Warning: Permanently added '[localhost]:30026' (ECDSA) to the list of known hosts. 2025/05/24 21:07:24 fuzzer started 2025/05/24 21:07:25 dialing manager at localhost:46087 syzkaller login: [ 102.160646] cgroup: Unknown subsys name 'net' [ 102.311474] cgroup: Unknown subsys name 'cpuset' [ 102.378321] cgroup: Unknown subsys name 'rlimit' 2025/05/24 21:07:49 syscalls: 217 2025/05/24 21:07:49 code coverage: enabled 2025/05/24 21:07:49 comparison tracing: enabled 2025/05/24 21:07:49 extra coverage: enabled 2025/05/24 21:07:49 setuid sandbox: enabled 2025/05/24 21:07:49 namespace sandbox: enabled 2025/05/24 21:07:49 Android sandbox: enabled 2025/05/24 21:07:49 fault injection: enabled 2025/05/24 21:07:49 leak checking: enabled 2025/05/24 21:07:49 net packet injection: enabled 2025/05/24 21:07:49 net device setup: enabled 2025/05/24 21:07:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 21:07:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 21:07:49 USB emulation: enabled 2025/05/24 21:07:49 hci packet injection: enabled 2025/05/24 21:07:49 wifi device emulation: enabled 2025/05/24 21:07:49 802.15.4 emulation: enabled 2025/05/24 21:07:49 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 21:07:50 starting 8 fuzzer processes 21:07:50 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x81010, 0xffffffffffffffff, 0x38a48000) r0 = socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0xfff}}, {@aname={'aname', 0x3d, '@@,\xb4,-[+)'}}, {@cache_none}, {@loose}], [{@subj_user={'subj_user', 0x3d, '}$+'}}, {@obj_user={'obj_user', 0x3d, '&:'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'geneve1\x00'}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/122, 0x7a, 0x1, &(0x7f0000000240)=""/40, 0x28}, &(0x7f00000002c0)=0x40) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x1, 0x101100) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008850}, 0x8800) r3 = syz_open_dev$usbmon(&(0x7f0000000500), 0x60, 0x80800) r4 = getuid() getresuid(&(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000005c0)) r6 = getuid() mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x3350040, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}], [{@uid_gt={'uid>', r4}}, {@dont_measure}, {@uid_eq={'uid', 0x3d, r5}}, {@seclabel}, {@appraise}, {@euid_lt={'euid<', r6}}]}}) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff}, 0x4000) r8 = syz_open_dev$evdev(&(0x7f0000000780), 0xee, 0x48000) mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@posixacl}, {@posixacl}, {@loose}, {@access_any}, {@mmap}, {@access_any}, {@noextend}, {@mmap}, {@nodevmap}], [{@obj_user={'obj_user', 0x3d, '%.\'^-\'%'}}]}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/42, 0x2a, 0x0, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40) 21:07:50 executing program 1: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/245) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000100)=""/50) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000140)={0x80000001, 0xec, 0x8, 0x10001, 0x20, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000001c0)=0x6) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000200)=0x6) socketpair(0x6, 0x4, 0x8, &(0x7f0000000240)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x41a082, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000340)={r2}) r3 = socket$inet(0x2, 0x800, 0x400) accept4(r3, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000400)=0x80, 0x80000) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000440)={0x0, 0x6763ff04, 0x2d12, 0xda, 0x7, 0x2}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000480)=""/4096) r5 = syz_open_dev$evdev(&(0x7f0000001480), 0x4, 0x414801) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f00000014c0)=""/3) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x90, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001680), 0x111000, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000001780)={&(0x7f00000016c0), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x410}, 0x40000) 21:07:50 executing program 2: ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000000)=""/127) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x1814c2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x55, 0xfc01, 0x7, {0x1}, {0x6, 0x1000}, @period={0x5b, 0x31a, 0xf001, 0x1, 0x200, {0x800, 0x8001, 0xf246, 0x1}, 0x6, &(0x7f00000000c0)=[0x166d, 0x1f, 0x3ff, 0x2, 0x2, 0x8000]}}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000140)=""/36) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000001c0)=""/226) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000002c0)=""/211) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x400, 0xd24]) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000400)=""/206) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000500)=0x3f) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000540)={0x7, 0xffffff43, 0x3, 0x3fffc0, 0x1, 0xffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$evdev(r0, &(0x7f0000000580)=[{{}, 0x4, 0xffff, 0x10001}, {{0x0, 0xea60}, 0x0, 0x4, 0x3}, {{}, 0x14, 0x9, 0x9}, {{}, 0x5, 0x0, 0x56}, {{}, 0x11, 0x3, 0x20}], 0x78) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000640)=[0x7ff, 0x8]) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000680)=0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008850) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '),#!