Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:4801' (ECDSA) to the list of known hosts. 2025/06/04 05:11:08 fuzzer started 2025/06/04 05:11:09 dialing manager at localhost:39055 syzkaller login: [ 100.888513] cgroup: Unknown subsys name 'net' [ 101.016192] cgroup: Unknown subsys name 'cpuset' [ 101.078771] cgroup: Unknown subsys name 'rlimit' 2025/06/04 05:11:35 syscalls: 203 2025/06/04 05:11:35 code coverage: enabled 2025/06/04 05:11:35 comparison tracing: enabled 2025/06/04 05:11:35 extra coverage: enabled 2025/06/04 05:11:35 setuid sandbox: enabled 2025/06/04 05:11:35 namespace sandbox: enabled 2025/06/04 05:11:35 Android sandbox: enabled 2025/06/04 05:11:35 fault injection: enabled 2025/06/04 05:11:35 leak checking: enabled 2025/06/04 05:11:35 net packet injection: enabled 2025/06/04 05:11:35 net device setup: enabled 2025/06/04 05:11:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/04 05:11:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/04 05:11:35 USB emulation: enabled 2025/06/04 05:11:35 hci packet injection: enabled 2025/06/04 05:11:35 wifi device emulation: enabled 2025/06/04 05:11:35 802.15.4 emulation: enabled 2025/06/04 05:11:35 fetching corpus: 0, signal 0/0 (executing program) 2025/06/04 05:11:37 starting 8 fuzzer processes 05:11:37 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x200000a, 0x2010, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000080)) r4 = syz_io_uring_complete(r1) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x11, 0xd, 0x12, 0x1, 0xa, 0x1, 0x5, 0x84, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x12, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000e81000/0x2000)=nil, 0x2000, 0x0, 0x10010, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x110, &(0x7f0000000140)=0x6, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ee8000/0x4000)=nil, 0x4000, 0x1000000, 0x813, r2, 0x8000000) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$RTC_UIE_OFF(r6, 0x7004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000001c0)=0xc, 0x4) r7 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7, 0x20000) ioctl$RTC_PLL_SET(r7, 0x40207012, &(0x7f0000000240)={0x7, 0xfffffffa, 0x8001, 0x4, 0x91cd, 0x0, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, r2, 0x0) ioctl$RTC_AIE_OFF(r4, 0x7002) syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) 05:11:37 executing program 1: ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xfc, 0x410082) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) faccessat(r2, &(0x7f0000000200)='./file0\x00', 0x20) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x348, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0x2ec, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1f}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4de8fe94274e340cca94727c1aa8e1e543828e32d10f2d6facff33b419466968"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}]}, {0x1ec, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1ac, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x348}, 0x1, 0x0, 0x0, 0x80}, 0x810) r5 = syz_open_dev$loop(&(0x7f00000006c0), 0x2, 0x2400) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xfc, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xcf7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x48004}, 0x48051) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) open$dir(&(0x7f0000000900)='./file0\x00', 0x200, 0x30) openat$cgroup_freezer_state(r4, &(0x7f0000000940), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r3, 0x29, 0x2, 0x0, 0x0, 0x4, @local, @empty, 0x20, 0x10, 0x0, 0x5}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xe0, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x180}, 0x24000800) 05:11:37 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8000, 0x2080) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x3a}) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x20, 0x1ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x40, 0x700, 0xeba0c70, 0x2}}) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x100) ioctl$RTC_WIE_ON(r1, 0x700f) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000200)) r3 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8bdf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf41e}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r2) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000540)=""/219, &(0x7f0000000640)=0xdb) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/136, &(0x7f0000000740)=0x88) syz_open_dev$vcsu(&(0x7f0000000780), 0x967d, 0x400800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000008c0)={0x2f, 0x6, 0x6, 0xd8}, 0x10) 05:11:37 executing program 3: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7fff, 0x50080) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0xb, 0x9, 0x8, 0x3, 0x7, 0x5, 0x3, 0x2}) socketpair(0x5, 0x800, 0x7f, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x60000, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r4, 