Warning: Permanently added '[localhost]:42061' (ECDSA) to the list of known hosts. 2024/10/17 19:55:53 fuzzer started 2024/10/17 19:55:54 dialing manager at localhost:46303 syzkaller login: [ 69.583176] cgroup: Unknown subsys name 'net' [ 69.683717] cgroup: Unknown subsys name 'cpuset' [ 69.696094] cgroup: Unknown subsys name 'rlimit' 2024/10/17 19:56:11 syscalls: 212 2024/10/17 19:56:11 code coverage: enabled 2024/10/17 19:56:11 comparison tracing: enabled 2024/10/17 19:56:11 extra coverage: enabled 2024/10/17 19:56:11 setuid sandbox: enabled 2024/10/17 19:56:11 namespace sandbox: enabled 2024/10/17 19:56:11 Android sandbox: enabled 2024/10/17 19:56:11 fault injection: enabled 2024/10/17 19:56:11 leak checking: enabled 2024/10/17 19:56:11 net packet injection: enabled 2024/10/17 19:56:11 net device setup: enabled 2024/10/17 19:56:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/17 19:56:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/17 19:56:11 USB emulation: enabled 2024/10/17 19:56:11 hci packet injection: enabled 2024/10/17 19:56:11 wifi device emulation: enabled 2024/10/17 19:56:11 802.15.4 emulation: enabled 2024/10/17 19:56:11 fetching corpus: 0, signal 0/0 (executing program) 2024/10/17 19:56:12 starting 8 fuzzer processes 19:56:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x34}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000006cc0)=[{{&(0x7f0000001b40)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001bc0)=""/162, 0xa2}, {&(0x7f0000001c80)=""/199, 0xc7}, {&(0x7f0000001d80)=""/200, 0xc8}, {&(0x7f0000001e80)=""/16, 0x10}, {&(0x7f0000001ec0)}], 0x5, &(0x7f0000001f80)=""/195, 0xc3}, 0x1}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/56, 0x38}, {&(0x7f00000040c0)=""/145, 0x91}, {&(0x7f0000004180)=""/114, 0x72}, {&(0x7f0000004200)=""/15, 0xf}, {&(0x7f0000004240)=""/113, 0x71}, {&(0x7f00000042c0)=""/135, 0x87}], 0x8, &(0x7f0000004400)=""/189, 0xbd}, 0x9e}, {{&(0x7f00000044c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000004540)=""/202, 0xca}, {&(0x7f0000004640)=""/233, 0xe9}, {&(0x7f0000004740)=""/4, 0x4}, {&(0x7f0000004780)=""/4, 0x4}, {&(0x7f00000047c0)=""/238, 0xee}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/247, 0xf7}, {&(0x7f00000059c0)=""/3, 0x3}], 0x8}, 0x2}, {{&(0x7f0000005a80)=@alg, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005b00)=""/53, 0x35}, {&(0x7f0000005b40)=""/177, 0xb1}, {&(0x7f0000005c00)=""/36, 0x24}], 0x3, &(0x7f0000005c80)=""/33, 0x21}}, {{&(0x7f0000005cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000062c0)=[{&(0x7f0000005d40)=""/132, 0x84}, {&(0x7f0000005e00)=""/45, 0x2d}, {&(0x7f0000005e40)=""/138, 0x8a}, {&(0x7f0000005f00)=""/250, 0xfa}, {&(0x7f0000006000)=""/190, 0xbe}, {&(0x7f00000060c0)=""/154, 0x9a}, {&(0x7f0000006180)=""/240, 0xf0}, {&(0x7f0000006280)}], 0x8, &(0x7f0000006340)=""/68, 0x44}, 0x6}, {{&(0x7f00000063c0)=@generic, 0x80, &(0x7f0000006a40)=[{&(0x7f0000006440)=""/171, 0xab}, {&(0x7f0000006500)=""/206, 0xce}, {&(0x7f0000006600)=""/69, 0x45}, {&(0x7f0000006680)=""/177, 0xb1}, {&(0x7f0000006740)=""/139, 0x8b}, {&(0x7f0000006800)=""/75, 0x4b}, {&(0x7f0000006880)=""/72, 0x48}, {&(0x7f0000006900)=""/161, 0xa1}, {&(0x7f00000069c0)=""/105, 0x69}], 0x9}, 0x7fffffff}, {{&(0x7f0000006b00)=@generic, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006b80)=""/225, 0xe1}], 0x1}, 0xbfc2}], 0x7, 0x1, &(0x7f0000006e80)={0x77359400}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000006f80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000006f40)={&(0x7f0000006ec0)={0x70, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x27d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x24044840) getsockopt(r3, 0x10000, 0x5, &(0x7f0000006fc0)=""/175, &(0x7f0000007080)=0xaf) r5 = accept4(r3, &(0x7f00000070c0)=@generic, &(0x7f0000007140)=0x80, 0x80000) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000007180), &(0x7f00000071c0)=0x8) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007240), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000007300)={&(0x7f0000007200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000072c0)={&(0x7f0000007280)={0x34, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x40}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9a}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007380), r4) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000007480)={&(0x7f0000007340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007440)={&(0x7f00000073c0)={0x60, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf2}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007500), r2) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000075c0)={&(0x7f00000074c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000007580)={&(0x7f0000007540)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x40000) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000007600)={'filter\x00', 0x4, 'C$$K'}, &(0x7f0000007640)=0x28) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r9, &(0x7f0000007740)={&(0x7f0000007680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000007700)={&(0x7f00000076c0)={0x14, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000845}, 0x8004) accept4(0xffffffffffffffff, &(0x7f0000007780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000007800)=0x80, 0x800) 19:56:12 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x1, 'ip6gretap0\x00', {}, 0x200}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10001) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000180)) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x8, 0x20000) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000200)) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000240)) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000280)=0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2, 0xad, 0x1, 0x2, 0x0, 0xc71b, 0x248, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x6}, 0x20, 0x1, 0x81, 0x1, 0xba, 0x8001, 0x77e3, 0x0, 0x5, 0x0, 0xbed2}, 0x0, 0x6, r1, 0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x54e}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40090}, 