Warning: Permanently added '[localhost]:16787' (ECDSA) to the list of known hosts. 2025/06/03 13:20:16 fuzzer started 2025/06/03 13:20:17 dialing manager at localhost:34361 syzkaller login: [ 103.104768] cgroup: Unknown subsys name 'net' [ 103.244449] cgroup: Unknown subsys name 'cpuset' [ 103.302456] cgroup: Unknown subsys name 'rlimit' 2025/06/03 13:20:39 syscalls: 202 2025/06/03 13:20:39 code coverage: enabled 2025/06/03 13:20:39 comparison tracing: enabled 2025/06/03 13:20:39 extra coverage: enabled 2025/06/03 13:20:39 setuid sandbox: enabled 2025/06/03 13:20:39 namespace sandbox: enabled 2025/06/03 13:20:39 Android sandbox: enabled 2025/06/03 13:20:39 fault injection: enabled 2025/06/03 13:20:39 leak checking: enabled 2025/06/03 13:20:39 net packet injection: enabled 2025/06/03 13:20:39 net device setup: enabled 2025/06/03 13:20:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/03 13:20:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/03 13:20:39 USB emulation: enabled 2025/06/03 13:20:39 hci packet injection: enabled 2025/06/03 13:20:39 wifi device emulation: enabled 2025/06/03 13:20:39 802.15.4 emulation: enabled 2025/06/03 13:20:39 fetching corpus: 0, signal 0/0 (executing program) 2025/06/03 13:20:41 starting 8 fuzzer processes 13:20:41 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/155) io_uring_setup(0x2719, &(0x7f0000000100)={0x0, 0xb07e, 0x2, 0x0, 0xc8}) r0 = socket(0x10, 0x2, 0x10001) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1dc, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40d0}, 0x408d0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000005c0)=0x1) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0x648281, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39cb472e1e03"}]}, 0x48}}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x24004080) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r5) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10004040) r9 = openat$cgroup_subtree(r5, &(0x7f0000000a40), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000a80)={[{0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'freezer'}, {0x2b, 'perf_event'}]}, 0x20) name_to_handle_at(r5, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)=@xfs={0x1c, 0x81, {0x7, 0x2, 0x7, 0x6}}, &(0x7f0000000b40), 0x1000) 13:20:41 executing program 1: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000000), &(0x7f0000000040)=""/234, 0xea}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000180)=0x9) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000001c0)={@desc={0x1, 0x0, @auto="9734f191f45d081b"}}) r0 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7ff, 0x2) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000240), 0x0, 0x101}) mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r1 = syz_mount_image$nfs4(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0xcb6, 0x5, &(0x7f0000000700)=[{&(0x7f0000000380)="1588e4cbaf9cf5d810d0166c36d367b758c4313bfd3f84c71f3e2fd4d2b1d7e369bdc1e292ff5987c97e94ba52c46c5a650d5878aee015b345d17ecbee366ec0730a449cf20769ea3f6b9d09ec209323ceccbf8b6d9795bfd9669713196e51b61e0e918360a5e9c1eb2efa3e80c15e6ce3c67e333244dc1306644c9e002abd8120ee45ae400a29ddc32e60e72664847f3e31408821c9894859cd4992bc36a9b4a1361b9b72ffaa6cffa2e82fbd1230fb9936b51b4380c1d33d5302b6", 0xbc, 0x38}, {&(0x7f0000000440)="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", 0xfd, 0x5}, {&(0x7f0000000540)="792d313b12d470aecf6f240ec500063fc5e325f6de2c349dc61688873c927b9be98d443e4833d58e927d0361b7ec920ac0071d0b53bc21164715d852c62f4624ebe0750c33ccb7a71bdbb7ee6de11e5463c0e32d5b0375105d8991536947aac55b8545e8c86034472ba76c376bd074001d", 0x71, 0xfffffffffffffffb}, {&(0x7f00000005c0)="916475d317b9cf1819439af72751200e427c7bc75f5d13a34ae37c3542268d99169bb866e447cbdc660fe1d3991e4b3957eeef9363f4e682cd5bd234a516ad35f2ef621ebd2cb77c42e1fdfbeaf4d3dacbc2f203058b5bce1acc3b5c9237307b09812b8f9d544bf5cd900e3f68b44d43fb527c4e1b16f659d4745b23ffab1e1616da824e6a3581d8f72474c032205a9d8606b27430b383bd182d5bf894f45ef37db02f38a3c3349fac098a7a5d6a65dd", 0xb0, 0x80000001}, {&(0x7f0000000680)="497be8fcd50ca92eef030c24ec34f3efc52f3b4f5558cb635959139a6d9927a228857b88f305bcc9d90c7f6e0d6241af2d46978f6857218e6be9f9f13bd183a8937fc3b2d01f5969176f4aa1393f22c588ceec913eb7db2843ef85cff69549032e781dadb1387af494165b92b1dea8923c68fcb7bce17ac6be0f5d", 0x7b}], 0x110000, &(0x7f0000000780)={[{'/dev/usbmon#\x00'}, {'\x00'}, {'[@}'}, {'/dev/usbmon#\x00'}, {'-'}, {'[C.\'-:@!