0x29, 0x0, 0x7f, 0x5, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x8000, 0xb4240000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001940)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001980)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000001a80)={'sit0\x00', &(0x7f0000001a00)={'syztnl0\x00', r4, 0x29, 0x26, 0xa6, 0x1ff, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x40, 0x10, 0xfffffffb, 0xfffffa47}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000002100)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001ac0)={0x5c8, r6, 0xe29de4f4976f703a, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x92ab}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7657}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r11}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff, 0x9, 0x0, 0x3}, {0x3, 0x2, 0xa1, 0x5}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x5c8}}, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) [ 128.880422] audit: type=1400 audit(1749013897.592:7): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:11:37 executing program 4: ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000)) r0 = socket(0x1d, 0x5, 0x159) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000440)=0x2, 0x4) r1 = syz_io_uring_complete(0x0) connect(r0, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}}}, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x600900, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x29, 0x1f, 0x3, 0x6, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x7, 0x0, 0x4}}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x4, 0x5, 0x9, 0x4, 0x8, @mcast2, @mcast2, 0x8000, 0x8000, 0x800, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip6tnl0\x00', r3, 0x4, 0x0, 0x7f, 0x7fffffff, 0x71, @empty, @private0, 0x7, 0x10, 0x9, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'ip6tnl0\x00', r3, 0x29, 0x5, 0x8, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x8, 0x6, 0x3}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000940)={0x594, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x634a}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x81, 0x80, 0x3}, {0x1a72, 0x6, 0x40, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0xffffffffffffff80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x5d97a154a0477363, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000010c0)=@req={0x28, &(0x7f0000001080)={'lo\x00', @ifru_names}}) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000001100)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001300)={&(0x7f0000001140), 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xc8, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1a}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 05:11:37 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@ax25={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="8c9e9eb5a3", 0x5}, {&(0x7f00000000c0)="68f2e5218098e4241d93a7cc3c2b0a06f8b79c8c8fa21b5d08ed775dc706d3753b4f5aaefca998b3c313b276b0ab092c", 0x30}, {&(0x7f0000000100)="00c8c69002ad66ee47c32fe75a3237e91e8db05bb9a884db0b401cf97a2309c2199e04a2b570205eaaf8d63b3965369353bd26ba9eb505ed96bfc2557446dfe39206589bf2789782d86dfd32f5461eaad79e149e6331b587dc436c9b6166b24014fadb0104d23d2f344e12b7810bb0e83489901d7faf15bfee00bad5cf1976721dd8ef8c1df698f8b3", 0x89}], 0x3, &(0x7f0000000200)=[{0xc0, 0x0, 0x9, "f50072bd58059655d7251f09264b7a0e7cbf64e9c766cbd605653a8292727bba15f6c2e788105d703b946db2a4e8549ad489696cbae8696bc6f5b1b172c42f22884431a6140bbb95202fe33b48f95a065dabbed924044245ddfa61bc515b0dc6db211af24425820018bc2883d145364feb4f3945c431324d00375bd29a7e12d0f967fe46c6157bb17953f6483c281a1e01c7b93e3499af50c6aa52378641dae85ed7d5314d2ecdf609265d54c08d31"}, {0x40, 0x29, 0xd8, "8fd68bbe6c6abc76ecea50c7fc27cd2129a4ce9ada1a9460f0098b3eb678d5a815d1d2f330e503b7f9c7"}], 0x100}, 0x8801) connect(0xffffffffffffffff, &(0x7f0000000340)=@caif=@dbg={0x25, 0x3, 0x20}, 0x80) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x20200, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x29, 0x9, 0x8, 0x7, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x700, 0x7, 0x3f}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r1, 0x0, 0x80, 0x7, 0x1, 0xb, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8000, 0xfffffff7, 0x4}}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_int(r0, &(0x7f0000000580)='cpu.max.burst\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000062c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000006040)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/152, 0x98}], 0x1, &(0x7f0000000740)=""/232, 0xe8}, 0x8001}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/95, 0x5f}, {&(0x7f00000008c0)=""/216, 0xd8}, {&(0x7f00000009c0)=""/42, 0x2a}, {&(0x7f0000000a00)=""/126, 0x7e}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x5, &(0x7f0000001b00)}, 0x4}, {{&(0x7f0000001b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)=""/37, 