0x40) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000005c0)) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x40, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000640)) 19:56:12 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/161, 0xa1}, {&(0x7f0000000140)=""/160, 0xa0}, {&(0x7f0000000200)=""/162, 0xa2}, {&(0x7f00000002c0)=""/55, 0x37}], 0x4}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/178, 0xb2}, {&(0x7f0000001400)=""/36, 0x24}, {&(0x7f0000001440)=""/20, 0x14}, {&(0x7f0000001480)=""/115, 0x73}, {&(0x7f0000001500)=""/52, 0x34}], 0x6, &(0x7f00000015c0)=""/31, 0x1f}, 0x800000}, {{&(0x7f0000001600)=@rc, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001680)=""/45, 0x2d}], 0x1, &(0x7f0000001700)=""/114, 0x72}, 0x6ca}, {{&(0x7f0000001780)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001800)=""/64, 0x40}, {&(0x7f0000001840)=""/9, 0x9}], 0x2, &(0x7f00000018c0)=""/64, 0x40}, 0x4}, {{&(0x7f0000001900)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001980)=""/254, 0xfe}, {&(0x7f0000001a80)=""/95, 0x5f}, {&(0x7f0000001b00)=""/112, 0x70}], 0x3, &(0x7f0000001bc0)=""/244, 0xf4}, 0x7ff}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/251, 0xfb}], 0x1}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001e00)=""/48, 0x30}, {&(0x7f0000001e40)=""/160, 0xa0}, {&(0x7f0000001f00)=""/227, 0xe3}, {&(0x7f0000002000)=""/51, 0x33}, {&(0x7f0000002040)=""/82, 0x52}, {&(0x7f00000020c0)=""/91, 0x5b}, {&(0x7f0000002140)=""/146, 0x92}, {&(0x7f0000002200)=""/123, 0x7b}, {&(0x7f0000002280)=""/40, 0x28}, {&(0x7f00000022c0)=""/233, 0xe9}], 0xa, &(0x7f0000002480)=""/1, 0x1}, 0xd3c}], 0x7, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000002680)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000026c0)={0x2, 'veth1_vlan\x00', {0x5c4}, 0x6}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000002700)='\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}}, 0x20000000) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000079c0)=[{{&(0x7f00000028c0)=@ax25={{0x3, @null}, [@null, @remote, @rose, @remote, @default, @rose, @bcast]}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000002940)=""/81, 0x51}, {&(0x7f00000029c0)=""/166, 0xa6}, {&(0x7f0000002a80)=""/137, 0x89}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/141, 0x8d}, {&(0x7f0000003c00)=""/237, 0xed}, {&(0x7f0000003d00)=""/252, 0xfc}], 0x7, &(0x7f0000003e80)=""/60, 0x3c}, 0x6}, {{&(0x7f0000003ec0)=@nl=@proc, 0x80, &(0x7f0000004040)=[{&(0x7f0000003f40)=""/240, 0xf0}], 0x1, &(0x7f0000004080)=""/41, 0x29}, 0x6}, {{&(0x7f00000040c0)=@generic, 0x80, &(0x7f0000004240)=[{&(0x7f0000004140)=""/17, 0x11}, {&(0x7f0000004180)=""/159, 0x9f}], 0x2, &(0x7f0000004280)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000005280)=""/127, 0x7f}, {&(0x7f0000005300)=""/227, 0xe3}, {&(0x7f0000005400)=""/15, 0xf}, {&(0x7f0000005440)=""/212, 0xd4}, {&(0x7f0000005540)=""/84, 0x54}, {&(0x7f00000055c0)=""/75, 0x4b}, {&(0x7f0000005640)=""/231, 0xe7}], 0x7}, 0x9}, {{&(0x7f00000057c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005940)=[{&(0x7f0000005840)=""/22, 0x16}, {&(0x7f0000005880)=""/139, 0x8b}], 0x2, &(0x7f0000005980)=""/204, 0xcc}, 0x8}, {{&(0x7f0000005a80)=@caif=@dgm, 0x80, &(0x7f0000007040)=[{&(0x7f0000005b00)=""/16, 0x10}, {&(0x7f0000005b40)=""/123, 0x7b}, {&(0x7f0000005bc0)=""/138, 0x8a}, {&(0x7f0000005c80)=""/241, 0xf1}, {&(0x7f0000005d80)=""/211, 0xd3}, {&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/145, 0x91}, {&(0x7f0000006f40)=""/231, 0xe7}], 0x8, &(0x7f00000070c0)=""/133, 0x85}, 0x40000000}, {{&(0x7f0000007180)=@l2, 0x80, &(0x7f0000007500)=[{&(0x7f0000007200)=""/210, 0xd2}, {&(0x7f0000007300)=""/195, 0xc3}, {&(0x7f0000007400)=""/165, 0xa5}, {&(0x7f00000074c0)=""/23, 0x17}], 0x4, &(0x7f0000007540)=""/134, 0x86}, 0x5}, {{&(0x7f0000007600)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000007880)=[{&(0x7f0000007680)=""/234, 0xea}, {&(0x7f0000007780)}, {&(0x7f00000077c0)=""/7, 0x7}, {&(0x7f0000007800)=""/128, 0x80}], 0x4}, 0x200}, {{&(0x7f00000078c0)=@un=@abs, 0x80, &(0x7f0000007980)=[{&(0x7f0000007940)=""/31, 0x1f}], 0x1}, 0x5}], 0x9, 0x20142, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000007cc0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007c80)={&(0x7f0000007c00)={0x70, r0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x80c1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000007d00), 0x8800, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000007d40)) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000007d80)=0x3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_proto_private(r3, 0x89ed, &(0x7f0000007dc0)="d73df8f599ffdcc283bccc95af7cdd9cc233bb41d9936ac654aab51390f05916e00b496f145ca26173f2157ff086dfe606595b74fe8631cbfb88244c66362d2be4d8493e8451e5") openat$random(0xffffffffffffff9c, &(0x7f0000007e40), 0x800, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009580)=[{{&(0x7f0000007e80)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000009440)=[{&(0x7f0000007f00)=""/95, 0x5f}, {&(0x7f0000007f80)=""/234, 0xea}, {&(0x7f0000008080)=""/128, 0x80}, {&(0x7f0000008100)=""/212, 0xd4}, {&(0x7f0000008200)=""/165, 0xa5}, {&(0x7f00000082c0)=""/169, 0xa9}, {&(0x7f0000008380)=""/134, 0x86}, {&(0x7f0000008440)=""/4096, 0x1000}], 0x8, &(0x7f00000094c0)=""/157, 0x9d}}], 0x1, 0x40010020, &(0x7f00000095c0)={0x0, 0x989680}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000096c0)={&(0x7f0000009600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000009680)={&(0x7f0000009640)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20040010) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x4000010, r2, 0x7fffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000009700), r2) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000012c00)={&(0x7f0000009740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000012bc0)={&(0x7f0000012180)={0xa0c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0xe1, 0x0, 0x8000}, {0x2, 0x7, 0x13, 0x3}, {0xc7e, 0xfc, 0x1f, 0x101}, {0x9, 0x20, 0x4, 0xa69}, {0x9, 0x40, 0xff, 0x800}, {0x1f, 0x3f, 0x3, 0x8}, {0xc07f, 0xb9, 0x1f, 0x3}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r1}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0xf6, 