syzkaller login: [ 56.210974] sshd (238) used greatest stack depth: 24192 bytes left [ 58.655716] sshd (239) used greatest stack depth: 24000 bytes left Warning: Permanently added '[localhost]:36430' (ECDSA) to the list of known hosts. 2024/10/17 12:51:51 fuzzer started 2024/10/17 12:51:51 dialing manager at localhost:46303 [ 75.096254] cgroup: Unknown subsys name 'net' [ 75.221271] cgroup: Unknown subsys name 'cpuset' [ 75.238488] cgroup: Unknown subsys name 'rlimit' 2024/10/17 12:52:17 syscalls: 200 2024/10/17 12:52:17 code coverage: enabled 2024/10/17 12:52:17 comparison tracing: enabled 2024/10/17 12:52:17 extra coverage: enabled 2024/10/17 12:52:17 setuid sandbox: enabled 2024/10/17 12:52:17 namespace sandbox: enabled 2024/10/17 12:52:17 Android sandbox: enabled 2024/10/17 12:52:17 fault injection: enabled 2024/10/17 12:52:17 leak checking: enabled 2024/10/17 12:52:17 net packet injection: enabled 2024/10/17 12:52:17 net device setup: enabled 2024/10/17 12:52:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/17 12:52:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/17 12:52:17 USB emulation: enabled 2024/10/17 12:52:17 hci packet injection: enabled 2024/10/17 12:52:17 wifi device emulation: enabled 2024/10/17 12:52:17 802.15.4 emulation: enabled 2024/10/17 12:52:17 fetching corpus: 0, signal 0/0 (executing program) 2024/10/17 12:52:18 starting 8 fuzzer processes 12:52:18 executing program 0: r0 = semget$private(0x0, 0x5, 0x141) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000000)=""/81) r1 = semget$private(0x0, 0x1, 0x220) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000080)=""/224) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000180)=0x6) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x7, 0x3, 0x7f, 0x0]) semctl$GETZCNT(r1, 0x4, 0xf, &(0x7f0000000280)=""/80) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r5) r6 = semget$private(0x0, 0x2, 0x230) semctl$SEM_STAT(r6, 0x1, 0x12, &(0x7f00000004c0)=""/205) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000005c0)={'wpan4\x00'}) semctl$GETVAL(r6, 0x0, 0xc, &(0x7f0000000600)=""/213) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000004) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80880100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 12:52:18 executing program 2: ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/200) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000100)=""/98) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/170) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000240)={0x5, 0x2, 0x7, 0x0, 0x1, 0x7}) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000280)=""/203, &(0x7f0000000380)=0xcb) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000400)=""/205) r1 = syz_open_dev$hiddev(&(0x7f0000000500), 0x9, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='task\x00') ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000580)=""/41) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000005c0)={0x2, [0x100, 0x9f], 0x7ff}, 0x10) symlinkat(&(0x7f0000000600)='./file0\x00', r2, &(0x7f0000000640)='./file0\x00') recvmsg(r2, &(0x7f0000000840)={&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000780)=""/33, 0x21}], 0x2, &(0x7f0000000800)=""/53, 0x35}, 0x100) syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r3) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000880)=""/76) getsockname$packet(r3, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000940)=0x14) connect(r2, &(0x7f0000000980)=@hci={0x1f, 0x4, 0x2}, 0x80) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000a00)={0x1, 0x4, 0x7, 0x2, 0x8}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000a80)=""/14) 12:52:18 executing program 1: r0 = gettid() ptrace$getenv(0x4201, r0, 0x3bce, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0xf97) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) write$cgroup_pid(r2, &(0x7f00000001c0)=r3, 0x12) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000200)=""/128) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, @ethernet={0x6, @broadcast}, @hci={0x1f, 0x4, 0x3}, @ethernet={0x1, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000280)='macvlan1\x00', 0xffffffffffffffff, 0xfffffffffffffffe, 0x7}) r4 = socket(0x28, 0x5, 0x3f) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x4, 0x9, 0x5, 0x2000, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x20, 0xfa7, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x2b, 0xfa, 0x0, 0x0, 0x1b, @local, @local, 0x0, 0x7d7, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x1, 0x80000000, 0x70, @private0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x20, 0x8000, 0x4, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f00000007c0)={0x36c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x831}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa0}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}]}}]}, 0x36c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = getpid() sched_setparam(r8, &(0x7f0000000bc0)=0x3f) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x208442, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d40)={'syztnl1\x00', r5, 0x29, 0x1, 0x1, 0x1000, 0x50, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x700, 0x80, 0x1, 0x4}}) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x4000004) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000f40)=""/214) 12:52:18 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x2, r1, r2, r4, 0xee01, 0x42, 0x1}, 0x0, 0x0, 0x4, 0x80000000000, 0x9, 0x401, 0xe58c, 0x0, 0x4, 0x788}) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14, 0x100000) r7 = accept4$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14, 0x80000) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'sit0\x00', r6, 0x2f, 0x4, 0x9, 0x20, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, 0x20, 0x0, 0x3, 0x4}}) syz_open_procfs$namespace(r0, &(0x7f0000000580)='ns/time_for_children\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6gre0\x00', r9, 0x4, 0x81, 0x3f, 0x6, 0x42, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast1, 0x8000, 0x8000, 0x7, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'syztnl1\x00', r6, 0x29, 0x0, 0x20, 0x1, 0x32, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x200, 