0x25}], 0x1, &(0x7f0000001c40)}, 0x1}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001c80)=""/172, 0xac}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/57, 0x39}], 0x3, &(0x7f0000002dc0)=""/138, 0x8a}, 0xc4}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002e80)=""/222, 0xde}, {&(0x7f0000002f80)=""/213, 0xd5}], 0x2, &(0x7f00000030c0)=""/112, 0x70}, 0x3ff}, {{&(0x7f0000003140)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000042c0)=[{&(0x7f00000031c0)=""/38, 0x26}, {&(0x7f0000003200)=""/118, 0x76}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/17, 0x11}], 0x4, &(0x7f0000004300)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000005300)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000005540)=[{&(0x7f0000005380)=""/182, 0xb6}, {&(0x7f0000005440)=""/212, 0xd4}], 0x2, &(0x7f0000005580)=""/162, 0xa2}, 0xfff}, {{&(0x7f0000005640)=@qipcrtr, 0x80, &(0x7f0000005780)=[{&(0x7f00000056c0)=""/157, 0x9d}], 0x1, &(0x7f00000057c0)=""/3, 0x3}, 0x200}, {{&(0x7f0000005800)=@ax25={{0x3, @netrom}, [@default, @rose, @null, @netrom, @netrom, @default, @null, @default]}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005880)=""/106, 0x6a}, {&(0x7f0000005900)=""/110, 0x6e}, {&(0x7f0000005980)=""/188, 0xbc}], 0x3, &(0x7f0000005a80)=""/170, 0xaa}, 0x2}, {{&(0x7f0000005b40)=@nfc_llcp, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005bc0)=""/255, 0xff}, {&(0x7f0000005cc0)=""/81, 0x51}, {&(0x7f0000005d40)=""/185, 0xb9}, {&(0x7f0000005e00)=""/91, 0x5b}, {&(0x7f0000005e80)=""/68, 0x44}, {&(0x7f0000005f00)=""/30, 0x1e}], 0x6, &(0x7f0000005fc0)=""/69, 0x45}, 0x10001}], 0xa, 0x12040, &(0x7f0000006300)={r4, r5+60000000}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000006340)=[r0, r0, r2, r0, r0, r0, r0, r3, r0, r6], 0xa) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000006440)=@buf={0x93, &(0x7f0000006380)="1525f5d642aa8f8732ee5aca973962e7b7df683be29a7650102a60b0fd3160cd955a1e52d5aedc40cda9227766ff0d94d19913549f8f0ed9c7f028877a828acfb6aa2c6c4e63c93f633ea33916f133d101ee5c8cabdff70d244b412c854b2b73613784ee688458a4f68d787d9dc7c1f31441a345e5ac84654bc27b9278821659843049dec83f5e83c6299ff9335317ff63fdb2"}) r7 = open$dir(&(0x7f0000006480)='./file0\x00', 0x10100, 0x84) mkdirat(r7, &(0x7f00000064c0)='./file0\x00', 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000006500), 0xe4, 0x82) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000065c0)={'syztnl0\x00', &(0x7f0000006540)={'sit0\x00', r1, 0x29, 0x1, 0x7, 0x3, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8000, 0x10, 0x7fff, 0x1}}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000006600)={@private0, 0x6b, r9}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000006740)={&(0x7f0000006640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006700)={&(0x7f0000006680)={0x5c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x4, 0x0, 0xa}, [@CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xff}]}}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008) r10 = getuid() syz_mount_image$msdos(&(0x7f0000006780), &(0x7f00000067c0)='./file0\x00', 0xdf8, 0x6, &(0x7f0000006b00)=[{&(0x7f0000006800)="cb37b4bcb365853f0863057ce3c1e8de59eb498ba7be2cb0e3c3314e92a1dffcaa2e1d4b14aa2b466803424657379622ba5e6401ab57ae0220f17811c56448d7c568266e3840126ea7", 0x49, 0x5}, {&(0x7f0000006880)="6d4a0549ba4d247bef7cfab8b329046defdce2076cbb23f2b518f692ebb5bf8f174ba4c44946c2c59594995c3a59dded1114e64fe2df2b3c9d171c6cafaa9427e806b827eb95517fde2229b5abcad28a15eea77ba3292e13779516136746b3c2b1f9514539d300ab0a97f4de77be46e2c3366c82db4ff2a6580a56dc1eb904da44", 0x81, 0x2}, {&(0x7f0000006940)="0bbffe1156e7ccd272db1b3eafb80bb44108b4df73f5f13650254d096e9267b9875314bc6b9161e226055b85b567542fbc56d3b09c8eaef6acc8ea2826815242a029b82ff67c818608425984078d24e4bba77003bb624e7670b9f3edb7de2777eafe69d69d1838475eade2f1e599617c0b0dd3", 0x73, 0x8}, {&(0x7f00000069c0)="b038f02fd17a119a16ea8d3030a8af394b53399032402b2cebc12ec4d8c4f8b034e7b0027aec9dc09a3df1b364de60c07ca7584c0cd7ec54d24394ddc2ffe83aaa5a449f5bb56ffb5c145208fec8ba5e963a9bf05f26872e03df8ffd7d", 0x5d, 0x6}, {&(0x7f0000006a40)="b18ceb07f20e0076e6c7b8e584034c58b7a7045614069ad1b936d23cd5a21f90bb1b69fb22c70e5eea2b2a304f123bf69878", 0x32, 0x500000}, {&(0x7f0000006a80)="9aa996908262f7a9dd09fb85a1d6527542bf91fc40d50e85df5050797e9eec223d9248ad1c5d20e25f5e9b81a6d106b180e4d4b18c68c6ff86fa55d0558d251d59898c3718d99e201d7c9e34fe9e32203442d9cf0b1bb81014f1", 0x5a}], 0x10415, &(0x7f0000006bc0)={[{@dots}], [{@fowner_eq={'fowner', 0x3d, r10}}, {@dont_appraise}]}) 05:11:37 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x202, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x40000000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4048041}, 0x4084) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xa3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x80}}, 0x1) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x10, 