%\xe2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x10) [ 126.908841] audit: type=1400 audit(1748120870.294:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:07:50 executing program 3: timer_create(0x0, &(0x7f0000000140)={0x0, 0x20, 0x2, @thr={&(0x7f0000000000)="762ee3bd22c428b43946f3a3dc1d6c7904c11845ce448d60e4dbdfc5c3e5d0ffb26e969f29edeea10c24b2a8e71cb28ca63377884e6d2baedcbb3baf31ab84c4b9d9a700b92ae48e13665d09da9b20072cd8388b7e0325e0342a2820c7dde978", &(0x7f0000000080)="dbffd3ed3234cdf5e7476c49e01a9e1ddd54a37b99bd115f5fd6d99235d6e35aa40d74b412a6d292693413bce33c6334f1d25b53492ec03a10012b79f241a3a76c57fad00d470dc1afb8347e1b6391a21a8e36ce33e44d4049c717d4e1db26d14ea92571d5e57630a575411046ada5611b3262ed3d898e818be23ba7550a4569453b1ab9"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, &(0x7f0000000240)) timer_create(0x5, &(0x7f0000000280)={0x0, 0x1e}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) timer_getoverrun(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000004c80)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004c40)={&(0x7f0000004c00)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040085}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000004cc0)={{0x1, 0x1, 0x18, r2, {0xfff}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004d40)={'ip6gretap0\x00', 0x0}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000004e00)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d80)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000004e80), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000004fc0)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004f80)={&(0x7f0000004ec0)={0x94, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xa6}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0xa731}, {0x8, 0x15, 0x2}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4005}, 0x44) recvmmsg(r3, &(0x7f000000b4c0)=[{{&(0x7f0000005000)=@alg, 0x80, &(0x7f0000006100)=[{&(0x7f0000005080)=""/105, 0x69}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x2, &(0x7f0000006140)=""/113, 0x71}}, {{&(0x7f00000061c0), 0x80, &(0x7f0000006340)=[{&(0x7f0000006240)=""/119, 0x77}, {&(0x7f00000062c0)=""/83, 0x53}], 0x2, &(0x7f0000006380)=""/214, 0xd6}, 0xe69}, {{&(0x7f0000006480)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000087c0)=[{&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/109, 0x6d}, {&(0x7f0000007580)=""/183, 0xb7}, {&(0x7f0000007640)=""/4096, 0x1000}, {&(0x7f0000008640)=""/241, 0xf1}, {&(0x7f0000008740)=""/23, 0x17}, {&(0x7f0000008780)=""/53, 0x35}], 0x7, &(0x7f0000008840)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000009840)=@phonet, 0x80, &(0x7f000000ab40)=[{&(0x7f00000098c0)}, {&(0x7f0000009900)=""/54, 0x36}, {&(0x7f0000009940)=""/244, 0xf4}, {&(0x7f0000009a40)=""/244, 0xf4}, {&(0x7f0000009b40)=""/4096, 0x1000}], 0x5, &(0x7f000000abc0)=""/154, 0x9a}, 0x274}, {{&(0x7f000000ac80)=@nfc_llcp, 0x80, &(0x7f000000b340)=[{&(0x7f000000ad00)=""/22, 0x16}, {&(0x7f000000ad40)=""/129, 0x81}, {&(0x7f000000ae00)=""/203, 0xcb}, {&(0x7f000000af00)=""/115, 0x73}, {&(0x7f000000af80)=""/73, 0x49}, {&(0x7f000000b000)=""/17, 0x11}, {&(0x7f000000b040)=""/250, 0xfa}, {&(0x7f000000b140)=""/200, 0xc8}, {&(0x7f000000b240)=""/244, 0xf4}], 0x9, &(0x7f000000b400)=""/191, 0xbf}, 0x9}], 0x5, 0x40002151, &(0x7f000000b600)={0x0, 0x3938700}) timer_create(0x7, &(0x7f000000b640)={0x0, 0x28, 0x1}, &(0x7f000000b680)=0x0) timer_getoverrun(r6) mount$9p_fd(0x0, &(0x7f000000b6c0)='./file0\x00', &(0x7f000000b700), 0x219a022, &(0x7f000000b740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x8}}, {@mmap}], [{@euid_eq}, {@fsmagic={'fsmagic', 0x3d, 0xe6}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x36, 0x66, 0x63, 0x30, 0x63, 0x66], 0x2d, [0x35, 0x38, 0x33, 0x37], 0x2d, [0x33, 0x39, 0x0, 0x61], 0x2d, [0x37, 0x65, 0x61, 0x5e], 0x2d, [0x61, 0x38, 0x30, 0x63, 0x65, 0x31, 0x36, 0x36]}}}, {@obj_user={'obj_user', 0x3d, ']'}}, {@uid_gt}, {@seclabel}, {@uid_lt}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f000000b900)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f000000b880)='./file0\x00', &(0x7f000000b8c0), 0x40, &(0x7f000000b940)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@afid={'afid', 0x3d, 0xffffffffffff0000}}, {@cachetag}, {@posixacl}, {@version_u}, {@cache_fscache}, {@cache_none}], [{@smackfsroot={'smackfsroot', 0x3d, 'fscontext'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x35, 0x35, 0x63, 0x33, 0x64, 0x62, 0x39], 0x2d, [0x65, 0x35, 0x34, 0x34], 0x2d, [0x30, 0x34, 0x35, 0x66], 0x2d, [0x30, 0x39, 0x61, 0x63], 0x2d, [0x63, 0x30, 0x31, 0x62, 0x66, 0x35, 0x66, 0x34]}}}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, 'msize'}}, {@subj_role={'subj_role', 0x3d, 'rfdno'}}, {@measure}, {@pcr={'pcr', 0x3d, 0x3d}}, {@smackfsroot={'smackfsroot', 0x3d, 'fsuuid'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@smackfshat={'smackfshat', 0x3d, '\'/'}}]}}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 21:07:50 executing program 4: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x80d0) socketpair(0x1, 0x80000, 0x6, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x54}}, 0x20001004) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004050}, 0x8810) socketpair(0x6, 0x4, 0x6, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc0008}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000600), r3) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x20008040) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000700), r6) socketpair(0x3, 0x4, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x518, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) socketpair(0x0, 0xa, 0x5, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r9) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x18c, r10, 