Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:51334' (ECDSA) to the list of known hosts. 2025/04/26 05:13:34 fuzzer started 2025/04/26 05:13:34 dialing manager at localhost:46629 syzkaller login: [ 95.389579] cgroup: Unknown subsys name 'net' [ 95.522956] cgroup: Unknown subsys name 'cpuset' [ 95.570878] cgroup: Unknown subsys name 'rlimit' 2025/04/26 05:13:50 syscalls: 217 2025/04/26 05:13:50 code coverage: enabled 2025/04/26 05:13:50 comparison tracing: enabled 2025/04/26 05:13:50 extra coverage: enabled 2025/04/26 05:13:50 setuid sandbox: enabled 2025/04/26 05:13:50 namespace sandbox: enabled 2025/04/26 05:13:50 Android sandbox: enabled 2025/04/26 05:13:50 fault injection: enabled 2025/04/26 05:13:50 leak checking: enabled 2025/04/26 05:13:50 net packet injection: enabled 2025/04/26 05:13:50 net device setup: enabled 2025/04/26 05:13:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/26 05:13:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/26 05:13:50 USB emulation: enabled 2025/04/26 05:13:50 hci packet injection: enabled 2025/04/26 05:13:50 wifi device emulation: enabled 2025/04/26 05:13:50 802.15.4 emulation: enabled 2025/04/26 05:13:50 fetching corpus: 0, signal 0/0 (executing program) 2025/04/26 05:13:52 starting 8 fuzzer processes 05:13:52 executing program 0: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x2, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x200, 0x40, 0x10000, 0x26, 0x1f, 0x6, 0xbc5, 0x1000000000000000}, &(0x7f00000000c0)={0x7, 0x5, 0x800, 0x7, 0x1c59, 0xc99, 0x3ff, 0x3d2eff7c}, &(0x7f0000000100)={0x9000000000, 0x6, 0x1ff, 0x1, 0x6, 0x0, 0x7fc000000000000, 0xff}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xe49e]}, 0x8}) keyctl$negate(0xd, 0x0, 0x1000, 0xfffffffffffffffc) clock_gettime(0x1, &(0x7f0000000200)) keyctl$link(0x8, 0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffb, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000380)=""/33, 0x21) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) clock_gettime(0x0, &(0x7f0000000400)) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc1}, &(0x7f00000004c0)={0x0, "6c3c88f18e682fbbe4e3b8d00c0893d5cc1bf4152b8203117f53b96d837098b2be39818daa3044929436442d72159a17e1482609e61aab1c697cf27444f754fa", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f0000000540)='.dead\x00', &(0x7f0000000580)={'syz', 0x2}, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000640)={0x0, "20e87429abc0ffbc2cf64b07323da14a0b53b62f51f887016c4e594cd1f06fa3335ecab352c0363176be9c90827bc48fa57341b4222ebe0f19cc933101610b9c", 0x11}, 0x48, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000006c0)={r2, 0xb2, 0x1000}, 0x0, &(0x7f0000000700)="54c72d8d23fd56239da61f431efdadff6bb6d5c4d2531a158ce6a3b6b0961f3d2d28ea3d1361868bebedda3ec52000d53b3d48e7d2e088166ddfc21d0cb125cb02dbe0d6906aca14b94ac9bbc726901e2b3389a54e9963286bd6c9d0d2033b487335ba03e6222e862384538970c1c4efadd1e66306f8b58320fba6c52df19dd0c1a626fba363cb238d51ce512a194042012954e2a4117722537646a512716f834977f5e8786765622a6067c4b80eed264096", &(0x7f00000007c0)=""/4096) clock_getres(0x5, &(0x7f00000017c0)) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) nanosleep(&(0x7f0000001840)={r3, r4+60000000}, &(0x7f0000001880)) keyctl$revoke(0x3, 0x0) 05:13:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r0, 0xde5c}) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="f577e9b3a0a019f0fd76d3f562e7faf43fa225a29fa359aa99ddc9078a0f4de6e8d4abdb1c2a5c50790a400f586e8d42c0f8226c9f1b1d2e636f0eabea3072544c6446106ac54dce91e5b7631698ef8837cda3d3534cf1dc8c4309a71ca0a4116fb99ef260406703f2649580c07c28b397759db5580f8fede7554cbec173e09b3323c2014ba40cc4a438d31880e107d97bdd0b3fcf708216c6d3792b475ac6ec6276899bde6ec942c9733ffc87cf1fcae3eed0e4ca94e7054763c5b527a90ee817ab9069ddf4d0280803c933de5be8aeca0d40cf9dad998fc895be15014403445a", 0xe1}}, 0x4040000) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f00000001c0)={0x4, 0x80, 0x80, 0x3c, 0x67, 0x7}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000c40)={'wg1\x00', 0x0}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000c80), 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000cc0), 0x3ff, 0x101800) write$cgroup_type(r3, &(0x7f0000000d00), 0x9) getpeername$netlink(r3, &(0x7f0000000d40), &(0x7f0000000d80)=0xc) ioctl$CDROM_GET_CAPABILITY(r3, 0x5331) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000dc0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000e40)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000e80)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000f80)={'ip6tnl0\x00', &(0x7f0000000f00)={'syztnl0\x00', r2, 0x2f, 0x7f, 0x6, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}, @mcast1, 0x7800, 0x0, 0x0, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001040)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000016c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001080)={0x5cc, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r7}, {0x23c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2d03}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x2, 0x4, 0x7}, {0x200, 0x1f, 0x1, 0x4}, {0x1ff, 0x1, 0x20, 0x4}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xef}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x6c, 0x0, 0x8}, {0x3, 0x80, 0x8, 0x4}, {0x40, 0x80, 0x7f, 0x80000001}, {0x8000, 0x2, 0x2, 0x1}, {0xfff7, 0x81, 0x81, 