0x20}}) accept4$packet(r5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000940)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6_vti0\x00', r8, 0x4, 0x27, 0x6, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x7, 0x10, 0xffff, 0x7}}) getsockname$packet(r7, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a80)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'sit0\x00', 0x0, 0x4, 0xfc, 0x9, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x7, 0x1, 0x2, 0x7fff}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000001180)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000b80)={0x590, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x14}}}]}}, {{0x8, 0x1, r3}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r15}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x4, 0x5, 0x0, 0x10e}, {0x2, 0x1f, 0x5b, 0xff}, {0x4, 0x7f, 0x0, 0xd2f9}, {0x0, 0x7, 0x70, 0x1}, {0x3, 0x20, 0x4c, 0xd80b}, {0xd4, 0x5f, 0x74, 0x20}, {0x4, 0xfd, 0x66, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1df}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x731}}}]}}]}, 0x590}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001240)={'ip6tnl0\x00', &(0x7f00000011c0)={'sit0\x00', r3, 0x29, 0x8, 0x7f, 0x4, 0x1f, @private0, @empty, 0x8, 0x80, 0x39f9, 0x5}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0xc0080408}, 0xc, &(0x7f0000003c40)={&(0x7f0000003a40)={0x1c8, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) [ 101.408595] audit: type=1400 audit(1729169538.836:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:52:18 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/118) epoll_create(0x200000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)=""/25) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/155, 0x9b}], 0x2, &(0x7f0000000340)=""/213, 0xd5}, 0x40000100) r2 = syz_open_dev$evdev(&(0x7f0000000480), 0x5, 0xf6240) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000500)=[{{0x77359400}, 0x3, 0x9, 0x8}, {{0x77359400}, 0x14, 0x5, 0x2}, {{r3, r4/1000+10000}, 0x14, 0x1, 0x6}], 0x48) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24040011) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000680)=""/83) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x14}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xb7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) syz_io_uring_setup(0x26e4, &(0x7f00000008c0)={0x0, 0x96d3, 0x22, 0x0, 0x3ae, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000940)=0x0, &(0x7f0000000980)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000a00)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x1, 0x1}, 0x3336) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000a40)={0x0, 0x0, 0x3, 0x2ee9, 0xd1ad, 0xfffffffb}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000a80)=""/230) 12:52:18 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0xbd, 0x2, 0xc00, 0x10, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x700, 0x80, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x2, 0x8, 0xa, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x1, 0x3, 0xae}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket(0x1d, 0xa, 0x3) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x2f, 0x33, 0xc3, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x5}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0xc008, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', r3, 0x29, 0x0, 0xfc, 0x7, 0x63, @private2, @mcast1, 0x8, 0x20, 0xaed, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xec, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x840) r8 = socket$inet6(0xa, 0x0, 0xffc000) getsockname(r8, &(0x7f0000000800)=@tipc=@name, &(0x7f0000000880)=0x80) socketpair(0x8, 0x4, 0xd6a8, &(0x7f0000002d00)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002e00)={'ip6gre0\x00', &(0x7f0000002d80)={'syztnl2\x00', r0, 0x4, 0x3f, 0x5, 0x1c4e, 0x50, @empty, @empty, 0x8000, 0x0, 0x3, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000002ec0)={'ip6tnl0\x00', &(0x7f0000002e40)={'sit0\x00', r6, 0x29, 0x0, 0x5, 0x1, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}, @private1, 0x80, 0x8, 0x4, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002f00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000003480)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003440)={&(0x7f0000002f40)={0x4e0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r0}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0xac, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x98, 0x3, 0x200}, {0x8, 0x1f, 0x2, 0x5}, {0x0, 0x5, 0x0, 0x9}, {0x6, 0x7, 0x6, 0x3}, {0x4, 0x81, 0x81, 0x7}, {0x8, 0x8, 0x7, 0xfff}, {0x2, 0x1, 0x1f, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r3}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x50805}, 0x0) restart_syscall() syz_io_uring_submit(0x0, 0x0, &(0x7f0000003580)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000034c0)=0x80, &(0x7f0000003500)=@l2={0x1f, 0x0, @fixed}, 0x0, 0x800, 0x1}, 0x36) 12:52:18 executing program 6: r0 = socket(0x1d, 0x0, 0x322) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0xc1, 0x4a, 0x80000000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x7800, 0x8, 0x4, 0x8b}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0xfd, 0x8, 0x10, @private2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7800, 0x1, 0x20, 0xffff}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1f, 0x7, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x700, 0x1, 0x7, 0x8}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x14c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x484}, 0x804) r5 = socket$inet6(0xa, 0x3, 0x3ff) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000740)={0x0, @xdp={0x2c, 0x4, r2}, @can={0x1d, r4}, @rc={0x1f, @none, 0x7d}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x9}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x84, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c001}, 0x13) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000940)=0x8, 0x4) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x101800, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000a00)=@req={0x28, &(0x7f00000009c0)={'veth0_to_team\x00', @ifru_flags}}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x440040, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000b80)={&(0x7f0000000a40), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008811}, 