Warning: Permanently added '[localhost]:33247' (ECDSA) to the list of known hosts. 2025/04/25 16:04:24 fuzzer started 2025/04/25 16:04:24 dialing manager at localhost:46629 syzkaller login: [ 93.973078] cgroup: Unknown subsys name 'net' [ 94.111011] cgroup: Unknown subsys name 'cpuset' [ 94.146994] cgroup: Unknown subsys name 'rlimit' 2025/04/25 16:04:40 syscalls: 204 2025/04/25 16:04:40 code coverage: enabled 2025/04/25 16:04:40 comparison tracing: enabled 2025/04/25 16:04:40 extra coverage: enabled 2025/04/25 16:04:40 setuid sandbox: enabled 2025/04/25 16:04:40 namespace sandbox: enabled 2025/04/25 16:04:40 Android sandbox: enabled 2025/04/25 16:04:40 fault injection: enabled 2025/04/25 16:04:40 leak checking: enabled 2025/04/25 16:04:40 net packet injection: enabled 2025/04/25 16:04:40 net device setup: enabled 2025/04/25 16:04:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/25 16:04:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/25 16:04:40 USB emulation: enabled 2025/04/25 16:04:40 hci packet injection: enabled 2025/04/25 16:04:40 wifi device emulation: enabled 2025/04/25 16:04:40 802.15.4 emulation: enabled 2025/04/25 16:04:40 fetching corpus: 0, signal 0/0 (executing program) 2025/04/25 16:04:42 starting 8 fuzzer processes 16:04:42 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "9d331e86f868ebec399e251cc939b31b599a924bdac6622c9511e98e701d166fc54ae4861416eaf5725fa11ebdae238c1feaad3c02153c56a7422dfa52125f96", 0x19}, 0x48, 0xfffffffffffffffb) r2 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', r1) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000240)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x60000, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x60000, 0x0) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000300)=@lsasf={0x8, 0x2}) r4 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f00000003c0)={0x0, "68cc6a61c72e61ed70d3e990a4a7ee0367f0fa76e76621039b939316072995d8ccf52c99c69058ebca5d79c46d60c9537ccb9666538060abd3303523976faabb", 0xe96}, 0x48, r1) keyctl$update(0x2, r4, &(0x7f0000000440)="868b644d45447bb5648711f5266ccc6c583449f88325a2987efb1cafdfdd4a2d2c87fcb3940166", 0x27) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x48040}, 0x20000080) keyctl$get_keyring_id(0x0, r2, 0x5) r5 = add_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="d4a6deeec34d96cde8bec6472e530fdb7ae42d3d27e788bd8d7c3f244e4ff09501f43ac260ddaa5abdc198c69dc1cd2cb0afb5aa7ffed3f38484131d1feed4527be73f0186fb5106aa880af21f8e50420b72cee6e773ee45e4d88f575ed059d18d698dcaee706682ba380f9dfc6a8179dcaad4b71468a88109e2692e8cdedbcb559f7a4539a86cf95d57e122786e64daf68ba585d16ebb332b321e283a47aed6928838d7ac6c7e2cc364e88b541ecced41590618e43733775116e0e20ca34e97dc7bf92e0b89bbfa87f83e831db5bf2c07ec190edde6e1cd8c7239aae830a7ff2caad2", 0xe3, r4) keyctl$get_security(0x11, r5, &(0x7f0000000740)=""/221, 0xdd) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x100000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = syz_open_dev$mouse(&(0x7f0000000940), 0x3, 0x8000) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xbdaa283d9fb7d9c5, 0x10, r6, 0xbb) openat$sr(0xffffffffffffff9c, &(0x7f0000000980), 0x400142, 0x0) add_key(&(0x7f00000009c0)='.dead\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0x0) 16:04:42 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x26ff739c7e8810e1}, 0x40) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000140)=0x683a7a35, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000114) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000400)={0x3f, 0x81, 0x1, 0xff, 0x0, 0x80}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000500)={0xfffffffffffffffe, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1760e0fb}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c000}, 0xc017) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc200}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20024000}, 0x80) r5 = syz_open_dev$sg(&(0x7f0000000700), 0xfffffffffffffff8, 0x8000) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000740)) ioctl$CDROMSTOP(r3, 0x5307) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9a}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}}, 0x1) ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f00000008c0)={0x83, 0x5, 0x6, 0xf0, 0x9, 0x4}) ioctl$CDROM_CLEAR_OPTIONS(r3, 0x5321, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001340)={{{@in6, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000001440)=0xe8) 16:04:42 executing program 2: bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xfffffff9, 0x4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @empty}, {0x306, @multicast}, 0x40, {0x2, 0x4e22, @local}, 'ip6erspan0\x00'}) r0 = clone3(&(0x7f0000000380)={0x0, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x1e}, &(0x7f00000001c0)=""/239, 0xef, &(0x7f00000002c0)=""/81, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) rt_sigqueueinfo(r0, 0x24, &(0x7f0000000400)={0x30, 0x6, 0x400}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2aec}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) ptrace$getsig(0x4202, r1, 0x80000000, &(0x7f0000000600)) ioctl$CDROMPLAYTRKIND(r3, 0x5304, &(0x7f0000000680)={0xfb, 0x6, 0x8, 0xc}) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000006c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xc) r4 = fork() ptrace$getsig(0x4202, r4, 0x40b, &(0x7f0000000700)) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000007c0)={0x1000, 0x10, '\x00', 0x0, &(0x7f0000000780)=[0x0, 0x0]}) ptrace$getsig(0x4202, r0, 0x12d0, &(0x7f0000000800)) ioctl$CDROM_GET_CAPABILITY(r2, 0x5331) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x20000, 0x0) ioctl$SG_SET_COMMAND_Q(r6, 0x2271, &(0x7f00000008c0)) 16:04:42 executing program 3: tkill(0xffffffffffffffff, 0x3e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x260, 0x12, 0x400, 0x70bd2a, 0x25dfdbfd, {0x22, 0x20, 0xae, 0x0, {0x4e20, 0x4e22, [0x7, 0x5, 0x7, 0x8], [0x7, 0x0, 0x9, 0x20], r0, [0xfffffffd, 0x6]}, 0xd, 0xce09}, [@INET_DIAG_REQ_BYTECODE={0x68, 0x1, "b45ca6b581f99ed30a0d4a7ed320b0548501e8136e501fd42bd647c768e34875882c6f686f1e1deb94bc3d238a0395b51953a14a179c2aa107d745220571693584c1716e4539fed27ca543c2c062652dda55fa855ae9a95d253c3bef7376bc083f42e68e"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "b7313f50fb337713c9f382e64148e83f6755bff3a9970bca5eea167f772218d3bb067405df3624d0be585a5319a833566a1b0b09ec068d37f823c5c015794b059692ca914968529a9214c764950b8486847ff2ee2f5cba0b0d1c5b445efa4aa572f7f02e07502f283d18fd8ab2072b4ca17808e823483afbbfd5b57df014d6c4141406d1b82a64"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "04e55efeb57ba28237ac52b9c0384fc5076f0ccdbe67af55f4f586d67dc5c226afc0168694eeb4df9ff6112644289deb4685d37315caff7dc6f5269a6f2c4ce5cc2b1e4cd4474c803b42df59f61c256423d9789d604dfe2f847961605841743328ed"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "e67cfd0375774f5a76f1a3c4bc9a77378483276dbce2ed663b66fbc7b6696528bf0d1125d33d60ed82ea5c236f75169908c04e5a163765edbdeeee9ffe6338ae134a45ebb29dd6d88f0ab018675e2c5b11a05af0f423178a0e9ea7b4f4c21fc79de0c97acd8f80ad75779cf6a6a1f7981aabcf14204f634d9b04f1203d9f2fb55b87dd66cfa00dd3560a7233b8f83c6978961143002f8febfc55feb4e157d2c31656de0221346e1028e919eaa5ba3219dbf1bd"}]}, 0x260}, 0x1, 0x0, 0x0, 0x44044040}, 0x40000) r1 = syz_open_dev$mouse(&(0x7f0000000380), 0x8, 0x80) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x81) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r0, 0x4, 0x5, 0x3f, 0x7, 0x21, @mcast2, @private1, 0x7800, 0x8, 0x1f, 0x3}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000640)=0x3, 0x4) write$cgroup_devices(r1, &(0x7f0000000680)={'c', ' *:* ', 'rwm\x00'}, 0xa) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x34}, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x8440, 0x0) ioctl$CDROMSTOP(r6, 0x5307) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r7) prlimit64(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000008c0)) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', r4, 0x29, 0x1f, 0x5, 0x7fff, 0x62, @private1={0xfc, 0x1, '\x00', 0x7}, @local, 0x0, 0x700, 0x0, 0x7fffffff}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xe0, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40840}, 0x2000c0c1) 16:04:42 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x9885, 0x40, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0xf7, 0xfffffffe, 0x80000001, "dba14260427bc81dc0da665e3ecdcbf9c6f60d32f490c86cf07aed75d9fccf743c786098100691923a43843a269af817df7536c9714ed68f5293f184fc228b611dc9ec8d6314326c4ded9d917e1a5f1de4d77f770293c347380bb402c69733f5a8da071e335300803eed108310e3df83dbe59e748892273dda67660ba79cece12904249d6af5d5a3e16059ce3e79fe1b0e1cd12d6b921d1faeb63cbb40fee2db2392eba42e4ec8eb5aa119acd58d2ab0404149f3dd4f30e31caf041c57adb449a57e9c91e44281503a05f2380fb66a3e29d3da65172b13b33511cf23d8982ed100dc03f32d9f40afdda93c9fe25f1fbe4e543c74e1e0e3"}) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x4800) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000240)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000002c0)=0x1) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000300)) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001380)={&(0x7f0000000340), &(0x7f0000000380)=""/4096, 0x1000}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000013c0), 0x80000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001400)) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000001440)) r3 = syz_open_dev$usbmon(&(0x7f0000001480), 0x81, 0x101000) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0xc0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000001540)={0xffffffffffffff20, 0x28, '\x00', 0x1, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000001580)) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) [ 111.104343] audit: type=1400 audit(1745597082.267:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:04:42 executing program 5: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0900, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0xfffffd71}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x7fff, 0x200000) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x210080, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18401100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000280)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000300)={0x4, 0x8, '\x00', 0x1, &(0x7f00000002c0)=[0x0]}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000340)=0x67, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', r5, 0x4, 0x6, 0x7, 0x0, 0x30, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, 