0x8, 0xffffffff}, {0x4, 0x1f, 0x0, 0x6}, {0x40, 0x87, 0x1, 0x3}, {0x1, 0x20, 0x5, 0x1f}, {0x9, 0xb1, 0x67, 0xffff}, {0xecd6, 0x0, 0xff, 0x9a4}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x1, 0x80, 0x3}, {0x6, 0xfc, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x79}, {0x18aa, 0xff, 0x9f, 0x9}, {0x939, 0x54, 0x0, 0x2}, {0x9654, 0x80, 0x80, 0x63}, {0x4, 0x4, 0x3f, 0xffffff01}, {0x1f, 0x8, 0x5, 0xc13}, {0xfff9, 0x5, 0x3f, 0x80000001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1d5b8774}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe58}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}, {0x8}}}]}}]}, 0xa0c}, 0x1, 0x0, 0x0, 0x4840}, 0x100) 19:56:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x26}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x20000841) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4080000}, 0x885) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r1 = syz_open_dev$mouse(&(0x7f0000000500), 0x6, 0x202000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x81}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x2c}}, 0x2000004) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x80, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xbf}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4040010) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b80), 0x101000, 0x0) io_submit(0x0, 0x2, &(0x7f0000000c00)=[&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000a00)="11fee2011dd2496d443e2a9346a4f0d7eca7297065c020733c827382cbe208c98b31bebb747af03a2a5bde369e5047a2e0d5deb6f2e51dbbb10d957a596041b70b139356af9db076ab01cf469fcc1904a83b150234ddf3086bbfebbf4273e2d42292648ccb06118954aa34119bcce0be8bca30806878aaa60d270aea1f359e43b16886a40396be83c9113bffc730b3fe14ba57d12af0784e916c14b086470ccca9506fe58fe616da7c04d1609bb1d5adfabdd289588a4e898fee84c594f3dde95c5e", 0xc2, 0x8, 0x0, 0x1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x4, 0x3, 0xffffffffffffffff, &(0x7f0000000b40)="81fe9f147d3abef927dfa482074a2b2cfb1285811c129be7cdec8db25bcd19ab9f3048a9e0def797fc3deab682bd42421ad347", 0x33, 0x1ff, 0x0, 0x1, r4}]) getsockname(r1, &(0x7f0000000c40)=@sco={0x1f, @fixed}, &(0x7f0000000cc0)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000001180)={'syztnl0\x00', 0x0, 0x8098, 0x20, 0x3b, 0xe10d, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast1, {[@noop, @noop, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000017c0)={'syztnl0\x00', &(0x7f0000001740)={'syztnl2\x00', 0x0, 0x4, 0xab, 0x0, 0x1, 0x21, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x20, 0x1f}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001800)={0x480, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd0a}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x400c054}, 0x8010) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001d40), r4) r8 = syz_open_dev$mouse(&(0x7f0000001d80), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x48, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 19:56:13 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x80) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) timerfd_gettime(r0, &(0x7f0000000280)) r1 = openat$cgroup_pressure(r0, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000300)={'full', 0x20, 0x5, 0x20, 0x4}, 0x2f) r2 = socket(0x5, 0xa, 0x3) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x140, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x2001) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, 0x0, 0x500, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x180}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ad835bd}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000840)=0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xc25) openat$nvram(0xffffffffffffff9c, &(0x7f00000009c0), 0x410200, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan4\x00'}) ioctl$RTC_AIE_ON(r0, 0x7001) 19:56:13 executing program 4: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x2010, 0xffffffffffffffff, 0x10000000) r1 = timerfd_create(0x9, 0x80000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r1}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x200000) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x9, 0x1, 0x18}, @fda={0x66646185, 0x0, 0x2, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/32, 0x20, 0x1, 0x19}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}, 0x1400}], 0x86, 0x0, &(0x7f0000000240)="7cb432e0ec80f6d6d6c3e079e17b27f0f0f66a6b34893cee4a0d177ca3ace994bbaeb8d24929f818b8b830650ef31944ee7138b56cdf79bf75cbf13cde7fbe169999e2276dcf289e8bad06a6351860bdd1cb5732390d0b6701b8e7abed32e02eb06ad61e9090b5cfae05f08257a628bc87dac78ed3d7660396fb7e9a38679f86c40151d53eb6"}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x2184c0, 0x0) r5 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc44a}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8805}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x800) timerfd_gettime(r1, &(0x7f0000000740)) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000780), 0xa2000, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000800)={0x0, 0x1, {0xc, 0x4, 0xb, 0x16, 0x8, 0x879, 0x0, 0x14d}}) r8 = accept4(r7, 0x0, &(0x7f0000000840), 0x0) getsockopt$inet_mreq(r8, 0x0, 0x20, &(0x7f0000000880)={@multicast2, @empty}, &(0x7f00000008c0)=0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000900)=0x5) [ 87.713743] audit: type=1400 audit(1729194973.058:7): avc: denied { execmem } for pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:56:13 executing program 6: pselect6(0x40, &(0x7f0000000000)={0x5, 0x9, 0xfff, 0xdc, 0x5, 0x80000001, 0xd0, 0x5}, &(0x7f0000000040)={0x7, 0xffffffff, 0x10000, 0x2, 0x200, 0x511, 0x1ff, 0x9}, &(0x7f0000000080)={0x4, 0x9, 0xfffffffffffffffd, 0x1400000, 0x4, 0x40, 0x7fff}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7fffffff]}, 0x8}) io_setup(0x6, &(0x7f0000000180)=0x0) io_getevents(r0, 0x5, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000280)) io_setup(0x3, &(0x7f00000002c0)=0x0) r2 = syz_open_dev$mouse(&(0x7f00000003c0), 0x1, 