Warning: Permanently added '[localhost]:29609' (ECDSA) to the list of known hosts. 2025/04/30 03:25:28 fuzzer started 2025/04/30 03:25:29 dialing manager at localhost:46073 syzkaller login: [ 94.159528] cgroup: Unknown subsys name 'net' [ 94.291612] cgroup: Unknown subsys name 'cpuset' [ 94.332710] cgroup: Unknown subsys name 'rlimit' 2025/04/30 03:25:45 syscalls: 225 2025/04/30 03:25:45 code coverage: enabled 2025/04/30 03:25:45 comparison tracing: enabled 2025/04/30 03:25:45 extra coverage: enabled 2025/04/30 03:25:45 setuid sandbox: enabled 2025/04/30 03:25:45 namespace sandbox: enabled 2025/04/30 03:25:45 Android sandbox: enabled 2025/04/30 03:25:45 fault injection: enabled 2025/04/30 03:25:45 leak checking: enabled 2025/04/30 03:25:45 net packet injection: enabled 2025/04/30 03:25:45 net device setup: enabled 2025/04/30 03:25:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/30 03:25:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/30 03:25:45 USB emulation: enabled 2025/04/30 03:25:45 hci packet injection: enabled 2025/04/30 03:25:45 wifi device emulation: enabled 2025/04/30 03:25:45 802.15.4 emulation: enabled 2025/04/30 03:25:45 fetching corpus: 0, signal 0/0 (executing program) 2025/04/30 03:25:47 starting 8 fuzzer processes 03:25:47 executing program 0: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000040)=""/91, &(0x7f00000000c0)=0x5b) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0xffff, 0x3, 0xad, 0x5}, {0x400, 0x20, 0x1f, 0x3}, {0x9, 0x9, 0x6, 0x194f}, {0x4, 0x5, 0x81, 0x1f}, {0x8, 0x41, 0x7d, 0xffff0001}, {0x9, 0x0, 0x6, 0x100}, {0x1, 0x5, 0x8, 0x8000}, {0x8, 0x7, 0x6}, {0x0, 0x5, 0x3, 0x16b}]}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) socketpair(0x21, 0xa, 0x1000, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_buf(r4, 0x107, 0x6, &(0x7f0000000380)="b6c354248e29a297681572a3f60c28f1d5675794ce29a1cf1b783c8a68ff4fb41fb71ee08f0066801b58bedfa4263a531b50855867baa5565bed62174a25fabe02003f6012fa327388065e77b13ba494b011e9d1df773e80ac83639ec2bc6ded7376ce5d71d21413530284a0d9ef1860114d574f2dd6d7f62477b2a7e1e4e76686efe3005736e6c8d2c46f7a7b", 0x8d) connect$packet(r4, &(0x7f0000000440)={0x11, 0x11, r2, 0x1, 0x9c, 0x6, @random="ab82de2b1f0d"}, 0x14) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000004c0), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x62ae3aaf}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000640)={r2, @multicast2, @broadcast}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r4) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x402000, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r5) r8 = accept$packet(r3, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) setsockopt$packet_buf(r8, 0x107, 0x2, &(0x7f0000000780)="3af70b3f81b5994ba356788c96240bf2a96827d74f5abed8662eb734edbc39921924c67d6ed64ca4542338e58b8c85e9b5c627bd45309f9341bac30631934ef950458ab893e6c8d70a1020ea99a45d27524c3cb5ad267d6a1554862278c7e155687e8c7368578d2826b3f07569875b635129e526f7384a870133293772d49dea81c7fac5dd91974990b671fbcf6b5ca4adeac39cdafe475d835d70a7c18078c1472f3ea60b6295d9c6e2b1a4614b", 0xae) r9 = syz_open_dev$rtc(&(0x7f0000000840), 0x4, 0x14442) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r9, 0x4, {}, 0x80, 0x2, 0x1}, 0xff) 03:25:47 executing program 1: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xd1, 0x3f, 0x9, 0x6, @private0, @private1, 0x10, 0x80, 0x7, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x6, 0x382, 0x44, @local, @private1, 0x8000, 0x1, 0x7fffffff, 0x400}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000340)={0x4b8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x200, 0x0, 0x8, 0x8001}, {0x5, 0x4, 0x0, 0x6}, {0x2, 0x6, 0x6, 0x100}, {0x4, 0x0, 0x8, 0x10001}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9ec}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x20008040}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8911, &(0x7f0000000a00)={'wlan0\x00', @ifru_data=&(0x7f00000009c0)="b25767101bbbe58831f3ebc37e992fdfa5c810a2b2c0242b437f613375ebffcc"}) getsockname(r2, &(0x7f0000000a40)=@qipcrtr, &(0x7f0000000ac0)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00', 0x0}) socketpair(0x2b, 0x5, 0x5, &(0x7f0000000b40)={0xffffffffffffffff}) accept$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c80)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000dc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000fc0)=0x14, 0x80000) getpeername$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001040)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000001b00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001080)={0xa28, 0x0, 0x9504f50e39c0548a, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4482}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r7}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x40, 0x0, 0x0, 0x4}, {0x3ff, 0x0, 0x5, 0x800}, {0xff, 0x2, 0x0, 0x3}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r1}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x1, 0x3, 0x5}, {0xb828, 0xa5, 0x1, 0x101}, {0x5, 0x4f, 0x3, 0x85bf}, {0x1000, 0x3, 0xa3, 0x101}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x81, 0x6, 0x0, 0xffff}, {0x7ff0, 0x0, 0x3, 0x101}, {0x1, 0x5d, 0xff, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xed3}}}]}}, {{0x8, 0x1, r1}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x419}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x124, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x87}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xa28}, 