0x5accda9404d7618, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x75}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x100}, {0x8, 0x15, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000094) 21:07:50 executing program 5: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x1a, 0x4, "7d193c359e005b34dd4fbd409a3ef1c9294a786466fb112a76c5c4b75f37aeecb1e5e20acb81766d4f9f7bbe4bdd6497040636438e270806216b8eba7fc39b36", "d266a02349ed4afe20f1f93bb6ff52e880f2c3b712ba219d3dc9b67c84ccfe56", [0x10001, 0x5]}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20008051) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x2, 0x3ff, 0x44a1, 0x7, 0x1}) prctl$PR_GET_SECUREBITS(0x1b) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002f40)={'syztnl1\x00', &(0x7f0000002f00)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x10001, 0x83e1, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x3f, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x39}}}}}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x3c, r0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x800) pselect6(0x40, &(0x7f0000003040)={0x1a79052b, 0x1f, 0x5, 0x1ff, 0x9, 0x1, 0x8, 0x8}, &(0x7f0000003080)={0x1, 0x18, 0xfffffffffffffe10, 0xffffffffffffffff, 0x1, 0x101, 0x1000, 0x1}, &(0x7f00000030c0)={0x80000001, 0x7f, 0x7, 0x3ff, 0x3, 0xfff, 0x5c, 0x5}, &(0x7f0000003100)={0x0, 0x3938700}, &(0x7f0000003180)={&(0x7f0000003140)={[0x3ff]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000031c0), 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000003200)) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000032c0), 0x400000, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000003740), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) syz_usb_connect$uac1(0x0, 0xbf, &(0x7f0000003780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0xa1, 0xa0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0x53}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0x6, "f355a3"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x5, "6a05f4a95aca"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x3, 0x6}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x3f, 0x5, "", "a25b3c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7f, 0x14, 0x3, {0x7, 0x25, 0x1, 0x81, 0x9, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x20, 0x2, 0x81, 0x5, "99b2079de032a9d9"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1000, 0x0, 0x0, "dc3ee889c1"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf5, 0x2, 0x4, 0x98, "", "56ec"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0x8, 0x6}}}}}}}]}}, &(0x7f0000003a80)={0xa, &(0x7f0000003840)={0xa, 0x6, 0x200, 0x7, 0x8, 0x6, 0x40, 0x7}, 0x5b, &(0x7f0000003880)={0x5, 0xf, 0x5b, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0xe, 0x6, 0x7, 0x0, 0x9, [0xff0000, 0xc00f, 0xff00cf, 0xf0, 0xffc000, 0x30]}, @ssp_cap={0x20, 0x10, 0xa, 0xf8, 0x5, 0x4, 0xf00f, 0xfff, [0x3f00, 0xc0, 0xff3f00, 0x0, 0x3f3f]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x0, 0x20}, @wireless={0xb, 0x10, 0x1, 0x2, 0x48, 0x8a, 0x1, 0x180, 0x7}]}, 0x4, [{0xb9, &(0x7f0000003900)=@string={0xb9, 0x3, "4966ac8d57834f511815a2d87120bd3ad184e6030fb831537d9bac72e7088e8c95f1e89738d19383f7b3ed036b6f8a0c7f24720b12ce9902128bca34207d2a39daa13bf5c55edb85ec8a8b6afe3af3319735f90cf64ee97b230421896e36a0125e78f02f345b904bb8439d4c96bbae3050609ba9c58cb058b7728c1f9e7f73b89c107be2089bf4e120e29ba98ef0f52d492822c6f6b67ad22d4b26e0f1bf128585da8017cd6de9f879fc2671974694b56288f67ffa568e"}}, {0x3d, &(0x7f00000039c0)=@string={0x3d, 0x3, "a6d1a77609918fd8502400a3f57282b9a1d4772adacc602142b6faee7f2ce88f09b3bab404098099d204ad3dd3eb82d7e589e4e4774d73925685fd"}}, {0x4, &(0x7f0000003a00)=@lang_id={0x4, 0x3, 0x1407}}, {0x19, &(0x7f0000003a40)=@string={0x19, 0x3, "070ab48c245ea072c278b4fe303837236efdf28e6d5760"}}]}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000003b00)={0x0, 0x1, r4, 0x7, 0x80000}) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000003b80), r2) sendmsg$FOU_CMD_GET(r2, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x40, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x80) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000003c80), 0x180201, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r2) 21:07:50 executing program 6: sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x2a, 0xa8, @random="8afa4d2d77766b2a50576871fd973a7edd848754efceecc4d0e2cdc7bb2f9f84f275ed6da38a"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0xc800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048011}, 0x40) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44}, 0x20001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r1) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1f}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x400000c}, 0x40004) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x25}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x40}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x44}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4804) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000d40), r3) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r7, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008140}, 0x4001) 21:07:50 executing program 7: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x3, 0x0, @auto=[0x30]}, 0x9, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="b7283044562d00706409fc2084f094310965948ae26ae3f72aef6e7367f41dd35a26d4d90a09ea175bf03e1778d79bddf72ab6", 0x33, 