0x10000) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000000300)="9fa12bec753fb7a370bc51a50e2df540ba794a42a66487b5984a5c1b007ae2619da6894363bc58f4bcd25b1f088569a0cab51ffee4056a4a4fc0e2b8a6f93a2acb71d0c71154752c2926ad715a9e63dfc5ed7f45a260693fcfe83b44e727a5294effab3c57ef498640a7055e9f6bb6d6e10783f68a7a17801f0be3c19354a4d1f8f7cd5f46", 0x85, 0x2, 0x0, 0x3, r2}, &(0x7f0000000440)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000480)={0x7, 'veth0_to_hsr\x00', {0x7}}) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x8, 0x81, 0x3f, 0x80, 0x0, 0x3f, 0x10a08, 0x10, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f00000004c0), 0xb}, 0x10001, 0xfffe000000000000, 0x7, 0x0, 0x4, 0x0, 0xfff7, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x8000, 0x8, 0x1ff, 0x6, {{0xa, 0x4, 0x3, 0x5, 0x28, 0x68, 0x0, 0x20, 0x29, 0x0, @multicast2, @broadcast, {[@end, @generic={0x88, 0x10, "b08c6e11a0aa9d5ecf9d87b0acc0"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', r4, 0x29, 0x81, 0x6, 0x80000000, 0x6c, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8700, 0x7800, 0x5, 0x7fffffff}}) r5 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) io_pgetevents(r0, 0x4, 0x7, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000008c0)={0x0, 0x989680}, &(0x7f0000000940)={&(0x7f0000000900)={[0x1e89]}, 0x8}) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) io_getevents(r1, 0x7ff, 0x2, &(0x7f0000000980)=[{}, {}], &(0x7f0000000a00)={r6, r7+10000000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000bc0)={0x48, 0x0, &(0x7f0000000b00)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000a40)={@fda={0x66646185, 0x4, 0x2, 0x40}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x1e, 0x3}}, &(0x7f0000000ac0)={0x0, 0x20, 0x38}}}, @exit_looper], 0x1a, 0x0, &(0x7f0000000b80)="57f3286da5085a85dd0d79cdb2ec9c745d38299ad58a6c707bc7"}) io_getevents(0x0, 0xfff, 0x1, &(0x7f0000000c00)=[{}], &(0x7f0000000c40)={0x0, 0x989680}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000c80)) 19:56:13 executing program 7: sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048040}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1006000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4000004) r1 = socket(0x3, 0x2, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) clock_gettime(0x0, &(0x7f00000020c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002040)=[{{&(0x7f0000000440)=@isdn, 0x80, &(0x7f0000001940)=[{&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)=""/110, 0x6e}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/138, 0x8a}, {&(0x7f00000016c0)=""/99, 0x63}, {&(0x7f0000001740)=""/83, 0x53}, {&(0x7f00000017c0)=""/95, 0x5f}, {&(0x7f0000001840)=""/77, 0x4d}, {&(0x7f00000018c0)=""/77, 0x4d}], 0x9, &(0x7f0000001a00)=""/30, 0x1e}, 0x8}, {{&(0x7f0000001a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001ac0)=""/214, 0xd6}, {&(0x7f0000001bc0)=""/235, 0xeb}, {&(0x7f0000001cc0)=""/47, 0x2f}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/115, 0x73}, {&(0x7f0000001e80)=""/236, 0xec}], 0x6, &(0x7f0000002000)=""/27, 0x1b}, 0x1}], 0x2, 0x12146, &(0x7f0000002100)={r2, r3+60000000}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002240)={'gretap0\x00', &(0x7f00000021c0)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x7fff, 0x9, {{0xe, 0x4, 0x0, 0x5, 0x38, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @loopback, {[@noop, @timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0x7, [{@empty, 0x7f}, {@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0xb1, 0x3, 0x0, [{@broadcast, 0x10000}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000025c0)={'ip6gre0\x00', &(0x7f0000002540)={'ip6gre0\x00', 0x0, 0x4, 0x76, 0xfa, 0x6, 0x2, @empty, @remote, 0x47be9dd3bd34692e, 0x7, 0x9, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000026c0)={'tunl0\x00', &(0x7f0000002600)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x6, 0x7, {{0x1f, 0x4, 0x3, 0x20, 0x7c, 0x64, 0x0, 0xc4, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_prespec={0x44, 0x44, 0xde, 0x3, 0x6, [{@multicast1, 0x151}, {@broadcast, 0x7}, {@local, 0x100}, {@multicast2, 0x74e3}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x7fffffff}, {@remote, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x9}, {@private=0xa010101, 0xce7c}]}, @cipso={0x86, 0x21, 0xffffffffffffffff, [{0x7, 0x5, "2b8fd7"}, {0x5, 0x9, "c2187e0d34c1df"}, {0x5, 0x7, "56f209331f"}, {0x0, 0x6, "36efe2c5"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002900)={'syztnl1\x00', &(0x7f0000002880)={'gretap0\x00', 0x0, 0x10, 0x8000, 0x9ba, 0x10001, {{0x10, 0x4, 0x3, 0x1, 0x40, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast2, @empty, {[@rr={0x7, 0x2b, 0xaa, [@multicast2, @multicast2, @rand_addr=0x64010102, @empty, @multicast1, @private=0xa010100, @loopback, @remote, @broadcast, @loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002a00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002b00)={'erspan0\x00', &(0x7f0000002a40)={'tunl0\x00', 0x0, 0x7, 0x7800, 0x8, 0x9, {{0x1e, 0x4, 0x0, 0x39, 0x78, 0x66, 0x0, 0x3, 0x4, 0x0, @remote, @empty, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xe2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x76, 0x1, 0x1, [{@private=0xa010100, 0x9}, {@loopback, 0x4}, {@empty, 0x8001}]}, @timestamp={0x44, 0x1c, 0x77, 0x0, 0x5, [0x7, 0x8000000, 0x9, 0x6, 0x612cff41, 0x953d]}, @rr={0x7, 0x17, 0xf0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @private=0xa010100, @multicast2]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000004080)={'ip6gre0\x00', &(0x7f0000004000)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x54, 0x1, 0x67, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20, 0x80, 0x5, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000004700)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000046c0)={&(0x7f00000040c0)={0x5d4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r10}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5d4}, 0x1, 0x0, 0x0, 0x1}, 