/)\\)'}, {'+'}], [{@dont_hash}, {@smackfsroot}, {@permit_directio}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@euid_gt={'euid>', 0xee00}}]}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000900)={&(0x7f0000000840), &(0x7f0000000880)=""/97, 0x61}) mknodat$null(r1, &(0x7f0000000940)='./file0\x00', 0x8, 0x103) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000bc0)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000000cc0)=0xe8) r4 = syz_mount_image$ext4(&(0x7f0000000980)='ext2\x00', &(0x7f00000009c0)='./file0\x00', 0x8, 0x2, &(0x7f0000000b80)=[{&(0x7f0000000a00)="868793984c5f01a6d8a6518b6ccf6ea82c39fb7605330be7c758dd3b5aeb36c275e0d79e0c85add24566a50c72cb2d2e6da915a87b758c245ec7e6dbb39841639c5ccbcf5cdcabf9473fd0dc8b0da886ccb47b091fcbf3e275bf0f6244d455cd1331e201f87ae614", 0x68, 0x8}, {&(0x7f0000000a80)="196b0c192757088036c877c3020de5152d7c5b1c97351e5cce10e30f744fd766956c1b78be3950e8c43c40be26f75b3a657f21fa0a0a7b2ef5b2f1ba739572eedf97b750e071a95640b434e40b0af311aa282de29e5245dcf0dddb4d65db1fc1a9ad6adbfbce133fcffff10e829ef75a8e3d30a0785d84594f1c2ffe6392574e466a6f4232019964f053699c97b6254825d69d3f57aea496a081172d7192b415977f610ae20281e1da9dfc1a11bd8d2a0b2f33ec70a6b8b7c9fff4b4d5cf4f4a2940260f0f42d0ba", 0xc8, 0x4}], 0x805800, &(0x7f0000000d00)={[{@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x4}}], [{@permit_directio}, {@pcr={'pcr', 0x3d, 0x3f}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, r3}}, {@audit}, {@uid_lt={'uid<', 0xee01}}, {@obj_type={'obj_type', 0x3d, ','}}]}) syz_io_uring_setup(0x4ec6, &(0x7f0000000dc0)={0x0, 0x5e50, 0x1, 0x2, 0x2e3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000e40), &(0x7f0000000e80)) syz_mount_image$tmpfs(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, 0x2, &(0x7f0000001140)=[{&(0x7f0000000f40)="7b5d5bbff978ac998c721579353bf32ec1179cf534ff0d81dabe94afec668e5a814bc4d9d96bdee4fda5bd64e889f48cdb715e27f68719e18c914d1db4151bb24d3585067090105c72f069553ef2eb24b11d98710098baa48be56e27ba198c07f5d4f49ab03941e38954283d5693dbd79d621a4cb77dce863989c674156143ee3a4bc659f12b722524ac37f5efe9453b98dbdb998992ade59c13c2af732c7262d89e7720fa50f16d8b4be71dd7238e6ad7452355033793be7e7188a5b737cbc537aa1ff641a1cb62642743e469a6bd63753d09ae135bf639b92a", 0xda, 0x3}, {&(0x7f0000001040)="fcb02975a7e63c152fd083d0f8644886c427f36bbf74c07d1eb61c83b500def0ef7aef3a455babebc8ab56d23c7c294eca34c25466932458c6c3fe3d717bb154b972d75ab420078ce439c3a49f5748cd17bdb3b971222ec56e4f14a59cbed997e66470d21eb5fb7fdfd6290d92f16917285447af1efaec584004a8253de3f9a74f15f2003ec85b1de86ac776d7488a6a872c42e11ba984168aee8d2eaafc776f548863728d1a0edee72d5d1596787060cc00dcf0708d7c07272e19cf8de6604c556805a5b9c5995542cc7978", 0xcc, 0x4}], 0x200000, &(0x7f0000001180)={[{@huge_never}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x30]}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x200}}, {@size={'size', 0x3d, [0x61]}}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x33, 0x0, 0x2c, 0x37]}}}}, {@uid={'uid', 0x3d, r3}}, {@nr_inodes={'nr_inodes', 0x3d, [0x36]}}], [{@audit}]}) readlinkat(r4, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280)=""/56, 0x38) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000012c0), 0x40600, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000001300)={0x1ff, 0x8e, "b1fff769121b5fc6e9dc60bb3c9dc08ba06e71f22c706172488879e302c2276c6cc773e84ebf5cb7875f6dba39e4196ba51144454af20dbfa319b198572e0431cad52f6105aebf00a629d4efd6162236d7e8cd7c7feb8b6fa79f2b05e1733148c6a6e5d2706d00cdff6d717d6c0bbbb2977ee5c7699d5f5e517fc3698793047a16fb2c429efb8b1eff55a50b7135"}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000013c0), 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001440)={'ip6_vti0\x00', r2, 0x2f, 0xe0, 0x7f, 0x7ff, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7, 0x8, 0x4}}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000018c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001880)={&(0x7f0000001640)={0x23c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x44d9}}}]}}, {{0x8, 0x1, r2}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9a0}}}]}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 13:20:41 executing program 2: r0 = gettid() mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x28, 0x2, @tid=r0}) sched_setparam(r0, &(0x7f0000000040)=0x1000) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)) r1 = gettid() tgkill(r1, r0, 0x31) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000180)={&(0x7f0000000140)=""/45, 0x2d}) gettid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x2958, 0x1, 0xc6, 0xfffff800}, {0xf6e3, 0x7, 0x6, 0x1}, {0x81, 0x1, 0x40, 0xffff}, {0x0, 0x7, 0x76, 0x6}, {0x9, 0x0, 0x8}, {0x9, 0xff, 0x7f, 0x1}, {0x800, 0x2, 0x4}, {0xcc93, 0xff, 0x3, 0x8e0f}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)) r4 = socket(0x1, 0x1, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x3, 0xffffff0b, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x10, 0x20, 0x101, 0x7fffffff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) capget(&(0x7f0000000400)={0x20080522, r5}, &(0x7f0000000440)={0x18e4, 0x3f, 0x2, 0x6, 0x1}) ptrace$getregset(0x4204, r5, 0x4, &(0x7f0000000580)={&(0x7f0000000480)=""/252, 