0x1, 0x0, 0x0, 0x8091}, 0x40080) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000001bc0)={0x5, &(0x7f0000001b80)=[{0x1, 0x5b, 0x7, 0x5}, {0x2, 0x9, 0x0, 0xf8fb}, {0x5, 0x7, 0x0, 0x8000}, {0x8, 0x0, 0x81}, {0x8, 0x1, 0x7f, 0x800}]}, 0x10) 03:25:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="a387680e1988ad98a47b499dda2af8a268085ea04f134b4eb83efd4ae5dd0204021b7622fe674ed86e34875b4b1cf6cb3ce8eb11a001965f1e94b5dd130020d2191b3a795e063bb85dc7b02ce96b83cf92231d5042923c08cad3780806a6", 0x5e, 0xe345169e34c62043, &(0x7f00000001c0)={0x11, 0x1b, r2}, 0x14) syz_open_dev$rtc(&(0x7f0000000200), 0x4, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000680)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={0x388, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x8, 0x4, 0x7, 0xffffffc0}, {0xff, 0x8, 0x2, 0x7}, {0x1000, 0x81, 0x1, 0xbfdf}, {0x1f, 0xd9, 0x2, 0x800}, {0x3, 0x0, 0x7, 0x8001}, {0x7, 0x9}, {0x8001, 0x7f, 0xcd, 0x631}, {0x8, 0x8, 0x2, 0x73c}, {0xd6f, 0x8f, 0xa5, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x388}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x450200, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) epoll_create(0x1) recvfrom$packet(r1, &(0x7f0000000bc0)=""/10, 0xa, 0x40002100, &(0x7f0000000c00)={0x11, 0x7, r3, 0x1, 0x8, 0x6, @local}, 0x14) connect$packet(r1, &(0x7f0000000c40)={0x11, 0xf8, r5, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, 0x14) socket$inet6(0xa, 0x2, 0x81) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', r6, 0x4, 0x81, 0x81, 0x5, 0x21, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x20, 0x7800, 0x7, 0x9}}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000d40)={'filter\x00', 0x0, 0x0, 0x0, [0x400, 0x3, 0x1, 0x6, 0x21, 0x2]}, &(0x7f0000000dc0)=0x78) [ 112.169709] audit: type=1400 audit(1745983547.664:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:25:47 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x402, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10101, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000240)={'nat\x00', 0x0, [0xfffffff8, 0xd0, 0x3f, 0x0, 0x3]}, &(0x7f00000002c0)=0x54) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}}, 0x20000890) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000580)={0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x220, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f00000005c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @rand_addr=0x64010101, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @dev={0xac, 0x14, 0x14, 0x10}, @local, 0xf, 0x1}}}, {{@arp={@private=0xa010102, @rand_addr=0x64010102, 0xffff00, 0xff0000ff, 0xe, 0x9, {@mac=@multicast, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@random="96c93fb7b027", {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x4, 0x1, 0x20, 0x7, 0x8, 'ip6_vti0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000a40)={0x37, @local, 0x4e22, 0x2, 'wrr\x00', 0x5, 0x9, 0x5f}, 0x2c) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000a80)={0x19, 0x6, 0x8, 0xb, 0x9, 0x1000, 0x6, 0x154, 0xfffffffffffffffe}) getuid() getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000ac0)={'raw\x00', 0x0, [0x9, 0x0, 0x62c5, 0x6, 0x9]}, &(0x7f0000000b40)=0x54) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000b80)) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x2b4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e7f26f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe257}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bae46a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7eae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3eed4647}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8847}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7327711e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7ea}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28c6b94c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c174488}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x437f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x255bb54e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x800b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e75f436}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5dff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x403f8885}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49e71a51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbbb8acd}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fe1b10a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x543f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d57102e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39aa40b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x754f7754}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fe74378}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c2430c4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf665}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4108}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d9de1de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2150d372}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x752b0cc4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17cf7480}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa652}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x372f7a33}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd29}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