Warning: Permanently added '[localhost]:63801' (ECDSA) to the list of known hosts. 2025/06/06 05:28:26 fuzzer started 2025/06/06 05:28:26 dialing manager at localhost:39689 syzkaller login: [ 101.353819] cgroup: Unknown subsys name 'net' [ 101.495210] cgroup: Unknown subsys name 'cpuset' [ 101.535974] cgroup: Unknown subsys name 'rlimit' 2025/06/06 05:28:51 syscalls: 209 2025/06/06 05:28:51 code coverage: enabled 2025/06/06 05:28:51 comparison tracing: enabled 2025/06/06 05:28:51 extra coverage: enabled 2025/06/06 05:28:51 setuid sandbox: enabled 2025/06/06 05:28:51 namespace sandbox: enabled 2025/06/06 05:28:51 Android sandbox: enabled 2025/06/06 05:28:51 fault injection: enabled 2025/06/06 05:28:51 leak checking: enabled 2025/06/06 05:28:51 net packet injection: enabled 2025/06/06 05:28:51 net device setup: enabled 2025/06/06 05:28:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/06 05:28:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/06 05:28:51 USB emulation: enabled 2025/06/06 05:28:51 hci packet injection: enabled 2025/06/06 05:28:51 wifi device emulation: enabled 2025/06/06 05:28:51 802.15.4 emulation: enabled 2025/06/06 05:28:51 fetching corpus: 0, signal 0/0 (executing program) 2025/06/06 05:28:53 starting 8 fuzzer processes 05:28:54 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x5, 0x0, 0xa2, 0x101, 0x5, 0x3}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x20, 0x8000) write$cgroup_pressure(r1, &(0x7f0000000100)={'some', 0x20, 0x6, 0x20, 0x5}, 0x2f) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) r3 = accept$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$CDROMRESET(r2, 0x5312) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0xc200, 0x0) ioctl$CDROMPLAYMSF(r4, 0x5303, &(0x7f0000000300)={0x8, 0x40, 0x4, 0x2, 0x6, 0x3f}) ioctl$CDROMPLAYMSF(r2, 0x5303, &(0x7f0000000340)={0x1, 0x3, 0x0, 0x1, 0x5, 0x80}) bind$802154_dgram(r1, &(0x7f0000000380)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) getpeername(r3, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000440)=0x80) sendmsg$802154_dgram(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000580)={&(0x7f00000004c0)="836b546d46cc5e16264e3974727fc030a0665fc3e39b6a4072c5113e61052e7ebf376890e37600cc16fe9685cb1e6a59d5e32c8e2ff9ab5bc60712ade5a9f6c3432212bf05e38683e6fe2c5b046b37887daa05286f9c940967597b3acb61489bc1b9e3c32272d2daa0325de75076664507003d62ce87189d13ae9738bb96c5bef7ba720d1fd374544662e3bc288de41c84a12ae8080f0b249051a013a310da28e68b37b80efd69e9b5c994806b386cd46228b92d887c33ef", 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_open_dev$evdev(&(0x7f0000000600), 0x3, 0x40000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7fff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3ff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)=@getsa={0x16c, 0x12, 0x800, 0x70bd25, 0x25dfdbff, {@in=@local, 0x4d4, 0xa, 0x6c}, [@user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@private0}}, @algo_comp={0x10e, 0x3, {{'deflate\x00'}, 0x630, "237373058927dc1d72f44fbd99797168e5a6402ef533c0c7f2931792de3de9f8694731c0dab47af1321e55857bc0889e7cadea44e307ca7af3e56d54a6d25b14717715d0638dc187c28ac76265526cfd07ade083a4ae50c92af88e0141d40c7a13291b767e7f38458fffe960ad26b0421a4d0fa4a00258a9746e142ff72ed3e496675c6e62a7b25eaeead4779dec12366c8ef5cb8434b5b3119ca3e3cea99f986c53a08350305fcb33aa70dc6fa74e706576f28a1c001f8a67194badc26beaadc1fac1b93032"}}, @etimer_thresh={0x8, 0xc, 0xffffff07}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) 05:28:54 executing program 1: ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r0, 0x5328) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000040)={0xaf, 0xc0, 0x8}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000080)="667797a4e7387f2eeb9850f7ba9090f8cfd4f26d3a42fa6fc9f65da2080474501eadce701eef473424042987bd503712ac7dc5071f9e926b6021b2231951531f4f241be68d2d0316decabacb5a6a6967784ea3052e4c7e5bd9f09b893d70bee400a4003ec3d50e585557d51751dc378876405e5c791ffbfec936728e82e3753c1461616f48261de596682a5e2331bba07b5fdcaf78293a57a2b394c71e43e3962a922065", 0xa4) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000140)=@lsk={0x2, 0x3, "ebb1947454"}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000180)=0x5, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x29c) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x480000, 0x0) ioctl$CDROMCLOSETRAY(r3, 0x5319) ioctl$CDROMSEEK(r0, 0x5316, &(0x7f0000000240)={0x0, 0x3, 0x7, 0xf9, 0x1, 0x16}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x80, 0xea, 0x1f, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000280), 0xa}, 0x10, 0x2, 0x9, 0x5, 0x3ff, 0x1, 0x6, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xc, r2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0x4, 0x48080) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000380)=""/157) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) read$char_usb(r5, &(0x7f0000000440)=""/43, 0x2b) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r4) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000404}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x40) 05:28:54 executing program 2: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c190) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) r3 = socket(0x1a, 0x2, 0x3ff) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000580)={&(0x7f0000000400)=@getsadinfo={0x14c, 