0xfc}) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6f) clock_gettime(0x5, &(0x7f0000000600)) getitimer(0x2, &(0x7f0000000640)) 13:20:41 executing program 3: setpgid(0xffffffffffffffff, 0x0) waitid(0x1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)) r0 = gettid() syz_open_procfs$userns(r0, &(0x7f00000000c0)) syz_open_procfs$userns(r0, &(0x7f0000000100)) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x4, 0x7, 0x80, 0x8000, 0x39, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x10, 0x8000, 0x1, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xe8, 0x40, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x20, 0x80000000, 0x5257}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1b0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x6c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x48055}, 0x20048014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl2\x00', r5, 0x29, 0x80, 0x5, 0x8, 0x4, @mcast2, @local, 0x40, 0x0, 0x8}}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000900)={&(0x7f0000000800)=""/196, 0xc4}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', r3, 0x29, 0x5, 0x94, 0x2, 0x4, @loopback, @mcast2, 0x20, 0x80, 0x978, 0x4}}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2004, @fd_index=0x4, 0xffff, 0x0, 0x0, 0x1e, 0x1, {0x2, r6}}, 0xfffffffe) ioctl$sock_ifreq(0xffffffffffffffff, 0x8913, &(0x7f0000000b00)={'veth0_to_bond\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=&(0x7f0000000ac0)={0x3ff, 'veth0_to_bond\x00'}}}) [ 126.665206] audit: type=1400 audit(1748956841.280:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:20:41 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x50, 0xffffffffffffffff, 0x7ff800000000000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x26}) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000080)=""/20) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000000c0)=""/190) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8002, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000001c0)=""/45, &(0x7f0000000200)=0x2d) setpgid(0x0, 0x0) syz_io_uring_setup(0x5183, &(0x7f0000000240)={0x0, 0xcb8b, 0x1, 0x3, 0x192}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r2 = socket(0xf, 0x5, 0x5) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000340)={0x3, "7db349"}, 0x6) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000380)) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000003c0)=""/230) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000004c0)={@id={0x2, 0x0, @a}}) r3 = shmget$private(0x0, 0x1000, 0xbcef9b444d474ee0, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000600)={&(0x7f0000000500), &(0x7f0000000540)=""/165, 0xa5}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) 13:20:41 executing program 5: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) r1 = getgid() fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xee01, r1, 0x800) r2 = syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x7f, 0x4, &(0x7f0000000480)=[{&(0x7f0000000280)="d9743fc2437d5e2ec91496040ccbaa64e5f81b3d90cc10b4d192a5a97bfcc1dabee4380536f3a3189e41523ae406abfc57a1c917c153ebbe66389ae4c33148168aa330e4ece79a7a90cf889e2b256104c43f21bf24d24d63f2aef144276c291406ffd28b063815871da4fe66bcf83b3fa317ba7b412f5f666aab523318fd8e23f357c348f445d4d615d0035ad0da6ec6ce5b7b3becaff3a7b7f7830bc8842dff8a8f901bfae6e5bb281c1cf45869afef7557", 0xb2, 0x9}, {&(0x7f0000000340)="12fe4bff8c7a840c499a3cd5a86d4e2da0ee9d88269548d63f1afb2a13c9cd014ab3134d898befb5ef5d78c1c8d7387bb9e6484eb4e4468d0662ce1fc31b29c2847d6ff71f4a8452ee21c664d13c1af2867c1ef1175a6a", 0x57, 0x10000}, {&(0x7f00000003c0)="8261df9c8fdc0edf70f8b4c1f570092eb125ab553e1ac7b69a67342da43406dae1781d9c61bc28bdc4281545122f6901c99384cbbaae5ba8d979d314846b5963341f57f4bb3e1ff3b2c2fd54200077c754f2a5c54b48b80e04b274ea412c31ffbe2537aa536437c598d9a33abe5f62eb1e9fd8f72cc8442741e8d16ec6424c", 0x7f, 0x7f}, {&(0x7f0000000440), 0x0, 0x3d00000000000000}], 0x1080004, &(0x7f0000000500)={[{@size={'size', 0x3d, [0x34, 0x74, 0x31, 0x39]}}, {@gid={'gid', 0x3d, r1}}, {@size={'size', 0x3d, [0x70, 0x70, 0x65, 0x6d, 0x25, 0x65]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x31]}}], [{@fowner_lt={'fowner<', 0xee00}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@seclabel}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@pcr={'pcr', 0x3d, 0xc}}]}) name_to_handle_at(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x2, 0x3, 0x4, 0x3, 0x45}}, &(0x7f0000000680), 0x400) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000006c0)=0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x0) set_tid_address(&(0x7f0000000740)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780), 0x400100, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x1000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000007c0)=""/211) r5 = syz_mount_image$tmpfs(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x100, 