20a8d816}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa226}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fd2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8616}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5b1}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13a95369}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68c52a6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce939e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4df5480}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x319a0bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25c1da5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fd079b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x189abc75}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x810}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/146, 0x92, 0x0, &(0x7f0000001040)=""/126, 0x7e}, &(0x7f0000001100)=0x40) 03:25:47 executing program 4: r0 = fork() ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r0}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)=0x9) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x303000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000140)={{r2, r3+60000000}, {r4, r5+10000000}}, &(0x7f0000000180)) socket$inet(0x2, 0xa, 0x1000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000240)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f00000002c0)={{0x2b, @local, 0x4e22, 0x2, 'lblcr\x00', 0x20, 0x7f, 0x4}, {@broadcast, 0x4e23, 0x4, 0x5, 0x6c44, 0x6}}, 0x44) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x3}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000380), 0x4) sched_rr_get_interval(r0, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000400)={0x0, 0x2, 0xffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000440)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x1000, 0x3}) 03:25:47 executing program 5: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x15, r1, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x5, 0x6, @random="6eac7a1d28dd"}, 0x14) socketpair(0x1a, 0x2, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r4 = socket$inet(0x2, 0x1, 0x7ff) getsockname(r4, &(0x7f00000001c0)=@nfc, &(0x7f0000000240)=0x80) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x541901, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={r6, @loopback, @multicast2}, 0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={0x0, 0x1, 0x6, @broadcast}, 0x10) r7 = accept4$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000540)=0xe8) sendto$packet(r7, &(0x7f0000000400)="5507ecae161442ad3e57e4409f49fe18dcd6e5cc153e3a319c997973b3357bacfcfd66e38ebc3e57b0b7c53b1a7c37a9d2275e35b34df1fcc21b5a725d8263", 0x3f, 0x8000, &(0x7f0000000580)={0x11, 0x3, r8, 0x1, 0x4, 0x6, @random="6a0d77f0a454"}, 0x14) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0xc2000, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r9, 0xc0104811, &(0x7f0000000600)={0x6, 0x6, 0x20, 0x36db}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa0, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4048880}, 0x90) 03:25:47 executing program 6: ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000)) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1dc7) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x35, [0x54, 0xea54, 0xfffffffffffffff7, 0x2, 0x10000, 0x8], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000080)=""/53}, &(0x7f0000000140)=0x78) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000180)) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000200)={0xf, 0x28, 0x6, 0xa, 0x2, 0x2, 0x1, 0x5, 0x1}) r1 = socket$inet(0x2, 0x804, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x6, 0x7ff, 0x41, @mcast1, @remote, 0x10, 0x1, 0x9, 0x8d51}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={r2, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x400400, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000380)) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000003c0)) r4 = syz_open_dev$loop(&(0x7f0000000400), 0xf433, 0x400400) r5 = syz_open_dev$hiddev(&(0x7f0000000440), 0x9, 0x20000) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000004c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@broadcast, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000600)=0xe8) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x4044010) 03:25:47 executing program 7: getsockname$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) r0 = socket$inet(0x2, 0x6, 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/203, 0xcb, 0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x400, 0x0) socketpair(0x9, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xf8, 0x0, &(0x7f0000000640)=[@decrefs={0x40046307, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/114, 0x72, 0x1, 0x1a}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @request_death, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x1101, 0x1}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0xa, 0x1, 0x8}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/238, 0xee, 0x1, 0x1d}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}}, @dead_binder_done], 0xb, 0x0, &(0x7f0000000740)="cd768150b8e8d40cecc48b"}) getsockname$inet(r0, &(0x7f00000007c0)={0x2, 0x0, @multicast1}, &(0x7f0000000800)=0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000880)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e24, @private=0xa010101}, 