0x4000) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000bc0), 0x5719c2, 0x0) ioctl$HIDIOCAPPLICATION(r10, 0x4802, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000d80)={'sit0\x00', &(0x7f0000000d00)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x6, 0x3, 0x40, @remote, @remote, 0x7, 0x8143, 0x9, 0x18000000}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x880}, 0x20004000) msgget(0x1, 0x2) 12:52:18 executing program 7: r0 = syz_io_uring_setup(0x51e6, &(0x7f0000000000)={0x0, 0x57f6, 0x4, 0x2, 0x2e0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x6516500bd3024b40, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_create(0x2) r3 = io_uring_setup(0x7, &(0x7f0000000140)={0x0, 0xddd9, 0x4, 0x1, 0x3ba, 0x0, r1}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r3, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000004, 0x12, r0, 0x10000000) r6 = io_uring_setup(0x5271, &(0x7f00000001c0)={0x0, 0x73b9, 0x10, 0x1, 0x274, 0x0, r0}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) connect$bt_sco(r7, &(0x7f0000000240), 0x8) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000280)=""/45) bind$bt_sco(r2, &(0x7f00000002c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = socket$inet6(0xa, 0x800, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r8, 0xb1, 0x0, 0x0, 0xe, 0x1, {0x0, r9}}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) connect(r10, &(0x7f0000000580)=@can, 0x80) [ 102.824615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.825665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.828775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.830662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.832550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.836183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.841648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.842798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.844831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.846778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.850327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.854832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 102.857376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.859222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.860961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.863510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.867913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.868521] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.870188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.874402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.878092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.883338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.883979] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 102.886362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.894324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.900461] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.903311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.909903] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.914722] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.916834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.939508] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 102.944961] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 102.953422] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 102.964374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 102.967629] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 102.968520] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 102.976816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 102.982488] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 102.988055] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 102.993810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 102.995516] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 102.996490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 103.003718] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 103.006533] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 103.014242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 103.022737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 103.024009] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 103.027513] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 104.904748] Bluetooth: hci1: command tx timeout [ 104.905291] Bluetooth: hci3: command tx timeout [ 104.968373] Bluetooth: hci0: command tx timeout [ 104.970329] Bluetooth: hci2: command tx timeout [ 104.970348] Bluetooth: hci4: command tx timeout [ 105.033184] Bluetooth: hci5: command tx timeout [ 105.033785] Bluetooth: hci6: command tx timeout [ 105.096210] Bluetooth: hci7: command tx timeout [ 106.953216] Bluetooth: hci3: command tx timeout [ 106.954513] Bluetooth: hci1: command tx timeout [ 107.016295] Bluetooth: hci4: command tx timeout [ 107.017316] Bluetooth: hci2: command tx timeout [ 107.018428] Bluetooth: hci0: command tx timeout [ 107.080254] Bluetooth: hci6: command tx timeout [ 107.080283] Bluetooth: hci5: command tx timeout [ 107.145182] Bluetooth: hci7: command tx timeout [ 109.000226] Bluetooth: hci3: command tx timeout [ 109.001177] Bluetooth: hci1: command tx timeout [ 109.065162] Bluetooth: hci2: command tx timeout [ 109.065228] Bluetooth: hci0: command tx timeout [ 109.066275] Bluetooth: hci4: command tx timeout [ 109.128430] Bluetooth: hci5: command tx timeout [ 109.129546] Bluetooth: hci6: command tx timeout [ 109.194253] Bluetooth: hci7: command tx timeout [ 111.048210] Bluetooth: hci1: command tx timeout [ 111.048676] Bluetooth: hci3: command tx timeout [ 111.112231] Bluetooth: hci0: command tx timeout [ 111.112591] Bluetooth: hci4: command tx timeout [ 111.112915] Bluetooth: hci2: command tx timeout [ 111.176293] Bluetooth: hci5: command tx timeout [ 111.176656] Bluetooth: hci6: command tx timeout [ 111.240180] Bluetooth: hci7: command tx timeout [ 165.328566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.330800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.333997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.344243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.347303] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 