0xfff, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r1, 0x8d9, 0x0, 0x0, 0x33}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_ifreq(r6, 0x891c, &(0x7f0000000500)={'gre0\x00', @ifru_map}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x20, 0x4, 0x0, 0x2, @mcast2, @mcast2, 0x700, 0x10, 0x1, 0x6d}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x80, 0x4, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8008, 0x7800, 0x2, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001240)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001200)={&(0x7f00000009c0)={0x82c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xce}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r10}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7f, 0x8, 0x4, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3de}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}]}}]}, 0x82c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 05:11:37 executing program 7: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="1fd4be5b1687eb15c71887f48638757f233f7435df3e2ed5196c6b4727d53aeb9ad4eae96491fb51e694cb26bd90714d98e9db80c30211e3f4914e102cb54023913546d3d6064e7d8c42deb44c9ba529e313a9bcb41df6c8335d118131e076b01a9d7bb9c4d6a01518b2331d09ead98f5492b9c039f464e62b9ff110d6196b9b7500cdbda57de443c04074575189c53a64f48b75d44d898c51042a8708327e5fa41d9a8ddbe2f06fbcbe051d500484b557ef58e27384ce9c04f4f0a7a5d17e6434c4a8a40b", 0xc5, 0x6, &(0x7f0000000100)={0x0, 0x989680}) r0 = syz_io_uring_complete(0x0) mq_timedreceive(r0, &(0x7f0000000140)=""/45, 0x2d, 0x6, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x34, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) socketpair(0x13, 0x2, 0x3f, &(0x7f0000000300)={0xffffffffffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2509}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x869}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbd8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000840}, 0x80800) socketpair(0x2, 0x2, 0x7fff, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = syz_open_dev$vcsa(&(0x7f0000000500), 0x9, 0x404000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc) clock_gettime(0x7, &(0x7f0000000680)) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x20100, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000) recvmmsg(r2, &(0x7f0000000f80)=[{{&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000008c0)=""/245, 0xf5}, {&(0x7f00000009c0)=""/179, 0xb3}, {&(0x7f0000000a80)=""/114, 0x72}, {&(0x7f0000000b00)=""/156, 0x9c}, {&(0x7f0000000bc0)=""/166, 0xa6}], 0x5, &(0x7f0000000d00)=""/246, 0xf6}, 0x5}, {{&(0x7f0000000e00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e80)=""/180, 0xb4}], 0x1}, 0x9}], 0x2, 0x0, 0x0) connect(r4, &(0x7f0000001000)=@ll={0x11, 0x7, r8, 0x1, 0x3f, 0x6, @multicast}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000001080)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001100)=""/87, 0x57}, {&(0x7f0000001180)=""/211, 0xd3}], 0x2, &(0x7f00000012c0)=""/131, 0x83}, 0x12f}, {{&(0x7f0000001380)=@tipc=@name, 0x80, &(0x7f0000001700)=[{&(0x7f0000001400)=""/75, 0x4b}, {&(0x7f0000001480)=""/144, 0x90}, {&(0x7f0000001540)=""/177, 0xb1}, {&(0x7f0000001600)=""/43, 0x2b}, {&(0x7f0000001640)=""/131, 0x83}], 0x5, &(0x7f0000001780)=""/92, 0x5c}, 0x5}, {{&(0x7f0000001800)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001880)=""/106, 0x6a}, {&(0x7f0000001900)=""/98, 0x62}, {&(0x7f0000001980)=""/10, 0xa}, {&(0x7f00000019c0)=""/104, 0x68}, {&(0x7f0000001a40)=""/139, 0x8b}, {&(0x7f0000001b00)}], 0x6, &(0x7f0000001bc0)=""/115, 0x73}, 0x8ff}], 0x3, 0x12001, &(0x7f0000001d00)) [ 130.218125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.222612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.228940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.236173] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.241593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.280841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.285291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.287625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.294602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.298146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.479561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.491166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.495444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.530522] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.533614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.549328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.557209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.570228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.576060] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.579473] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.583134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.593799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.600786