0x1}, {0x401, 0x4, 0x7, 0x5}, {0x0, 0x83, 0x1a, 0x2}]}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x50}, 0x20004000) 05:13:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x2f, 0x3f, 0x7, 0xb16, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x40, 0x7ff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x80, 0x1, 0x200, 0x40, @mcast2, @local, 0x20, 0x40, 0x6, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000380)={0x890, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7, 0xb5, 0x81, 0xc0}, {0x1, 0x1, 0x0, 0xfffffffd}, {0x1ff, 0x9, 0x20, 0xfffffff7}, {0x4, 0x48}, {0x100, 0x5, 0x80, 0x2}, {0x6, 0x81, 0x1, 0x1}, {0x81bd, 0x1, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5, 0x1d, 0x3, 0x2}, {0xe1, 0xff, 0x6, 0x7}, {0x100, 0x80, 0x9, 0xb8}, {0x20, 0x54, 0x80, 0x5}, {0x8, 0x0, 0x3, 0x6}, {0x40, 0x0, 0x20, 0x6}, {0x3, 0x2, 0x2, 0x1}, {0x1, 0x5, 0x4, 0x8001}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb0d}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa9}}}]}}, {{0x8, 0x1, r6}, {0x98, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x0, 0xd4, 0x80000000}, {0x80, 0x1, 0xa3, 0x2}, {0x20, 0x9f, 0x22, 0x4}, {0x1, 0x28, 0x6, 0x6}]}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r7}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x890}}, 0x4004044) r10 = inotify_init() inotify_rm_watch(r10, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x15}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x880) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002440)='/sys/bus/mipi-dsi', 0x600001, 0x194) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002480)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r11, 0x89f9, &(0x7f0000002540)={'ip6_vti0\x00', &(0x7f00000024c0)={'syztnl1\x00', r12, 0x6, 0x6, 0x20, 0x800, 0x60, @private0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x20, 0x0, 0xfffffc01, 0x10001}}) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002580)='/sys/module/hid_monterey', 0x10000, 0x94) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002600), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x24, r14, 0x8, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4805) 05:13:52 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffc, 0x80) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/printk', 0x800, 0x80) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x6) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x30, 0x0, &(0x7f00000000c0)=[@increfs_done, @acquire={0x40046305, 0x2}, @acquire_done={0x40106309, 0x2}], 0x3b, 0x0, &(0x7f0000000100)="9a42cc2ea48997f4e396440eecff6fb3344f75f0c0b6fe6cfc9afddf59e70598311a8c1877d6063d61955ccd6d0cccee4c62cfb23c779542f3954f"}) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x44500) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) ioctl$CDROMEJECT(r2, 0x5309) modify_ldt$write(0x1, &(0x7f0000000200)={0x7e5, 0x20001000, 0x78b58d8ec97fbe2a, 0x0, 0x3, 0x1, 0x0, 0x1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f8, 0x8, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40) 05:13:52 executing program 5: semget$private(0x0, 0x2, 0x649) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000002000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)=""/4096, 0x1000}, &(0x7f0000002040)=0x40) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000002080)=0x5, 0x4) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000020c0)=@gcm_128={{0x303}, "796d41ab6ded51dd", "7be0161401f0676c9c07ce475ea2b67b", "3da80ab9", "b125acd8e282d510"}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002100)='./cgroup/syz1\x00', 0x200002, 0x0) delete_module(&(0x7f0000002140)='./cgroup/syz1\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002180)={0x1, 0x7, 0x9, 0xfffc0000, 0x6}, 0x14) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000021c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002200)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs2/binder1\x00', 0x2, 0x0) bind$netlink(r1, &(0x7f0000002380)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002400)='/sys/class/rtc', 0x0, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000023c0), r3) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000002440)=0xfffffffc, 0x4) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) [ 113.298248] audit: type=1400 audit(1745644432.899:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:13:52 executing program 6: getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', r0, 0x29, 0xd8, 0x7f, 0x0, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x2f, 0x0, 0x1, 0xfffffff7, 0x7e, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7800, 0x1, 0x400}}) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4, 0x8000) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x6, 0x480) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000480)=0x8fa, 0x4) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}]}, 0x40}, 0x1, 0x0, 0x0, 0x44814}, 0x20000840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24048000) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x150, 0x15, 0x8, 0x70bd29, 0x25dfdbfc, {0x1e, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x59, 