0x23, 0x1008, 0x70bd26, 0x25dfdbff, 0x0, [@policy_type={0xa}, @algo_auth_trunc={0xe3, 0x14, {{'sm3\x00'}, 0x4b8, 0x80, "43e30cbb5dab4d4e11caa5d2280a429f8e1c117630a3b7dacaa3ad6194333b3e699c6465e0132363a14b18cf748270eb450aca3119ed946106cc994b99856266a2429112f1e180dc254732c61f7c3432c7c50dcf5d73f4d6a33f8a14caa2f6a8a58f0c8d8d9af4c28924464f940032f58f21f16616132cf924a1cca7333ef4b65454fcf35932a256a244e7094489ed65c2121312b7b361"}}, @coaddr={0x14, 0xe, @in=@broadcast}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in=@broadcast, 0x0, 0xa}}, @replay_thresh={0x8, 0xb, 0x5d0}]}, 0x14c}, 0x1, 0x0, 0x0, 0x14040002}, 0x4040080) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r3) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r5, 0x310, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x38}}, 0x20004000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x18085) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000840), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r6) r7 = socket(0xb, 0x5, 0x7bf) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0xc005}, 0x40010) r10 = syz_open_dev$vcsn(&(0x7f0000000a80), 0x2, 0x2080) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x120, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 05:28:54 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xdefb, 0x400080) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x4080) r1 = socket(0x1f, 0x2, 0x2b4947fa) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x138, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x81) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20004040) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000480)={0x8000}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x2f, 0x3f, 0x1f, 0xd1, 0x8, @empty, @rand_addr=' \x01\x00', 0x8, 0x1, 0x4, 0x2}}) accept4$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffe2d5}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffffdfe}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x814}, 0x4000010) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000880)={0x401}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'ip6gre0\x00', r5, 0x29, 0x20, 0x4, 0x8, 0xcd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x20, 0x7800, 0x8, 0x1f}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000ac0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000b00)={@remote, 0x45, r7}) connect$inet6(r0, &(0x7f0000000b40)={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x1c) r8 = accept$packet(r3, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14) getsockopt$packet_int(r8, 0x107, 0x0, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) 05:28:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x80800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x1f, 0x2, 0x77f, 0x27, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7800, 0x2, 0xc22}}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x4, 0x1}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, @xdp={0x2c, 0x5, r3, 0x32}, 0x3f, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='veth1_vlan\x00', 0x70fa630e, 0x100, 0x7f}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000440)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000480)=@report={0x3cc, 0x20, 0x200, 0x70bd2d, 0x25dfdbff, {0x33, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in6=@private1, 0x4e24, 0x6, 0x4e24, 0x2, 0xa, 0x20, 0x80, 0x3c, r4, r5}}, [@algo_auth_trunc={0x136, 0x14, {{'sha1-ce\x00'}, 0x750, 0x180, "9bec4f4818e996b0d3aa4b3fda3fbd0b4300e5f50a881a5efbec18e1ff02cce61d5daca577a025d68e5c957281e92a9eb1a74f337bd374d01a9c66c805ceda5a192079459c7d0faa01e41c0f6b0396c298027482fc175b613db9c73a7342ee5c609c2f1e49e5395d57b357e70657bd20859dd0889e13600242c6b34873e7a9d575865427c9279af98bba10db06b0e2232a8a04dbe5424194e9b1f0865b22e4939d9e7ce3a787f3b6ab1bc77a283e5ea12d238deeaeecc26f0838cf758773d515d17a145b6fbdbe9105ba17b73c032d2e0ec60bfc1ccb57b35dd9cd6e09b667ae5ad05b28dc073211d241"}}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x2}}, @tmpl={0xc4, 0x5, [{{@in=@local, 0x4d6, 0x3c}, 0xa, @in=@multicast1, 0x3503, 0x3, 0x1, 0x20, 0x46a2, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x2b}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x34ff, 0x2, 0x3, 0x0, 0x7, 0x80000000, 0x1}, {{@in6=@mcast1, 0x4d4, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x3500, 0x2, 0x1, 0x9, 0x8, 0xc964}]}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e24, @in=@multicast2}}, @etimer_thresh={0x8, 0xc, 0x7fffffff}, @policy={0xac, 0x7, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x9, 0x0, 0x4e24, 0x3, 0x2, 0xa0, 0x80, 0x1, r3, 0xffffffffffffffff}, {0x1, 0x0, 0x90d, 0x6c8, 0x7, 0x20, 0x0, 0x40}, {0x3, 0x3, 0x1ff, 0xe4}, 0x9ea, 0x6e6bb7, 0x1, 0x1, 0x1, 0x2}}, @algo_aead={0x62, 0x12, {{'morus1280-generic\x00'}, 0xb0, 0xa0, "10ce53b18376b98af59e301bd1de6a1915b2482def4a"}}, @lifetime_val={0x24, 0x9, {0xcda3, 0x0, 0x18, 0x3}}]}, 0x3cc}}, 0x41) keyctl$search(0xa, r0, &(0x7f0000000900)='.request_key_auth\x00', &(0x7f0000000940)={'syz', 0x0}, r1) r6 = add_key(&(0x7f0000000980)='big_key\x00', &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$search(0xa, r6, &(0x7f0000000a00)='rxrpc_s\x00', &(0x7f0000000a40)={'syz', 