0x1, &(0x7f00000009c0)=[{&(0x7f0000000940)="a911ad9cabc5eb3f9f4b15b0420b2c9730dc759436976e0282d1d36a76acaaf3583bbcac49d8f59a97bef488e843f9955808f1ec6ef7a3738610d19d29ace726890fe1f88ab47b63398723cd96", 0x4d, 0x312c}], 0x100002, &(0x7f0000000a00)={[{@mode={'mode', 0x3d, 0xf4}}, {@gid={'gid', 0x3d, r1}}, {@huge_never}], [{@hash}]}) getdents64(r5, &(0x7f0000000a80)=""/35, 0x23) mknodat$null(r5, &(0x7f0000000ac0)='./file0\x00', 0x40, 0x103) syz_io_uring_setup(0x738d, &(0x7f0000000b00)={0x0, 0x2e18, 0x2, 0x0, 0x316, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000c40)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r5, r0, 0xffffffffffffffff, r3, r2], 0x5, 0x0, 0x1}, 0x7fffffff) 13:20:41 executing program 6: r0 = socket(0x8, 0xa, 0x20) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24}, 0x20040805) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}}, 0x800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x40, 0x7, 0x1, 0x8, @dev={0xfe, 0x80, '\x00', 0x18}, @loopback, 0x700, 0x0, 0x3, 0xffff}}) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000880)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000b00)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000000b40)={0x980, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0xff, 0x0, 0x4}, {0x6, 0x7, 0x20, 0x20}, {0x7, 0xff, 0x2f}, {0x6, 0x22, 0xff, 0x2f24}, {0x4, 0x1f, 0x4}]}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf05}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x3, 0x1, 0x83}, {0x401, 0x7f, 0xff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x980}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000001540)={@desc={0x1, 0x0, @desc3}}) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x3c, r12, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x214}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r12, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 13:20:41 executing program 7: r0 = io_uring_setup(0xd48, &(0x7f0000000000)={0x0, 0x72ec, 0x4, 0x2, 0x2f2}) io_uring_setup(0x370e, &(0x7f0000000080)={0x0, 0x93a7, 0x0, 0x2, 0x15b, 0x0, r0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='lp\x00', 0x3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x4, r0, 0x6}) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000280)) io_uring_setup(0x5873, &(0x7f00000002c0)={0x0, 0x8515, 0x10, 0x3, 0x5b}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000340)=""/217, &(0x7f0000000440)=0xd9) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4044051}, 0x40010) r3 = syz_open_dev$sg(&(0x7f00000006c0), 0x4d1b, 0x4000) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000700)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000740)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xaf9ab6d) ioctl$sock_ifreq(r1, 0x8921, &(0x7f0000000780)={'veth1\x00', @ifru_mtu}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r4, &(0x7f00000007c0)=@x25, &(0x7f0000000840)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f00000008c0)) [ 128.072326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.075135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.079075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.081603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.087062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.091331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.100201] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.102702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.109529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.113576] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.140315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.145294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.147712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.152164] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.156227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.157174] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.159212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.160625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.163677] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.168413] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.170991] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.182169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.187416] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.192330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.195149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.202289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.203452] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.205818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.208566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.212251] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.220382] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.223269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.236483] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.238479] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.247023] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 