0xfffffffffffffffd) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x401}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xc0}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040055}, 0x4040040) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)={0xa437d5f616d00a5d, 0x0, @auto=[0x22, 0x31, 0x1e, 0x3b, 0x19, 0x12]}, 0xe, 0xfffffffffffffffe) socketpair(0x9, 0x800, 0xd8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xff84}, {0x8, 0x15, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) syz_genetlink_get_family_id$fou(&(0x7f0000000580), r3) add_key$fscrypt_provisioning(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)={0x1, 0x0, @d}, 0x18, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r1) pselect6(0x40, &(0x7f0000000780)={0x3, 0x1, 0x1, 0x10001, 0x3, 0x81, 0x5, 0x9000000000000}, &(0x7f00000007c0)={0x3, 0x2, 0x0, 0x1, 0x8000, 0x0, 0x3}, &(0x7f0000000800)={0x1, 0x4, 0xf14, 0x10000, 0x2, 0x0, 0x100, 0x9}, &(0x7f0000000840), &(0x7f00000008c0)={&(0x7f0000000880)={[0x2b]}, 0x8}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xe26e04c67443e104}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa0, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 128.339903] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.347216] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.353529] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.356725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.362407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.367052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.374981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.376578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.382240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.384303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.488395] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.494434] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.497324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.502969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.514009] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.521441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.531045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.533176] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.570191] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.573155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.577919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.580223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.594321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.607302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.615023] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.625375] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.629554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.634739] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.637464] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.647104] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.651125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.653422] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.669402] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.687064] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.688737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.707532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.709550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.728570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.731425] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.758365] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.418624] Bluetooth: hci0: command tx timeout [ 130.484150] Bluetooth: hci1: command tx timeout [ 130.673173] Bluetooth: hci2: command tx timeout [ 130.673921] Bluetooth: hci5: command tx timeout [ 130.737022] Bluetooth: hci3: command tx timeout [ 130.801123] Bluetooth: hci6: command tx timeout [ 130.802307] Bluetooth: hci4: command tx timeout [ 130.865849] Bluetooth: hci7: command tx timeout [ 132.465696] Bluetooth: hci0: command tx timeout [ 132.528893] Bluetooth: hci1: command tx timeout [ 132.721196] Bluetooth: hci5: command tx timeout [ 132.721683] Bluetooth: hci2: command tx timeout [ 132.785837] Bluetooth: hci3: command tx timeout [ 132.848973] Bluetooth: hci4: command tx timeout [ 132.849447] Bluetooth: hci6: command tx timeout [ 132.913844] Bluetooth: hci7: command tx timeout [ 134.512973] Bluetooth: hci0: command tx timeout [ 134.576953] Bluetooth: hci1: command tx timeout [ 134.769162] Bluetooth: hci2: command tx timeout [ 134.769644] Bluetooth: hci5: command tx timeout [ 134.833803] Bluetooth: hci3: command tx timeout [ 134.897114] Bluetooth: hci6: command tx timeout [ 134.897590] Bluetooth: hci4: command tx timeout [ 134.961806] Bluetooth: hci7: command tx timeout [ 136.562260] Bluetooth: hci0: command tx timeout [ 136.624870] Bluetooth: hci1: command tx timeout [ 136.818418] Bluetooth: hci5: command tx timeout [ 136.818928] Bluetooth: hci2: command tx timeout [ 136.880986] Bluetooth: hci3: command tx timeout [ 136.944875] Bluetooth: hci4: command tx timeout [ 136.945358] Bluetooth: hci6: command tx timeout [ 137.008860] Bluetooth: hci7: command tx timeout [ 