.931640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.936670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.950595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.955014] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.956010] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.957297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.961905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.966179] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.967704] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.984011] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.988701] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.999531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.004071] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.005607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.006843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 143.008569] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.088044] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 143.095843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 143.104585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 143.158629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 143.173851] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 143.181788] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 143.188848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.213878] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 143.249883] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 143.258464] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 143.264644] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 143.273163] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 144.794495] Bluetooth: hci0: command tx timeout [ 144.921481] Bluetooth: hci1: command tx timeout [ 144.986484] Bluetooth: hci4: command tx timeout [ 145.051391] Bluetooth: hci5: command tx timeout [ 145.051955] Bluetooth: hci3: command tx timeout [ 145.177455] Bluetooth: hci2: command tx timeout [ 145.306450] Bluetooth: hci6: command tx timeout [ 145.370499] Bluetooth: hci7: command tx timeout [ 146.842389] Bluetooth: hci0: command tx timeout [ 146.970768] Bluetooth: hci1: command tx timeout [ 147.034544] Bluetooth: hci4: command tx timeout [ 147.099658] Bluetooth: hci3: command tx timeout [ 147.100955] Bluetooth: hci5: command tx timeout [ 147.226646] Bluetooth: hci2: command tx timeout [ 147.355042] Bluetooth: hci6: command tx timeout [ 147.418660] Bluetooth: hci7: command tx timeout [ 148.889447] Bluetooth: hci0: command tx timeout [ 149.017433] Bluetooth: hci1: command tx timeout [ 149.081465] Bluetooth: hci4: command tx timeout [ 149.145935] Bluetooth: hci5: command tx timeout [ 149.146863] Bluetooth: hci3: command tx timeout [ 149.274430] Bluetooth: hci2: command tx timeout [ 149.401602] Bluetooth: hci6: command tx timeout [ 149.465642] Bluetooth: hci7: command tx timeout [ 150.938600] Bluetooth: hci0: command tx timeout [ 151.065533] Bluetooth: hci1: command tx timeout [ 151.129456] Bluetooth: hci4: command tx timeout [ 151.194452] Bluetooth: hci5: command tx timeout [ 151.195643] Bluetooth: hci3: command tx timeout [ 151.321487] Bluetooth: hci2: command tx timeout [ 151.451448] Bluetooth: hci6: command tx timeout [ 151.514574] Bluetooth: hci7: command tx timeout [ 204.700017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.702451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.703676] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.708115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.710617] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.712271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.786823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.792505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.796385] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.800947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.803087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.804216] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.899780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.907631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.912405] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.919881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.923985] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.925000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.969156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.971706] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.977812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.978962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.990500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.991590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.004251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.006170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.011111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.016504] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 205.018761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.022159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.022905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.046851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.054356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.059930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.064759] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.073721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.164193] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 205.173847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.180853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 205.200778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.228213] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 205.236222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.271185] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.271554] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 205.273291] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 205.280552] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.285668] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 205.293719] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 206.745495] Bluetooth: hci0: command tx timeout [ 206.873544] Bluetooth: hci1: command tx timeout [ 207.001486] Bluetooth: hci2: command tx timeout [ 207.065456] Bluetooth: hci5: command tx timeout [ 207.129478] Bluetooth: hci3: command tx timeout [ 207.130637] Bluetooth: hci4: command tx timeout [ 207.385470] Bluetooth: hci7: command tx timeout [ 207.386715] Bluetooth: hci6: command tx timeout [ 208.795362] Bluetooth: hci0: command tx timeout [ 208.921609] Bluetooth: hci1: command tx timeout [ 209.049514] Bluetooth: hci2: command tx timeout [ 209.114107] Bluetooth: hci5: command tx timeout [ 209.177518] Bluetooth: hci3: command tx timeout [ 209.178536] Bluetooth: hci4: command tx timeout [ 209.434394] Bluetooth: hci6: command tx timeout [ 209.435239] Bluetooth: hci7: command tx timeout [ 210.843462] Bluetooth: hci0: command tx timeout [ 210.969528] Bluetooth: hci1: command tx timeout [ 211.097599] Bluetooth: hci2: command tx timeout [ 211.161479] Bluetooth: hci5: command tx timeout [ 211.225579] Bluetooth: hci3: command tx timeout [ 211.226575] Bluetooth: hci4: command tx timeout [ 211.481648] Bluetooth: hci7: command tx timeout [ 211.482789] Bluetooth: hci6: command tx timeout [ 212.889400] Bluetooth: hci0: command tx timeout [ 213.018404] Bluetooth: hci1: command tx timeout [ 213.145395] Bluetooth: hci2: command tx timeout [ 213.209359] Bluetooth: hci5: command tx timeout [ 213.274438] Bluetooth: hci3: command tx timeout [ 213.274888] Bluetooth: hci4: command tx timeout [ 213.530449] Bluetooth: hci6: command tx timeout [ 213.530943] Bluetooth: hci7: command tx timeout [ 267.126037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.129608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.131948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.137877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.141242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.143786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.196563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.199702] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.200961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.204069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.205995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.209594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.215035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.219600] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 267.222261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.226282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.235052] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 