0x200, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x29c6, 0x6}) socket$inet6(0xa, 0x80804, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = accept$packet(r4, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a00)=0x14) accept4$packet(r5, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a80)=0x14, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000b80)={0x1, 0xfff, 0xffff}, 0xc) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000bc0), 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) [ 113.596377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.597862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.600258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.603732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.608448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.652894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.654548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.656689] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.658454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.659888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.665405] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.667877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.672400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.688418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.693161] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.731478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.739553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.748447] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.780800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.791588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.795654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.802201] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.802881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.810929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.823430] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.952636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.976226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.993955] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.999213] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.039812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.049971] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.052705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.058425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.061493] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.063735] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.070494] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.075186] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.083406] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.089908] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.100131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.683986] Bluetooth: hci2: command tx timeout [ 115.684689] Bluetooth: hci0: command tx timeout [ 115.749491] Bluetooth: hci1: command tx timeout [ 115.876336] Bluetooth: hci3: command tx timeout [ 115.877247] Bluetooth: hci4: command tx timeout [ 116.131325] Bluetooth: hci5: command tx timeout [ 116.195195] Bluetooth: hci6: command tx timeout [ 116.195793] Bluetooth: hci7: command tx timeout [ 117.731169] Bluetooth: hci2: command tx timeout [ 117.731625] Bluetooth: hci0: command tx timeout [ 117.795281] Bluetooth: hci1: command tx timeout [ 117.923115] Bluetooth: hci4: command tx timeout [ 117.923554] Bluetooth: hci3: command tx timeout [ 118.179081] Bluetooth: hci5: command tx timeout [ 118.243405] Bluetooth: hci7: command tx timeout [ 118.243834] Bluetooth: hci6: command tx timeout [ 119.779595] Bluetooth: hci0: command tx timeout [ 119.780313] Bluetooth: hci2: command tx timeout [ 119.843447] Bluetooth: hci1: command tx timeout [ 119.971114] Bluetooth: hci3: command tx timeout [ 119.971551] Bluetooth: hci4: command tx timeout [ 120.227284] Bluetooth: hci5: command tx timeout [ 120.291101] Bluetooth: hci6: command tx timeout [ 120.291537] Bluetooth: hci7: command tx timeout [ 121.827436] Bluetooth: hci0: command tx timeout [ 121.829091] Bluetooth: hci2: command tx timeout [ 121.891168] Bluetooth: hci1: command tx timeout [ 122.019112] Bluetooth: hci4: command tx timeout [ 122.019529] Bluetooth: hci3: command tx timeout [ 122.275607] Bluetooth: hci5: command tx timeout [ 122.339092] Bluetooth: hci7: command tx timeout [ 122.339504] Bluetooth: hci6: command tx timeout [ 176.067759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.069707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.072826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.084902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.090443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.127935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.132329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.137104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.145713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.159418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.212919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.248841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.254686] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.263299] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.263363] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.268246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