165.348417] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.430792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.432230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.433538] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.434667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.435998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.437383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.438508] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.439800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.440982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.445896] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.447411] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.448466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.480503] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.485944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.487520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.489988] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.494154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.495622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.496667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.497668] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.500362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.502859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.504571] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 165.505455] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.529535] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 165.538475] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 165.555035] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 165.566082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.569786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 165.570741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.587423] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 165.587525] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.589060] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.609743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.613380] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 165.617388] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.617957] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 165.620517] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 165.624421] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 165.630878] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 165.632088] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 165.632929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.368611] Bluetooth: hci0: command tx timeout [ 167.496201] Bluetooth: hci1: command tx timeout [ 167.560184] Bluetooth: hci3: command tx timeout [ 167.561392] Bluetooth: hci4: command tx timeout [ 167.561559] Bluetooth: hci2: command tx timeout [ 167.627161] Bluetooth: hci6: command tx timeout [ 167.688184] Bluetooth: hci5: command tx timeout [ 167.691148] Bluetooth: hci7: command tx timeout [ 169.417211] Bluetooth: hci0: command tx timeout [ 169.546428] Bluetooth: hci1: command tx timeout [ 169.608231] Bluetooth: hci2: command tx timeout [ 169.609202] Bluetooth: hci4: command tx timeout [ 169.609323] Bluetooth: hci3: command tx timeout [ 169.672317] Bluetooth: hci6: command tx timeout [ 169.736218] Bluetooth: hci7: command tx timeout [ 169.737311] Bluetooth: hci5: command tx timeout [ 171.464471] Bluetooth: hci0: command tx timeout [ 171.592189] Bluetooth: hci1: command tx timeout [ 171.656208] Bluetooth: hci2: command tx timeout [ 171.656595] Bluetooth: hci3: command tx timeout [ 171.659199] Bluetooth: hci4: command tx timeout [ 171.720351] Bluetooth: hci6: command tx timeout [ 171.784284] Bluetooth: hci7: command tx timeout [ 171.784678] Bluetooth: hci5: command tx timeout [ 173.512229] Bluetooth: hci0: command tx timeout [ 173.640180] Bluetooth: hci1: command tx timeout [ 173.704244] Bluetooth: hci4: command tx timeout [ 173.704683] Bluetooth: hci3: command tx timeout [ 173.705032] Bluetooth: hci2: command tx timeout [ 173.768267] Bluetooth: hci6: command tx timeout [ 173.832191] Bluetooth: hci5: command tx timeout [ 173.832574] Bluetooth: hci7: command tx timeout [ 227.679702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.686940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.689372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.695561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.697550] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 227.700416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.792419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.794053] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.798858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.802470] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.807901] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.808878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.861898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.865351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.869009] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.880879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.882787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.883487] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.884541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.885832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 227.886961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.890305] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.893876] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 227.896350] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.922200] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.926342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.928608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.939604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.941708] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 227.942709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.129810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.143333] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.167398] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.195783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.216338] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 