0x1, "0d3243ba4c24cc6a23a7b3a50f4eee7bbca73a252e3c9bc098e9a3c4cef8ad25d7d6d277da87664cf202fefa522323d88552cf11a5e2482872d7c4da7aef286d2fa2193aff577793eaa5cd26b685b566bd27215bb5"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "145ea3f0f5530615dd67dd2e9faddfc67c6b499759187cad718e4c5839a7a0dcc838c0715df8a492fed180da018d30add8f4db79cb9c96081a2e774b9813dae5b01157557021225a7ed76a4baa92b7f58c758bd15f269131a6d4a20d51d34764f28fae08217b66f9568ab6e8e56bb0d8c2adafc7eaf14c9e11fcae75471419681196a948"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "cbf22ff471d7e2188a8116362661cf0728f24a7cb802ab047a8ffea624b134a104e1ffc675c7abab98c85b651a7185f68be9a49dc77ca334f3a4367bc0c96a90963f036c1b67cab0e47583226bbd0a4f5bbace"}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x6884) r7 = syz_open_dev$mouse(&(0x7f0000000980), 0x2, 0x8000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r7, 0x10e, 0x8, &(0x7f00000009c0)=0x1, 0x4) r8 = shmget$private(0x0, 0x10000, 0x100, &(0x7f0000fee000/0x10000)=nil) shmat(r8, &(0x7f0000fee000/0x2000)=nil, 0x6000) 05:13:52 executing program 4: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x600800) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x10000, 0xcde2701d4cf8afeb, 0x4, 0x19, "0bb63c3d1d6baa3cc6eb384d2fc3c2f8e82058333ddb4bbe6a552344a56955d9ebe82d8d53a23760418a1a05e77c2fa4f1e68a0eae398cb828584e279a621d70", "e1d89f65e0dc63e7b0837cdfe45cc3cd3054fe72134a070caa022067255b0e02", [0x40, 0x4]}) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x18) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x8000, 0x406c0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000002c0)) bind$netlink(r2, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) r3 = syz_open_dev$mouse(&(0x7f0000000440), 0x1, 0x80100) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r3) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000d00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000500)={0x790, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xd00}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x748, 0x8, 0x0, 0x1, [{0x744, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffff, @empty, 0x7}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_ALLOWEDIPS={0x258, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x34}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0x8}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x464, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x790}, 0x1, 0x0, 0x0, 0xc8c5}, 0x80) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000d40)=0xe, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d80)='/sys/module/drm_display_helper', 0x111501, 0x100) write$cgroup_subtree(r5, &(0x7f0000000dc0)={[{0x2d, 'devices'}, {0x2b, 'perf_event'}, {0x2b, 'cpuacct'}, {0x2b, 'net_prio'}]}, 0x28) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) getsockopt$inet_tcp_buf(r6, 0x6, 0xe, &(0x7f0000000e40)=""/151, &(0x7f0000000f00)=0x97) 05:13:52 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x5, 0x200000) timerfd_settime(r0, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}}, &(0x7f0000000440)) r1 = syz_open_dev$mouse(&(0x7f0000000480), 0x1ff, 0x286803) getpeername$netlink(r1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000001b80)=0x1e, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000001bc0), 0x101, 0x40) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000001c00)=[@sack_perm, @timestamp, @window={0x3, 0x2ca, 0x401}, @timestamp, @mss={0x2, 0x13}], 0x5) syz_genetlink_get_family_id$fou(&(0x7f0000001c40), r3) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000001c80)) r4 = syz_genetlink_get_family_id$team(0xfffffffffffffffe, r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001f00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x158, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4e}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0xff, 0x0, 0xb323}, {0x4, 0x5, 0x40, 0x8}, {0x300, 0x80, 0x2, 0x80}, {0x1, 0xfe, 0x40, 0x55}, {0x4000, 0x1, 0x1f, 0x7}, {0x3, 0x0, 0x0, 0x4}, {0xfffd, 0x40, 0xf7, 0x9}, {0x8, 0x20, 0x3, 0x8}, {0x5, 0x1, 0x0, 0x8}]}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001f40)='/sys/devices/system', 0x54000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000001f80)=0x1) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002680)={0x12c, 0x0, &(0x7f0000002480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001fc0)={@fda={0x66646185, 0x8, 0x2, 0x1e}, @flat=@weak_handle={0x77682a85, 0x100b, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}}, &(0x7f0000002040)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002240)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f00000020c0)=""/160, 0xa0, 0x1, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000002180)=""/155, 0x9b, 0x0, 0x1c}}, &(0x7f00000022c0)={0x0, 0x18, 0x40}}, 0x400}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002300)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x8, 0x1, 0x2b}}, &(0x7f0000002380)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000023c0)={@flat=@handle={0x73682a85, 0xa, 0x1}, @fda={0x66646185, 0x1, 0x0, 0x2e}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000002440)={0x0, 0x18, 0x38}}}], 0x9a, 0x0, &(0x7f00000025c0)="055f87c9804cf425c6764c6e19717eecf8843e2c1b268f5c4e789e6cc7ddf2613aab029954fb377d30bf83fe51be9d99b1c1b58c4244f150edf77973db335789c17ea360560b1b5fbee57f4f02454861c494f2cddc6cc7546578da545f0bbcdbedb11dd8c9b406f0ea8045186661b7284a436bfa6e80a26c884d2fbf27967b872fb09101229579d38383095705cdfd23aad4cf6a7cc53b8d7437"}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002700), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x14, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) write$cgroup_type(r1, &(0x7f0000002800), 