.282115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.288256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.303277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.312134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.348410] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.357656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.363312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.381363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.401431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.546758] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.562774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.564368] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.568570] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.572259] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.804316] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.809547] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.819832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.854439] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.869541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.877551] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.877570] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.883901] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.906410] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.934944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.147144] Bluetooth: hci0: command tx timeout [ 178.211099] Bluetooth: hci1: command tx timeout [ 178.277070] Bluetooth: hci2: command tx timeout [ 178.467814] Bluetooth: hci4: command tx timeout [ 178.660232] Bluetooth: hci3: command tx timeout [ 178.723419] Bluetooth: hci6: command tx timeout [ 178.979271] Bluetooth: hci7: command tx timeout [ 179.045054] Bluetooth: hci5: command tx timeout [ 180.196059] Bluetooth: hci0: command tx timeout [ 180.259356] Bluetooth: hci1: command tx timeout [ 180.323329] Bluetooth: hci2: command tx timeout [ 180.516662] Bluetooth: hci4: command tx timeout [ 180.707172] Bluetooth: hci3: command tx timeout [ 180.771058] Bluetooth: hci6: command tx timeout [ 181.027650] Bluetooth: hci7: command tx timeout [ 181.092388] Bluetooth: hci5: command tx timeout [ 182.244113] Bluetooth: hci0: command tx timeout [ 182.308083] Bluetooth: hci1: command tx timeout [ 182.371390] Bluetooth: hci2: command tx timeout [ 182.563238] Bluetooth: hci4: command tx timeout [ 182.755327] Bluetooth: hci3: command tx timeout [ 182.820075] Bluetooth: hci6: command tx timeout [ 183.076204] Bluetooth: hci7: command tx timeout [ 183.139400] Bluetooth: hci5: command tx timeout [ 184.291236] Bluetooth: hci0: command tx timeout [ 184.355093] Bluetooth: hci1: command tx timeout [ 184.419067] Bluetooth: hci2: command tx timeout [ 184.614154] Bluetooth: hci4: command tx timeout [ 184.803358] Bluetooth: hci3: command tx timeout [ 184.868103] Bluetooth: hci6: command tx timeout [ 185.123286] Bluetooth: hci7: command tx timeout [ 185.188499] Bluetooth: hci5: command tx timeout [ 238.320671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.323784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.328465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.337662] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.344757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.394116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.398100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.403309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.409843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.413061] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.459619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.461780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.463477] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.471484] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.476415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.523360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.526885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.531297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.544433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.553415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.656962] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.668925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.682574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.684593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.686518] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.690678] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.701200] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.705957] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.713757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.739482] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.749178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.755349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.761881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.763039] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.777357] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.787500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.814719] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.814770] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.823293] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.828276] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.419094] Bluetooth: hci0: command tx timeout [ 240.484086] Bluetooth: hci1: command tx timeout [ 240.547115] Bluetooth: hci2: command tx timeout [ 240.676392] Bluetooth: hci3: command tx timeout [ 240.932081] Bluetooth: hci6: command tx timeout [ 240.932109] Bluetooth: hci4: command tx timeout [ 240.995265] Bluetooth: hci5: command tx timeout [ 241.444053] Bluetooth: hci7: command tx timeout [ 242.467280] Bluetooth: hci0: command tx timeout [ 242.532059] Bluetooth: hci1: command tx timeout [ 242.595219] Bluetooth: hci2: command tx timeout [ 242.725048] Bluetooth: hci3: command tx timeout [ 242.979339] Bluetooth: hci6: command tx timeout [ 242.979835] Bluetooth: hci4: command tx timeout [ 243.043156] Bluetooth: hci5: command tx timeout [ 243.491171] Bluetooth: hci7: command tx timeout [ 244.515235] Bluetooth: hci0: command tx timeout [ 244.579237] Bluetooth: hci1: command tx timeout [ 244.643065] Bluetooth: hci2: command tx timeout [ 244.771409] Bluetooth: hci3: command tx timeout [ 245.027308] Bluetooth: hci4: command tx timeout [ 245.027329] Bluetooth: hci6: command tx timeout [ 245.091439] Bluetooth: hci5: command tx timeout [ 245.539289] Bluetooth: hci7: command tx timeout [ 246.564089] Bluetooth: hci0: command tx timeout [ 246.628165] Bluetooth: hci1: command tx timeout [ 246.691078] Bluetooth: hci2: command tx timeout [ 246.819372] Bluetooth: hci3: command tx timeout [ 247.075130] Bluetooth: hci4: command tx timeout [ 247.077275] Bluetooth: hci6: command tx timeout [ 247.139250] Bluetooth: hci5: command tx timeout [ 247.587704] Bluetooth: hci7: command tx timeout [ 301.043803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.053823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.056749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.065901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.074907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.184433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.191627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.193980] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.204938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.211357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.215244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.228899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.232527] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.249320] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.259664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.396963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.434516] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.454474] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.473533] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.479618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.516287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.518973] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.521671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.523456] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.529890] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.533498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.552920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.568773] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.585201] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.588416] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.603281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.610208] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.618407] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.626488] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.630562] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.634279] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.651711] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.654718] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.675505] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.677974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.139408] Bluetooth: hci0: command tx timeout [ 303.267386] Bluetooth: hci1: command tx timeout [ 303.331382] Bluetooth: hci2: command tx timeout [ 303.587100] Bluetooth: hci3: command tx timeout [ 303.779369] Bluetooth: hci5: command tx timeout [ 303.780471] Bluetooth: hci7: command tx timeout [ 303.843129] Bluetooth: hci6: command tx timeout [ 303.843757] Bluetooth: hci4: command tx timeout [ 305.187462] Bluetooth: hci0: command tx timeout [ 305.316234] Bluetooth: hci1: command tx timeout [ 305.379063] Bluetooth: hci2: command tx timeout [ 305.635078] Bluetooth: hci3: command tx timeout [ 305.827206] Bluetooth: hci5: command tx timeout [ 305.827704] Bluetooth: hci7: command tx timeout [ 305.891277] Bluetooth: hci6: command tx timeout [ 305.891765] Bluetooth: hci4: command tx timeout [ 307.235735] Bluetooth: hci0: command tx timeout [ 307.364053] Bluetooth: hci1: command tx timeout [ 307.427181] Bluetooth: hci2: command tx timeout [ 307.683257] Bluetooth: hci3: command tx timeout [ 307.875478] Bluetooth: hci7: command tx timeout [ 307.875974] Bluetooth: hci5: command tx timeout [ 307.939109] Bluetooth: hci4: command tx timeout [ 307.939604] Bluetooth: hci6: command tx timeout [ 309.283067] Bluetooth: hci0: command tx timeout [ 309.411088] Bluetooth: hci1: command tx timeout [ 309.476227] Bluetooth: hci2: command tx timeout [ 309.731100] Bluetooth: hci3: command tx timeout [ 309.923136] Bluetooth: hci5: command tx timeout [ 