128.277739] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.294253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.310633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.320107] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.329268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.157630] Bluetooth: hci0: command tx timeout [ 130.157632] Bluetooth: hci1: command tx timeout [ 130.221964] Bluetooth: hci4: command tx timeout [ 130.284062] Bluetooth: hci3: command tx timeout [ 130.284106] Bluetooth: hci2: command tx timeout [ 130.349204] Bluetooth: hci6: command tx timeout [ 130.349836] Bluetooth: hci5: command tx timeout [ 130.412009] Bluetooth: hci7: command tx timeout [ 132.204428] Bluetooth: hci0: command tx timeout [ 132.205043] Bluetooth: hci1: command tx timeout [ 132.270217] Bluetooth: hci4: command tx timeout [ 132.332692] Bluetooth: hci3: command tx timeout [ 132.333489] Bluetooth: hci2: command tx timeout [ 132.396007] Bluetooth: hci5: command tx timeout [ 132.396054] Bluetooth: hci6: command tx timeout [ 132.461696] Bluetooth: hci7: command tx timeout [ 134.252009] Bluetooth: hci1: command tx timeout [ 134.252026] Bluetooth: hci0: command tx timeout [ 134.315981] Bluetooth: hci4: command tx timeout [ 134.380942] Bluetooth: hci2: command tx timeout [ 134.381097] Bluetooth: hci3: command tx timeout [ 134.444318] Bluetooth: hci6: command tx timeout [ 134.444834] Bluetooth: hci5: command tx timeout [ 134.508014] Bluetooth: hci7: command tx timeout [ 136.299980] Bluetooth: hci1: command tx timeout [ 136.300951] Bluetooth: hci0: command tx timeout [ 136.364093] Bluetooth: hci4: command tx timeout [ 136.428332] Bluetooth: hci2: command tx timeout [ 136.428947] Bluetooth: hci3: command tx timeout [ 136.493933] Bluetooth: hci5: command tx timeout [ 136.495305] Bluetooth: hci6: command tx timeout [ 136.555966] Bluetooth: hci7: command tx timeout [ 191.078170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.084353] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.085848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.087387] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.092686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.095100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.099355] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.105664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.114652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.118379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.120281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.121608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.123204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.132124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.140496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.141541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.143747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.147475] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.173148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.204438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.236532] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.236542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.245609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.247361] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.250687] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.253365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.257390] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.258276] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.264777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.269354] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.285406] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.286586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.290364] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.294174] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.295262] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.296376] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.300458] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.311067] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.347500] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.350223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.197715] Bluetooth: hci1: command tx timeout [ 193.262003] Bluetooth: hci3: command tx timeout [ 193.262624] Bluetooth: hci0: command tx timeout [ 193.324011] Bluetooth: hci7: command tx timeout [ 193.324617] Bluetooth: hci2: command tx timeout [ 193.388140] Bluetooth: hci4: command tx timeout [ 193.388766] Bluetooth: hci5: command tx timeout [ 193.452169] Bluetooth: hci6: command tx timeout [ 195.244380] Bluetooth: hci1: command tx timeout [ 195.308954] Bluetooth: hci0: command tx timeout [ 195.309451] Bluetooth: hci3: command tx timeout [ 195.372411] Bluetooth: hci2: command tx timeout [ 195.373028] Bluetooth: hci7: command tx timeout [ 195.437113] Bluetooth: hci5: command tx timeout [ 195.437620] Bluetooth: hci4: command tx timeout [ 195.501199] Bluetooth: hci6: command tx timeout [ 197.292469] Bluetooth: hci1: command tx timeout [ 197.356272] Bluetooth: hci3: command tx timeout [ 197.356773] Bluetooth: hci0: command tx timeout [ 197.421243] Bluetooth: hci7: command tx timeout [ 197.421761] Bluetooth: hci2: command tx timeout [ 197.485053] Bluetooth: hci4: command tx timeout [ 197.485543] Bluetooth: hci5: command tx timeout [ 197.548906] Bluetooth: hci6: command tx timeout [ 199.340254] Bluetooth: hci1: command tx timeout [ 199.404292] Bluetooth: hci0: command tx timeout [ 199.404790] Bluetooth: hci3: command tx timeout [ 199.468064] Bluetooth: hci2: command tx timeout [ 199.469687] Bluetooth: hci7: command tx timeout [ 199.533038] Bluetooth: hci5: command tx timeout [ 199.534485] Bluetooth: hci4: command tx timeout [ 199.596999] Bluetooth: hci6: command tx timeout [ 253.472421] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.474001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.475317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.478178] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.480219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.713354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.716578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.718631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.724823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.732088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.851812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.858602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.858620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.862558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.865338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.868464] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.874225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.880313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.895194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.899272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.954274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.958002] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.960777] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.962416] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.964438] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.969762] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.971399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.973079] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.976482] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 253.977269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.979233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.031537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.036313] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.038790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.042418] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.052485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.058221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.064486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.112199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.125857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.532052] Bluetooth: hci0: command tx timeout [ 255.788222] Bluetooth: hci1: command tx timeout [ 255.980352] Bluetooth: hci3: command tx timeout [ 255.980384] Bluetooth: hci2: command tx timeout [ 256.044291] Bluetooth: hci7: command tx timeout [ 256.172020] Bluetooth: hci5: command tx timeout [ 256.172270] Bluetooth: hci4: command tx timeout [ 256.363983] Bluetooth: hci6: command tx timeout [ 257.580020] Bluetooth: hci0: command tx timeout [ 257.836050] Bluetooth: hci1: command tx timeout [ 258.028521] Bluetooth: hci2: command tx timeout [ 258.029099] Bluetooth: hci3: command tx timeout [ 258.093279] Bluetooth: hci7: command tx timeout [ 258.220227] Bluetooth: hci5: command tx timeout [ 258.220285] Bluetooth: hci4: command tx timeout [ 258.414386] Bluetooth: hci6: command tx timeout [ 259.628017] Bluetooth: hci0: command tx timeout [ 259.884397] Bluetooth: hci1: command tx timeout [ 260.076021] Bluetooth: hci3: command tx timeout [ 260.076573] Bluetooth: hci2: command tx timeout [ 260.139960] Bluetooth: hci7: command tx timeout [ 260.268061] Bluetooth: hci4: command tx timeout [ 260.268576] Bluetooth: hci5: command tx timeout [ 260.459969] Bluetooth: hci6: command tx timeout [ 261.676059] Bluetooth: hci0: command tx timeout [ 261.932784] Bluetooth: hci1: command tx timeout [ 262.124309] Bluetooth: hci2: command tx timeout [ 262.124837] Bluetooth: hci3: command tx timeout [ 262.189062] Bluetooth: hci7: command tx timeout [ 262.316125] Bluetooth: hci5: command tx timeout [ 262.316651] Bluetooth: hci4: command tx timeout [ 262.509350] Bluetooth: hci6: command tx timeout [ 316.365278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.374659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.384188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.410301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.415818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.546266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.550187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.551678] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.561392] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.567328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.571814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.585437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.587285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.602500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.605769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.608210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.612181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.613082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.615037] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.621214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.623438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.626193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.632246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.682697] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.691609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.730234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.734728] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.738052] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.743050] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.760191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.776438] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.778233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.798812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.816137] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.820123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.828358] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.842278] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.844302] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.863275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.888037] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.508351] Bluetooth: hci0: command tx timeout [ 318.637673] Bluetooth: hci1: command tx timeout [ 318.700019] Bluetooth: hci3: command tx timeout [ 318.700634] Bluetooth: hci4: command tx timeout [ 318.764001] Bluetooth: hci2: command tx timeout [ 318.829294] Bluetooth: hci5: command tx timeout [ 318.892113] Bluetooth: hci6: command tx timeout [ 318.957262] Bluetooth: hci7: command tx timeout [ 320.556005] Bluetooth: hci0: command tx timeout [ 320.687112] Bluetooth: hci1: command tx timeout [ 320.747964] Bluetooth: hci4: command tx timeout [ 320.748676] Bluetooth: hci3: command tx timeout [ 320.814400] Bluetooth: hci2: command tx timeout [ 320.876159] Bluetooth: hci5: command tx timeout [ 320.941144] Bluetooth: hci6: command tx timeout [ 321.004392] Bluetooth: hci7: command tx timeout [ 322.604251] Bluetooth: hci0: command tx timeout [ 322.733939] Bluetooth: hci1: command tx timeout [ 322.795999] Bluetooth: hci4: command tx timeout [ 322.796962] Bluetooth: hci3: command tx timeout [ 322.859966] Bluetooth: hci2: command tx timeout [ 322.923965] Bluetooth: hci5: command tx timeout [ 322.989306] Bluetooth: hci6: command tx timeout [ 323.051981] Bluetooth: hci7: command tx timeout [ 324.652221] Bluetooth: hci0: command tx timeout [ 324.780001] Bluetooth: hci1: command tx timeout [ 324.843981] Bluetooth: hci3: command tx timeout [ 324.844006] Bluetooth: hci4: command tx timeout [ 324.908382] Bluetooth: hci2: command tx timeout [ 324.972548] Bluetooth: hci5: command tx timeout [ 325.036487] Bluetooth: hci6: command tx timeout [ 325.100935] Bluetooth: hci7: command tx timeout [ 