0x9) [ 114.740230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.744415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.748164] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.758764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.764669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.792352] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.794444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.796973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.797928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.818921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.822202] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.824351] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.825494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.826577] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.827520] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.828647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.830788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.835349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.840519] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.840570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.844043] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.845220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.847498] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.853322] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.854274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.854984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.859502] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.868506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.869400] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.872714] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.874784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.875691] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.910832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.914594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.928599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.940113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.945585] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.951525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.957200] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.973809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.877748] Bluetooth: hci3: command tx timeout [ 116.877772] Bluetooth: hci0: command tx timeout [ 116.942136] Bluetooth: hci4: command tx timeout [ 116.942184] Bluetooth: hci5: command tx timeout [ 117.006453] Bluetooth: hci7: command tx timeout [ 117.006495] Bluetooth: hci2: command tx timeout [ 117.007522] Bluetooth: hci6: command tx timeout [ 117.070165] Bluetooth: hci1: command tx timeout [ 118.925199] Bluetooth: hci3: command tx timeout [ 118.925706] Bluetooth: hci0: command tx timeout [ 118.989333] Bluetooth: hci5: command tx timeout [ 118.989824] Bluetooth: hci4: command tx timeout [ 119.055211] Bluetooth: hci2: command tx timeout [ 119.055679] Bluetooth: hci6: command tx timeout [ 119.056477] Bluetooth: hci7: command tx timeout [ 119.117680] Bluetooth: hci1: command tx timeout [ 120.973125] Bluetooth: hci3: command tx timeout [ 120.973629] Bluetooth: hci0: command tx timeout [ 121.038320] Bluetooth: hci4: command tx timeout [ 121.038812] Bluetooth: hci5: command tx timeout [ 121.104198] Bluetooth: hci7: command tx timeout [ 121.104679] Bluetooth: hci6: command tx timeout [ 121.105168] Bluetooth: hci2: command tx timeout [ 121.166340] Bluetooth: hci1: command tx timeout [ 123.022231] Bluetooth: hci0: command tx timeout [ 123.022717] Bluetooth: hci3: command tx timeout [ 123.085296] Bluetooth: hci5: command tx timeout [ 123.086208] Bluetooth: hci4: command tx timeout [ 123.151174] Bluetooth: hci2: command tx timeout [ 123.151653] Bluetooth: hci6: command tx timeout [ 123.152116] Bluetooth: hci7: command tx timeout [ 123.213191] Bluetooth: hci1: command tx timeout [ 174.691775] syz-executor.0 (281) used greatest stack depth: 24232 bytes left [ 177.330927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.335584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.337777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.340350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.342389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.561930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.575547] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.577454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.581237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.583721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.656499] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.662625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.666795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.668100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.669426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.671459] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.672240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.676790