190.983277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.988507] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.991398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.004531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.015086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.058021] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.061444] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.065077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.074257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.077861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.130321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.135395] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.141301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.147054] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.151088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.214139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.235511] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.242017] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.246158] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.248376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.250462] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.254393] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.256259] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.260732] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.264409] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.277283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.287359] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.291347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.293119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.295218] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.300295] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.308547] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.310766] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.312022] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.315326] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.319931] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.328469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.330178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.335356] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.342733] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.073973] Bluetooth: hci0: command tx timeout [ 193.136896] Bluetooth: hci1: command tx timeout [ 193.200890] Bluetooth: hci2: command tx timeout [ 193.392859] Bluetooth: hci7: command tx timeout [ 193.456935] Bluetooth: hci5: command tx timeout [ 193.457563] Bluetooth: hci3: command tx timeout [ 193.458640] Bluetooth: hci6: command tx timeout [ 193.459254] Bluetooth: hci4: command tx timeout [ 195.124032] Bluetooth: hci0: command tx timeout [ 195.184864] Bluetooth: hci1: command tx timeout [ 195.250802] Bluetooth: hci2: command tx timeout [ 195.442125] Bluetooth: hci7: command tx timeout [ 195.505006] Bluetooth: hci6: command tx timeout [ 195.505463] Bluetooth: hci4: command tx timeout [ 195.505477] Bluetooth: hci3: command tx timeout [ 195.506126] Bluetooth: hci5: command tx timeout [ 197.169043] Bluetooth: hci0: command tx timeout [ 197.233120] Bluetooth: hci1: command tx timeout [ 197.297830] Bluetooth: hci2: command tx timeout [ 197.488867] Bluetooth: hci7: command tx timeout [ 197.553108] Bluetooth: hci5: command tx timeout [ 197.553905] Bluetooth: hci3: command tx timeout [ 197.554393] Bluetooth: hci4: command tx timeout [ 197.554418] Bluetooth: hci6: command tx timeout [ 199.218101] Bluetooth: hci0: command tx timeout [ 199.281882] Bluetooth: hci1: command tx timeout [ 199.347822] Bluetooth: hci2: command tx timeout [ 199.537919] Bluetooth: hci7: command tx timeout [ 199.600891] Bluetooth: hci6: command tx timeout [ 199.601308] Bluetooth: hci4: command tx timeout [ 199.601385] Bluetooth: hci3: command tx timeout [ 199.601860] Bluetooth: hci5: command tx timeout [ 252.876725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.882384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.888338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.897545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.909325] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.184594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.187937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.190538] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.198018] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.202706] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.230512] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.259475] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.272941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.287605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.311380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.320037] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.334330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.340702] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.353058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.363983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.377347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.392172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.396795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.402489] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.403562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.408364] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.410371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.412663] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.417693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.421133] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.424981] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.430035] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.432341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.438415] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.448265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.586703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.592568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.601297] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.618290] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.648441] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.964797] Bluetooth: hci0: command tx timeout [ 255.282060] Bluetooth: hci1: command tx timeout [ 255.473717] Bluetooth: hci3: command tx timeout [ 255.537247] Bluetooth: hci2: command tx timeout [ 255.664926] Bluetooth: hci5: command tx timeout [ 255.665727] Bluetooth: hci6: command tx timeout [ 255.666212] Bluetooth: hci4: command tx timeout [ 255.728878] Bluetooth: hci7: command tx timeout [ 257.008906] Bluetooth: hci0: command tx timeout [ 257.331123] Bluetooth: hci1: command tx timeout [ 257.520967] Bluetooth: hci3: command tx timeout [ 257.585163] Bluetooth: hci2: command tx timeout [ 257.713138] Bluetooth: hci6: command tx timeout [ 257.713621] Bluetooth: hci5: command tx timeout [ 257.714307] Bluetooth: hci4: command tx timeout [ 257.776892] Bluetooth: hci7: command tx timeout [ 259.057190] Bluetooth: hci0: command tx timeout [ 259.376861] Bluetooth: hci1: command tx timeout [ 259.569803] Bluetooth: hci3: command tx timeout [ 259.633074] Bluetooth: hci2: command tx timeout [ 259.760949] Bluetooth: hci4: command tx timeout [ 259.761465] Bluetooth: hci5: command tx timeout [ 259.762966] Bluetooth: hci6: command tx timeout [ 259.825259] Bluetooth: hci7: command tx timeout [ 261.106790] Bluetooth: hci0: command tx timeout [ 261.424857] Bluetooth: hci1: command tx timeout [ 261.616841] Bluetooth: hci3: command tx timeout [ 261.681044] Bluetooth: hci2: command tx timeout [ 261.809082] Bluetooth: hci4: command tx timeout [ 261.809596] Bluetooth: hci5: command tx timeout [ 261.810729] Bluetooth: hci6: command tx timeout [ 261.873216] Bluetooth: hci7: command tx timeout [ 315.398552] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.407312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.412147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.425460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.434104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.483717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.486685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.490273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.503321] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.509155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.610415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.626017] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.628663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.640370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.646336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.789051] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.802318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.852651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.863236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.875585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.877688] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.879591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.882586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.887679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.893589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.902917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.903142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.908111] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.924702] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.924951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.941552] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.949331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.965135] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.965230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.980531] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.004297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.017507] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.032983] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.045259] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.074951] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 317.489907] Bluetooth: hci0: command tx timeout [ 317.552862] Bluetooth: hci1: command tx timeout [ 317.680849] Bluetooth: hci2: command tx timeout [ 318.065901] Bluetooth: hci4: command tx timeout [ 318.066614] Bluetooth: hci5: command tx timeout [ 318.067158] Bluetooth: hci3: command tx timeout [ 318.193189] Bluetooth: hci7: command tx timeout [ 318.257476] Bluetooth: hci6: command tx timeout [ 319.536899] Bluetooth: hci0: command tx timeout [ 319.600831] Bluetooth: hci1: command tx timeout [ 319.729174] Bluetooth: hci2: command tx timeout [ 320.112942] Bluetooth: hci3: command tx timeout [ 320.113456] Bluetooth: hci5: command tx timeout [ 320.113938] Bluetooth: hci4: command tx timeout [ 320.240878] Bluetooth: hci7: command tx timeout [ 320.304874] Bluetooth: hci6: command tx timeout [ 321.584870] Bluetooth: hci0: command tx timeout [ 321.650057] Bluetooth: hci1: command tx timeout [ 321.776838] Bluetooth: hci2: command tx timeout [ 322.161022] Bluetooth: hci3: command tx timeout [ 322.161523] Bluetooth: hci4: command tx timeout [ 322.162277] Bluetooth: hci5: command tx timeout [ 322.288823] Bluetooth: hci7: command tx