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.602838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.604565] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.606276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.610844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.616118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.618497] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.622876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.684319] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.702421] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.741220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.765915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.772129] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.777144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.785550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.795961] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.806152] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.836060] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.302371] Bluetooth: hci0: command tx timeout [ 132.366064] Bluetooth: hci1: command tx timeout [ 132.685873] Bluetooth: hci5: command tx timeout [ 132.686511] Bluetooth: hci4: command tx timeout [ 132.749962] Bluetooth: hci2: command tx timeout [ 132.751329] Bluetooth: hci3: command tx timeout [ 132.877963] Bluetooth: hci7: command tx timeout [ 132.943689] Bluetooth: hci6: command tx timeout [ 134.350688] Bluetooth: hci0: command tx timeout [ 134.414038] Bluetooth: hci1: command tx timeout [ 134.733772] Bluetooth: hci5: command tx timeout [ 134.734253] Bluetooth: hci4: command tx timeout [ 134.798095] Bluetooth: hci3: command tx timeout [ 134.798507] Bluetooth: hci2: command tx timeout [ 134.926739] Bluetooth: hci7: command tx timeout [ 134.990163] Bluetooth: hci6: command tx timeout [ 136.398891] Bluetooth: hci0: command tx timeout [ 136.461699] Bluetooth: hci1: command tx timeout [ 136.781729] Bluetooth: hci4: command tx timeout [ 136.782170] Bluetooth: hci5: command tx timeout [ 136.845973] Bluetooth: hci3: command tx timeout [ 136.846387] Bluetooth: hci2: command tx timeout [ 136.974003] Bluetooth: hci7: command tx timeout [ 137.038753] Bluetooth: hci6: command tx timeout [ 138.447268] Bluetooth: hci0: command tx timeout [ 138.510003] Bluetooth: hci1: command tx timeout [ 138.830728] Bluetooth: hci5: command tx timeout [ 138.831208] Bluetooth: hci4: command tx timeout [ 138.894709] Bluetooth: hci2: command tx timeout [ 138.895168] Bluetooth: hci3: command tx timeout [ 139.023152] Bluetooth: hci7: command tx timeout [ 139.085710] Bluetooth: hci6: command tx timeout [ 193.318836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.323132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.326047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.346064] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.356278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.418015] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.422135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.430322] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.439035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.446213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.478146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.481159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.481587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.484859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.494287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.498286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.507620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.513417] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.519213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.521089] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.524056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.526868] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.533262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.533480] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.535509] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.542143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.556120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.589163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.632590] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.644869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.665143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.669215] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.671888] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.677564] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.688226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.933932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.938193] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.997518] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.009689] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.014361] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 