0x8000, 0x700, 0x9e, 0x10}}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'syztnl1\x00', r5, 0x20, 0x1, 0x658ee8dc, 0x9, {{0x1e, 0x4, 0x2, 0xb, 0x78, 0x68, 0x0, 0x9, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x14}, {[@cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x7, 0x4, "04ee"}, {0x2, 0x4, "ac87"}, {0x0, 0x3, '%'}, {0x5, 0x9, "cb87b93de141b9"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0x2, [{0x1, 0x3, 'p'}, {0x1, 0x5, "94ffc0"}]}, @lsrr={0x83, 0xb, 0xfd, [@multicast1, @local]}, @rr={0x7, 0xf, 0xdf, [@broadcast, @empty, @local]}, @end, @end, @rr={0x7, 0x1b, 0x44, [@dev={0xac, 0x14, 0x14, 0x17}, @local, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102, @private=0xa010101, @multicast2]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20084091}, 0x2) socketpair(0x22, 0x80000, 0x8, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4001) 16:04:42 executing program 6: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x3, 0x7, 0x3d, @mcast2, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8, 0x1, 0x4, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x3c0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1d7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2283}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x9, 0x4, 0x4d5}, {0x9, 0x74, 0xff, 0x401}, {0x88, 0xcc, 0x5, 0x80}, {0x2, 0x0, 0x2, 0x9}, {0x2, 0x4, 0x1, 0x6}, {0x7447, 0xb9, 0x40, 0x6}, {0x200, 0x5, 0x1, 0x2898}]}}}]}}, {{0x8, 0x1, r1}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4020}, 0x20000000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004044}, 0x8001) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x319000, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r1, 0x29, 0x0, 0x51, 0x8, 0x42, @remote, @private0, 0x40, 0x700, 0x9431c314, 0xfe000000}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xe4, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000b00)) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000b40)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl1\x00', r1, 0x4, 0xff, 0x1, 0x1ff, 0x30, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x6, 0xc4}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000c40)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000cc0)={r5, 0x1, r2, 0x7, 0x80000}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r2) r8 = getpgid(r6) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000d80), 0x400002, 0x0) r10 = syz_open_procfs$namespace(r6, &(0x7f0000000dc0)='ns/pid\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x148, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40080}, 0x40041) 16:04:42 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) write(r0, &(0x7f0000000040)="f3bbf800e7194948011dc8580fed1c550bc28535760d63e5da567164dd726381c398d270283aebee7b7bbc57e95620c51d62b1d958932ffab3b82d1f", 0x3c) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x401, 0x8000) ioctl$CDROMSETSPINDOWN(r1, 0x531e, &(0x7f00000000c0)=0x9) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000100)) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000140)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x6, 0x9e, 0xce, 0xff}, {0x8fa, 0x4, 0x5, 0xfffffff9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000280)=r3) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xa1, 0x9, 0x3ff0000, 0x21, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x20, 0x8000, 0x1, 0x9}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c8, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xaa97}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x200, 0xff, 0x0, 0x7}, {0x34, 0x9, 0x2, 0xf3d}, {0x6, 0x2, 0x40, 0x2}, {0x2, 0x8, 0x0, 0x7}, {0x9, 0x8, 0x2, 0x4e1}, {0x100, 0x9, 0x0, 0x8d}, {0x8, 0xeb, 0x1, 0x10000}, {0x40, 0x8, 0xee, 0x6}, {0x7, 0x7, 0xff, 0x8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4021}, 0x4000000) r5 = syz_open_dev$mouse(&(0x7f0000000640), 0x1000, 0x1) ioctl$CDROMPLAYTRKIND(r5, 0x5304, &(0x7f0000000680)={0x3, 0x5, 0xed, 0x6}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r5) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', r4, 0x29, 0x55, 0x20, 0x2, 0x10, @mcast1, @private1, 0x7, 0x80, 0x8, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'syztnl2\x00', r4, 0x2f, 0xe, 0x6, 0x9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x67ababccc7868f88, 0x9, 0x101}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x17c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xeca}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x17c}}, 0x24040801) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10040) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000c80)={'ip6tnl0\x00', &(0x7f0000000c00)={'ip6tnl0\x00', r7, 0x0, 0x3, 0x5, 0x673f, 0x40, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x10, 0x2, 0x2}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001340)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f0000000e40)={0x494, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r9}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5c, 0x0, 0x3, 0x6}, {0xfff8, 0x64, 0xb4, 0x8c}, {0x8, 0xaa, 0x0, 0x1}, {0x7ff, 0x7f, 0x7, 0x278c}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5658}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6a}}}]}}, {{0x8, 