timeout [ 322.352826] Bluetooth: hci6: command tx timeout [ 323.632884] Bluetooth: hci0: command tx timeout [ 323.697829] Bluetooth: hci1: command tx timeout [ 323.824816] Bluetooth: hci2: command tx timeout [ 324.210811] Bluetooth: hci3: command tx timeout [ 324.211287] Bluetooth: hci5: command tx timeout [ 324.211701] Bluetooth: hci4: command tx timeout [ 324.336860] Bluetooth: hci7: command tx timeout [ 324.400866] Bluetooth: hci6: command tx timeout [ 377.860265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.867116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.872536] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.883369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.892736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.012411] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.017366] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.021996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.037399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.044534] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.073961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.094295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.098022] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.103201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.115504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.214277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.224868] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.244345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.247351] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.250323] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.253011] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.263094] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.269163] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 378.320417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.330631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.340727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.343272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.361683] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.363316] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.373587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.383509] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.385613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.388254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.396812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.403506] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.416461] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.416505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.450402] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.483028] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.542503] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.952859] Bluetooth: hci0: command tx timeout [ 380.081889] Bluetooth: hci1: command tx timeout [ 380.144866] Bluetooth: hci2: command tx timeout [ 380.336990] Bluetooth: hci7: command tx timeout [ 380.529880] Bluetooth: hci4: command tx timeout [ 380.592864] Bluetooth: hci5: command tx timeout [ 380.721015] Bluetooth: hci3: command tx timeout [ 380.721245] Bluetooth: hci6: command tx timeout [ 382.001134] Bluetooth: hci0: command tx timeout [ 382.130536] Bluetooth: hci1: command tx timeout [ 382.193217] Bluetooth: hci2: command tx timeout [ 382.386094] Bluetooth: hci7: command tx timeout [ 382.576858] Bluetooth: hci4: command tx timeout [ 382.640981] Bluetooth: hci5: command tx timeout [ 382.769411] Bluetooth: hci3: command tx timeout [ 382.769926] Bluetooth: hci6: command tx timeout [ 384.049497] Bluetooth: hci0: command tx timeout [ 384.177111] Bluetooth: hci1: command tx timeout [ 384.240819] Bluetooth: hci2: command tx timeout [ 384.432886] Bluetooth: hci7: command tx timeout [ 384.624837] Bluetooth: hci4: command tx timeout [ 384.688916] Bluetooth: hci5: command tx timeout [ 384.816850] Bluetooth: hci3: command tx timeout [ 384.818145] Bluetooth: hci6: command tx timeout [ 386.096830] Bluetooth: hci0: command tx timeout [ 386.225948] Bluetooth: hci1: command tx timeout [ 386.288883] Bluetooth: hci2: command tx timeout [ 386.481145] Bluetooth: hci7: command tx timeout [ 386.672973] Bluetooth: hci4: command tx timeout [ 386.736935] Bluetooth: hci5: command tx timeout [ 386.864856] Bluetooth: hci6: command tx timeout [ 386.865303] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 21:12:53 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88802802fed0 RCX=ffff88802802f94c RDX=0000000000000002 RSI=ffffffff85c1d1c0 RDI=ffff8880344c0aa8 RBP=ffffffff85c1d1c0 RSP=ffff88802802f940 R8 =0000000000000001 R9 =ffff88802802fa38 R10=000000000003b67d R11=0000000000021373 R12=ffffffff81353f32 R13=0000000000000202 R14=ffff8880344c0000 R15=0000000000000003 RIP=ffffffff8151acfa RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1a3b8e1580 CR3=0000000032682000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=fffffffffaf35adb RBX=ffffffff86480234 RCX=ffffffff813b5d03 RDX=0000000000000000 RSI=ffffffff867cc024 RDI=ffffffff8648022c RBP=ffffffff8648022c RSP=ffff88806cf08970 R8 =ffffffff867cc024 R9 =0000000000000000 R10=000000000003b67d R11=000000000000865a R12=ffffffff86480240 R13=ffffffff8648022c R14=ffffffff8648022c R15=dffffc0000000000 RIP=ffffffff81353253 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007eff3b84d540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd0c64088e0 CR3=00000000326ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000