0x1}, r0) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000ac0)={'fscrypt:', @desc2}, &(0x7f0000000b00)={0x0, "e1a497807f75123230a4ff980ecd4f17b5e07b8cce1afea33227816e8743776af9a4ec76be72529ebb5eab753b31dee88f349b3305e4b23ab16bc1a57bc19f80", 0x2f}, 0x48, r0) r7 = socket$inet6(0xa, 0xa, 0x5) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000c40)={0x20, 0x1, 0xfb, 0x3, 0x6}, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x0, 0x430, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008000) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000d80)={r0, 0xf, 0x8c}, &(0x7f0000000dc0)={'enc=', 'pkcs1', ' hash=', {'sha384\x00'}}, &(0x7f0000000e40)="9467d50175fce7efe264dcc84e84b5", &(0x7f0000000e80)=""/140) add_key$keyring(&(0x7f0000000f40), &(0x7f0000000f80)={'syz', 0x2}, 0x0, 0x0, r6) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000fc0)) r9 = syz_open_dev$evdev(&(0x7f0000001000), 0x7, 0x10000) ioctl$EVIOCGPROP(r9, 0x80404509, &(0x7f0000001040)=""/45) [ 128.472385] audit: type=1400 audit(1749187734.138:7): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:28:54 executing program 5: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80000) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x8e81320e66c48b93) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc962}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = getpid() ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r7 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r4, 0x500, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r8 = socket(0x15, 0x6, 0x7) accept4$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14, 0x0) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14) accept$packet(r2, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'syztnl2\x00', r1, 0x29, 0xb7, 0x16, 0x9, 0x2c, @dev={0xfe, 0x80, '\x00', 0x1f}, @local, 0x80, 0x7800, 0x80, 0x66fc}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000b80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x180, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) 05:28:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe8ce}]}, 0x1c}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044094}, 0x40000) r2 = socket(0x11, 0xa, 0x40) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71e87670c3546607}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0xc001) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x404, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) r4 = accept$inet6(r2, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000600)=0x1c) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000640)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x3}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x2}}, @hci={0x1f, 0xffffffffffffffff, 0x1}, 0x7, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x5f4e, 0x5}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x6, 0x7ff, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8, 0x7, 0x1, 0x964b}}) accept$packet(r2, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000880)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000008c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x35, r5}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = syz_open_procfs$namespace(r3, &(0x7f0000000a40)='ns/time_for_children\x00') setns(r6, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000a80)) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r7, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44081) 05:28:54 executing program 7: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000800) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4080}, 0x20004800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x200, 0x70bd25, 0x7f, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8091) syz_genetlink_get_family_id$fou(&(0x7f0000000540), r1) ioctl$sock_ifreq(r2, 0x8926, &(0x7f0000000580)={'bond0\x00', @ifru_hwaddr}) r4 = accept4$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x40, 0x710, 0x100, 0x40, {{0x36, 0x4, 0x0, 0x3, 0xd8, 0x67, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @private=0xa010101, {[@timestamp={0x44, 0x14, 0x4c, 0x0, 0x7, [0x4, 0x80000001, 0x4, 0x5]}, @rr={0x7, 0x1b, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @remote, @loopback, @loopback]}, @timestamp_prespec={0x44, 0x34, 0x54, 0x3, 0x9, [{@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x7}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x4}, {@empty}]}, @timestamp_addr={0x44, 0x44, 0x7f, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x100}, {@private=0xa010101, 0x6}, {@empty, 0x4}, {@broadcast, 0x8}, {@empty, 0x4}, {@broadcast, 0x7f}, {@rand_addr=0x64010100, 0x1}, {@rand_addr=0x64010100, 0x200}]}, @ssrr={0x89, 0x13, 0xfd, [@multicast2, @multicast2, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0xde, 0x1, 0x8}]}}}}}) connect$packet(r4, &(0x7f0000000900)={0x11, 0x1a, r5, 0x1, 0x9, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000a80)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@local, @in=@empty, 0x4e21, 0x5, 0x4e20, 0x0, 0xa, 0x40, 0xa0, 0x62, r6, r7}, {0x4, 0x6, 0xba67, 0xabf, 0x20, 0x3e, 0x100000001, 0xffffffffffffff43}, {0x7da2, 0x5, 0x7a, 0x3}, 0x5198, 0x6e6bbd, 0x2, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d6, 0x75}, 0xa, @in6=@remote, 0x34ff, 0x2, 0x0, 0xc1, 0x300000, 0x8, 0x401}}, 0xe8) getpeername(r1, &(0x7f0000000c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000d00)=0x80) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r6}]}, 