228.217547] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.247677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.270357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.298683] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.300218] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.305963] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.311580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.311650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.316300] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.317524] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.318336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.322406] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 228.325177] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.768247] Bluetooth: hci0: command tx timeout [ 229.832224] Bluetooth: hci1: command tx timeout [ 229.960240] Bluetooth: hci4: command tx timeout [ 229.961336] Bluetooth: hci3: command tx timeout [ 229.961871] Bluetooth: hci2: command tx timeout [ 230.280209] Bluetooth: hci6: command tx timeout [ 230.410170] Bluetooth: hci7: command tx timeout [ 230.410891] Bluetooth: hci5: command tx timeout [ 231.817222] Bluetooth: hci0: command tx timeout [ 231.881439] Bluetooth: hci1: command tx timeout [ 232.008982] Bluetooth: hci2: command tx timeout [ 232.009589] Bluetooth: hci3: command tx timeout [ 232.009919] Bluetooth: hci4: command tx timeout [ 232.329179] Bluetooth: hci6: command tx timeout [ 232.456396] Bluetooth: hci5: command tx timeout [ 232.456626] Bluetooth: hci7: command tx timeout [ 233.864238] Bluetooth: hci0: command tx timeout [ 233.929316] Bluetooth: hci1: command tx timeout [ 234.057203] Bluetooth: hci4: command tx timeout [ 234.057290] Bluetooth: hci3: command tx timeout [ 234.057549] Bluetooth: hci2: command tx timeout [ 234.376173] Bluetooth: hci6: command tx timeout [ 234.504227] Bluetooth: hci5: command tx timeout [ 234.505737] Bluetooth: hci7: command tx timeout [ 235.913333] Bluetooth: hci0: command tx timeout [ 235.976186] Bluetooth: hci1: command tx timeout [ 236.104299] Bluetooth: hci2: command tx timeout [ 236.104348] Bluetooth: hci3: command tx timeout [ 236.106165] Bluetooth: hci4: command tx timeout [ 236.424142] Bluetooth: hci6: command tx timeout [ 236.554125] Bluetooth: hci7: command tx timeout [ 236.554155] Bluetooth: hci5: command tx timeout [ 290.211477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.215129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.217844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.224958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.229968] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 290.238449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.270792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.276175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.279679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.285455] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.288851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 290.289794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.412249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.414805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.418596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.423990] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.425482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.427027] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.433485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.436176] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.438366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.458158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.460638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.467252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.467270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.472653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.478829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 290.490493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.490763] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.494302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.514363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.522667] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 290.527326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 290.529178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.543345] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.545374] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 290.547449] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 290.554518] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 290.565296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.585626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 290.587265] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 290.588181] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 290.590601] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 290.592014] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 290.592961] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 290.607332] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 290.619755] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 290.622978] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.299212] Bluetooth: hci0: command tx timeout [ 292.360307] Bluetooth: hci1: command tx timeout [ 292.488194] Bluetooth: hci3: command tx timeout [ 292.552309] Bluetooth: hci2: command tx timeout [ 292.680178] Bluetooth: hci5: command tx timeout [ 292.680188] Bluetooth: hci7: command tx timeout [ 292.744303] Bluetooth: hci4: command tx timeout [ 292.809163] Bluetooth: hci6: command tx timeout [ 294.344181] Bluetooth: hci0: command tx timeout [ 294.408234] Bluetooth: hci1: command tx timeout [ 294.537834] Bluetooth: hci3: command tx timeout [ 294.600129] Bluetooth: hci2: command tx timeout [ 294.728206] Bluetooth: hci7: command tx timeout [ 294.729422] Bluetooth: hci5: command tx timeout [ 294.792362] Bluetooth: hci4: command tx timeout [ 294.856209] Bluetooth: hci6: command tx timeout [ 296.392161] Bluetooth: hci0: command tx timeout [ 296.458120] Bluetooth: hci1: command tx timeout [ 296.585166] Bluetooth: hci3: command tx timeout [ 296.648410] Bluetooth: hci2: command tx timeout [ 296.777229] Bluetooth: hci5: command tx timeout [ 296.777625] Bluetooth: hci7: command tx timeout [ 296.840173] Bluetooth: hci4: command tx timeout [ 296.907186] Bluetooth: hci6: command tx timeout [ 298.441446] Bluetooth: hci0: command tx timeout [ 298.505123] Bluetooth: hci1: command tx timeout [ 298.632343] Bluetooth: hci3: command tx timeout [ 298.696180] Bluetooth: hci2: command tx timeout [ 298.824260] Bluetooth: hci5: command tx timeout [ 298.825535] Bluetooth: hci7: command tx timeout [ 298.888322] Bluetooth: hci4: command tx timeout [ 298.952173] Bluetooth: hci6: command tx timeout [ 352.477005] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.479254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.479520] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.481377] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.481438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.482695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.485337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.486739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.487672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.489189] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 352.489449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.489879] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 352.491596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.495748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.514678] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.526974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.530297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 352.532083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.665009] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.671797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 352.672759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.682290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.685688] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 352.686802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.732704] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 352.742908] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 352.745994] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 352.755397] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 352.760688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 352.761970] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 352.762957] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 352.764855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 352.767870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.769540] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 352.770655] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.792283] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 352.793674] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 352.796179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 352.800176] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 352.801821] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 352.802644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 352.802766] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 352.815323] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 352.819017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 352.824718] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 352.828666] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.847439] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 352.857715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.568207] Bluetooth: hci0: command tx timeout [ 354.569009] Bluetooth: hci1: command tx timeout [ 354.569772] Bluetooth: hci2: command tx timeout [ 354.762333] Bluetooth: hci3: command tx timeout [ 354.825166] Bluetooth: hci5: command tx timeout [ 354.826620] Bluetooth: hci7: command tx timeout [ 354.889156] Bluetooth: hci6: command tx timeout [ 354.953134] Bluetooth: hci4: command tx timeout [ 356.618096] Bluetooth: hci1: command tx timeout [ 356.619298] Bluetooth: hci0: command tx timeout [ 356.620393] Bluetooth: hci2: command tx timeout [ 356.808173] Bluetooth: hci3: command tx timeout [ 356.874103] Bluetooth: hci5: command tx timeout [ 356.875266] Bluetooth: hci7: command tx timeout [ 356.937102] Bluetooth: hci6: command tx timeout [ 357.001124] Bluetooth: hci4: command tx timeout [ 358.665099] Bluetooth: hci1: command tx timeout [ 358.666966] Bluetooth: hci2: command tx timeout [ 358.668083] Bluetooth: hci0: command tx timeout [ 358.856117] Bluetooth: hci3: command tx timeout [ 358.920452] Bluetooth: hci5: command tx timeout [ 358.920607] Bluetooth: hci7: command tx timeout [ 358.984104] Bluetooth: hci6: command tx timeout [ 359.050069] Bluetooth: hci4: command tx timeout [ 360.712230] Bluetooth: hci2: command tx timeout [ 360.712418] Bluetooth: hci0: command tx timeout [ 360.713544] Bluetooth: hci1: command tx timeout [ 360.904339] Bluetooth: hci3: command tx timeout [ 360.968339] Bluetooth: hci5: command tx timeout [ 360.969134] Bluetooth: hci7: command tx timeout [ 361.033282] Bluetooth: hci6: command tx timeout [ 361.096251] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 12:57:21 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000041 RCX=ffffffff812fb752 RDX=fffffbfff0fda9d6 RSI=0000000000000008 RDI=ffffffff87ed4ea8 RBP=ffff88803342d280 RSP=ffff88806ce09c60 R8 =0000000000000000 R9 =fffffbfff0fda9d5 R10=ffffffff87ed4eaf R11=00000000fa83b2da R12=ffff88803342dce8 R13=ffffffff85c3d688 R14=0000000000000040 R15=0000000000000000 RIP=ffffffff812fb75a RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff502bc4540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff5030c06f4 CR3=000000000df0c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007ff5030cf47000007ff5030cef20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87ed84c0 RBX=0000000000000003 RCX=ffffffff812ef5ee RDX=fffffbfff0fda9d6 RSI=0000000000000008 RDI=ffffffff87ed8500 RBP=ffff888033523700 RSP=ffff88806cf09ad0 R8 =0000000000000000 R9 =fffffbfff0fda9d5 R10=ffffffff87ed4eaf R11=ffff88806cf09ff8 R12=ffff8880335241b8 R13=0000000000000000 R14=ffffffff863f34b4 R15=0000000000000000 RIP=ffffffff812fbdcc RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faabad50000 CR3=000000002200e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000