0x14) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000004800)=@buf={0x99, &(0x7f0000004740)="ed4173fddd24b3b22c52c22e934a5aeca58fa8e122f97304950a19e033f4c619627bd2c6d17267db83b21de6de1b41eb7af95b8dc5338a4333a20f388fe05da7065450105d1e7a3326ac8245f84e5a444838eac625aaa9e651e9c7354edd042851148bbec9f57a67f69e27dc224b3a4520a5c6b9f8db61d426167b7642bfb433da728661bac77c68f2749cbc94331012aa79648d6084679ba0"}) syz_io_uring_setup(0x5c67, &(0x7f0000004840)={0x0, 0xab0e, 0x4, 0x3, 0x14b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000048c0)=0x0, &(0x7f0000004900)) syz_io_uring_submit(r13, 0x0, &(0x7f0000004a40)=@IORING_OP_WRITE={0x17, 0x4, 0x4004, @fd=r1, 0x2, &(0x7f0000004940)="54796bdff9aca7c817863de7c3081324320cdeda9ea5adc3d878931c39499f709e5428b43eb360dadb5fc14cc1e7e25836e89bac702860bec3f8f43f8e9cb0c1a7e8d1212dfc1936deda9176372efcad73e50e2c4753763a304602d0c6e90dbfead7e8ed885f266655f584e305f2565b95126d17fbf7b8c97e9bce086db385d5512d95c22af538d9d0cdff787a4059dfe28270da27471d974bd33ad90c818275abc7792e21f55f3ab1e7baa1b28d9e6a8521fb7af531d857af6bdb3e85b98b054ec6d762c669976c1e4d931c02145626aff6304d76a845b96021b30b9146f7b538d27c83ffd1790881bd06546b35a5", 0xef, 0x15, 0x1}, 0x7) [ 89.075521] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.079037] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.080515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.083355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.084826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.085765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.180337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.181871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.183189] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.185418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.186718] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.187638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.243355] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.244231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.245496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.340465] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.342225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.342406] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.594058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.595689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.599173] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.607013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.623143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.636553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.640549] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.644057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.673289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.675010] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.676460] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.680700] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.682482] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.688277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.692148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.694667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.699722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.702262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.704296] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.706965] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.710621] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.711696] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.713457] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.717237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.730587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.737745] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.739313] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.779018] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.781861] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.802661] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.266752] Bluetooth: hci0: command tx timeout [ 91.651992] Bluetooth: hci2: command tx timeout [ 91.842339] Bluetooth: hci4: command tx timeout [ 91.843500] Bluetooth: hci5: command tx timeout [ 91.845224] Bluetooth: hci1: command tx timeout [ 91.906082] Bluetooth: hci7: command tx timeout [ 91.906618] Bluetooth: hci3: command tx timeout [ 91.907510] Bluetooth: hci6: command tx timeout [ 93.315002] Bluetooth: hci0: command tx timeout [ 93.698988] Bluetooth: hci2: command tx timeout [ 93.890139] Bluetooth: hci5: command tx timeout [ 93.890538] Bluetooth: hci1: command tx timeout [ 93.890877] Bluetooth: hci4: command tx timeout [ 93.955079] Bluetooth: hci6: command tx timeout [ 93.955470] Bluetooth: hci3: command tx timeout [ 93.955801] Bluetooth: hci7: command tx timeout [ 95.362018] Bluetooth: hci0: command tx timeout [ 95.747098] Bluetooth: hci2: command tx timeout [ 95.939236] Bluetooth: hci4: command tx timeout [ 95.939641] Bluetooth: hci1: command tx timeout [ 95.940985] Bluetooth: hci5: command tx timeout [ 96.002171] Bluetooth: hci7: command tx timeout [ 96.002548] Bluetooth: hci3: command tx timeout [ 96.003199] Bluetooth: hci6: command tx timeout [ 97.410993] Bluetooth: hci0: command tx timeout [ 97.794999] Bluetooth: hci2: command tx timeout [ 97.987134] Bluetooth: hci1: command tx timeout [ 97.987590] Bluetooth: hci5: command tx timeout [ 97.988062] Bluetooth: hci4: command tx timeout [ 98.051132] Bluetooth: hci7: command tx timeout [ 98.052713] Bluetooth: hci6: command tx timeout [ 98.053779] Bluetooth: hci3: command tx timeout [ 148.990549] syz-executor.6 (282) used greatest stack depth: 23504 bytes left [ 