0x1, r4}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040021) [ 112.738615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.743786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.746391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.757350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.762006] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.766115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.770070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.775870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.778288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.787901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.794081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.801792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.816108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.818108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.824241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.871869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.877790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.893199] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.915590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.923227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.929052] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.945386] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.947518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.947624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.958098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.973008] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.975884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.982409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.987363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.990117] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.027310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.037784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.046039] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.051910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.054871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.062987] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.069189] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.088133] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.115970] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.119829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.809515] Bluetooth: hci0: command tx timeout [ 114.873022] Bluetooth: hci2: command tx timeout [ 114.873509] Bluetooth: hci1: command tx timeout [ 115.063775] Bluetooth: hci4: command tx timeout [ 115.064140] Bluetooth: hci3: command tx timeout [ 115.127735] Bluetooth: hci6: command tx timeout [ 115.128933] Bluetooth: hci5: command tx timeout [ 115.193633] Bluetooth: hci7: command tx timeout [ 116.856696] Bluetooth: hci0: command tx timeout [ 116.920898] Bluetooth: hci2: command tx timeout [ 116.921133] Bluetooth: hci1: command tx timeout [ 117.111656] Bluetooth: hci4: command tx timeout [ 117.112596] Bluetooth: hci3: command tx timeout [ 117.175785] Bluetooth: hci5: command tx timeout [ 117.176210] Bluetooth: hci6: command tx timeout [ 117.240031] Bluetooth: hci7: command tx timeout [ 118.903524] Bluetooth: hci0: command tx timeout [ 118.967544] Bluetooth: hci2: command tx timeout [ 118.967583] Bluetooth: hci1: command tx timeout [ 119.159571] Bluetooth: hci4: command tx timeout [ 119.160019] Bluetooth: hci3: command tx timeout [ 119.225528] Bluetooth: hci5: command tx timeout [ 119.225691] Bluetooth: hci6: command tx timeout [ 119.288586] Bluetooth: hci7: command tx timeout [ 120.952464] Bluetooth: hci0: command tx timeout [ 121.015550] Bluetooth: hci1: command tx timeout [ 121.015659] Bluetooth: hci2: command tx timeout [ 121.207647] Bluetooth: hci3: command tx timeout [ 121.208690] Bluetooth: hci4: command tx timeout [ 121.272188] Bluetooth: hci6: command tx timeout [ 121.272532] Bluetooth: hci5: command tx timeout [ 121.336024] Bluetooth: hci7: command tx timeout [ 172.838885] syz-executor.0 (285) used greatest stack depth: 24952 bytes left [ 173.242182] syz-executor.2 (283) used greatest stack depth: 24744 bytes left [ 175.440285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.447944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.453787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.466252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.476515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.536568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.539772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.560925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.575015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.580047] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.586901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.594061] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.598544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.620687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.631219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.649804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.658541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.666927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