195.470001] Bluetooth: hci0: command tx timeout [ 195.533923] Bluetooth: hci2: command tx timeout [ 195.599007] Bluetooth: hci5: command tx timeout [ 195.662702] Bluetooth: hci3: command tx timeout [ 195.663442] Bluetooth: hci1: command tx timeout [ 195.917755] Bluetooth: hci4: command tx timeout [ 195.917794] Bluetooth: hci6: command tx timeout [ 196.175121] Bluetooth: hci7: command tx timeout [ 197.517766] Bluetooth: hci0: command tx timeout [ 197.581902] Bluetooth: hci2: command tx timeout [ 197.646660] Bluetooth: hci5: command tx timeout [ 197.709753] Bluetooth: hci1: command tx timeout [ 197.710219] Bluetooth: hci3: command tx timeout [ 197.965862] Bluetooth: hci6: command tx timeout [ 197.968660] Bluetooth: hci4: command tx timeout [ 198.221871] Bluetooth: hci7: command tx timeout [ 199.566104] Bluetooth: hci0: command tx timeout [ 199.629945] Bluetooth: hci2: command tx timeout [ 199.694814] Bluetooth: hci5: command tx timeout [ 199.758793] Bluetooth: hci3: command tx timeout [ 199.759278] Bluetooth: hci1: command tx timeout [ 200.013790] Bluetooth: hci4: command tx timeout [ 200.013954] Bluetooth: hci6: command tx timeout [ 200.271702] Bluetooth: hci7: command tx timeout [ 201.613852] Bluetooth: hci0: command tx timeout [ 201.677810] Bluetooth: hci2: command tx timeout [ 201.741829] Bluetooth: hci5: command tx timeout [ 201.806019] Bluetooth: hci1: command tx timeout [ 201.806048] Bluetooth: hci3: command tx timeout [ 202.061725] Bluetooth: hci4: command tx timeout [ 202.063002] Bluetooth: hci6: command tx timeout [ 202.318709] Bluetooth: hci7: command tx timeout [ 253.311845] syz-executor.6 (2793) used greatest stack depth: 24544 bytes left [ 255.334391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.337212] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.343589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.353569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.357582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.456056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.465567] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.475270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.504611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.514668] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.558608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.568357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.572149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.588206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.592566] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.659986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.665477] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.680198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.692182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.763200] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.798432] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.823938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.851822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.858428] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.861949] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.873312] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.890235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.892950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.897204] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.908222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.917268] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.922613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.933188] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.935609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.968315] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.054341] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.056894] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.060525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.094177] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.125465] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.422079] Bluetooth: hci0: command tx timeout [ 257.550227] Bluetooth: hci1: command tx timeout [ 257.678257] Bluetooth: hci2: command tx timeout [ 258.061860] Bluetooth: hci4: command tx timeout [ 258.125871] Bluetooth: hci3: command tx timeout [ 258.126775] Bluetooth: hci5: command tx timeout [ 258.127556] Bluetooth: hci6: command tx timeout [ 258.254206] Bluetooth: hci7: command tx timeout [ 259.469906] Bluetooth: hci0: command tx timeout [ 259.599706] Bluetooth: hci1: command tx timeout [ 259.725747] Bluetooth: hci2: command tx timeout [ 260.111252] Bluetooth: hci4: command tx timeout [ 260.174004] Bluetooth: hci5: command tx timeout [ 260.174886] Bluetooth: hci6: command tx timeout [ 260.175380] Bluetooth: hci3: command tx timeout [ 260.302043] Bluetooth: hci7: command tx timeout [ 261.517867] Bluetooth: hci0: command tx timeout [ 261.646345] Bluetooth: hci1: command tx timeout [ 261.773837] Bluetooth: hci2: command tx timeout [ 262.158035] Bluetooth: hci4: command tx timeout [ 262.222006] Bluetooth: hci3: command tx timeout [ 262.222555] Bluetooth: hci6: command tx timeout [ 262.222803] Bluetooth: hci5: command tx timeout [ 262.352682] Bluetooth: hci7: command tx timeout [ 263.565762] Bluetooth: hci0: command tx timeout [ 263.693862] Bluetooth: hci1: command tx timeout [ 263.822664] Bluetooth: hci2: command tx timeout [ 264.206032] Bluetooth: hci4: command tx timeout [ 264.269739] Bluetooth: hci3: command tx timeout [ 264.269789] Bluetooth: hci6: command tx timeout [ 264.270990] Bluetooth: hci5: command tx timeout [ 264.399213] Bluetooth: hci7: command tx timeout [ 318.056354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.062478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.066520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.079303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.086126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.310173] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.314238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.319136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.329218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.337225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.451567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.459285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.461753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.470320] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.478347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.614733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.646080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.674873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.676789] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.688350] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.691200] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.704696] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.707915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.717954] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.725161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.734418] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.737929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.751013] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.755300] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.761379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.767363] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.770930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.780386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.819017] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.840184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.043758] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.054239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.062302] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.125297] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.159136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 320.141711] Bluetooth: hci0: command tx timeout [ 320.397828] Bluetooth: hci1: command tx timeout [ 320.525791] Bluetooth: hci2: command tx timeout [ 320.909941] Bluetooth: hci6: command tx timeout [ 320.910832] Bluetooth: hci3: command tx timeout [ 320.973740] Bluetooth: hci5: command tx timeout [ 321.037966] Bluetooth: hci4: command tx timeout [ 321.229735] Bluetooth: hci7: command tx timeout [ 322.190685] Bluetooth: hci0: command tx timeout [ 322.445696] Bluetooth: hci1: command tx timeout [ 322.574685] Bluetooth: hci2: command tx timeout [ 322.958134] Bluetooth: hci6: command tx timeout [ 322.959178] Bluetooth: hci3: command tx timeout [ 323.022309] Bluetooth: hci5: command tx timeout [ 323.086440] Bluetooth: hci4: command tx timeout [ 323.278685] Bluetooth: hci7: command tx timeout [ 324.239699] Bluetooth: hci0: command tx timeout [ 324.493876] Bluetooth: hci1: command tx timeout [ 324.622148] Bluetooth: hci2: command tx timeout [ 325.006427] Bluetooth: hci6: command tx timeout [ 325.007776] Bluetooth: hci3: command tx timeout [ 325.069753] Bluetooth: hci5: command tx timeout [ 325.133961] Bluetooth: hci4: command tx timeout [ 325.326289] Bluetooth: hci7: command tx timeout [ 326.286666] Bluetooth: hci0: command tx timeout [ 326.543672] Bluetooth: hci1: command tx timeout [ 326.671689] Bluetooth: hci2: command tx timeout [ 327.053743] Bluetooth: hci6: command tx timeout [ 327.054249] Bluetooth: hci3: command tx timeout [ 327.117908] Bluetooth: hci5: command tx timeout [ 327.181768] Bluetooth: hci4: command tx timeout [ 327.373723] Bluetooth: hci7: command tx timeout [ 