267.239474] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.395280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.398797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.402919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.414247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.419680] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 267.423763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.491240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.493892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.495971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.499972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.503046] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 267.505125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.562631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.574134] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 267.593464] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.600711] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 267.615507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 267.616065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.620860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 267.629687] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.635506] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 267.636074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 267.637567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 267.639768] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 267.645700] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 267.650018] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.650526] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 267.678361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 267.682682] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 267.688758] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 269.209495] Bluetooth: hci0: command tx timeout [ 269.274362] Bluetooth: hci2: command tx timeout [ 269.337499] Bluetooth: hci1: command tx timeout [ 269.594658] Bluetooth: hci4: command tx timeout [ 269.594811] Bluetooth: hci3: command tx timeout [ 269.723914] Bluetooth: hci5: command tx timeout [ 269.723965] Bluetooth: hci6: command tx timeout [ 269.791803] Bluetooth: hci7: command tx timeout [ 271.257496] Bluetooth: hci0: command tx timeout [ 271.321686] Bluetooth: hci2: command tx timeout [ 271.385630] Bluetooth: hci1: command tx timeout [ 271.641489] Bluetooth: hci3: command tx timeout [ 271.642116] Bluetooth: hci4: command tx timeout [ 271.769690] Bluetooth: hci6: command tx timeout [ 271.769714] Bluetooth: hci5: command tx timeout [ 271.833533] Bluetooth: hci7: command tx timeout [ 273.305583] Bluetooth: hci0: command tx timeout [ 273.371327] Bluetooth: hci2: command tx timeout [ 273.433413] Bluetooth: hci1: command tx timeout [ 273.689419] Bluetooth: hci4: command tx timeout [ 273.689922] Bluetooth: hci3: command tx timeout [ 273.817437] Bluetooth: hci5: command tx timeout [ 273.818595] Bluetooth: hci6: command tx timeout [ 273.882448] Bluetooth: hci7: command tx timeout [ 275.353447] Bluetooth: hci0: command tx timeout [ 275.417939] Bluetooth: hci2: command tx timeout [ 275.481447] Bluetooth: hci1: command tx timeout [ 275.739384] Bluetooth: hci3: command tx timeout [ 275.740040] Bluetooth: hci4: command tx timeout [ 275.865417] Bluetooth: hci6: command tx timeout [ 275.865933] Bluetooth: hci5: command tx timeout [ 275.929543] Bluetooth: hci7: command tx timeout [ 329.770852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.776768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.780568] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.788796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.796171] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 329.799080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.842645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.845367] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.847358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.853483] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.860495] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 329.866678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.917701] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.927623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.938879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.954871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.968790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 329.970989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.119907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.122681] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.127953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.134273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.140713] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 330.142993] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.191867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 330.197695] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 330.201027] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.204479] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.209768] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.214166] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 330.218927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.223734] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 330.227439] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 330.229888] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.233138] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 330.236726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.238906] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.240876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.246708] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.277174] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.283845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 330.287641] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 330.294460] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.304759] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 330.305092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.315815] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 330.324132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 330.335736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.865674] Bluetooth: hci0: command tx timeout [ 331.929417] Bluetooth: hci1: command tx timeout [ 332.058579] Bluetooth: hci2: command tx timeout [ 332.249526] Bluetooth: hci3: command tx timeout [ 332.314620] Bluetooth: hci7: command tx timeout [ 332.377419] Bluetooth: hci6: command tx timeout [ 332.441498] Bluetooth: hci4: command tx timeout [ 332.442659] Bluetooth: hci5: command tx timeout [ 333.913764] Bluetooth: hci0: command tx timeout [ 333.977661] Bluetooth: hci1: command tx timeout [ 334.105804] Bluetooth: hci2: command tx timeout [ 334.297415] Bluetooth: hci3: command tx timeout [ 334.361406] Bluetooth: hci7: command tx timeout [ 334.426392] Bluetooth: hci6: command tx timeout [ 334.489503] Bluetooth: hci5: command tx timeout [ 334.490427] Bluetooth: hci4: command tx timeout [ 335.961525] Bluetooth: hci0: command tx timeout [ 336.027346] Bluetooth: hci1: command tx timeout [ 336.153559] Bluetooth: hci2: command tx timeout [ 336.345451] Bluetooth: hci3: command tx timeout [ 336.409556] Bluetooth: hci7: command tx timeout [ 336.473446] Bluetooth: hci6: command tx timeout [ 336.537442] Bluetooth: hci5: command tx timeout [ 336.537466] Bluetooth: hci4: command tx timeout [ 338.012555] Bluetooth: hci0: command tx timeout [ 338.073503] Bluetooth: hci1: command tx timeout [ 338.201539] Bluetooth: hci2: command tx timeout [ 338.393551] Bluetooth: hci3: command tx timeout [ 338.457642] Bluetooth: hci7: command tx timeout [ 338.522404] Bluetooth: hci6: command tx timeout [ 338.585514] Bluetooth: hci4: command tx timeout [ 338.586470] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 04:45:35 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea0000d25200 RCX=ffffffff819ee315 RDX=ffff88800d808000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff888035657b88 R8 =0000000000000000 R9 =fffff940001a4a40 R10=0000000000000000 R11=0000000000000001 R12=0000000000000003 R13=ffffea0000d25230 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff819ee318 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe57f3c4e28 CR3=000000003371e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88806cf00000 RCX=ffffffff8150248e RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf36250 RBP=0000000000000001 RSP=ffff888009737be0 R8 =0000000000000000 R9 =fffffbfff0c8087a R10=ffffffff864043d7 R11=0000000000000532 R12=ffffffff85c18be0 R13=ffffffff815aca24 R14=000000000003a64c R15=0000000000000002 RIP=ffffffff81593800 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f96876198e0 CR3=0000000018a00000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000