.683485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.693221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.831860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.842001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.874596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.876893] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.890051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.897053] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.908256] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.916556] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.917161] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.920911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.945925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.962097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.978616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.995939] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.001282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.022716] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.048045] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.060225] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.096790] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.122278] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.591880] Bluetooth: hci0: command tx timeout [ 177.655808] Bluetooth: hci1: command tx timeout [ 177.720735] Bluetooth: hci2: command tx timeout [ 177.783806] Bluetooth: hci3: command tx timeout [ 178.039523] Bluetooth: hci4: command tx timeout [ 178.104044] Bluetooth: hci6: command tx timeout [ 178.168515] Bluetooth: hci5: command tx timeout [ 178.231495] Bluetooth: hci7: command tx timeout [ 179.639898] Bluetooth: hci0: command tx timeout [ 179.704093] Bluetooth: hci1: command tx timeout [ 179.770201] Bluetooth: hci2: command tx timeout [ 179.832966] Bluetooth: hci3: command tx timeout [ 180.087893] Bluetooth: hci4: command tx timeout [ 180.151593] Bluetooth: hci6: command tx timeout [ 180.215585] Bluetooth: hci5: command tx timeout [ 180.279731] Bluetooth: hci7: command tx timeout [ 181.688786] Bluetooth: hci0: command tx timeout [ 181.751928] Bluetooth: hci1: command tx timeout [ 181.816930] Bluetooth: hci2: command tx timeout [ 181.879561] Bluetooth: hci3: command tx timeout [ 182.136193] Bluetooth: hci4: command tx timeout [ 182.199799] Bluetooth: hci6: command tx timeout [ 182.263546] Bluetooth: hci5: command tx timeout [ 182.328632] Bluetooth: hci7: command tx timeout [ 183.735555] Bluetooth: hci0: command tx timeout [ 183.799494] Bluetooth: hci1: command tx timeout [ 183.863766] Bluetooth: hci2: command tx timeout [ 183.927694] Bluetooth: hci3: command tx timeout [ 184.183515] Bluetooth: hci4: command tx timeout [ 184.248526] Bluetooth: hci6: command tx timeout [ 184.311692] Bluetooth: hci5: command tx timeout [ 184.377461] Bluetooth: hci7: command tx timeout [ 238.025989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.029747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.032088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.040155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.042214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.293144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.297819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.303764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.308302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.310238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.354000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.356251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.361534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.366370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.374805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.383796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.385045] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.399601] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.399738] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.404860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.693972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.702353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.705388] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.711777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.729072] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.735198] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.737021] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.737984] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.739410] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.744110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.756107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.757511] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.763091] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.769929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.791917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.794246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.805807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.823196] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.823685] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.832468] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.119676] Bluetooth: hci0: command tx timeout [ 240.375525] Bluetooth: hci1: command tx timeout [ 240.439664] Bluetooth: hci2: command tx timeout [ 240.503540] Bluetooth: hci3: command tx timeout [ 240.888135] Bluetooth: hci6: command tx timeout [ 240.888165] Bluetooth: hci5: command tx timeout [ 240.951687] Bluetooth: hci4: command tx timeout [ 240.952680] Bluetooth: hci7: command tx timeout [ 242.167807] Bluetooth: hci0: command tx timeout [ 242.423918] Bluetooth: hci1: command tx timeout [ 242.487944] Bluetooth: hci2: command tx timeout [ 242.551894] Bluetooth: hci3: command tx timeout [ 242.937373] Bluetooth: hci5: command tx timeout [ 242.937409] Bluetooth: hci6: command tx timeout [ 242.999521] Bluetooth: hci7: command tx timeout [ 242.999997] Bluetooth: hci4: command tx timeout [ 244.215800] Bluetooth: hci0: command tx timeout [ 244.471694] Bluetooth: hci1: command tx timeout [ 244.535788] Bluetooth: hci2: command tx timeout [ 244.600136] Bluetooth: hci3: command tx timeout [ 244.983511] Bluetooth: hci6: command tx timeout [ 244.984831] Bluetooth: hci5: command tx timeout [ 245.047485] Bluetooth: hci7: command tx timeout [ 245.049049] Bluetooth: hci4: command tx timeout [ 246.263667] Bluetooth: hci0: command tx timeout [ 246.520717] Bluetooth: hci1: command tx timeout [ 246.583495] Bluetooth: hci2: command tx timeout [ 246.647665] Bluetooth: hci3: command tx timeout [ 247.031868] Bluetooth: hci5: command tx timeout [ 247.033471] Bluetooth: hci6: command tx timeout [ 247.096107] Bluetooth: hci4: command tx timeout [ 247.096609] Bluetooth: hci7: command tx timeout [ 300.434821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.438738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.443937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.454889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.463203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.559520] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.564884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.569747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.584950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.594594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.609911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.614057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.638059] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.664007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.677655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.741635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.747086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.759698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.768941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.771364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.782054] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.788606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.795199] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.800718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.820725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.883665] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.889731] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.916962] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.960992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.986078] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.988350] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.991901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.994191] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.999666] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.001290] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.005795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.058583] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.072142] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.102999] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.132930] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.521581] Bluetooth: hci0: command tx timeout [ 302.647874] Bluetooth: hci1: command tx timeout [ 302.776671] Bluetooth: hci2: command tx timeout [ 302.903691] Bluetooth: hci4: command tx timeout [ 302.967539] Bluetooth: hci3: command tx timeout [ 303.095800] Bluetooth: hci5: command tx timeout [ 303.095952] Bluetooth: hci6: command tx timeout [ 303.223732] Bluetooth: hci7: command tx timeout [ 304.567797] Bluetooth: hci0: command tx timeout [ 304.695715] Bluetooth: hci1: command tx timeout [ 304.823821] Bluetooth: hci2: command tx timeout [ 304.951761] Bluetooth: hci4: command tx timeout [ 305.016101] Bluetooth: hci3: command tx timeout [ 305.143586] Bluetooth: hci6: command tx timeout [ 305.143697] Bluetooth: hci5: command tx timeout [ 305.271503] Bluetooth: hci7: command tx timeout [ 306.617480] Bluetooth: hci0: command tx timeout [ 306.743549] Bluetooth: hci1: command tx timeout [ 306.871518] Bluetooth: hci2: command tx timeout [ 307.000635] Bluetooth: hci4: command tx timeout [ 307.065503] Bluetooth: hci3: command tx timeout [ 307.191519] Bluetooth: hci5: command tx timeout [ 307.194569] Bluetooth: hci6: command tx timeout [ 307.319700] Bluetooth: hci7: command tx timeout [ 308.663665] Bluetooth: hci0: command