0x1c}}, 0x4048000) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000e40)={r6, 0x1, 0x6, @multicast}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) [ 130.020788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.041519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.043568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.048197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.051198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.059030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.062227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.064659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.067315] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.076892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.079339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.082788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.097903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.099211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.115277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.126270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.127922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.147246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.150962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.160143] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.163310] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.163501] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.167997] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.193926] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.195902] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.198581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.203083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.207174] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.211491] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.230515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.232840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.252214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.258944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.261196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.268396] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.284876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.298446] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.311756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.321428] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.341147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.139146] Bluetooth: hci4: command tx timeout [ 132.204392] Bluetooth: hci1: command tx timeout [ 132.271694] Bluetooth: hci0: command tx timeout [ 132.330695] Bluetooth: hci7: command tx timeout [ 132.330722] Bluetooth: hci2: command tx timeout [ 132.395300] Bluetooth: hci6: command tx timeout [ 132.395341] Bluetooth: hci5: command tx timeout [ 132.458707] Bluetooth: hci3: command tx timeout [ 134.186868] Bluetooth: hci4: command tx timeout [ 134.251874] Bluetooth: hci1: command tx timeout [ 134.314869] Bluetooth: hci0: command tx timeout [ 134.378742] Bluetooth: hci2: command tx timeout [ 134.378833] Bluetooth: hci7: command tx timeout [ 134.442874] Bluetooth: hci5: command tx timeout [ 134.444048] Bluetooth: hci6: command tx timeout [ 134.507709] Bluetooth: hci3: command tx timeout [ 136.234995] Bluetooth: hci4: command tx timeout [ 136.298730] Bluetooth: hci1: command tx timeout [ 136.362668] Bluetooth: hci0: command tx timeout [ 136.427947] Bluetooth: hci2: command tx timeout [ 136.428022] Bluetooth: hci7: command tx timeout [ 136.490702] Bluetooth: hci5: command tx timeout [ 136.492643] Bluetooth: hci6: command tx timeout [ 136.554677] Bluetooth: hci3: command tx timeout [ 138.282895] Bluetooth: hci4: command tx timeout [ 138.347846] Bluetooth: hci1: command tx timeout [ 138.411669] Bluetooth: hci0: command tx timeout [ 138.474896] Bluetooth: hci2: command tx timeout [ 138.475331] Bluetooth: hci7: command tx timeout [ 138.538725] Bluetooth: hci6: command tx timeout [ 138.539205] Bluetooth: hci5: command tx timeout [ 138.602814] Bluetooth: hci3: command tx timeout [ 189.791801] syz-executor.2 (292) used greatest stack depth: 24672 bytes left [ 189.926400] syz-executor.6 (298) used greatest stack depth: 24640 bytes left [ 192.449025] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.458248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.461224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.472350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.481072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.520138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.523008] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.527561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.532663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.536678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.644458] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.652415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.672726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.689560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.711278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.849922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.858714