151.453077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.454796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.459520] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.470097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.471332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.472385] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.483322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.485635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.486697] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.491120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.497739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.503759] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.504517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.507751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.508347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.519152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.525146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.528010] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.578275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.579822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.580837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.590662] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.596100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.597296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.657701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.662405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.664209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.667414] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.690147] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.713452] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.775407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.777807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.779844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.784237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.786417] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.788105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.852074] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.896185] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.911142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.922096] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.923730] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.924812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.123370] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.150031] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.150982] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.155270] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.156693] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.157653] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.538013] Bluetooth: hci0: command tx timeout [ 153.539033] Bluetooth: hci1: command tx timeout [ 153.602061] Bluetooth: hci2: command tx timeout [ 153.666975] Bluetooth: hci3: command tx timeout [ 153.795019] Bluetooth: hci4: command tx timeout [ 153.858983] Bluetooth: hci5: command tx timeout [ 154.051190] Bluetooth: hci6: command tx timeout [ 154.306976] Bluetooth: hci7: command tx timeout [ 155.587015] Bluetooth: hci0: command tx timeout [ 155.588317] Bluetooth: hci1: command tx timeout [ 155.650033] Bluetooth: hci2: command tx timeout [ 155.724915] Bluetooth: hci3: command tx timeout [ 155.842937] Bluetooth: hci4: command tx timeout [ 155.907177] Bluetooth: hci5: command tx timeout [ 156.104494] Bluetooth: hci6: command tx timeout [ 156.355035] Bluetooth: hci7: command tx timeout [ 157.635120] Bluetooth: hci0: command tx timeout [ 157.635520] Bluetooth: hci1: command tx timeout [ 157.698562] Bluetooth: hci2: command tx timeout [ 157.762013] Bluetooth: hci3: command tx timeout [ 157.890161] Bluetooth: hci4: command tx timeout [ 157.954101] Bluetooth: hci5: command tx timeout [ 158.147179] Bluetooth: hci6: command tx timeout [ 158.403141] Bluetooth: hci7: command tx timeout [ 159.683234] Bluetooth: hci1: command tx timeout [ 159.683670] Bluetooth: hci0: command tx timeout [ 159.746979] Bluetooth: hci2: command tx timeout [ 159.811002] Bluetooth: hci3: command tx timeout [ 159.939046] Bluetooth: hci4: command tx timeout [ 160.001946] Bluetooth: hci5: command tx timeout [ 160.195000] Bluetooth: hci6: command tx timeout [ 160.451929] Bluetooth: hci7: command tx timeout [ 214.062708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.063733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.065088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.066814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.075170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.077175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.079471] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.087735] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.088337] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.092176] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.094264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.097003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.230772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.238699] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.244206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.245370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.254959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.256964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.259837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.263802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.265463] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.270170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.275260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.276521] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.313284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.314390] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.316278] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.317410] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.318505] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.319315] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.334534] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.335397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.340681] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.341318] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.342766] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.345094] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.346844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.359129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.360721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.363471] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.365146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.366052] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.482674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.512016] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.514357] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.532161] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.559004] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.565067] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.130448] Bluetooth: hci0: command tx timeout [ 216.131394] Bluetooth: hci1: command tx timeout [ 216.323107] Bluetooth: hci2: command tx timeout [ 216.387590] Bluetooth: hci3: command tx timeout [ 216.388560] Bluetooth: hci7: command tx timeout [ 216.390049] Bluetooth: hci6: command tx timeout [ 216.514993] Bluetooth: hci4: command tx timeout [ 216.706966] Bluetooth: hci5: command tx timeout [ 218.179055] Bluetooth: hci1: command tx timeout [ 218.179481] Bluetooth: hci0: command tx timeout [ 218.371006] Bluetooth: hci2: command tx timeout [ 218.434065] Bluetooth: hci3: command tx timeout [ 218.434484] Bluetooth: hci7: command tx timeout [ 218.434832] Bluetooth: hci6: command tx timeout [ 218.562972] Bluetooth: hci4: command tx timeout [ 218.754051] Bluetooth: hci5: command tx timeout [ 220.227196] Bluetooth: hci1: command tx timeout [ 220.227610] Bluetooth: hci0: command tx timeout [ 220.419525] Bluetooth: hci2: command tx timeout [ 220.483919] Bluetooth: hci6: command tx timeout [ 220.484352] Bluetooth: hci7: command tx timeout [ 220.484723] Bluetooth: hci3: command tx timeout [ 220.610096] Bluetooth: hci4: command tx timeout [ 220.802952] Bluetooth: hci5: command tx timeout [ 222.309396] Bluetooth: hci0: command tx timeout [ 222.309826] Bluetooth: hci1: command tx timeout [ 222.467031] Bluetooth: hci2: command tx timeout [ 222.531019] Bluetooth: hci3: command tx timeout [ 222.531436] Bluetooth: hci7: command tx timeout [ 222.531786] Bluetooth: hci6: command tx timeout [ 222.659187] Bluetooth: hci4: command tx timeout [ 222.849950] Bluetooth: hci5: command tx timeout [ 276.274119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.277068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.277944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.279910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.281302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.287095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.318747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.322312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.323076] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.324437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.332106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.334377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.343992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.346086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.349205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.351087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.353347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.356984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.374432] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.389351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.396210] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.406093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.413647] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.415960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.604297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.610048] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.615979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.637597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.643525] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.648173] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.653125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.653585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.656981] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.659243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.660269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.668612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.676688] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.680709] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.685087] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.688132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.708114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.713324] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.716975] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.734262] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.737624] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.741787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.757219] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.770947] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.341354] Bluetooth: hci0: command tx timeout [ 278.401983] Bluetooth: hci2: command tx timeout [ 278.403373] Bluetooth: hci1: command tx timeout [ 278.466907] Bluetooth: hci3: command tx timeout [ 278.723028] Bluetooth: hci4: command tx timeout [ 278.785943] Bluetooth: hci5: command tx timeout [ 278.787263] Bluetooth: hci6: command tx timeout [ 278.850016] Bluetooth: hci7: command tx timeout [ 280.386171] Bluetooth: hci0: command tx timeout [ 280.450081] Bluetooth: hci1: command tx timeout [ 280.451913] Bluetooth: hci2: command tx timeout [ 280.514205] Bluetooth: hci3: command tx timeout [ 280.770236] Bluetooth: hci4: command tx timeout [ 280.834919] Bluetooth: hci5: command tx timeout [ 280.836002] Bluetooth: hci6: command tx timeout [ 280.898029] Bluetooth: hci7: command tx timeout [ 282.433953] Bluetooth: hci0: command tx timeout [ 282.497981] Bluetooth: hci1: command tx timeout [ 282.499077] Bluetooth: hci2: command tx timeout [ 282.561935] Bluetooth: hci3: command tx timeout [ 282.817957] Bluetooth: hci4: command tx timeout [ 282.882107] Bluetooth: hci6: command tx timeout [ 282.883199] Bluetooth: hci5: command tx timeout [ 282.945960] Bluetooth: hci7: command tx timeout [ 284.482002] Bluetooth: hci0: command tx timeout [ 284.546041] Bluetooth: hci2: command tx timeout [ 284.547261] Bluetooth: hci1: command tx timeout [ 284.610359] Bluetooth: hci3: command tx timeout [ 284.867037] Bluetooth: hci4: command tx timeout [ 284.930033] Bluetooth: hci6: command tx timeout [ 284.931131] Bluetooth: hci5: command tx timeout [ 284.993971] Bluetooth: hci7: command tx timeout [ 338.593321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.596170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.597649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.600677] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.603283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.608449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.633419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.638238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.641438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.648093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.649576] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.651112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.707432] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.714114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.720131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.731058] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.734219] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.735281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.766288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.768248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.769224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.786096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.787685] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.792052] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.841461] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.863199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.869120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.876171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.878856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.882163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.921047] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.947408] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.947649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.950492] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.950598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.965206] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.967117] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.004142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.004235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.006319] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.010711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.019070] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.022159] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.023615] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.024524] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.028138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.028987] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.036211] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.674037] Bluetooth: hci1: command tx timeout [ 340.674212] Bluetooth: hci0: command tx timeout [ 340.802011] Bluetooth: hci2: command tx timeout [ 340.866181] Bluetooth: hci3: command tx timeout [ 340.994122] Bluetooth: hci4: command tx timeout [ 341.122949] Bluetooth: hci7: command tx timeout [ 341.188913] Bluetooth: hci5: command tx timeout [ 341.250958] Bluetooth: hci6: command tx timeout [ 342.722219] Bluetooth: hci1: command tx timeout [ 342.723401] Bluetooth: hci0: command tx timeout [ 342.850245] Bluetooth: hci2: command tx timeout [ 342.913903] Bluetooth: hci3: command tx timeout [ 343.042466] Bluetooth: hci4: command tx timeout [ 343.169964] Bluetooth: hci7: command tx timeout [ 343.234863] Bluetooth: hci5: command tx timeout [ 343.297909] Bluetooth: hci6: command tx timeout [ 344.770669] Bluetooth: hci0: command tx timeout [ 344.770882] Bluetooth: hci1: command tx timeout [ 344.898190] Bluetooth: hci2: command tx timeout [ 344.962881] Bluetooth: hci3: command tx timeout [ 345.090117] Bluetooth: hci4: command tx timeout [ 345.218083] Bluetooth: hci7: command tx timeout [ 345.281902] Bluetooth: hci5: command tx timeout [ 345.346872] Bluetooth: hci6: command tx timeout [ 346.819167] Bluetooth: hci0: command tx timeout [ 346.819541] Bluetooth: hci1: command tx timeout [ 346.946948] Bluetooth: hci2: command tx timeout [ 347.011065] Bluetooth: hci3: command tx timeout [ 347.139092] Bluetooth: hci4: command tx timeout [ 347.265957] Bluetooth: hci7: command tx timeout [ 347.329912] Bluetooth: hci5: command tx timeout [ 347.395114] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 20:01:23 Registers: info registers vcpu 0 RAX=ffffea00001d6880 RBX=ffff88802d2042c8 RCX=ffffffff81790ae6 RDX=ffff888016770000 RSI=ffffffff81791cda RDI=0000000000000006 RBP=0000000000000001 RSP=ffff888027007898 R8 =0000000000000000 R9 =fffff9400003ad1e R10=00000000000075a2 R11=0000000000000000 R12=80000000075a2025 R13=8000000000000025 R14=00007ff134c59000 R15=ffff888027007ce0 RIP=ffffffff81517c28 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbcc947b260 CR3=000000003519c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000002 RCX=ffff888024bf74f0 RDX=0000000000000002 RSI=ffffffff85c14f00 RDI=ffff888016774168 RBP=0000000000000001 RSP=ffff888024bf7468 R8 =0000000000000001 R9 =ffff888016774138 R10=ffffffff863f274f R11=00000000000c2f81 R12=ffff888016774168 R13=ffffffff85c14f00 R14=ffff888024bf74f0 R15=ffff888016773700 RIP=ffffffff812ee24e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7200000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f429eb21620 CR3=00000000282e4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000