tx timeout [ 308.791514] Bluetooth: hci1: command tx timeout [ 308.919616] Bluetooth: hci2: command tx timeout [ 309.047494] Bluetooth: hci4: command tx timeout [ 309.111511] Bluetooth: hci3: command tx timeout [ 309.239512] Bluetooth: hci6: command tx timeout [ 309.239946] Bluetooth: hci5: command tx timeout [ 309.367574] Bluetooth: hci7: command tx timeout [ 363.282673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.288378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.290822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.300123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.305152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.419306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.421625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.424693] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.428541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.433785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.440643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.448916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.459849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.467956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.473405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.487620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.494054] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.529001] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.533321] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.537073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.560010] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.584058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.585979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.590528] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.598124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.606746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.610687] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.621752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.668059] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.673993] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.688938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.694010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.701513] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.716643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.736147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.821961] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.828943] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.854230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.926062] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.934709] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.367736] Bluetooth: hci0: command tx timeout [ 365.559569] Bluetooth: hci1: command tx timeout [ 365.559637] Bluetooth: hci2: command tx timeout [ 365.687532] Bluetooth: hci4: command tx timeout [ 365.752824] Bluetooth: hci5: command tx timeout [ 365.943926] Bluetooth: hci3: command tx timeout [ 365.944469] Bluetooth: hci6: command tx timeout [ 366.071563] Bluetooth: hci7: command tx timeout [ 367.416650] Bluetooth: hci0: command tx timeout [ 367.607598] Bluetooth: hci2: command tx timeout [ 367.609190] Bluetooth: hci1: command tx timeout [ 367.736526] Bluetooth: hci4: command tx timeout [ 367.799636] Bluetooth: hci5: command tx timeout [ 367.991639] Bluetooth: hci3: command tx timeout [ 367.992746] Bluetooth: hci6: command tx timeout [ 368.120648] Bluetooth: hci7: command tx timeout [ 369.464184] Bluetooth: hci0: command tx timeout [ 369.655721] Bluetooth: hci1: command tx timeout [ 369.655771] Bluetooth: hci2: command tx timeout [ 369.784580] Bluetooth: hci4: command tx timeout [ 369.847909] Bluetooth: hci5: command tx timeout [ 370.042481] Bluetooth: hci6: command tx timeout [ 370.042536] Bluetooth: hci3: command tx timeout [ 370.170696] Bluetooth: hci7: command tx timeout [ 371.512513] Bluetooth: hci0: command tx timeout [ 371.705900] Bluetooth: hci2: command tx timeout [ 371.705967] Bluetooth: hci1: command tx timeout [ 371.831542] Bluetooth: hci4: command tx timeout [ 371.895501] Bluetooth: hci5: command tx timeout [ 372.088634] Bluetooth: hci6: command tx timeout [ 372.089113] Bluetooth: hci3: command tx timeout [ 372.216913] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 16:09:43 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880e564b000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806ce31850 RBP=ffffffff85c1bac0 RSP=ffff88802a3d7380 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000003 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000092800 RIP=ffffffff815a7750 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f65a903a540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f65a910b710 CR3=000000002f948000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff813508dd RDI=fffffbfff0b83758 RBP=ffffffff85c1bac0 RSP=ffff88802db1f1f0 R8 =0000000000000000 R9 =0000000000000000 R10=ffff88802db1f328 R11=ffff88806cf3b950 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88802db1f328 RIP=ffffffff8151853c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1e5a4b88e0 CR3=0000000022b20000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000