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.861538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.878364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.882894] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.025534] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.030341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.043134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.067735] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.075234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.080902] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.107560] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.152776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.167502] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.172137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.174829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.177807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.181743] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.191377] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.195453] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.196241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.198895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.203417] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.207562] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.213305] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.539915] Bluetooth: hci0: command tx timeout [ 194.602822] Bluetooth: hci1: command tx timeout [ 194.859664] Bluetooth: hci2: command tx timeout [ 194.989645] Bluetooth: hci3: command tx timeout [ 195.242728] Bluetooth: hci4: command tx timeout [ 195.244649] Bluetooth: hci7: command tx timeout [ 195.307717] Bluetooth: hci6: command tx timeout [ 195.308492] Bluetooth: hci5: command tx timeout [ 196.586682] Bluetooth: hci0: command tx timeout [ 196.651932] Bluetooth: hci1: command tx timeout [ 196.906848] Bluetooth: hci2: command tx timeout [ 197.036863] Bluetooth: hci3: command tx timeout [ 197.291726] Bluetooth: hci7: command tx timeout [ 197.292177] Bluetooth: hci4: command tx timeout [ 197.355693] Bluetooth: hci5: command tx timeout [ 197.356131] Bluetooth: hci6: command tx timeout [ 198.634894] Bluetooth: hci0: command tx timeout [ 198.699613] Bluetooth: hci1: command tx timeout [ 198.954662] Bluetooth: hci2: command tx timeout [ 199.084008] Bluetooth: hci3: command tx timeout [ 199.339728] Bluetooth: hci4: command tx timeout [ 199.340194] Bluetooth: hci7: command tx timeout [ 199.402831] Bluetooth: hci5: command tx timeout [ 199.403263] Bluetooth: hci6: command tx timeout [ 200.686316] Bluetooth: hci0: command tx timeout [ 200.746640] Bluetooth: hci1: command tx timeout [ 201.003788] Bluetooth: hci2: command tx timeout [ 201.131843] Bluetooth: hci3: command tx timeout [ 201.386683] Bluetooth: hci7: command tx timeout [ 201.387129] Bluetooth: hci4: command tx timeout [ 201.451836] Bluetooth: hci6: command tx timeout [ 201.452271] Bluetooth: hci5: command tx timeout [ 254.601482] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.604916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.609120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.613194] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.615128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.622079] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.629073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.634993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.639814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.646437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.870091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.879183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.881863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.920241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.938882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.956176] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.978420] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.988572] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.993152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.993968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.998757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.016257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.022362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.032560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.044678] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.062432] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.072163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.113179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.158966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.169663] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.269223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.284462] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.328197] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.335020] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 255.357191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.357906] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 255.419881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 255.420668] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.478571] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 