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.680488] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.681870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.689523] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.690592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.692719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.696177] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.703133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.711309] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.713290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.715123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.735985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.754563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.878018] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.900486] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.936398] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.937516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.968590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.002559] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.006779] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.028000] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.032633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.046812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.405448] Bluetooth: hci0: command tx timeout [ 179.661269] Bluetooth: hci1: command tx timeout [ 179.726112] Bluetooth: hci2: command tx timeout [ 179.726886] Bluetooth: hci4: command tx timeout [ 179.789356] Bluetooth: hci5: command tx timeout [ 179.790191] Bluetooth: hci3: command tx timeout [ 180.109166] Bluetooth: hci7: command tx timeout [ 180.110031] Bluetooth: hci6: command tx timeout [ 181.454118] Bluetooth: hci0: command tx timeout [ 181.709169] Bluetooth: hci1: command tx timeout [ 181.773426] Bluetooth: hci4: command tx timeout [ 181.773888] Bluetooth: hci2: command tx timeout [ 181.837628] Bluetooth: hci3: command tx timeout [ 181.838169] Bluetooth: hci5: command tx timeout [ 182.158309] Bluetooth: hci6: command tx timeout [ 182.158790] Bluetooth: hci7: command tx timeout [ 183.501102] Bluetooth: hci0: command tx timeout [ 183.757313] Bluetooth: hci1: command tx timeout [ 183.822172] Bluetooth: hci4: command tx timeout [ 183.822637] Bluetooth: hci2: command tx timeout [ 183.885315] Bluetooth: hci5: command tx timeout [ 183.885777] Bluetooth: hci3: command tx timeout [ 184.205197] Bluetooth: hci7: command tx timeout [ 184.205697] Bluetooth: hci6: command tx timeout [ 185.549284] Bluetooth: hci0: command tx timeout [ 185.805158] Bluetooth: hci1: command tx timeout [ 185.870282] Bluetooth: hci2: command tx timeout [ 185.870755] Bluetooth: hci4: command tx timeout [ 185.933205] Bluetooth: hci5: command tx timeout [ 185.933719] Bluetooth: hci3: command tx timeout [ 186.253181] Bluetooth: hci6: command tx timeout [ 186.253689] Bluetooth: hci7: command tx timeout [ 240.100121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.103850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.106729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.114700] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.119722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.244697] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.248666] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.253885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.266215] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.276816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.325548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.331339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.339639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.349211] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.353229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.357482] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.362950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.367671] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.371348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.390619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.396943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.402641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.406794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.413622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.416615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.521958] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.551711] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.564874] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.572303] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.574855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.577445] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.589743] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.637350] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.638977] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.640362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.647087] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.648687] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.671217] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.696963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.703548] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.191205] Bluetooth: hci0: command tx timeout [ 242.317422] Bluetooth: hci1: command tx timeout [ 242.445462] Bluetooth: hci4: command tx timeout [ 242.446156] Bluetooth: hci2: command tx timeout [ 242.511412] Bluetooth: hci3: command tx timeout [ 242.830250] Bluetooth: hci5: command tx timeout [ 242.830697] Bluetooth: hci6: command tx timeout [ 242.894418] Bluetooth: hci7: command tx timeout [ 244.238729] Bluetooth: hci0: command tx timeout [ 244.365736] Bluetooth: hci1: command tx timeout [ 244.493462] Bluetooth: hci4: command tx timeout [ 244.494181] Bluetooth: hci2: command tx timeout [ 244.558129] Bluetooth: hci3: command tx timeout [ 244.879183] Bluetooth: hci6: command tx timeout [ 244.879790] Bluetooth: hci5: command tx timeout [ 244.941177] Bluetooth: hci7: command tx timeout [ 246.285291] Bluetooth: hci0: command tx timeout [ 246.413171] Bluetooth: hci1: command tx timeout [ 246.541687] Bluetooth: hci4: command tx timeout [ 246.541707] Bluetooth: hci2: command tx timeout [ 246.605802] Bluetooth: hci3: command tx timeout [ 246.925249] Bluetooth: hci6: command tx timeout [ 246.925571] Bluetooth: hci5: command tx timeout [ 246.991118] Bluetooth: hci7: command tx timeout [ 248.333501] Bluetooth: hci0: command tx timeout [ 248.461258] Bluetooth: hci1: command tx timeout [ 248.589472] Bluetooth: hci2: command tx timeout [ 248.589935] Bluetooth: hci4: command tx timeout [ 248.653433] Bluetooth: hci3: command tx timeout [ 248.975115] Bluetooth: hci5: command tx timeout [ 248.975152] Bluetooth: hci6: command tx timeout [ 249.037126] Bluetooth: hci7: command tx timeout [ 302.639310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.642238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.647666] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.651661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.654731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.661273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.665535] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.674596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.675605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.678665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.894512] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.912026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.916027] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.943945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.948743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.169528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.173957] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.176962] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.180914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.197377] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.201296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.205627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.213550] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.218208] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.222569] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.222972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.227538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.229781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.244294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.249818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.254725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.267847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.300350] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.309563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.312606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.317691] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.323839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.336541] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.440963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.485779] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.718179] Bluetooth: hci1: command tx timeout [ 304.718207] Bluetooth: hci0: command tx timeout [ 305.037164] Bluetooth: hci2: command tx timeout [ 305.358267] Bluetooth: hci4: command tx timeout [ 305.485295] Bluetooth: hci5: command tx timeout [ 305.485329] Bluetooth: hci7: command tx timeout [ 305.486708] Bluetooth: hci3: command tx timeout [ 305.613315] Bluetooth: hci6: command tx timeout [ 306.765489] Bluetooth: hci0: command tx timeout [ 306.768591] Bluetooth: hci1: command tx timeout [ 307.087083] Bluetooth: hci2: command tx timeout [ 307.405165] Bluetooth: hci4: command tx timeout [ 307.533387] Bluetooth: hci3: command tx timeout [ 307.535114] Bluetooth: hci7: command tx timeout [ 307.535143] Bluetooth: hci5: command tx timeout [ 307.661147] Bluetooth: hci6: command tx timeout [ 308.815110] Bluetooth: hci1: command tx timeout [ 308.815169] Bluetooth: hci0: command tx timeout [ 309.133219] Bluetooth: hci2: command tx timeout [ 309.453204] Bluetooth: hci4: command tx timeout [ 309.581540] Bluetooth: hci7: command tx timeout [ 309.581630] Bluetooth: hci5: command tx timeout [ 309.583105] Bluetooth: hci3: command tx timeout [ 309.709127] Bluetooth: hci6: command tx timeout [ 310.861506] Bluetooth: hci0: command tx timeout [ 310.862487] Bluetooth: hci1: command tx timeout [ 311.181409] Bluetooth: hci2: command tx timeout [ 311.501244] Bluetooth: hci4: command tx timeout [ 311.629150] Bluetooth: hci3: command tx timeout [ 311.629621] Bluetooth: hci5: command tx timeout [ 311.630334] Bluetooth: hci7: command tx timeout [ 311.759165] Bluetooth: hci6: command tx timeout [ 365.415135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.420704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.430283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.437524] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.446983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.498463] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.505485] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.511640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.513678] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.520560] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.523437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.531782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.566993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.569895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.586752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.608468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.610783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.632292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.634908] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.654475] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.669648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.671893] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.673601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.678762] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.682553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.686315] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.689523] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.691860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.697477] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.699183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.701817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.705721] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.721824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.723596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.724716] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.731690] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.740968] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.755703] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.763149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.772009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.502136] Bluetooth: hci0: command tx timeout [ 367.693341] Bluetooth: hci1: command tx timeout [ 367.694384] Bluetooth: hci2: command tx timeout [ 367.757272] Bluetooth: hci5: command tx timeout [ 367.822108] Bluetooth: hci3: command tx timeout [ 367.885238] Bluetooth: hci4: command tx timeout [ 367.887484] Bluetooth: hci7: command tx timeout [ 367.888208] Bluetooth: hci6: command tx timeout [ 369.550151] Bluetooth: hci0: command tx timeout [ 369.742197] Bluetooth: hci1: command tx timeout [ 369.742652] Bluetooth: hci2: command tx timeout [ 369.807221] Bluetooth: hci5: command tx timeout [ 369.870176] Bluetooth: hci3: command tx timeout [ 369.934151] Bluetooth: hci6: command tx timeout [ 369.934587] Bluetooth: hci7: command tx timeout [ 369.935006] Bluetooth: hci4: command tx timeout [ 371.598113] Bluetooth: hci0: command tx timeout [ 371.790147] Bluetooth: hci2: command tx timeout [ 371.790619] Bluetooth: hci1: command tx timeout [ 371.854307] Bluetooth: hci5: command tx timeout [ 371.918256] Bluetooth: hci3: command tx timeout [ 371.983469] Bluetooth: hci4: command tx timeout [ 371.983917] Bluetooth: hci7: command tx timeout [ 371.985126] Bluetooth: hci6: command tx timeout [ 373.646204] Bluetooth: hci0: command tx timeout [ 373.839129] Bluetooth: hci1: command tx timeout [ 373.839357] Bluetooth: hci2: command tx timeout [ 373.901114] Bluetooth: hci5: command tx timeout [ 373.967095] Bluetooth: hci3: command tx timeout [ 374.030149] Bluetooth: hci7: command tx timeout [ 374.030204] Bluetooth: hci6: command tx timeout [ 374.030597] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 05:19:03 Registers: info registers vcpu 0 RAX=0000000000000005 RBX=ffff888027ca3780 RCX=0000000000020000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1bac0 RBP=0000000000000000 RSP=ffff8880367d73a8 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=000000000002255e R12=ffff888027ca4200 R13=0000000000000003 R14=0000000000000000 R15=ffff888027ca41d8 RIP=ffffffff815163de RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa8ffbfe540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe2f433b368 CR3=000000000a906000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff85c734c8 RCX=ffffffff81737195 RDX=ffff888034a65340 RSI=ffffffff8173713b RDI=0000000000000001 RBP=0000000000000001 RSP=ffff888026d5e9b0 R8 =0000000000000002 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000003 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c734c8 R15=ffff888026d5eee0 RIP=ffffffff84ae1140 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff7465ef008 CR3=000000002ffa4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000