380.451501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.459824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.462282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.471610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.478381] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.595412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.603245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.607348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.638380] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.653872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.654158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.663450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.677232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.696913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.706526] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.894879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.897204] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.900712] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.901148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.902842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.906126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.908417] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.912843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.917258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.919359] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.928206] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 380.935974] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.940958] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 380.944664] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.953185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.965164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.974306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.978946] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.988132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.000904] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.008265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.023132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.042163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.047868] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.068102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.541753] Bluetooth: hci0: command tx timeout [ 382.735647] Bluetooth: hci2: command tx timeout [ 382.736409] Bluetooth: hci1: command tx timeout [ 383.053730] Bluetooth: hci5: command tx timeout [ 383.054484] Bluetooth: hci7: command tx timeout [ 383.117714] Bluetooth: hci4: command tx timeout [ 383.181740] Bluetooth: hci6: command tx timeout [ 383.247562] Bluetooth: hci3: command tx timeout [ 384.591266] Bluetooth: hci0: command tx timeout [ 384.781822] Bluetooth: hci1: command tx timeout [ 384.782327] Bluetooth: hci2: command tx timeout [ 385.103655] Bluetooth: hci7: command tx timeout [ 385.104124] Bluetooth: hci5: command tx timeout [ 385.166901] Bluetooth: hci4: command tx timeout [ 385.229883] Bluetooth: hci6: command tx timeout [ 385.294705] Bluetooth: hci3: command tx timeout [ 386.638683] Bluetooth: hci0: command tx timeout [ 386.829994] Bluetooth: hci1: command tx timeout [ 386.830467] Bluetooth: hci2: command tx timeout [ 387.151859] Bluetooth: hci5: command tx timeout [ 387.152344] Bluetooth: hci7: command tx timeout [ 387.214853] Bluetooth: hci4: command tx timeout [ 387.278877] Bluetooth: hci6: command tx timeout [ 387.341690] Bluetooth: hci3: command tx timeout [ 388.686329] Bluetooth: hci0: command tx timeout [ 388.877857] Bluetooth: hci2: command tx timeout [ 388.878309] Bluetooth: hci1: command tx timeout [ 389.197974] Bluetooth: hci7: command tx timeout [ 389.198436] Bluetooth: hci5: command tx timeout [ 389.262820] Bluetooth: hci4: command tx timeout [ 389.326719] Bluetooth: hci6: command tx timeout [ 389.390391] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 05:16:47 Registers: info registers vcpu 0 RAX=0000000000010000 RBX=0000000000000000 RCX=ffffffff8164e426 RDX=ffff888024435280 RSI=0000000000000003 RDI=0000000000000005 RBP=ffff88806ce238c0 RSP=ffff88806ce08ee0 R8 =0000000000000000 R9 =ffffed100d9c5010 R10=0000000000000003 R11=0000000000000001 R12=000000661a9a8b40 R13=0000000000000003 R14=0000000000000000 R15=ffff88806ce28080 RIP=ffffffff8164e42a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562ea6e364c8 CR3=000000002c9a5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888035048000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81353e1d RDI=fffffbfff0b839a8 RBP=ffffffff85c1cd40 RSP=ffff888035b677b0 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=0000000000012b50 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000246 RIP=ffffffff8151b202 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fada7642580 CR3=000000002ad31000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000