255.553034] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 256.682671] Bluetooth: hci0: command tx timeout [ 256.747666] Bluetooth: hci1: command tx timeout [ 257.068906] Bluetooth: hci2: command tx timeout [ 257.322890] Bluetooth: hci5: command tx timeout [ 257.323086] Bluetooth: hci4: command tx timeout [ 257.324206] Bluetooth: hci3: command tx timeout [ 257.643817] Bluetooth: hci6: command tx timeout [ 257.899640] Bluetooth: hci7: command tx timeout [ 258.732684] Bluetooth: hci0: command tx timeout [ 258.795675] Bluetooth: hci1: command tx timeout [ 259.114862] Bluetooth: hci2: command tx timeout [ 259.371055] Bluetooth: hci4: command tx timeout [ 259.371557] Bluetooth: hci5: command tx timeout [ 259.372338] Bluetooth: hci3: command tx timeout [ 259.691150] Bluetooth: hci6: command tx timeout [ 259.947961] Bluetooth: hci7: command tx timeout [ 260.778698] Bluetooth: hci0: command tx timeout [ 260.843819] Bluetooth: hci1: command tx timeout [ 261.162785] Bluetooth: hci2: command tx timeout [ 261.418693] Bluetooth: hci3: command tx timeout [ 261.418725] Bluetooth: hci4: command tx timeout [ 261.419732] Bluetooth: hci5: command tx timeout [ 261.738829] Bluetooth: hci6: command tx timeout [ 261.995613] Bluetooth: hci7: command tx timeout [ 262.828683] Bluetooth: hci0: command tx timeout [ 262.890702] Bluetooth: hci1: command tx timeout [ 263.211020] Bluetooth: hci2: command tx timeout [ 263.466843] Bluetooth: hci4: command tx timeout [ 263.466892] Bluetooth: hci3: command tx timeout [ 263.468036] Bluetooth: hci5: command tx timeout [ 263.789843] Bluetooth: hci6: command tx timeout [ 264.042662] Bluetooth: hci7: command tx timeout [ 317.057410] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.063072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.070932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.084453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.093234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.133838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.137201] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.139386] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.145355] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.150993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.197014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.203089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.212158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.227005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.246103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.255868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.268136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.291867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.331123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.344072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.436278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.456699] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.481219] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.526094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.534431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.536521] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.540453] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 317.549204] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.551221] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.551425] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.566142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.568345] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 317.576161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.599063] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.607137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.640276] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 317.713485] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.717265] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 317.726952] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 317.775735] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.146677] Bluetooth: hci0: command tx timeout [ 319.210784] Bluetooth: hci1: command tx timeout [ 319.338661] Bluetooth: hci2: command tx timeout [ 319.402818] Bluetooth: hci3: command tx timeout [ 319.722667] Bluetooth: hci4: command tx timeout [ 319.787727] Bluetooth: hci5: command tx timeout [ 319.787745] Bluetooth: hci7: command tx timeout [ 319.851806] Bluetooth: hci6: command tx timeout [ 321.196019] Bluetooth: hci0: command tx timeout [ 321.259794] Bluetooth: hci1: command tx timeout [ 321.387159] Bluetooth: hci2: command tx timeout [ 321.453661] Bluetooth: hci3: command tx timeout [ 321.771808] Bluetooth: hci4: command tx timeout [ 321.834756] Bluetooth: hci7: command tx timeout [ 321.835679] Bluetooth: hci5: command tx timeout [ 321.898885] Bluetooth: hci6: command tx timeout [ 323.242972] Bluetooth: hci0: command tx timeout [ 323.306708] Bluetooth: hci1: command tx timeout [ 323.435252] Bluetooth: hci2: command tx timeout [ 323.498715] Bluetooth: hci3: command tx timeout [ 323.819924] Bluetooth: hci4: command tx timeout [ 323.882910] Bluetooth: hci5: command tx timeout [ 323.884216] Bluetooth: hci7: command tx timeout [ 323.946804] Bluetooth: hci6: command tx