309.923634] Bluetooth: hci7: command tx timeout [ 309.987346] Bluetooth: hci6: command tx timeout [ 309.987849] Bluetooth: hci4: command tx timeout [ 363.261624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.266544] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.271940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.283707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.291127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.379174] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.382958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.385164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.391295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.394672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.584905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.592372] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.596754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.622843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.633251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.641651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.646696] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.650539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.660758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.670809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.677702] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.693748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.708978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.726169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.739178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.882148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.895500] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.913749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.939813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.940583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.947449] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.957100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.961456] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.963489] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.969465] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.984624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.997644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.999464] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.002111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.023146] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.347081] Bluetooth: hci0: command tx timeout [ 365.476441] Bluetooth: hci1: command tx timeout [ 365.731278] Bluetooth: hci3: command tx timeout [ 365.795208] Bluetooth: hci2: command tx timeout [ 365.859107] Bluetooth: hci4: command tx timeout [ 366.116061] Bluetooth: hci5: command tx timeout [ 366.116092] Bluetooth: hci6: command tx timeout [ 366.117134] Bluetooth: hci7: command tx timeout [ 367.395454] Bluetooth: hci0: command tx timeout [ 367.524541] Bluetooth: hci1: command tx timeout [ 367.779517] Bluetooth: hci3: command tx timeout [ 367.844523] Bluetooth: hci2: command tx timeout [ 367.908096] Bluetooth: hci4: command tx timeout [ 368.163255] Bluetooth: hci6: command tx timeout [ 368.164221] Bluetooth: hci5: command tx timeout [ 368.165389] Bluetooth: hci7: command tx timeout [ 369.444963] Bluetooth: hci0: command tx timeout [ 369.571096] Bluetooth: hci1: command tx timeout [ 369.827554] Bluetooth: hci3: command tx timeout [ 369.892142] Bluetooth: hci2: command tx timeout [ 369.956081] Bluetooth: hci4: command tx timeout [ 370.211261] Bluetooth: hci6: command tx timeout [ 370.212116] Bluetooth: hci5: command tx timeout [ 370.212545] Bluetooth: hci7: command tx timeout [ 371.491888] Bluetooth: hci0: command tx timeout [ 371.621063] Bluetooth: hci1: command tx timeout [ 371.876114] Bluetooth: hci3: command tx timeout [ 371.939571] Bluetooth: hci2: command tx timeout [ 372.003582] Bluetooth: hci4: command tx timeout [ 372.259179] Bluetooth: hci7: command tx timeout [ 372.259860] Bluetooth: hci5: command tx timeout [ 372.260675] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:30:57 Registers: info registers vcpu 0 RAX=ffffffff81a6e52a RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888029b4fd01 RSI=ffff888029b4fd38 RDI=ffff888029b4fb70 RBP=ffff888029b4fb70 RSP=ffff888029b4faa8 R8 =ffffffff86865ef2 R9 =ffff888029b4fb58 R10=000000000003b124 R11=000000000002595a R12=ffff888029b4fb78 R13=ffff888029b4fb60 R14=ffff888029b4fd40 R15=ffff888029b4fb18 RIP=ffffffff813513d0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558528b400 00000000 00000000 GS =0000 ffff8880e5648000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9253e254a1 CR3=00000000248a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000000000 XMM02=00ff0000000000000000ff0000000000 XMM03=ff00000000000000ff00000000000000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007f75fa1910ef RCX=ffffffff81209602 RDX=ffff88802effb780 RSI=0000000000000001 RDI=0000000000000002 RBP=0000000000000001 RSP=ffff888016107978 R8 =ffffffff867858ac R9 =0000000000000001 R10=000000000003b124 R11=00000000000002f3 R12=ffff888016107ac0 R13=0000000000000000 R14=ffff88802effb780 R15=0000000000000cc0 RIP=ffffffff8172ec58 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5748000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f75f9e42610 CR3=00000000284f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000