379.012160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.016655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.030093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.050713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.053985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.333843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.336284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.343644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.351855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.356427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.534735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.539483] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.548105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.551351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.555618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.556655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.562231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.569800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.574436] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.576857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.578070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.586223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.596235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.597279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.600273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.614056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.624149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.642740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.651322] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.667548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.668665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.669696] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.688154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.693817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.696673] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.704095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.715251] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.716609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.756351] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.763447] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.100364] Bluetooth: hci0: command tx timeout [ 381.420413] Bluetooth: hci1: command tx timeout [ 381.676096] Bluetooth: hci5: command tx timeout [ 381.677275] Bluetooth: hci2: command tx timeout [ 381.804103] Bluetooth: hci7: command tx timeout [ 381.804844] Bluetooth: hci4: command tx timeout [ 381.805519] Bluetooth: hci3: command tx timeout [ 381.868231] Bluetooth: hci6: command tx timeout [ 383.148978] Bluetooth: hci0: command tx timeout [ 383.468955] Bluetooth: hci1: command tx timeout [ 383.724295] Bluetooth: hci5: command tx timeout [ 383.724855] Bluetooth: hci2: command tx timeout [ 383.852056] Bluetooth: hci7: command tx timeout [ 383.852604] Bluetooth: hci3: command tx timeout [ 383.853472] Bluetooth: hci4: command tx timeout [ 383.916576] Bluetooth: hci6: command tx timeout [ 385.196943] Bluetooth: hci0: command tx timeout [ 385.515999] Bluetooth: hci1: command tx timeout [ 385.772036] Bluetooth: hci2: command tx timeout [ 385.772597] Bluetooth: hci5: command tx timeout [ 385.900246] Bluetooth: hci4: command tx timeout [ 385.900798] Bluetooth: hci3: command tx timeout [ 385.901834] Bluetooth: hci7: command tx timeout [ 385.964410] Bluetooth: hci6: command tx timeout [ 387.244918] Bluetooth: hci0: command tx timeout [ 387.564781] Bluetooth: hci1: command tx timeout [ 387.820071] Bluetooth: hci2: command tx timeout [ 387.820661] Bluetooth: hci5: command tx timeout [ 387.948210] Bluetooth: hci7: command tx timeout [ 387.948794] Bluetooth: hci3: command tx timeout [ 387.949365] Bluetooth: hci4: command tx timeout [ 388.012010] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:25:46 Registers: info registers vcpu 0 RAX=ffffffff81aec084 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88801b0df901 RSI=ffff88801b0df9b0 RDI=ffff88801b0df9b0 RBP=ffff88806ce08af0 RSP=ffff88806ce08a20 R8 =ffffffff86876190 R9 =ffff88806ce08ad8 R10=000000000003b6bd R11=0000000000024aa4 R12=ffff88806ce08af8 R13=ffff88806ce08ae0 R14=ffff88801b0df9b8 R15=ffff88806ce08a98 RIP=ffffffff81353383 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff940db64a1 CR3=000000002b3c5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff86888455 RBX=0000000000000001 RCX=ffffffff86888450 RDX=0000000000000000 RSI=1ffffffff0d1108a RDI=ffffffff864fda74 RBP=ffff88802bc3f2f0 RSP=ffff88802bc3f228 R8 =ffffffff86888450 R9 =0000000000000000 R10=000000000003b6bd R11=0000000000027b1a R12=ffff88802bc3f2f8 R13=ffff88802bc3f2e0 R14=ffff88802bc3f2d9 R15=ffff88802bc3f298 RIP=ffffffff81354175 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560a9f4c0080 CR3=000000000e39b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000ff000000000000 XMM02=0000000000000000000000ff00000000 XMM03=00ff000000000000000000000000ff00 XMM04=0000ff00000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000