timeout [ 325.290824] Bluetooth: hci0: command tx timeout [ 325.354698] Bluetooth: hci1: command tx timeout [ 325.483051] Bluetooth: hci2: command tx timeout [ 325.546962] Bluetooth: hci3: command tx timeout [ 325.866944] Bluetooth: hci4: command tx timeout [ 325.931692] Bluetooth: hci7: command tx timeout [ 325.931917] Bluetooth: hci5: command tx timeout [ 325.996816] Bluetooth: hci6: command tx timeout [ 379.270245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.276388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.281375] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.290281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.299949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.460692] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.471327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.478868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.493934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.506197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.530254] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.550033] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.552456] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.577087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.580089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.591416] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.602233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.608123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.621755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.649385] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.706213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.743649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.753873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.775325] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.775524] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.789182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.800332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.810933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.842066] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.875538] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.936739] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.949313] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.994129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.026270] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 380.062286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.321787] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.346303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.374897] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.403102] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.410999] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.354942] Bluetooth: hci0: command tx timeout [ 381.610897] Bluetooth: hci1: command tx timeout [ 381.675671] Bluetooth: hci2: command tx timeout [ 381.803959] Bluetooth: hci3: command tx timeout [ 381.867710] Bluetooth: hci4: command tx timeout [ 382.122700] Bluetooth: hci6: command tx timeout [ 382.123062] Bluetooth: hci5: command tx timeout [ 383.274726] Bluetooth: hci7: command tx timeout [ 383.403110] Bluetooth: hci0: command tx timeout [ 383.659062] Bluetooth: hci1: command tx timeout [ 383.724636] Bluetooth: hci2: command tx timeout [ 383.851055] Bluetooth: hci3: command tx timeout [ 383.915547] Bluetooth: hci4: command tx timeout [ 384.170942] Bluetooth: hci6: command tx timeout [ 384.171862] Bluetooth: hci5: command tx timeout [ 385.323157] Bluetooth: hci7: command tx timeout [ 385.450733] Bluetooth: hci0: command tx timeout [ 385.706671] Bluetooth: hci1: command tx timeout [ 385.770658] Bluetooth: hci2: command tx timeout [ 385.899014] Bluetooth: hci3: command tx timeout [ 385.962837] Bluetooth: hci4: command tx timeout [ 386.218878] Bluetooth: hci5: command tx timeout [ 386.218905] Bluetooth: hci6: command tx timeout [ 387.370986] Bluetooth: hci7: command tx timeout [ 387.498737] Bluetooth: hci0: command tx timeout [ 387.756614] Bluetooth: hci1: command tx timeout [ 387.818910] Bluetooth: hci2: command tx timeout [ 387.947711] Bluetooth: hci3: command tx timeout [ 388.010971] Bluetooth: hci4: command tx timeout [ 388.266662] Bluetooth: hci6: command tx timeout [ 388.266893] Bluetooth: hci5: command tx timeout [ 389.419634] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:33:55 Registers: info registers vcpu 0 RAX=00000000b8a5e6ee RBX=ffff8880350bb700 RCX=000000002bb5494d RDX=000000009228ae9b RSI=ffff8880350bc180 RDI=00000000cb96c0b4 RBP=ffff8880350bc158 RSP=ffff888026b0f020 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff8880350bc180 R13=d723ae63869bc0ec R14=0000000000000000 R15=0000000000000001 RIP=ffffffff8151947e RFL=00000887 [-OS--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff8f36541f0 CR3=000000000dd95000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81353e1d RDI=fffffbfff0b83978 RBP=ffffffff85c1cbc0 RSP=ffff88806cf088f8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=0000000000012b3d R12=0000000000000001 R13=ffffffff81353e1d R14=0000000000000000 R15=ffff88806cf08a00 RIP=ffffffff81aec3c7 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd51af0b310 CR3=000000000b813000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000